FIRST CVSS Severity Index
Free FIRST EPSS (Exploit Prediction Scoring System) API. Get machine-learning-based exploit probability scores for any CVE to prioritize which vulnerabilities are most likely to be exploited in the wild. No API key required.
Parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
cve_ids |
array | ✅ | CVE IDs to score (e.g., ["CVE-2024-1234"]) |
min_epss |
float | ❌ | Filter to scores above threshold (0.0–1.0) |
include_percentile |
boolean | ❌ | Include percentile ranking (default: true) |
Example Response
{
"results": [
{
"cve": "CVE-2021-44228",
"epss": 0.97567,
"percentile": 99.9,
"model_version": "v2024.01.01",
"interpretation": "97.6% probability of exploitation in the next 30 days — patch immediately"
},
{
"cve": "CVE-2024-99999",
"epss": 0.00213,
"percentile": 41.2,
"interpretation": "Low exploitation probability — standard patch cycle acceptable"
}
]
}
Use Cases
- Vulnerability management triage for large patch queues
- Risk-based patching policy automation
- Security metrics reporting to board/CISO
Access
# x402 endpoint — pay $0.01 USDC per call (Base mainnet)
POST https://x402.ntriq.co.kr/cvss-severity
# Service catalog
curl https://x402.ntriq.co.kr/services
x402 micropayments — USDC on Base, gasless EIP-3009