Terms of use

IACS Radar retrieves CVE details (CVSS, CWE, description) live from the National Vulnerability Database (NVD) of the US NIST, via the NVD CVE API 2.0. In line with the terms of use of the NVD API, the following mandatory notice applies:

“This product uses the NVD API but is not endorsed or certified by the NVD.”

The name “NVD” is used solely to indicate the origin of this data, not to suggest approval, certification or any other form of support by the NVD.

Besides NVD, IACS Radar uses live data from CISA (Known Exploited Vulnerabilities catalogue and ICS advisories), the own CSAF advisory feeds of Siemens ProductCERT and ABB PSIRT, EPSS scores from FIRST.org, and a Shodan integration for the exposure map. None of these parties endorses, certifies or sponsors IACS Radar. See the methodology page for the full list, update frequency and limitations per source.

IACS Radar is intended exclusively for defensive purposes: risk assessment, knowledge sharing and vulnerability management within OT, ICS and IACS environments. The platform offers no functionality for active scanning, exploitation, credential testing or unauthorised access, and may not be used to prepare or carry out such activities.

The content of IACS Radar is provided “as is”, without any guarantee of accuracy, completeness or timeliness. Vulnerability information is compiled automatically from the sources mentioned above and is not a substitute for a professional risk analysis, technical investigation or the official publications of NVD, CISA, IEC or the vendor concerned. If one of the sources above is disrupted, IACS Radar may temporarily fall back on synthetic demonstration data, recognisable by the status indicator per source.

Questions or comments about these terms of use are welcome at iacsradar@marcovader.nl.