Clateway Insights

Security

What is EPSS (Exploit Prediction Scoring System)?

Also known as: EPSS

EPSS (Exploit Prediction Scoring System) is a model from FIRST that estimates, for every published CVE, the probability that it will be exploited in the wild in the next 30 days.

Only a small share of published vulnerabilities is ever exploited. Prioritising by EPSS together with CVSS and the business criticality of the affected system lets teams fix the vulnerabilities attackers actually use first.

How Clateway helps

  • Vulnerability management – Scan your systems and technologies for CVEs, prioritise with EPSS and CISA KEV, track SLAs, sync Dependabot alerts and watch SaaS vendor advisories in one place.

Related terms