Vulnerability and threat intelligence over HTTPS: every CVE with its TRIS score, KEV, EPSS, exploit signals, the threat actors with documented use, and exploit prerequisites. JSON in, JSON out.
Get started Authentication Tiers and limits Try it free Full reference Terms
Get started in three steps
Create a free account with Google, GitHub, or your email. Email sign-ups confirm the address first.On the account page, accept the TRIX API terms and issue a key. It starts with cvk_ and is shown once, so copy it then.
Make your first call:
curl -H "Authorization: Bearer $TRIX_KEY" \
https://trix.cveasyai.com/v1/cve/CVE-2021-44228
The base URL for every route is https://trix.cveasyai.com.
Authentication
Send your key as a bearer token on every request:
Authorization: Bearer cvk_...
We store only a hash of the key, so we cannot show it to you again. If you lose it, rotate it on the account page : the old key stops working the moment the new one is issued. Keep keys out of source control and browser code; call the API from a server or a script. Pro and above hold several keys at once, so each service can have its own and you can rotate or revoke one without touching the rest.
A request with no key, a revoked key, or an expired key gets 401.
Tiers and limits
Community Developer Pro Scale Enterprise
Price a month Free $49 $495 $1,490 From $2,500, annual contract Billed yearly $490 $4,950 $14,900 Annual Calls per minute 60 120 600 1,500 3,000 Calls per day (UTC) 1,000 10,000 100,000 500,000 2,000,000 List records per day 5,000 50,000 1,000,000 5,000,000 Unlimited Largest list page 50 200 1,000 1,000 1,000 Lookups a day on the website 300 2,000 5,000 10,000 10,000 Active keys per account 1 1 3 10 25 CVE records, TRIS baseline, KEV, EPSS, delta sync Yes Yes Yes Yes Yes Actors with documented use, chain facts Yes Yes Yes Yes Yes Heuristic actor matches No Yes Yes Yes Yes Chain resolution and validated chains No Yes Yes Yes Yes Contextual TRIS against your asset context No No Yes Yes Yes Bulk snapshots No No Yes Yes Yes Score history per CVE No No No Yes Yes ACT alert webhooks No No No Yes Yes BASzy offensive intel No No No No Per contract License Personal, research, your own organization Personal, research, your own organization Commercial: products and client services Commercial, plus showing TRIX data to your own customers Custom, including redistribution Support Docs Email Email, one business day Priority support Named contact, SLA by contract
Included with a CVEasy licence. An active licence carries a TRIX tier for the same email address at no extra cost: CVEasy Starter includes Developer, CVEasy and CVEasy Red include Pro, the Enterprise and MSSP editions include Scale. CVEasy Core includes Community. Sign in on the account page with your licence email to create your key; the tier is applied automatically and follows the licence.
Try it free
These calls work on a free Community key. Set TRIX_KEY to your key and paste them into a terminal.
Look up one CVECommunity
curl -H "Authorization: Bearer $TRIX_KEY" \
https://trix.cveasyai.com/v1/cve/CVE-2021-44228
{
"id": "CVE-2021-44228",
"tris_baseline": 95,
"tris_band": "ACT",
"is_kev": 1,
"epss_score": 0.99999,
...
}
Score a list of CVEsCommunity
curl -X POST https://trix.cveasyai.com/v1/tris/score \
-H "Authorization: Bearer $TRIX_KEY" \
-H "Content-Type: application/json" \
-d '{ "cve_ids": ["CVE-2021-44228", "CVE-2024-3094"] }'
See who has used a CVECommunity
curl -H "Authorization: Bearer $TRIX_KEY" \
https://trix.cveasyai.com/v1/actor/cve/CVE-2021-44228
Check your usageCommunity
curl -H "Authorization: Bearer $TRIX_KEY" \
https://trix.cveasyai.com/v1/usage
Full reference
Free with an account
The complete TRIX API reference
Sign in to read every route and parameter for each tier, the response fields, list paging and daily delta sync, contextual scoring inputs, bulk snapshots, score history, ACT alert webhooks with signature verification code, error codes, and ready to run Python and Node clients.
Create a free account
Sign in
Terms and attribution
Community and Developer keys are for personal use, research, and protecting your own organization. Building the data into a product or a client service needs TRIX Pro. Showing TRIX data to your own customers inside your product needs TRIX Scale, and redistributing the data set itself needs TRIX Enterprise. Where you show TRIX data to others, credit it as "per CVEasy AI threat intel data" with a link to cveasyai.com/threat-intel/. EPSS scores come from FIRST, actor names from MITRE ATT&CK and the MISP galaxy, CVE records from NVD, and exploited status from CISA KEV. The full TRIX API terms apply.
Questions or a commercial use case: contact us . Your key and usage: account page .