Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems

New Maritime Vulnerability Database Launched

A coalition of organizations, including cybersecurity company Cydome, Japan’s ClassNK classification society, Bureau Veritas, the Maritime Transportation System Information Sharing and Analysis Center (MTS-ISAC), and Rakuten Maritime, has launched the Blue Initiative. This new project is a free public vulnerability database designed to index IT and OT vulnerabilities affecting the maritime industry.

Addressing Industry-Specific Challenges

The primary goal of Blue Initiative is to assist maritime organizations in identifying and prioritizing vulnerabilities that pose a threat to their operational systems. Cydome CEO Nir Ayalon stated that the initiative aims to provide a single, open source of truth for maritime-related vulnerabilities, offering IT and cyber teams a focused view of risks relevant to specific vessels.

This resource is intended to make vulnerability and risk management more effective and faster for the maritime sector.

Database Contents and Accessibility

The Blue Initiative website is freely accessible and encourages community contributions. Vulnerabilities submitted are reviewed by Cydome researchers and contributing partners. Users can browse, search, and filter vulnerabilities, as well as receive alerts for new security entries.

The database currently holds nearly 30,000 entries, with over 2,000 rated as critical based on their CVSS score. More than 580 vulnerabilities are known to be actively exploited. Of these, 37 vulnerabilities specifically affect products designed for ships and ports, many discovered this year. Most entries are automatically pulled from CISA’s ICS advisories and KEV catalog and mapped to maritime systems, supplemented by analyst notes.