🌐Guest Portal — Open to all. No account needed. Signals are reviewed by the ORION analyst team before publication. ORION Platform is for OT-ISAC members only.
Community Intelligence
Submit an OT Vulnerability Signal
Share what you're seeing in the field — anonymously. Your signal joins a collective intelligence network across all critical infrastructure sectors. No account needed. Takes 2 minutes.
🔒Fully anonymised
⚡Live SSVC scoring
🌐Community feed
🛡️TLP enforced
🔐
Privacy-Preserving Submission — No IP addresses, hostnames, facility names, or personally identifiable information. All free-text fields are auto-sanitized before community sharing.
TLP ENFORCED
00 · Contribution Type
How did you come across this threat? This helps the community understand the intelligence value of your submission.
Observed on my own systems
You saw this in your OT environment — highest operational value
1×
Observed on a client's systems
You witnessed this during a security assessment or incident response
1×
First to report active exploitation
CVE known but you are first to see it exploited in the field — high value
2×
Corroborating — I saw what others reported
Add your operational context: firmware version, sector, country, patch status
1×
Advisory-aware only — no direct observation
Add specific environment context to increase value
0.5×
Unexplained behaviour — no CVE applies
Observable threats without a CVE are equally important in OT
1×
01 · Vulnerability Identity
02 · Asset Context
03 · SSVC Assessment
These fields feed the SSVC scoring engine and help analysts prioritise response.
Live SSVC Preview
MONITOR
Next maintenance window
40
Exploit
+5
Auto
+5
Exposure
+15
Mission
+10
Impact
+5
04 · Observation Details
Describe what you observed. Do not include organisation names, IP addresses, or facility identifiers. All text is auto-sanitized.
0/2000
05 · TLP Classification
Default is TLP:AMBER. Guest submissions cannot be TLP:RED. Only downgrade if you are certain the information can be shared more broadly.
06 · Contact Details (optional)
Providing contact details is optional. If you include an email, we will notify you when your signal is published. Your details are never shared publicly and are only used for follow-up by ORION analysts if clarification is needed.
🔒 Contact details are stored securely, never published, and only accessible to ORION analysts. You may submit anonymously without filling this section.