Premium EPSS Top-N
1 creditGET /api/premium/security/epss/topThe /api/premium/security/epss/top endpoint returns the highest-EPSS CVEs as of any UTC date with historical date filtering. EPSS (Exploit Prediction Scoring System) is FIRST.org's daily-updated probability that a CVE will be exploited in the next 30 days. The premium variant adds a date param the free version lacks. Free /api/security/epss/top serves the current snapshot only.
When to use this endpoint
When a security agent needs the current or historical "what should I patch first" list. EPSS percentile is more useful than CVSS severity for triage because it reflects actual exploitation likelihood rather than worst-case impact.
Parameters
| Name | In | Type | Description |
|---|---|---|---|
| limit | query | number | Top-N limit (1 to 100, default 25)e.g. 50 |
| date | query | string | Snapshot date YYYY-MM-DD (default: latest)e.g. 2026-05-08 |
* required
Example response
{
"ok": true,
"date": "2026-05-08",
"count": 50,
"top": [
{ "cve_id": "CVE-2024-3094", "epss": 0.85, "percentile": 0.99, "rank": 1 }
],
"billing": { "credits_charged": 1, "credits_remaining": 49 }
}Code samples
Python SDK
from tensorfeed import TensorFeed
tf = TensorFeed(token="tf_live_...")
top = tf._get("/premium/security/epss/top", limit=50, date="2026-05-08")
for cve in top["top"]:
print(f"{cve['cve_id']}: EPSS {cve['epss']:.3f} (rank {cve['rank']})")TypeScript SDK
const res = await fetch(
"https://tensorfeed.ai/api/premium/security/epss/top?limit=50&date=2026-05-08",
{ headers: { Authorization: "Bearer tf_live_..." } }
);
const top = await res.json();
top.top.forEach(c => console.log(c.cve_id, c.epss));FAQ
EPSS vs CVSS: which should I use?
CVSS scores worst-case severity (assumes exploitation). EPSS scores probability of exploitation in the next 30 days. For actual triage decisions ("what should I patch first"), EPSS is more decision-useful. Use CVSS for "how bad is this if it does get exploited."
How often does EPSS update?
Daily. FIRST.org publishes a fresh snapshot each UTC day; we cache 24h.
What is the date range available?
Backfill begins from the day TensorFeed started capturing snapshots (early May 2026). Hit /api/security/epss/dates for the available date list.