CVE Priority Triage API | CVSS + EPSS + CISA KEV
Pricing
from $3.00 / 1,000 cve triageds
CVE Priority Triage API | CVSS + EPSS + CISA KEV
Rank CVEs by real exploit risk: NVD CVSS, FIRST EPSS exploit probability and CISA KEV known-exploited status in one row, with a patch-now / soon / schedule verdict. Search by CVE ID or product. $0.003 per CVE.
Pricing
from $3.00 / 1,000 cve triageds
Rating
0.0
(0)
Developer
Andok
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
4 days ago
Last modified
Categories
Share
CVE Priority Triage API — CVSS + EPSS + CISA KEV in One Row
Stop patching by CVSS alone. This Actor joins three authoritative public sources for every CVE and tells you what to fix first:
- NVD (NIST) — CVSS base score, severity, vector, CWEs, affected products, description, references
- FIRST EPSS — probability the CVE is exploited in the next 30 days, plus percentile
- CISA KEV — whether it is a known exploited vulnerability, the federal due date, required action and ransomware use
Each CVE gets a verdict: PATCH_NOW, PATCH_SOON, SCHEDULE or MONITOR, with a plain-English reason. No API keys needed.
Typical uses: vulnerability-scanner backlog triage, weekly "what became dangerous" reports, SBOM/asset follow-up, MSP client reporting, security-agent tool calls (CVE in, decision out), tracking new exploited bugs for a vendor or product.
Input
| Field | Description |
|---|---|
cveIds | CVE IDs to triage, e.g. CVE-2021-44228 (up to 500) |
keywords | Product/vendor keywords searched in NVD, e.g. apache log4j, fortinet fortios |
maxPerKeyword | Cap per keyword (default 25) |
publishedWithinDays | Keyword searches only: published in the last N days (max 120) |
kevOnly | Keyword searches only: return only CISA KEV entries |
minCvss | Drop CVEs below this CVSS base score |
minPriority | PATCH_NOW, PATCH_SOON, SCHEDULE or MONITOR (default: everything). Filtered-out CVEs are not charged |
nvdApiKey | Optional free NVD key; makes big batches about 9x faster |
Priority logic
| Verdict | When |
|---|---|
PATCH_NOW | In CISA KEV (confirmed exploitation), or EPSS ≥ 50% |
PATCH_SOON | EPSS ≥ 10%, or CVSS ≥ 9 with EPSS ≥ 1% |
SCHEDULE | CVSS ≥ 7 or EPSS ≥ 1% |
MONITOR | Everything else |
Output
One row per CVE, most urgent first.
| Field | Description |
|---|---|
cve_id, priority, priority_reason | The verdict and why |
cvss_score, cvss_severity, cvss_version, cvss_vector | Best available CVSS (v4.0 → v3.1 → v3.0 → v2) |
epss_score, epss_percentile | Exploit probability (0-1) and percentile |
in_kev, kev_date_added, kev_due_date, kev_ransomware_use, kev_required_action | CISA KEV details |
vendor_project, product, vulnerability_name | From KEV when listed |
cve_description, cwes, affected_products, published, last_modified, nvd_status, references, nvd_url | NVD details |
matched_by | The CVE ID or keyword:<term> that produced the row |
A free SUMMARY record in the key-value store has counts per priority and any warnings.
Pricing
Pay per event: $0.002 per run and $0.003 per CVE triaged. 100 CVEs cost about $0.30. CVEs that do not exist are returned flagged found: false and are not charged.
Notes
- Without an NVD key, NVD allows about one request per 6.5 seconds, so a batch of 100 explicit CVE IDs takes around 11 minutes. Keyword searches return many CVEs per request and are fast. Add a free
nvdApiKeyfor large ID lists. - Prioritization aid only: always weigh against your own asset exposure.
Related Actors
- Dependency Risk Auditor — audit manifests and lockfiles for vulnerable packages
- Security Headers Analyzer — check a site's HTTP security headers
- SSL Checker — certificate and expiry checks
