# Previdian

> Previdian uses proprietary sensors and private honeypots to observe exploitation attempts, corroborates those signals with vendor advisories and relevant public evidence, and gives security teams the confidence and defensive context needed to act sooner.

Previdian is sensor-led early exploitation intelligence. Out of hundreds of thousands of vulnerabilities, only a small fraction are ever exploited in the wild. The product warns security teams when vulnerabilities move into credible real-world exploitation — with first-hand telemetry where available, inspectable evidence, confidence scoring, and practical context for remediation, detection, investigation, and mitigation.

CISA KEV is an essential baseline. Previdian complements the official catalog with proprietary sensor observations, earlier exploitation signals where timestamps support them, confidence, corroborating evidence, and operational delivery through the UI, a free registered RSS feed, a free registered JSON feed, and the Pro and Enterprise APIs. Previdian Watch sends Watch notifications when a followed vendor, product, or vulnerability changes. Available defensive artifacts (including virtual patch guidance) help teams act while permanent remediation is underway.

Previdian was founded by Ryan Dewhurst, a cybersecurity professional focused on real-world exploitation, threat intelligence, and honeypot/deception operations, and the creator of Damn Vulnerable Web Application (DVWA) and WPScan (acquired in 2021).

## Core pages

- [Home](https://previdian.com/): Early warning overview — proprietary sensors, Watch for the products you run, evidence, and confidence.
- [Watch](https://previdian.com/watch): Previdian Watch — notify your team when exploitation starts against vendors, products, and vulnerabilities you name.
- [KEV Feed](https://previdian.com/feed): Browse known exploited vulnerabilities with CISA KEV status, confidence, sensor observations, and available artifacts.
- [What is a known exploited vulnerability?](https://previdian.com/glossary/known-exploited-vulnerability): Glossary definition of a KEV and how Previdian records exploitation evidence.
- [Not in CISA KEV](https://previdian.com/not-in-cisa-kev): Known exploited vulnerabilities tracked by Previdian that are not yet in the official CISA catalog.
- [Research and Data](https://previdian.com/research): Press pack — latest stats, methodology, attribution, citation format, and monthly KEV reports.
- [Exploitation Signals](https://previdian.com/exploitation-signals): Observed exploitation attempts against internet-facing services, mapped to vulnerabilities.
- [Attacker Intelligence](https://previdian.com/attacker-intelligence): Source IP intelligence from Previdian sensor telemetry, across vulnerabilities.
- [Methodology](https://previdian.com/methodology): How Previdian observes, scores, enriches, and delivers early exploitation intelligence, including evidence sources and confidence levels.
- [Use Cases](https://previdian.com/use-cases): How vulnerability management, CTI, SOC, MSSP, virtual patching, and exposure-management teams use Previdian.
- [Virtual Patches](https://previdian.com/virtual-patches): Virtual patch guidance to create temporary WAF/IPS controls while remediation is underway.
- [Stats](https://previdian.com/stats): Live Previdian statistics, including exploited-vulnerability coverage and sensor telemetry.

## Compare and pricing

- [Previdian vs CISA KEV](https://previdian.com/cisa-kev-comparison): How Previdian complements CISA KEV as an early-warning layer with proprietary sensor observations and inspectable evidence.
- [CISA KEV RSS feed](https://previdian.com/cisa-kev-rss-feed): Previdian provides RSS delivery for early exploitation warnings, which CISA KEV does not.
- [Pricing](https://previdian.com/pricing): Free, Pro, and Enterprise tiers for early exploitation intelligence.
- [API and integrations](https://previdian.com/api-integrations): Delivery channels and how to plug exploitation intelligence into existing workflows.
- [API documentation](https://previdian.com/api-docs): OpenAPI reference for the v2 KEV, Pro, and Enterprise APIs, including Watch (read) and Priority (queue plus workflow).

## Data and feeds

- [Free KEV RSS Feed](https://previdian.com/account/signup): Registered free RSS with a personal subscribe URL from your account dashboard (`GET /feeds/kevs.rss?token=…`).
- [Sign up for the free KEV JSON feed](https://previdian.com/account/signup): Create a free account to get an API token for the JSON feed; Pro and Enterprise APIs add deeper evidence, confidence scoring, telemetry, virtual patches, read-only Watch items and notifications, and Priority queue plus workflow updates.
- [Previdian Watch](https://previdian.com/watch): Autonomous early warning for the vendors, products, and vulnerabilities that matter to you — Watch notifications when the threat changes.
- Pro and Enterprise Watch API (read-only): `GET /api/v2/{pro|enterprise}/watchlist/items`, `/watchlist/items/:id`, `/watchlist/notifications`, `/watchlist/autonomous` (current Autonomous Watchlist). Item create/update, settings, and following the Autonomous Watchlist stay in the account UI.
- Pro and Enterprise Priority API: `GET /api/v2/{pro|enterprise}/priority_items`, `GET`/`PATCH /priority_items/:cve_id`, `POST /priority_items/bulk` for workflow (`seen`, `actioned`, `reopen`). OpenAPI: [API documentation](https://previdian.com/api-docs).

## About

- [About Previdian](https://previdian.com/about): What Previdian is, the problem it solves, and the team behind it.
- [Ryan Dewhurst (founder)](https://ryandewhurst.com/): Founder of Previdian; creator of DVWA and WPScan (acquired 2021).
- [Contact](https://previdian.com/contact): Get in touch about Pro, Enterprise, MSSP, or API access.

## Optional

- [Privacy policy](https://previdian.com/privacy)
- [Terms of service](https://previdian.com/terms)