Start free. Upgrade to Audit Readiness when you need hosted API volume.
The clean path into hosted triage starts with a workspace. Begin free or start a 14-day Audit Readiness trial, get the key, and start making requests.
Ingest
Ingest SARIF, CycloneDX, Nessus, Qualys, OpenVAS, and pipeline findings.
Triage
Call the hosted triage layer programmatically.
Operationalize
Turn findings into cases, evidence, exports, and mapped workflows.
API-first access.
Key creation, usage and billing live in your workspace Settings; each triage request is routed to a model by risk.
Models
2
serving triage
Usage
v1
live endpoints
Keys
Org
tracked access
Billing
Usage
tracked per key
Example request
curl -X POST https://cveriskpilot.com/api/v1/triage \
-H "Content-Type: application/json" \
-H "X-API-Key: crp_workspace_prod_..." \
-d '{
"cveIds": ["CVE-2026-1234"],
"severity": "HIGH",
"title": "Remote code execution in dependency",
"description": "Imported from your scanner",
"asset": {
"name": "payments-api",
"type": "APPLICATION",
"environment": "PRODUCTION",
"criticality": "HIGH",
"internetExposed": true
}
}'One platform for ingestion, triage, and evidence workflows.
Send CI scan results with an API key, call hosted triage, and turn uploaded scans into cases and evidence.
The routes that matter now.
These are the active routes available now.
Model Catalog
/api/v1/models
Published model metadata, pricing, limits, and minimum tier.
Public Triage API
/api/v1/triage
Single-finding triage with API-key auth.
Batch Triage API
/api/v1/triage/batch
Batch triage for tools, scanners, and workers.
Pipeline Scan API
/api/pipeline/scan
Accept scan formats or CLI findings for hosted processing.
Key Usage and Metadata
/api/v1/usage + /api/v1/keys/me
Self-serve usage and key inspection endpoints.
The models behind hosted triage.
These cards are the catalog served at /api/v1/models: the default id and the routine tier it routes to. Each triage call also counts against your plan's monthly AI-call limit.
CVERiskPilot Triage v1
DefaultAlphaThe default id for hosted triage through /api/v1/triage and /api/v1/triage/batch. Requests do not pick a model: each one is routed by risk, with routine cases going to Gemini 2.5 Flash and high-stakes or low-confidence cases escalating to larger external models. Every result passes the same deterministic safety policy, and the response's model field names the model that answered.
crp-triage-v1Input
$3.00
per 1M
Output
$15.00
per 1M
Tier
Free workspace
max 8,192
CVERiskPilot Triage (Gemini 2.5 Flash)
Routine tierAlphaThe routine tier of hosted triage, served by Gemini 2.5 Flash. It is chosen by the router, not by the request: KEV-listed findings with high EPSS, critical findings with CVSS 9 or higher, and low-confidence answers move up the chain to larger external models.
crp-triage-geminiInput
$0.10
per 1M
Output
$0.40
per 1M
Tier
Free workspace
max 32,768
Corvus, our private triage model, is in development and does not serve customer requests. It will be switched on only after it passes our benchmark gate.
Request example
curl -X POST https://cveriskpilot.com/api/v1/triage \
-H "Content-Type: application/json" \
-H "X-API-Key: crp_workspace_prod_..." \
-d '{
"cveIds": ["CVE-2026-1234"],
"severity": "HIGH",
"title": "Remote code execution in dependency",
"description": "Imported from your scanner",
"asset": {
"name": "payments-api",
"type": "APPLICATION",
"environment": "PRODUCTION",
"criticality": "HIGH",
"internetExposed": true
}
}'Response example
{
"priority": "HIGH",
"recommendedAction": "PATCH_IMMEDIATELY",
"reasoning": "Internet-facing production service with exploitable path.",
"confidenceScore": 0.91,
"severityOverride": "CRITICAL",
"model": "gemini:gemini-2.5-flash",
"triagedAt": "2026-04-03T21:14:00.000Z",
"usage": {
"inputTokens": 1428,
"outputTokens": 214
}
}Fast path
One path into API access.
Start with a free workspace or 14-day Audit Readiness trial, land on the one-time key reveal page, then manage keys and usage in your workspace Settings.