New Version of EPSS went live June 15th!

If you are relying on EPSS Scores, nothing (except some scores) will change. We will be swapping to an updated algorithm on the backend and new scores will be published in place of the previous algorithm's output. No change is required for any downstream consumers to get the updated scores!

Updates to EPSSv5 include:

  • General refresh (the performance slowly degrades over time)
  • Updated exploit code detection on Github
  • Improved calibration step
  • Adding VulnCheck KEV data
  • Added "Github Popularity Metrics" after research from Jafar Akhoundali and team.
  • Other minor tweaks, twists and turns
  • Special thanks to Empirical Security for all of the staffing, support and hosting.

If you would like to see the scores before they go live, we are updating the "v5 beta" scores in the EPSS github repo and you can see an excellent breakdown in the EPSS scores from Jerry Gamblin and RogoLabs.

Please don't hesitate to reach out to me or Stephen Shaffer, the EPSS SIG at FIRST.

Jay Jacobs

Published on FIRST POST: Apr-Jun 2026