Previdian

Previdian is a vulnerability exploitation intelligence service. It uses proprietary sensors and private honeypots to detect vulnerabilities that are being exploited. It corroborates these observations with vendor advisories and public evidence. The company says it often records exploitation before the vulnerability is added to CISA's Known Exploited Vulnerabilities (KEV) catalog, and it publishes comparisons of these timestamps.

Each vulnerability record includes the exploitation verdict, a confidence level, first-party sensor telemetry where available, and affected versions. Records are enriched with EPSS, CVSS, CWE data, proof-of-concept exploits, Nuclei templates, Metasploit modules, and virtual-patch context.

The Watch feature lets users select vendors, products, and CVEs to monitor. It sends alerts on new exploitation evidence, sensor activity, PoC releases, and status changes. Alerts go out by email and, on the Pro plan, Slack. A Priority queue holds the last 14 days of relevant signals. Data is also available through a live feed, RSS, JSON, and a Pro API.

The service has a Free tier, which sends email alerts for new KEVs from up to five vendors, and a Pro tier with a 14-day trial. Listed use cases include vulnerability management, SOC detection, MSSP and MDR services, and cyber threat intelligence. The site says it was built by Ryan Dewhurst, creator of DVWA and founder of WPScan.