← All Tools
EPSS Score Lookup
FIRST EPSS exploit-prediction score plus CISA KEV cross-check. Complete the CVSS → EPSS → KEV triage chain.
🔒 Queries FIRST EPSS server-side — your IP is never forwarded. Rate-limited per source IP. KEV snapshot is refreshed locally.
How to read EPSS probability vs percentile
EPSS probability is FIRST's estimate of the likelihood that a vulnerability will see exploitation activity in the next 30 days (0–100%). Percentile is only the relative rank of that probability against every CVE the model scores — it is not itself a probability. EPSS does not publish a universal “high/low” cut-off; combine it with CVSS severity, CISA KEV and your own asset exposure. Source: FIRST EPSS.