OT & ICS Security Advisories
Operational Technology and Industrial Control System vulnerabilities affecting SCADA, PLC, and industrial environments — sourced directly from CISA's official CSAF advisory repository, the same government source behind the KEV catalog.
Loading advisories from CISA's CSAF repository…
Frequently Asked Questions
What counts as OT (Operational Technology)?
Operational Technology refers to the hardware and software that monitors and controls physical processes and equipment — industrial control systems (ICS), SCADA systems, programmable logic controllers (PLCs), and similar systems used in manufacturing, energy, water treatment, and other industrial environments. Unlike traditional IT, a compromised OT system can cause real-world physical consequences.
Where does this data come from?
Directly from CISA's official CSAF (Common Security Advisory Framework) advisory repository — the same U.S. government source behind the KEV catalog used elsewhere on this site, specifically the subset covering Industrial Control Systems and Operational Technology.
How is this different from a regular CVE?
Every OT advisory includes one or more underlying CVEs, but with additional context specific to industrial environments: affected vendor and product lines, the critical infrastructure sector involved, and vendor-specific remediation guidance that general CVE databases don't always capture.
How often is this updated?
Automatically, checked roughly every two hours against CISA's advisory repository.