Prioritize up to 50 CVEs in one request using FIRST EPSS, CISA KEV, and known ra
Prioritize up to 50 CVEs in one request using FIRST EPSS, CISA KEV, and known ransomware signals. Returns deterministic risk scores, urgency tiers, exploitation signals, vendor/product context, and remediation metadata as machine-readable JSON. Built for security automation and AI agents. No account or API key required. $0.01 per successful request via x402. Invalid input, no-signal results, and temporary resource failures do not settle.
Answeringour last check, 2026-09-24
1 of 1checks answered this week
386 msmedian answer time
$0.01listed price per call
$0.01price it asked us
Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.
Endpoint
POST https://zeroworker-security-api.zeroworker-lab.workers.dev/v1/prioritize
| Category | Commerce and shopping |
|---|---|
| Provider host | zeroworker-security-api.zeroworker-lab.workers.dev |
| Networks | eip155:8453 |
| Payment schemes | exact |
| Self-reported calls, 30 days | 5 from 2 payers (the provider's figure, not ours) |
Our checks, last 30 days
| Day | Result | HTTP | Asked | Time |
|---|---|---|---|---|
| 2026-09-24 | valid payment request | 402 | $0.01 | 386 ms |
Example input (from the provider)
{
"body": {
"cves": [
"CVE-2021-44228",
"CVE-2023-44487"
]
},
"bodyType": "json",
"method": "POST",
"type": "http"
}
Promised output schema (from the provider)
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"properties": {
"cves": {
"description": "CVE identifiers to prioritize. Send 1 to 50 unique CVE identifiers.",
"items": {
"pattern": "^CVE-[0-9]{4}-[0-9]{4,19}$",
"type": "string"
},
"maxItems": 50,
"minItems": 1,
"type": "array"
}
},
"required": [
"cves"
],
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"properties": {
"count": {
"maximum": 50,
"minimum": 1,
"type": "integer"
},
"dataAvailableCount": {
"maximum": 50,
"minimum": 0,
"type": "integer"
},
"dataUnavailableCount": {
"maximum": 50,
"minimum": 0,
"type": "integer"
},
"results": {
"items": {
"properties": {
"cve": {
"description": "CVE identifier.",
"type": "string"
},
"dataAvailable": {
"description": "Whether FIRST EPSS or CISA KEV supplied usable prioritization signal data.",
"type": "boolean"
},
"epss": {
"anyOf": [
{
"maximum": 1,
"minimum": 0,
"type": "number"
},
{
"type": "null"
}
],
"description": "FIRST EPSS probability when available."
},
"epssPercentile": {
"anyOf": [
{
"maximum": 1,
"minimum": 0,
"type": "number"
},
{
"type": "null"
}
],
"description": "FIRST EPSS percentile when available."
},
"inKev": {
"description": "Whether the CVE is listed in CISA KEV.",
"type": "boolean"
},
"kevDateAdded": {
"anyOf": [
{
"type": "string"
},
{
"type": "null"
}
],
"description": "Date the CVE was added to CISA KEV when available."
},
"kevDueDate": {
"anyOf": [
{
"type": "string"
},
{
"type": "null"
}
],
"description": "CISA KEV due date when available."
},
"product": {
"anyOf": [
{
"type": "string"
},
{
"type": "null"
}
],
"description": "Product from CISA KEV when available."
},
"ransomwareKnown": {
"description": "Whether CISA KEV marks known ransomware campaign use.",
"type": "boolean"
},
"reasons": {
"description": "Human-readable reasons supporting the score and tier.",
"items": {
"type": "string"
},
"type": "array"
},
"requiredAction": {
"anyOf": [
{
"type": "string"
},
{
"type": "null"
}
],
"description": "CISA KEV required action when available."
},
"score": {
"anyOf": [
{
"maximum": 100,
"minimum": 0,
"type": "number"
},
{
"type": "null"
}
],
"description": "Deterministic priority score from 0 to 100; null when no usable signal is available for this CVE."
},
"tier": {
"description": "Priority tier derived from the deterministic score and KEV status.",
"enum": [
"urgent",
"high",
"medium",
"low",
"unknown"
],
"type": "string"
},
"vendor": {
"anyOf": [