Security
FIRST EPSS on looot
FIRST EPSS gives your agent 3 jobs through looot: get exploit probability scores for a list of CVEs, get the exploit probability score for a CVE, list the CVEs most likely to be exploited. 3 endpoints run today, some of them free.
- Category
- Security
- Access
- No key needed: these endpoints are open, looot calls them for you
- Price
- some of them free
- Jobs
- 3 jobs, 3 endpoints
Choose FIRST EPSS when
- You need to get exploit probability scores for a list of CVEs: FIRST EPSS is the only provider on looot that runs this job today.
- You need to get the exploit probability score for a CVE: FIRST EPSS is the only provider on looot that runs this job today.
- You need to list the CVEs most likely to be exploited: FIRST EPSS is the only provider on looot that runs this job today.
- You want to start without any key: some of its endpoints are open and looot calls them for you.
Endpoints and jobs
Each endpoint runs through looot today. Where a job has a benchmark page, its link compares every provider on that job.
- Scores for a list of CVEs
vuln.epss.scores
free
100% of 17 runs without an error, median 266 ms
- Exploit Prediction Score
vuln.epss.score
free
not enough runs to rank
- Highest-Scored CVEs
vuln.epss.top
free
not enough runs to rank
A minimal request
For Scores for a list of CVEs (first-epss-scores), free. Replace each <placeholder> with your value and send a new idempotency key per run.
How we measure
Run numbers are looot's own runs of each endpoint over the last 30 days: the share that completed without an error, and the median time to answer. An endpoint with fewer than 10 runs in that window shows "not enough runs to rank" and is never ranked. Prices are what looot charges per call or per result, fee included, read from the live catalog; you prepay credit and each call is charged when it runs.
Read 2026-11-10 23:06 UTC.
Give your agent every data provider, one key.
Start your workspace, top up, and paste one prompt into the agent you already use.