Changelog

For years, Praetorian's expert Security Engineers have upheld our "all signal, no noise" promise by marking vulnerabilities as "Open" only after validating them and proving they could lead to real compromise. This rigorous standard meant that when you saw an Open vulnerability in Guard, you knew it was both real and exploitable—no false positives cluttering your dashboard.

We're keeping that same promise, but approaching it in a way that gives you even more visibility into what's happening across your attack surface.

Guard can now present vulnerabilities with two distinct statuses: Demonstrated and Detected. Unlike our previous approach where only validated findings appeared, the platform can now show you everything it discovers during continuous scanning. This transparency lets you see that Guard is actively monitoring your infrastructure, while still surfacing the most critical, proven vulnerabilities as your top priority.

Demonstrated vulnerabilities are those our Security Engineers have validated and confirmed can lead to real compromise—the same rigorous standard you've always trusted from Praetorian. Detected vulnerabilities are findings that Guard has identified but haven't yet been validated by our team. Both are important, but Demonstrated findings demand immediate attention.

This evolution gives you the peace of mind that comes from knowing Guard's scans are continuously hunting for new vulnerabilities across your environment, while ensuring the truly important issues rise to the top. The vulnerability page includes filters that let you focus specifically on Demonstrated findings when you need to prioritize remediation work.

Your platform can be configured to display either just the proven Open vulnerabilities (our classic approach) or the full Demonstrated and Detected view. If you'd like to adjust this setting for your organization, reach out to support@praetorian.com and we'll help you configure the experience that works best for your team.

With Demonstrated and Detected statuses, you get both the comprehensive visibility into Guard's continuous security monitoring and the confidence that comes from Praetorian's expert validation—the best of both worlds.

We're excited to announce our new Okta integration, which helps you discover critical security gaps in your authentication infrastructure.

Unlike Okta SSO setup—which focuses on enabling single sign-on for your users—this integration connects directly to your Okta tenant to identify login endpoints across your attack surface that are exposed to the internet without SSO protection layered on top of them.

Here's how it works: Guard continuously discovers web applications and login pages across your external attack surface. Our new Okta integration cross-references these discovered endpoints against your Okta application catalog to automatically tag exposed login endpoints with an "SSO Identified" attribute. This tells you at a glance whether each login page is protected by Okta SSO or if it's relying on traditional username/password authentication that's vulnerable to credential stuffing, password spraying, and phishing attacks.

You can filter for SSO Identified vulnerabilities directly on the vulnerability page, making it easy to focus on unprotected endpoints that need attention. When you open any exposed login endpoint, you'll see an "SSO identified" indicator displayed as a tag in the top left of the vulnerability details, providing immediate visibility into its authentication protection status.

This integration provides immediate visibility into authentication risk. You'll see a comprehensive list of every login endpoint exposed to the internet, with clear indicators showing which ones lack the protection of SSO. This allows security teams to prioritize remediation efforts, enforce SSO adoption across the organization, and reduce the attack surface associated with password-based authentication. Instead of manually auditing hundreds of applications, you get automated, continuous monitoring of your authentication security posture.

This integration is particularly valuable for organizations undergoing SSO migration, where understanding which legacy applications still expose traditional login pages helps drive adoption and close security gaps before attackers can exploit them.

With the recent "React2Shell" (CVE-2025-55182) vulnerability, Praetorian was able to rapidly react and provide users with certainty that our platform was detecting the react2shell vulnerability. Now we have a formalized communication pipeline in addition to our rapid technical response.

Introducing Emergent Threat Notifications

When critical vulnerabilities emerge in the wild, every minute counts. We've built a comprehensive notification system to ensure you're always informed about how Praetorian is protecting your environment—from the moment a threat is discovered to the instant we detect it in your infrastructure.

Here's how it works: When you opt in to emergent threat notifications, you'll receive email updates at three critical stages. First, you'll get an initial alert as soon as a new threat emerges, giving you immediate awareness before it reaches your environment. Then, when Praetorian begins actively scanning your systems for that specific vulnerability, we'll notify you that our detection is underway. Finally, if we discover the vulnerability in your infrastructure, you'll receive an instant alert so your team can respond immediately.

This formalized communication pipeline runs parallel to our technical response, ensuring you always know that Praetorian is "on it." You get the peace of mind that comes from proactive awareness, real-time visibility into our scanning operations, and immediate alerts when action is needed.

Fast-Acting Protection You Can Trust

The emergent threat notification system is designed around one principle: you should never be left wondering whether your security platform is aware of the latest risks. When a vulnerability like React2Shell breaks, you'll know within minutes that Praetorian is already working to protect you.

Ready to stay informed? Enable emergent threat notifications in your account settings today. Your team will always be first to know about critical security developments, with the confidence that Praetorian's rapid response is already protecting your environment.

Questions about emergent threat notifications? Contact support@praetorian.com or visit our help center.