Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

Insight into digital risks in industrial environments

IACS Radar brings together industrial exposure, critical vulnerabilities, KEV matches and ICS advisories for cybersecurity professionals working on secure and resilient OT environments.

IACS Radar in 30 secondsFull video (1 min)
Simulated attack patterns — for illustration only, not live threat data.

Europa — aggregated

Nederland

Shodan integration: live koppeling · 7 November 2026 at 10:17

32603

Observations (actual)

5869

Critical

2935

KEV matches

Trend, 30 days

-10% t.o.v. vorige periode

Location data based on IP addresses can be inaccurate. Figures are aggregated at country level.

Exposure map

Total number of aggregated industrial observations per country.

An internet-reachable service is not automatically vulnerable — exposure shows observable presence, not a confirmed vulnerability.

Industrial observations

3%

893,225

last 30 days

Total number of aggregated industrial observations within the selected period.

Critical CVEs

5%

226

CVSS ≥ 9.0

Number of vulnerabilities with a CVSS score of 9.0 or higher that are relevant to OT/ICS.

Active KEVs

2%

321

in the CISA KEV catalogue

Vulnerabilities with confirmed evidence of actual exploitation.

New ICS advisories

23%

49

last 30 days

Advisories published or updated in the last 30 days.

Affected vendors

4%

68

unique vendors

Region with highest risk

7%

United States

based on critical CVEs and KEV matches

0 of 900 sample observations after filters

Intelligence feed

Wat IACS Radar anders maakt

NVD, CISA and tools such as OpenCVE each provide separate, raw data. IACS Radar combines CISA ICS advisories, the own advisories of more than twenty OT vendors and the KEV catalogue (confirmed active exploitation) with NVD and EPSS data into one coherent IACS Radar prioritisation score per vulnerability, specifically aimed at OT/ICS in the energy sector. Follow vendors, products or CVEs via My Radar and get notifications by RSS, email or text message: an overview of what is new, and an immediate alert as soon as something you follow is actively exploited or gets a critical advisory. Browse via vendor and product pages instead of loose CVE IDs, and match your own equipment locally in the browser with the Asset Matcher: not yet another CVE list, but interpreted context. See the methodology for the full approach.