About PatchWatch OT

Industrial control system security advisories are scattered across CISA, vendor security portals and PDFs, and most of them are not relevant to any given site. PatchWatch OT pulls them into one place, flags the ones that touch gear common in oil & gas, and translates each into a short summary and a "what to do" line.

How it works

• Advisories come from CISA's machine-readable CSAF records (github.com/cisagov/CSAF), the same content published at cisa.gov/ics-advisories.
• Each CVE is checked against CISA's Known Exploited Vulnerabilities catalog.
• An advisory is flagged oil & gas relevant when its vendor or product is commonly used in the industry (for example DeltaV, Experion, SCADAPack, Triconex, Totalflow, ControlLogix, SIMATIC, Ignition, CENTUM), or it affects common SCADA protocols, OPC UA, remote-access or field-networking gear. The reason is shown on every advisory page.
• Summaries and "what to do" lines are generated with templates from the advisory's own fields (affected products, weakness types, CVSS, vendor remediations). Nothing is added beyond the source.
• The site rebuilds automatically, and severity uses the highest CVSS v3 score (v4 if v3 is absent).

Important

This is an informational digest, not professional advice. Test patches and follow the vendor's procedures before changing anything on a running control system. PatchWatch OT is not affiliated with CISA or any vendor.

Built by an industrial automation engineer with oil & gas experience.