Empirical Security website screenshot

Empirical Security

Empirical Security builds data-driven models that predict which vulnerabilities will actually be exploited, so security teams can prioritize remediation by real-world risk instead of raw CVSS severity. It operates the Foundation (global) model, which combines real-time internet exploitation telemetry with EPSS and monitors 18,000+ exploited CVEs; hourly-updated EPSS models (epss_v3, epss_v4, epss_v5); and Radiant, an organization-specific model that layers your local assets, configurations and internal telemetry on top of the Foundation data. The read-only REST API exposes CVE detail, per-model scores and percentiles, malware hashes, critical indicators, score history, change history, full dataset export, search, and saved CVE groups, secured with OAuth 2.0 client credentials (JWT bearer). Empirical Security is backed by Costanoa Ventures.

Empirical Security publishes 3 APIs on the APIs.io network: CVE Groups API, CVEs API, and Search API. Tagged areas include Company, Security, Cybersecurity, Vulnerability Management, and Vulnerability Prioritization.

Empirical Security’s developer surface includes documentation, API reference, getting-started guide, engineering blog, signup flow, authentication, and 17 more developer resources.

🌐 Visit website 📡 Source on GitHub
31.9/100 thin ▬ flat Agent 39/100 agent ready Full breakdown ↓
scored 2026-08-10 · rubric v0.9.1
AccessSelf serve
3 APIs 1 MCP Servers
CompanySecurityCybersecurityVulnerability ManagementVulnerability PrioritizationCVEEPSSExploit PredictionThreat Intelligence

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-10 · rubric v0.9.1
Composite quality — 31.9/100 · thin
Contract Quality 4.1 / 25
Developer Ergonomics 10.3 / 20
Commercial Clarity 6.8 / 20
Operational Transparency 0.0 / 13
Governance 1.4 / 12
Discoverability 9.3 / 10
Agent readiness — 39/100 · agent ready
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 5 / 5
Well-Known Catalog 4 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/empirical-security: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 3

Individual APIs this provider publishes, each with its own machine-readable definition.

Empirical Security CVE Groups API

Saved CVE queries and their execution.

Empirical Security CVEs API

Retrieve CVE detail, scores, malware hashes and history.

Empirical Security Search API

Query CVEs using Empirical search syntax.

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

empirical-security-mcp.yml

MCP SERVER

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Empirical Security Authentication

oauth2 · 1 scheme

SECURITY

Empirical Security Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Scopes 1

OAuth scopes governing access to this provider's APIs.

Empirical Security Scopes

1 scope · clientCredentials

1 scopes

SCOPES

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Empirical Security Agentic Access

9 operations

9 operations · 0 acting

AGENTIC

Resources

Get Started 4

Portal, sign-up, and the first successful call

DeveloperPortal
DeveloperPortal
 GettingStarted
GettingStarted
 SignUp
SignUp
 Login
Login

Documentation 2

Reference material describing how the API behaves

Documentation
Documentation
 APIReference
APIReference

Agent Surfaces 5

MCP servers, agent skills, and machine-readable catalogs

WellKnown
WellKnown
 MCPServer
MCPServer
 AgenticAccess
AgenticAccess
 LLMsTxt
LLMsTxt
 AgentSkill
AgentSkill

Design & Contract 5

Pagination, idempotency, versioning, errors, and events

ErrorCatalog
ErrorCatalog
 Conventions
Conventions
 Lifecycle
Lifecycle
 Conformance
Conformance
 DataModel
DataModel

Access & Security 3

Authentication, authorization, and security posture

Authentication
Authentication
 OAuthScopes
OAuthScopes
 DomainSecurity
DomainSecurity

Commercial 2

Pricing, plans, and the legal terms of use

TermsOfService
TermsOfService
 PrivacyPolicy
PrivacyPolicy

Company 2

The organization behind the API

Website
Website
 Blog
Blog

Source (apis.yml)

apis.yml Raw ↑ 
aid: empirical-security
name: Empirical Security
description: Empirical Security builds data-driven models that predict which vulnerabilities will actually be exploited, so
  security teams can prioritize remediation by real-world risk instead of raw CVSS severity. It operates the Foundation (global)
  model, which combines real-time internet exploitation telemetry with EPSS and monitors 18,000+ exploited CVEs; hourly-updated
  EPSS models (epss_v3, epss_v4, epss_v5); and Radiant, an organization-specific model that layers your local assets, configurations
  and internal telemetry on top of the Foundation data. The read-only REST API exposes CVE detail, per-model scores and percentiles,
  malware hashes, critical indicators, score history, change history, full dataset export, search, and saved CVE groups, secured
  with OAuth 2.0 client credentials (JWT bearer). Empirical Security is backed by Costanoa Ventures.
url: https://raw.githubusercontent.com/api-evangelist/empirical-security/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- costanoa-ventures
x-tier: profiled
x-tier-reason: enrichment-pipeline
accessModel:
  pricing: unknown
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Self-serve signup
  confidence: medium
  source:
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://www.empiricalsecurity.com/favicon.ico
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-07-19'
tags:
- Company
- Security
- Cybersecurity
- Vulnerability Management
- Vulnerability Prioritization
- CVE
- EPSS
- Exploit Prediction
- Threat Intelligence
apis:
- aid: empirical-security:empirical-security-cve-groups-api
  name: Empirical Security CVE Groups API
  description: Saved CVE queries and their execution.
  humanURL: https://docs.empiricalsecurity.com/
  baseURL: https://app.empiricalsecurity.com/api
  tags:
  - CVE Groups
  properties:
  - type: OpenAPI
    url: openapi/empirical-security-cve-groups-api-openapi.yml
  - type: Documentation
    url: https://docs.empiricalsecurity.com/
  - type: APIReference
    url: https://docs.empiricalsecurity.com/api_reference/cves
  - type: Authentication
    url: authentication/empirical-security-authentication.yml
  - type: OAuthScopes
    url: scopes/empirical-security-scopes.yml
  - type: ErrorCatalog
    url: errors/empirical-security-problem-types.yml
  - type: Conventions
    url: conventions/empirical-security-conventions.yml
  - type: Lifecycle
    url: lifecycle/empirical-security-lifecycle.yml
  - type: Conformance
    url: conformance/empirical-security-conformance.yml
  - type: DataModel
    url: data-model/empirical-security-data-model.yml
  - type: AgenticAccess
    url: agentic-access/empirical-security-agentic-access.yml
  - type: LLMsTxt
    url: llms/empirical-security-llms.txt
- aid: empirical-security:empirical-security-cves-api
  name: Empirical Security CVEs API
  description: Retrieve CVE detail, scores, malware hashes and history.
  humanURL: https://docs.empiricalsecurity.com/
  baseURL: https://app.empiricalsecurity.com/api
  tags:
  - CVEs
  properties:
  - type: OpenAPI
    url: openapi/empirical-security-cves-api-openapi.yml
  - type: Documentation
    url: https://docs.empiricalsecurity.com/
  - type: APIReference
    url: https://docs.empiricalsecurity.com/api_reference/cves
  - type: Authentication
    url: authentication/empirical-security-authentication.yml
  - type: OAuthScopes
    url: scopes/empirical-security-scopes.yml
  - type: ErrorCatalog
    url: errors/empirical-security-problem-types.yml
  - type: Conventions
    url: conventions/empirical-security-conventions.yml
  - type: Lifecycle
    url: lifecycle/empirical-security-lifecycle.yml
  - type: Conformance
    url: conformance/empirical-security-conformance.yml
  - type: DataModel
    url: data-model/empirical-security-data-model.yml
  - type: AgenticAccess
    url: agentic-access/empirical-security-agentic-access.yml
  - type: LLMsTxt
    url: llms/empirical-security-llms.txt
- aid: empirical-security:empirical-security-search-api
  name: Empirical Security Search API
  description: Query CVEs using Empirical search syntax.
  humanURL: https://docs.empiricalsecurity.com/
  baseURL: https://app.empiricalsecurity.com/api
  tags:
  - Search
  properties:
  - type: OpenAPI
    url: openapi/empirical-security-search-api-openapi.yml
  - type: Documentation
    url: https://docs.empiricalsecurity.com/
  - type: APIReference
    url: https://docs.empiricalsecurity.com/api_reference/cves
  - type: Authentication
    url: authentication/empirical-security-authentication.yml
  - type: OAuthScopes
    url: scopes/empirical-security-scopes.yml
  - type: ErrorCatalog
    url: errors/empirical-security-problem-types.yml
  - type: Conventions
    url: conventions/empirical-security-conventions.yml
  - type: Lifecycle
    url: lifecycle/empirical-security-lifecycle.yml
  - type: Conformance
    url: conformance/empirical-security-conformance.yml
  - type: DataModel
    url: data-model/empirical-security-data-model.yml
  - type: AgenticAccess
    url: agentic-access/empirical-security-agentic-access.yml
  - type: LLMsTxt
    url: llms/empirical-security-llms.txt
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Website
  url: https://www.empiricalsecurity.com
- type: DeveloperPortal
  url: https://docs.empiricalsecurity.com/
- type: Documentation
  url: https://docs.empiricalsecurity.com/
- type: APIReference
  url: https://docs.empiricalsecurity.com/api_reference/cves
- type: GettingStarted
  url: https://docs.empiricalsecurity.com/authentication
- type: Blog
  url: https://research.empiricalsecurity.com/
- type: SignUp
  url: https://www.empiricalsecurity.com/contact
- type: Login
  url: https://app.empiricalsecurity.com/
- type: TermsOfService
  url: https://www.empiricalsecurity.com/terms-conditions
- type: PrivacyPolicy
  url: https://www.empiricalsecurity.com/privacy-policy
- type: Authentication
  url: authentication/empirical-security-authentication.yml
- type: OAuthScopes
  url: scopes/empirical-security-scopes.yml
- type: ErrorCatalog
  url: errors/empirical-security-problem-types.yml
- type: Conventions
  url: conventions/empirical-security-conventions.yml
- type: Lifecycle
  url: lifecycle/empirical-security-lifecycle.yml
- type: Conformance
  url: conformance/empirical-security-conformance.yml
- type: DataModel
  url: data-model/empirical-security-data-model.yml
- type: WellKnown
  url: well-known/empirical-security-well-known.yml
- type: MCPServer
  url: mcp/empirical-security-mcp.yml
- type: AgenticAccess
  url: agentic-access/empirical-security-agentic-access.yml
- type: LLMsTxt
  url: llms/empirical-security-llms.txt
- type: DomainSecurity
  url: security/empirical-security-domain-security.yml
- type: AgentSkill
  url: skills/_index.yml
x-enrichment:
  date: '2026-07-19'
  status: backfilled
  pass: local-v1
  note: backfilled from .gitignore signal + verified work evidence