Skip to content

Back to the catalog

Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems
securityweek.comarticle

Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems

Blue Initiative is a free public vulnerability database for maritime IT and OT, built by Cydome, ClassNK, Bureau Veritas, MTS-ISAC and Rakuten Maritime. It holds nearly 30,000 entries, over 2,000 rated critical by CVSS and more than 580 known exploited. Only 37 affect ship and port products. Most entries are pulled from CISA ICS advisories and the KEV catalog and mapped to maritime systems.

TL;DR Announces Blue Initiative, an open maritime vulnerability index of about 30,000 entries mapped from CISA ICS advisories and KEV, with search, filters and alerts.
Open original ↗
Document

What it is

Blue Initiative is a public vulnerability index for maritime IT and OT, run by Cydome, ClassNK, Bureau Veritas, MTS-ISAC and Rakuten Maritime. Cydome CEO Nir Ayalon says the aim is "a public and open single source of truth for maritime-related vulnerabilities", giving teams a view limited to the risks relevant to their own vessels.

How it works

Most entries are pulled automatically from CISA's ICS advisories and KEV catalog and mapped to maritime systems. A smaller number carry hand-written analyst notes. Cydome researchers and contributing partners review what is listed.

What to do

The site is free to use. Users can browse, search and filter entries, and can sign up for updates and alerts when new vulnerabilities are added. The page says community contributions are welcome, but it does not describe a submission process.

Caveats

Because entries are mostly CISA data re-mapped to maritime systems, the index is a filtered view of advisories you may already track, not new vulnerability research. Of the nearly 30,000 entries, only 37 affect products built specifically for ships and ports. The page does not say how the mapping to maritime systems is done, how reviewers treat the automated entries, or what the alerts cover, such as filtering by vendor or product. It gives no site URL and no API or feed details.

Organisations named here

  • Blue Initiative
  • Bureau Veritas
  • CISA
  • ClassNK
  • Cydome
  • MTS-ISAC
  • Rakuten Maritime

Technologies named here

  • CISA KEV catalog
  • CISA KEV
  • CVSS
  • CISA ICS advisories

Related in other