Technical and passive OSINT · Hosted free and open-data sources
FIRST EPSS
Licence or access: free daily CSV/API
- status access
- free daily CSV/API
- i o and fit
- CVE → estimated 30-day exploitation probability
- current limitations and safe interpretation
- probability ≠ exposure/impact; do not multiply blindly by CVSS; treat KEV separately
- official source
- FAQ/API
Official sources
- FAQ/API https://www.first.org/epss/faq
Catalogued at the 2026-09-01 research baseline. Verify the licence, free-tier limits, API schema and source terms again before deployment, and record a version-pinned registry entry for whatever you select.