Which platform has an API that be used to obtain a list of vulnerable software on user devices?