Api Endpoint

ZeroWorker Security API

Prioritize up to 50 CVEs in one request using FIRST EPSS, CISA KEV, and known ransomware signals. Returns deterministic risk scores, urgency tiers, exploitation signals, vendor/product context, and remediation metadata as machine-readable JSON. Built for security automation and AI agents. No account or API key required. $0.01 per successful request via x402. Invalid input, no-signal results, and temporary resource failures do not settle.

Open interactive test console

Offering

Provider
zeroworker-security-api.zeroworker-lab.workers.dev
Method
POST
Offering type
Api Endpoint
Transport type
http
Category
Security
Delivery
Not provided
Pricing model
Not provided
x402 version
2

Endpoint context

URL
https://zeroworker-security-api.zeroworker-lab.workers.dev/v1/prioritize
MIME type
Not provided
First seen
2026-10-16T01:50:24.663Z
Last seen
Tags
Security, cve, epss, kev, vulnerability-management

Payment pricing

x402 payment terms are the authoritative price for calling this endpoint.

Payment option 1
0.01 USDC
Atomic price: 10000 · Network: eip155:8453 · Asset: USDC · Scheme: exact
Raw x402 terms
[
  {
    "scheme": "exact",
    "network": "eip155:8453",
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "amount": "10000",
    "payTo": "0xad277cf8B5D9fa5008D06cBdBE349F5DF3c0Cc8f"
  }
]

Observed health

Status
Healthy
Latest latency
222 ms
Average latency
533 ms
HTTP status
204
Last checked
Reachability
100% over 15 checks

Latency is measured to the first response headers. A reachable result does not verify response accuracy or merchant identity.

Input schema

{
  "additionalProperties": false,
  "properties": {
    "body": {
      "properties": {
        "cves": {
          "description": "CVE identifiers to prioritize. Send 1 to 50 unique CVE identifiers.",
          "items": {
            "pattern": "^CVE-[0-9]{4}-[0-9]{4,19}$",
            "type": "string"
          },
          "maxItems": 50,
          "minItems": 1,
          "type": "array"
        }
      },
      "required": [
        "cves"
      ],
      "type": "object"
    },
    "bodyType": {
      "enum": [
        "json",
        "form-data",
        "text"
      ],
      "type": "string"
    },
    "method": {
      "enum": [
        "POST"
      ],
      "type": "string"
    },
    "type": {
      "const": "http",
      "type": "string"
    }
  },
  "required": [
    "type",
    "method",
    "bodyType",
    "body"
  ],
  "type": "object"
}

Output schema

{
  "properties": {
    "example": {
      "properties": {
        "count": {
          "maximum": 50,
          "minimum": 1,
          "type": "integer"
        },
        "dataAvailableCount": {
          "maximum": 50,
          "minimum": 0,
          "type": "integer"
        },
        "dataUnavailableCount": {
          "maximum": 50,
          "minimum": 0,
          "type": "integer"
        },
        "results": {
          "items": {
            "properties": {
              "cve": {
                "description": "CVE identifier.",
                "type": "string"
              },
              "dataAvailable": {
                "description": "Whether FIRST EPSS or CISA KEV supplied usable prioritization signal data.",
                "type": "boolean"
              },
              "epss": {
                "anyOf": [
                  {
                    "maximum": 1,
                    "minimum": 0,
                    "type": "number"
                  },
                  {
                    "type": "null"
                  }
                ],
                "description": "FIRST EPSS probability when available."
              },
              "epssPercentile": {
                "anyOf": [
                  {
                    "maximum": 1,
                    "minimum": 0,
                    "type": "number"
                  },
                  {
                    "type": "null"
                  }
                ],
                "description": "FIRST EPSS percentile when available."
              },
              "inKev": {
                "description": "Whether the CVE is listed in CISA KEV.",
                "type": "boolean"
              },
              "kevDateAdded": {
                "anyOf": [
                  {
                    "type": "string"
                  },
                  {
                    "type": "null"
                  }
                ],
                "description": "Date the CVE was added to CISA KEV when available."
              },
              "kevDueDate": {
                "anyOf": [
                  {
                    "type": "string"
                  },
                  {
                    "type": "null"
                  }
                ],
                "description": "CISA KEV due date when available."
              },
              "product": {
                "anyOf": [
                  {
                    "type": "string"
                  },
                  {
                    "type": "null"
                  }
                ],
                "description": "Product from CISA KEV when available."
              },
              "ransomwareKnown": {
                "description": "Whether CISA KEV marks known ransomware campaign use.",
                "type": "boolean"
              },
              "reasons": {
                "description": "Human-readable reasons supporting the score and tier.",
                "items": {
                  "type": "string"
                },
                "type": "array"
              },
              "requiredAction": {
                "anyOf": [
                  {
                    "type": "string"
                  },
                  {
                    "type": "null"
                  }
                ],
                "description": "CISA KEV required action when available."
              },
              "score": {
                "anyOf": [
                  {
                    "maximum": 100,
                    "minimum": 0,
                    "type": "number"
                  },
                  {
                    "type": "null"
                  }
                ],
                "description": "Deterministic priority score from 0 to 100; null when no usable signal is available for this CVE."
              },
              "tier": {
                "description": "Priority tier derived from the deterministic score and KEV status.",
                "enum": [
                  "urgent",
                  "high",
                  "medium",
                  "low",
                  "unknown"
                ],
                "type": "string"
              },
              "vendor": {
                "anyOf": [
                  {
                    "type": "string"
                  },
                  {
                    "type": "null"
                  }
                ],
                "description": "Vendor from CISA KEV when available."
              }
            },
            "required": [
              "cve",
              "dataAvailable",
              "score",
              "tier",
              "inKev",
              "ransomwareKnown",
              "reasons"
            ],
            "type": "object"
          },
          "maxItems": 50,
          "minItems": 1,
          "type": "array"
        }
      },
      "required": [
        "count",
        "dataAvailableCount",
        "dataUnavailableCount",
        "results"
      ],
      "type": "object"
    },
    "type": {
      "type": "string"
    }
  },
  "required": [
    "type"
  ],
  "type": "object"
}