Maritime groups launch first public cyber vulnerability database for ships

Cydome, ClassNK, Bureau Veritas, MTS-ISAC and Rakuten Maritime have launched the Blue Initiative, a public database focused on cyber vulnerabilities tied to maritime IT and OT systems. The effort aims to help shipowners, vendors and researchers find relevant risks faster as vulnerability volumes keep rising.

Why it matters: - Maritime operators face a growing volume of vulnerabilities, with more than 350,000 published CVEs and about 200 new entries added daily. - The Blue Initiative is meant to help shipping companies identify which patches and risks actually apply to their vessels and equipment. - A maritime-specific reference can reduce time spent sorting through general-purpose databases and vendor advisories.

What happened: - Cydome, ClassNK, Bureau Veritas, MTS-ISAC and Rakuten Maritime launched the Blue Initiative on Oct. 26, 2026. - The collaboration is billed as the first public database focused only on cyber vulnerabilities relevant to maritime IT and OT devices. - The repository is openly available at blue-initiative.org. - Relevant organizations in the maritime community are being invited to join and help expand the database.

The details: - Entries are reviewed by cyber researchers from Cydome and the contributing partners before they go live. - The partners validate and refine the listings as part of the publication process. - Select entries include more detailed analyst notes. - Users can browse vulnerabilities and their details. - Users can filter searches by equipment or vendor. - Users can access expert insights on select vulnerabilities. - Users can subscribe for updates and alerts on new vulnerabilities. - Cydome CEO Nir Ayalon said the goal is to create a public and open single source of truth for maritime-related vulnerabilities. - ClassNK said the initiative gives shipping companies a practical, trusted resource by focusing on maritime IT and OT equipment and validating the data with the community. - Bureau Veritas said vulnerability management is a continuous process across a vessel’s operational life and sees value in a shared maritime-specific reference. - MTS-ISAC said the initiative addresses a critical vulnerability gap and has integrated its operational workflows to contribute to and use the database. - Rakuten Maritime said tracking equipment vulnerabilities is critical to keeping connected fleets secure across the vessel lifecycle.

Between the lines: - The partnership suggests the maritime sector is moving toward shared infrastructure for cyber defense instead of leaving operators to manage risks in isolation. - The focus on maritime IT and OT systems narrows the signal for operators who need practical guidance, not broad vulnerability lists. - The collaboration also signals that classification societies, security groups and technology vendors see value in a common reference point.

What's next: - The partners plan to keep adding vulnerabilities, analyst notes and alerts as the database grows. - More maritime organizations are expected to join and contribute new data. - The initiative’s usefulness will likely depend on how quickly the community expands the repository and keeps it current.

The bottom line: - The Blue Initiative tries to turn scattered vulnerability data into a shared maritime security tool that operators can use to prioritize real-world risk.