What ics advisory project does

ICS Advisory Project is a Biloxi, United States-based open-source cybersecurity intelligence initiative founded in 2022 by Dan Ricci, maintained by a small (1-10 person) team of core contributors and community volunteers. It focuses on industrial control systems (ICS) and operational technology (OT) security, surfacing and structuring the disclosures published by CISA through interactive dashboards, GitHub-hosted CSV datasets, and supplementary analysis reports published under an open-source license.

Its core products are interactive dashboards that visualize CISA ICS Advisories, versioned CSV datasets available on GitHub, and a subscription API delivered through the Industrial Data Works partnership; it has also released an adversary-centric tool, APT Profiler V2. The platform architecture is fundamentally curation-led — collecting authoritative advisory data, tagging it against frameworks such as MITRE ATT&CK, and exposing the structured output to defenders, with collaborative tooling maintained alongside partners including AMPYX Cyber, Contextual Security Solutions, and EmberOT.

The business model is freemium: the dashboards and datasets are free and open-source, while commercial access is mediated via a paid API channel through Industrial Data Works. The targeted customer base spans smaller OT asset owners, CISOs and cybersecurity analysts, and security researchers, with no disclosed funding rounds, paid customer logos, or revenue figures available in the input data.

Name

ics advisory project

Legal name

ICS Advisory Project

Website

https://icsadvisoryproject.com

Company type

Private

Founded year

2022

Operating status

Operating

Headcount range

1–10 employees

Short description

ICS Advisory Project is an open-source Biloxi-based initiative founded in 2022 that aggregates CISA ICS Advisories into dashboards, GitHub datasets, and a subscription API via Industrial Data Works, serving smaller OT asset owners, CISOs, and security researchers.

Ownership category

akta.pro rank

Product category

OT/ICS Cybersecurity Intelligence

NAICS

Software Publishers (513210), Other Computer Related Services (541519)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Control System Cybersecurity for OT (ICS Security, Monitoring, Hardening) (IMAGABAL)

akta.pro secondary industry

OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN)

Keywords

• OT vulnerability intelligence
• ICS cybersecurity dashboards
• Critical infrastructure security
• Threat intelligence visualization
• Vulnerability data enrichment

Headquarters

HQ city

Biloxi

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Infrastructure, Operations, Marketing or Sales

Revenue model

1. Free Open-Source Access: The project provides free access to its dataset through GitHub repository and open-source dashboards. This includes CSV-formatted CISA ICS Advisories data and interactive visualization dashboards.
2. API Subscription Service: In partnership with Industrial Data Works, the project provides enriched CISA ICS Advisory data through a paid API subscription service for organizations to integrate with on-prem or preferred data visualization/security appliance solutions.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels5 records

Core offering

ICS Advisory Project provides interactive dashboards and enriched CSV-formatted datasets that visualize and correlate CISA ICS Advisories for OT/ICS vulnerability analysis. The platform aggregates and enriches publicly available vulnerability data—including CISA ICS Advisories, CVEs, MITRE ATT&CK, and the CISA KEV catalog—with proprietary layers such as vendor name normalization, Purdue Model Level identification, and Critical Infrastructure sector mapping. A paid API subscription service is offered through a partnership with Industrial Data Works for on-premises and enterprise integration.

Product overview

The ICS Advisory Project is an open-source project that provides CISA ICS Advisories visualized as interactive dashboards and in CSV format, supporting vulnerability analysis for the OT/ICS community. The core offering consists of multiple specialized dashboards: the main ICS Advisory Dashboards for general advisory tracking, the CISA KEV Dashboard for known exploited vulnerability correlation, the ICS Asset ID & Purdue Model Levels Dashboard for equipment identification, the Researcher Scoreboard for vulnerability researcher tracking, the APT Profiler for ICS and APT Profiler V2 for threat group analysis, the NIS2 CI Sector View for regulatory compliance mapping, the Siemens Updates Dashboard for vendor-specific tracking, the CVE CPEs Dashboard for platform enumeration, and the Other CERTs & Vendors Dashboard for extended advisory coverage. These are supplemented by Alerts & Summaries providing practitioner-grade analysis and weekly/semi-annual reports, the ICS[AP] GitHub Repository providing open-source CSV data, the ICS[AP] API for programmatic access via Industrial Data Works partnership, and OT Cybersecurity Services and ICS Vendor Resources directories for community support.

Differentiator

Problem solved

Functional benefit

Brands

• ICS[AP] API: API subscription service providing enriched CISA ICS Advisory data for ICS/OT security practitioners and vendors, offered in partnership with Industrial Data Works.
• ICS[AP] GitHub

Products and services

• ICS Advisory Dashboards Interactive dashboards providing ICS asset owners, analysts, CISOs, and researchers with a way to quickly identify new and previously reported ICS Advisories affecting control system assets in OT environments across multiple critical infrastructure sectors.
• CISA KEV for CISA ICS Advisories Dashboard Dashboard correlating CVEs identified in ICS Advisories with CVEs added to the CISA Known Exploited Vulnerability catalog and prioritized vulnerabilities, enriched with EPSS, CVSS scoring, and GreyNoise data.
• NIS2 CI Sector View ICS Advisories Dashboard Dashboard providing correlation between the 16 Critical Infrastructure Sectors identified in CISA ICS Advisories and NIS2 Sectors of High Criticality for quickly finding advisories impacting specific CI sectors.
• Siemens Updates to CISA Advisories Dashboard Dashboard addressing CISA's decision to stop updating Siemens Security Advisories, allowing quick filtering and viewing of which Siemens Security Advisory updates correlate to previously released CISA ICS Advisories.
• ICS Advisory CVE CPEs Dashboard Dashboard providing Common Platform Enumeration data for each CVE identified in CISA ICS Advisories, enabling identification of ICS vendor and third-party applications, operating systems, and hardware versions affected by vulnerabilities.
• ICS Asset ID & Purdue Model Levels Dashboard Dashboard assisting asset owners, analysts, and researchers in understanding the type of equipment impacted by vulnerabilities reported in CISA ICS Advisories, with Purdue Model Level identification.
• Researcher Scoreboard Dashboard Dashboard enabling tracking of individual researchers and affiliated research organizations that disclose vulnerabilities to CISA and Vendors, with filters for trends by researcher, organizations, vendors, and products.
• APT Profiler for ICS Dashboard providing interactive filters to focus on Threat Groups, Tactics, and Techniques for rapid snapshots of specific APTs, including identification of targeted Critical Infrastructure, ICS Asset Affected, and mitigations mapped to NIST SP 800-53 and ISA 62443 security controls.
• APT Profiler V2 Advanced threat profiling tool built on MITRE ATT&CK v12, MITRE D3FEND Mapping, and LOLBAS Project data, consisting of eight dashboard views for Enterprise, Mobile, and ICS domains for identifying tactics, techniques, and developing mitigation action plans.
• Other CERTs & Vendors ICS Advisories Dashboard Dashboard providing views for ICS advisory data from CERTs and vendors not reported as CISA ICS Advisories from 2023 to present, with ability to correlate with CISA ICS Advisories when matched.
• ICS[AP] API Paid API subscription service providing enriched CISA ICS Advisory data for integration with on-premises or preferred data visualization and security appliance solutions, offered in partnership with Industrial Data Works.
• ICS[AP] GitHub Repository Open-source GitHub repository providing clean and usable CISA ICS Advisories data in Comma Separated Value format to support vulnerability analysis in a format easier than CISA's HTML format.

Quantifiable outcome

• Saves security analysts hours correlating vulnerability data points between different sources

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Feature9 records

Partnerships

Six partnerships are on record, tiered core and minor.

• Industrial Data WorkscoreStrategic or Co-development PartnerPartnership to provide enriched CISA ICS Advisory data through API subscription and contracted services. Industrial Data Works offers the dataset for integration with on-prem or preferred data visualization or security appliances/platform solutions.
• MITREcoreTechnology or IntegrationUses MITRE ATT&CK framework and MITRE D3FEND mapping for threat analysis. APT Profiler V2 built on MITRE ATT&CK v12 and MITRE D3FEND Mapping to ATT&CK.
• CISA (Cybersecurity and Infrastructure Security Agency)coreTechnology or IntegrationPrimary data source provider. The project visualizes and enriches CISA ICS Advisories data, correlating with CISA Known Exploited Vulnerability (KEV) catalog.
• AMPYX CyberminorGTM or Marketing PartnerFeatured OT cybersecurity service provider on the OT Cybersecurity Services page. Global industrial security consulting firm specializing in ICS and OT security.
• Contextual Security SolutionsminorGTM or Marketing PartnerFeatured OT cybersecurity service provider on the OT Cybersecurity Services page. Offers tailored cybersecurity and compliance services across diverse industries including healthcare, utilities, retail, and legal sectors.
• EmberOTminorGTM or Marketing PartnerFeatured OT cybersecurity service provider on the OT Cybersecurity Services page. Software-based sensors provider for OT/ICS environment monitoring and defense. Also collaborated on ICS Vulnerability Intel Report 2024-2025.

Scale indicators1 record

Recent moves5 records

Expansion highlights4 records

Direct peers

• Dragos: Direct OT/ICS cybersecurity platform providing vulnerability intelligence, threat detection, and incident response for industrial environments — comparable to ICS Advisory Project's focus on enriched CISA ICS Advisory data and OT asset owner targeting.
• Claroty: ICS/OT security vendor offering asset visibility, vulnerability management, and threat detection for industrial networks — overlaps with ICS Advisory Project's vulnerability prioritization use cases for critical infrastructure operators.
• Nozomi Networks: OT and IoT security platform providing asset discovery, vulnerability management, and threat intelligence — closely comparable to ICS Advisory Project's OT vulnerability analysis and Critical Infrastructure sector mapping.
• Industrial Defender: ICS/SCADA-focused cybersecurity platform for asset visibility, vulnerability management, and compliance in OT environments — directly comparable customer base and use case to ICS Advisory Project.

Emerging players

• SynSaber: OT-native cybersecurity vendor producing vulnerability research and reporting for industrial environments — directly comparable given their published SynSaber ICS Vulnerabilities First Half 2023 Report collaboration with ICS Advisory Project.
• EmberOT: Software-based sensor provider for OT/ICS environment monitoring and defense; collaborated with ICS Advisory Project on the OT Vulnerability Intelligence Report 2024-2025 — directly comparable niche peer.

Broad incumbents

• Tenable: Broad vulnerability management incumbent with an OT/ICS module (Tenable.ot) — competes for the same enterprise vulnerability intelligence budget as ICS Advisory Project's paid API offering.
• Rapid7: General-purpose vulnerability management and security analytics platform with some ICS/OT capabilities — represents a broader alternative to niche OT-focused intelligence like ICS Advisory Project.
• OPSWAT (formerly SCADAfence): Critical infrastructure cybersecurity vendor including OT/ICS asset visibility and threat detection (via SCADAfence acquisition) — overlaps with ICS Advisory Project's OT vulnerability and asset identification use cases.
• Mandiant (Google Cloud): Broader cybersecurity and incident response firm with dedicated ICS/OT expertise and threat intelligence — comparable on the threat intelligence dimension, especially the APT Profiler use case.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks6 records

Key highlights6 records

Customer concentration

• GitHubgithub.com/icsadvprj
• LinkedInlinkedin.com/company/ics-advisory-project

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about ics advisory project