{"uid":"cap_RtRltTtK14bgD0hbXCVF8","slug":"zeroworker-cve-prioritization-api-d74ebc49","name":"ZeroWorker CVE Prioritization API","description":"Prioritize up to 50 CVEs in one request using FIRST EPSS, CISA KEV, and known ransomware signals. Returns deterministic risk scores, urgency tiers, exploitation signals, vendor/product context, and remediation metadata as machine-readable JSON. Built for security automation and AI agents. No account or API key required. $0.01 per successful request via x402. Invalid input, no-signal results, and temporary resource failures do not settle.","url":"https://zeroworker-security-api.zeroworker-lab.workers.dev/v1/prioritize?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":null,"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"registry","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_wwKeP8QwhgoadyhtXmexq","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Prioritizes up to 50 CVEs in a single request using EPSS, CISA KEV, and ransomware signals, returning deterministic risk scores and urgency tiers as JSON.","exampleAgentPrompt":"I have a list of CVEs from our latest scan — CVE-2023-44487, CVE-2024-21412, CVE-2021-44228, CVE-2023-23397, and CVE-2022-30190 — can you prioritize them by exploitation risk using EPSS, CISA KEV, and ransomware signals and tell me which ones need immediate patching?","exampleUseCases":[{"title":"Automated patch triage for DevSecOps","prompt":"We just ran a Trivy scan and got back 35 CVEs — can you rank them by exploitation risk using EPSS scores, CISA KEV status, and ransomware associations so our team knows which ones to fix this sprint?"},{"title":"Ransomware exposure check for SOC","prompt":"Our SOC got an alert mentioning CVE-2021-34527, CVE-2022-26134, and CVE-2023-0669 — can you tell me which of these have known ransomware ties and how urgently we need to act on each one?"},{"title":"Vulnerability backlog prioritization","prompt":"I've got a backlog of 50 unpatched CVEs piling up from last quarter — please score and tier all of them by exploitation likelihood and urgency so I know where to start."}],"resultDescription":"Returns a machine-readable JSON object for each submitted CVE containing a deterministic risk score, urgency tier (e.g. critical/high/medium/low), exploitation signals (EPSS probability, CISA KEV membership, ransomware association), vendor and product context, and remediation metadata. CVEs with no available signal data are flagged accordingly.","failureModes":["Invalid or malformed CVE IDs return an error without charging","CVEs with no signal data (no EPSS, KEV, or ransomware match) return a no-signal result without settling payment","Temporary upstream resource failures (EPSS/KEV feeds unavailable) return a 5xx error without settling payment","Exceeding the 50 CVE per-request limit returns a 400-class validation error","Requests missing the x402 payment header may be rejected before processing"],"whenToPreferThis":"Choose this endpoint when you need deterministic, multi-signal CVE prioritization at scale (up to 50 CVEs per call) without standing up your own vulnerability intelligence pipeline. It is especially valuable for security automation, AI-driven patch management agents, and SOC workflows where EPSS probabilities, CISA KEV status, and ransomware linkage all need to be combined into a single urgency score. It requires no account or API key, making it ideal for lightweight agentic integrations that pay per use via x402.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-13T00:39:18.954Z","isFirstParty":false,"canonicalSlug":"zeroworker-cve-prioritization-api-d74ebc49"}