Maritime coalition launches free vulnerability database

Blue Initiative, a public vulnerability database for maritime IT and OT, has been unveiled by a coalition including cybersecurity firm Cydome, Japan’s Nippon Kaiji Kyokai (ClassNK) classification society, testing and certification giant Bureau Veritas, the Maritime Transportation System Information Sharing and Analysis Center (MTS-ISAC), and Rakuten Maritime, a unit of Rakuten Symphony.

The platform aims to help maritime operators identify and prioritise vulnerabilities that could impact ships and port systems, offering browsing, search, filters and alerting for newly added issues. Vulnerabilities are reviewed by Cydome researchers and their partners, with much of the data auto-ingested from CISA’s ICS advisories and the KEV catalogue, mapped to maritime contexts.

As of the article’s publication, the database contains nearly 30,000 entries, with more than 2,000 rated as critical via the CVSS framework. Around 580 vulnerabilities are known to have been exploited in attacks. Of the total, 37 vulnerabilities affect products specifically designed for ships and ports, including many discovered in the current year.

The project emphasises that the database serves as a focused single source of truth for maritime-related vulnerabilities, enabling IT and cyber teams, vendors and research facilities to prioritise risk more efficiently. The Blue Initiative website is freely accessible and community contributions are invited, with updates and alerts for new security issues provided to users.