ICS Vendor Security Posture
Independent risk grades for 188 major ICS vendors, calculated from CISA advisory history.
How Grades Are Calculated
Each vendor is scored based on publicly available CISA ICS advisory data. A lower score = better security posture. This measures public vulnerability disclosure history — not a vendor's internal security investment.
A
Minimal History
Score 0–24
B
Below Average
Score 25–39
C
Average
Score 40–54
D
Elevated Risk
Score 55–69
F
High Risk
Score 70+
Score formula: advisory volume (40pts max) + critical ratio (25pts) + KEV count (20pts max) + avg CVSS (10pts) + recent activity (5pts). Higher advisory counts can reflect larger product portfolios, not just poor security practices.
Vendor Rankings
| Vendor ↕ | Grade ↕ | Risk Score ↕ | Advisories ↕ | Critical ↕ | KEV ↕ | Avg CVSS ↕ | Last Advisory |
|---|---|---|---|---|---|---|---|
| Rockwell Automation | F | 78.5 | 274 | 63 | 13 | 7.8 | 2026-07-16 |
| Hitachi Energy | F | 77.9 | 121 | 26 | 5 | 7.6 | 2026-07-07 |
| Schneider Electric | F | 77.8 | 156 | 33 | 5 | 7.5 | 2026-07-09 |
| Siemens | F | 75.8 | 2035 | 260 | 45 | 7.7 | 2026-07-16 |
| Microsoft | F | 74.7 | 79 | 8 | 5 | 7.7 | 2026-07-16 |
| Open Source | F | 73.8 | 510 | 31 | 5 | 7.3 | 2026-07-16 |
| SUSE | F | 70.9 | 92 | 9 | 4 | 7.4 | 2026-06-22 |
| ABB | D | 66.3 | 86 | 19 | 2 | 7.8 | 2026-07-14 |
| Delta Electronics | D | 65.6 | 97 | 18 | 2 | 7.9 | 2026-06-30 |
| Advantech | D | 63.6 | 79 | 37 | 1 | 8.4 | 2025-12-18 |
| Mitsubishi Electric | D | 61.9 | 118 | 25 | 1 | 7.6 | 2026-07-02 |
| Schneider Electric Software, LLC | D | 59.2 | 84 | 24 | 1 | 8.0 | 2022-12-13 |
| Johnson Controls Inc. | D | 55.5 | 42 | 11 | 7 | 8.0 | 2026-05-05 |
| Debian | D | 55.1 | 44 | 7 | 4 | 8.1 | 2026-06-22 |
| Red Hat | C | 55.0 | 91 | 9 | 0 | 7.5 | 2026-07-09 |
| C | 53.6 | 32 | 5 | 5 | 8.7 | 2026-07-16 | |
| Oracle | C | 51.8 | 59 | 4 | 2 | 7.6 | 2026-06-22 |
| Fedora | C | 49.3 | 43 | 5 | 3 | 7.9 | 2026-06-22 |
| IBM | C | 47.0 | 55 | 7 | 1 | 7.4 | 2026-07-09 |
| Cisco | C | 45.3 | 25 | 4 | 4 | 7.8 | 2026-07-01 |
| Moxa | C | 45.1 | 52 | 22 | 0 | 8.5 | 2026-06-16 |
| Sensormatic Electronics, LLC | C | 40.4 | 14 | 3 | 5 | 8.0 | 2022-08-30 |
| FESTO | C | 40.3 | 3 | 3 | 1 | 9.8 | 2026-03-17 |
| Apache | B | 38.4 | 40 | 3 | 1 | 7.5 | 2026-07-16 |
| Honeywell | B | 38.2 | 38 | 17 | 0 | 8.0 | 2026-03-26 |
| Optigo Networks | B | 36.3 | 3 | 3 | 0 | 9.8 | 2025-05-06 |
| Dover Fueling Solutions | B | 36.1 | 3 | 3 | 0 | 9.6 | 2025-09-18 |
| Automated Logic | B | 36.0 | 3 | 3 | 0 | 9.5 | 2026-03-19 |
| Digi International, Inc. | B | 36.0 | 3 | 3 | 0 | 9.5 | 2023-08-31 |
| InduSoft | B | 35.9 | 5 | 4 | 1 | 9.4 | 2025-06-18 |
| PTC | B | 34.7 | 16 | 9 | 1 | 8.7 | 2026-06-17 |
| RESF | B | 33.5 | 38 | 3 | 0 | 7.5 | 2026-06-22 |
| Emerson | B | 32.9 | 34 | 11 | 0 | 7.8 | 2025-11-20 |
| AutomationDirect | B | 32.5 | 16 | 7 | 0 | 8.6 | 2026-07-16 |
| IGEL | B | 32.2 | 12 | 2 | 2 | 9.0 | 2026-07-02 |
| General Electric (GE) | B | 31.7 | 27 | 7 | 1 | 7.7 | 2022-11-22 |
| Yokogawa | B | 31.7 | 31 | 5 | 0 | 7.1 | 2026-06-25 |
| GE | B | 31.5 | 24 | 11 | 0 | 8.0 | 2025-06-18 |
| Philips | B | 31.3 | 39 | 3 | 1 | 5.9 | 2026-03-26 |
| Ubuntu | B | 31.0 | 34 | 2 | 0 | 7.5 | 2026-06-22 |
| Amazon | B | 30.7 | 21 | 3 | 1 | 7.6 | 2026-06-22 |
| 7-Technologies | B | 29.7 | 4 | 3 | 0 | 9.0 | 2025-06-09 |
| AVEVA Software, LLC | B | 29.7 | 21 | 9 | 0 | 8.5 | 2023-04-03 |
| Wind River | B | 29.6 | 4 | 3 | 0 | 8.8 | 2025-06-18 |
| WAGO | B | 28.9 | 12 | 7 | 0 | 8.3 | 2026-03-26 |
| Weintek | B | 28.8 | 6 | 4 | 0 | 9.1 | 2026-01-22 |
| 3S-Smart Software Solutions GmbH | B | 28.0 | 11 | 6 | 0 | 8.9 | 2020-05-14 |
| Phoenix Contact | B | 27.8 | 15 | 7 | 0 | 8.7 | 2026-03-17 |
| Sierra Wireless | B | 27.8 | 6 | 3 | 1 | 8.2 | 2025-06-06 |
| Korenix | B | 27.7 | 3 | 2 | 0 | 9.5 | 2025-06-06 |
| Baxter | B | 27.6 | 10 | 4 | 1 | 8.6 | 2025-06-06 |
| Elcomplus LLC | B | 27.6 | 3 | 2 | 0 | 9.5 | 2022-06-23 |
| Samsung | B | 27.6 | 9 | 2 | 1 | 8.6 | 2026-07-09 |
| GE Healthcare | B | 27.5 | 3 | 2 | 0 | 9.3 | 2024-05-16 |
| mySCADA | B | 27.5 | 9 | 5 | 0 | 9.1 | 2025-02-13 |
| Sielco | B | 27.4 | 3 | 2 | 0 | 9.2 | 2025-06-09 |
| ICONICS | B | 27.3 | 11 | 6 | 0 | 8.1 | 2025-06-09 |
| WellinTech | B | 27.3 | 11 | 6 | 0 | 8.1 | 2025-06-09 |
| Unitronics | B | 27.0 | 4 | 2 | 1 | 8.5 | 2025-06-09 |
| Hospira | B | 26.8 | 7 | 4 | 0 | 9.1 | 2025-06-09 |
| Sielco Sistemi | B | 26.8 | 3 | 2 | 0 | 8.6 | 2025-06-09 |
| Rockwell | B | 26.5 | 3 | 2 | 0 | 8.4 | 2025-08-14 |
| Westermo | B | 26.4 | 5 | 3 | 0 | 8.9 | 2025-06-05 |
| Festo | B | 26.3 | 10 | 5 | 0 | 8.8 | 2026-01-14 |
| Geutebrück | B | 26.3 | 5 | 3 | 0 | 8.8 | 2021-07-27 |
| Emerson Process Management | B | 25.5 | 3 | 2 | 0 | 7.4 | 2025-06-06 |
| Red Lion | B | 25.4 | 8 | 4 | 0 | 8.9 | 2023-11-16 |
| Exacq Technologies | B | 25.0 | 9 | 2 | 2 | 7.0 | 2021-12-23 |
| Invensys | A | 24.8 | 11 | 5 | 0 | 8.0 | 2025-06-17 |
| Lantronix | A | 24.5 | 5 | 2 | 1 | 8.0 | 2026-03-10 |
| Horner Automation | A | 24.4 | 17 | 2 | 0 | 8.0 | 2026-06-25 |
| Fuji Electric | A | 24.3 | 30 | 2 | 0 | 7.7 | 2026-05-12 |
| Fortinet | A | 23.9 | 14 | 1 | 2 | 7.1 | 2026-06-15 |
| Innominate Security Technologies | A | 23.5 | 10 | 4 | 0 | 8.5 | 2019-01-24 |
| PHOENIX CONTACT | A | 23.5 | 10 | 4 | 0 | 8.5 | 2019-01-24 |
| Mitsubishi Electric Corporation | A | 23.4 | 13 | 5 | 0 | 7.3 | 2025-09-09 |
| Softing | A | 23.3 | 4 | 2 | 0 | 8.8 | 2024-03-14 |
| Ecava | A | 23.2 | 10 | 4 | 0 | 8.2 | 2025-06-09 |
| Omron | A | 23.2 | 28 | 2 | 0 | 7.4 | 2023-09-19 |
| CODESYS, GmbH | A | 23.0 | 6 | 3 | 0 | 7.5 | 2023-08-24 |
| Automation Direct | A | 22.7 | 7 | 3 | 0 | 8.4 | 2022-07-21 |
| Inductive Automation | A | 22.6 | 8 | 2 | 0 | 7.3 | 2026-07-14 |
| Ubiquiti | A | 22.6 | 4 | 1 | 0 | 9.4 | 2026-07-01 |
| Citrix Systems | A | 22.4 | 3 | 1 | 1 | 8.6 | 2026-04-28 |
| Apple | A | 22.1 | 7 | 2 | 1 | 7.5 | 2026-04-22 |
| ARC Informatique | A | 22.0 | 4 | 2 | 0 | 7.5 | 2025-06-09 |
| Mozilla | A | 21.5 | 11 | 1 | 0 | 8.7 | 2026-07-06 |
| VISAM | A | 21.1 | 3 | 1 | 1 | 7.3 | 2023-04-03 |
| n8n | A | 21.1 | 7 | 1 | 0 | 9.1 | 2026-07-08 |
| CODESYS | A | 20.9 | 4 | 1 | 1 | 8.6 | 2026-05-25 |
| AVEVA | A | 20.8 | 18 | 3 | 0 | 7.7 | 2026-04-16 |
| Becton | A | 20.3 | 22 | 2 | 0 | 7.0 | 2025-01-28 |
| Dickinson and Company (BD) | A | 20.3 | 22 | 2 | 0 | 7.0 | 2025-01-28 |
| AzeoTech | A | 20.2 | 6 | 1 | 0 | 8.0 | 2026-06-25 |
| cPanel | A | 20.1 | 6 | 2 | 0 | 8.8 | 2026-06-11 |
| Veeam | A | 19.7 | 3 | 1 | 0 | 9.9 | 2026-06-08 |
| Synology | A | 19.6 | 3 | 1 | 0 | 9.8 | 2026-04-23 |
| Medtronic | A | 19.4 | 15 | 3 | 0 | 6.9 | 2026-05-07 |
| OSIsoft LLC | A | 19.3 | 18 | 2 | 0 | 7.5 | 2021-11-09 |
| Cognex | A | 19.0 | 3 | 1 | 0 | 9.1 | 2025-09-18 |
| Ivanti | A | 18.3 | 5 | 0 | 2 | 7.8 | 2026-06-10 |
| Johnson Controls | A | 18.3 | 10 | 2 | 0 | 8.3 | 2026-03-05 |
| B. Braun Medical | A | 18.2 | 3 | 1 | 0 | 8.4 | 2021-10-21 |
| MOXA | A | 18.2 | 3 | 1 | 0 | 8.4 | 2025-06-06 |
| B&R Industrial Automation GmbH | A | 18.1 | 3 | 0 | 1 | 7.6 | 2026-06-30 |
| Open Automation Software | A | 17.9 | 3 | 1 | 0 | 8.1 | 2025-06-09 |
| Digi International | A | 17.8 | 3 | 0 | 1 | 7.3 | 2026-07-07 |
| Mitsubishi Electric Iconics Digital Solutions | A | 17.8 | 10 | 2 | 0 | 7.8 | 2026-06-09 |
| Dingtian | A | 17.6 | 3 | 1 | 0 | 7.7 | 2025-09-25 |
| XZERES | A | 17.6 | 3 | 1 | 0 | 7.8 | 2025-06-06 |
| Aruba | A | 17.4 | 3 | 1 | 0 | 7.6 | 2026-05-12 |
| HCL | A | 17.2 | 4 | 1 | 0 | 9.0 | 2026-06-15 |
| Beckhoff | A | 17.1 | 3 | 1 | 0 | 7.3 | 2025-06-09 |
| Jenkins | A | 17.1 | 4 | 1 | 0 | 8.9 | 2026-06-15 |
| FreeBSD Project | A | 16.8 | 6 | 0 | 0 | 8.8 | 2026-06-30 |
| NGINX | A | 16.8 | 5 | 1 | 0 | 9.3 | 2026-06-18 |
| Johnson Controls, Inc. | A | 16.7 | 10 | 2 | 0 | 6.7 | 2026-02-26 |
| Motorola Solutions | A | 16.6 | 4 | 1 | 0 | 8.4 | 2024-06-13 |
| B&R | A | 16.4 | 4 | 1 | 0 | 8.1 | 2026-05-26 |
| FATEK Automation | A | 16.3 | 13 | 1 | 0 | 7.9 | 2025-06-05 |
| GE Digital | A | 16.2 | 4 | 1 | 0 | 8.0 | 2023-08-31 |
| Hitachi | A | 16.1 | 5 | 1 | 0 | 8.6 | 2026-06-10 |
| Cogent Real-Time Systems | A | 16.0 | 4 | 1 | 0 | 7.8 | 2025-06-09 |
| Grafana | A | 15.9 | 4 | 1 | 0 | 7.7 | 2026-06-16 |
| Synacor | A | 15.8 | 4 | 0 | 0 | 8.8 | 2026-07-06 |
| WatchGuard | A | 15.8 | 5 | 0 | 0 | 8.3 | 2026-07-02 |
| Zammad | A | 15.7 | 4 | 0 | 0 | 8.7 | 2026-06-24 |
| Triangle MicroWorks | A | 15.6 | 4 | 1 | 0 | 7.4 | 2025-06-09 |
| Opto 22 | A | 15.5 | 5 | 1 | 0 | 8.0 | 2025-11-25 |
| Progea | A | 15.5 | 4 | 1 | 0 | 7.2 | 2025-06-12 |
| Johnson Controls Inc | A | 15.4 | 16 | 0 | 0 | 7.4 | 2022-10-04 |
| VMware Tanzu | A | 15.4 | 10 | 1 | 0 | 7.9 | 2026-06-15 |
| B&R Industrial Automation | A | 15.3 | 5 | 1 | 0 | 7.8 | 2023-03-29 |
| WECON | A | 15.3 | 16 | 0 | 0 | 7.3 | 2025-06-25 |
| Devolutions | A | 15.2 | 9 | 1 | 0 | 8.0 | 2026-06-16 |
| Mattermost | A | 15.1 | 9 | 0 | 0 | 5.6 | 2026-06-22 |
| Golang | A | 15.0 | 5 | 0 | 0 | 7.5 | 2026-06-22 |
| Atlassian | A | 14.8 | 5 | 0 | 1 | 8.3 | 2026-06-16 |
| Dell | A | 14.8 | 12 | 1 | 0 | 6.7 | 2026-06-16 |
| Checkmk | A | 14.6 | 10 | 1 | 0 | 7.1 | 2026-06-08 |
| MatrikonOPC | A | 14.6 | 5 | 1 | 0 | 7.1 | 2025-06-06 |
| Trane | A | 14.5 | 6 | 1 | 0 | 7.3 | 2026-03-12 |
| Palo Alto Networks | A | 14.2 | 7 | 0 | 0 | 5.7 | 2026-07-09 |
| HMS Networks | A | 13.9 | 5 | 1 | 0 | 6.4 | 2025-01-23 |
| Tridium | A | 13.8 | 6 | 1 | 0 | 6.6 | 2025-06-18 |
| Eaton | A | 13.2 | 13 | 0 | 0 | 6.7 | 2025-06-09 |
| Innominate | A | 12.8 | 5 | 0 | 1 | 6.3 | 2025-06-06 |
| Splunk | A | 12.7 | 3 | 0 | 1 | 7.2 | 2026-06-14 |
| Adobe | A | 12.6 | 10 | 0 | 0 | 7.6 | 2026-06-14 |
| SolarWinds | A | 12.1 | 4 | 0 | 1 | 6.1 | 2026-06-09 |
| National Instruments | A | 11.8 | 8 | 0 | 0 | 7.8 | 2025-12-18 |
| Subnet Solutions Inc. | A | 11.7 | 8 | 0 | 0 | 7.7 | 2026-05-12 |
| Santesoft | A | 11.3 | 7 | 0 | 0 | 7.8 | 2025-08-12 |
| Intel | A | 11.1 | 6 | 0 | 0 | 8.1 | 2026-05-25 |
| SmarterTools | A | 10.7 | 5 | 0 | 0 | 8.2 | 2026-06-04 |
| MicroDicom | A | 10.5 | 5 | 0 | 0 | 8.0 | 2025-06-10 |
| OpenBSD | A | 10.3 | 10 | 0 | 0 | 5.3 | 2026-06-18 |
| FasterXML | A | 10.2 | 3 | 0 | 0 | 8.7 | 2026-04-06 |
| Lenovo | A | 10.2 | 3 | 0 | 0 | 8.7 | 2026-06-15 |
| OSIsoft | A | 10.2 | 7 | 0 | 0 | 6.7 | 2025-06-09 |
| Measuresoft | A | 9.7 | 5 | 0 | 0 | 7.2 | 2025-06-05 |
| Panasonic | A | 9.7 | 6 | 0 | 0 | 6.7 | 2025-06-05 |
| TYPO3 | A | 9.7 | 4 | 0 | 0 | 7.7 | 2026-06-08 |
| Ashlar-Vellum | A | 9.3 | 3 | 0 | 0 | 7.8 | 2026-05-12 |
| Docker | A | 9.3 | 5 | 0 | 0 | 6.8 | 2026-06-04 |
| SpiderControl | A | 9.3 | 6 | 0 | 0 | 6.3 | 2023-06-23 |
| IOServer | A | 9.0 | 5 | 0 | 0 | 6.5 | 2025-06-19 |
| MariaDB | A | 8.8 | 4 | 0 | 0 | 6.8 | 2026-06-14 |
| LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME | A | 8.7 | 4 | 0 | 0 | 6.7 | 2020-04-28 |
| Eclipse | A | 8.6 | 4 | 0 | 0 | 6.6 | 2026-04-08 |
| PEPPERL+FUCHS | A | 8.6 | 5 | 0 | 0 | 6.1 | 2025-06-06 |
| JTEKT Corporation | A | 8.5 | 4 | 0 | 0 | 6.5 | 2022-06-21 |
| Nextcloud | A | 8.4 | 3 | 0 | 0 | 6.9 | 2026-06-01 |
| Zabbix | A | 8.4 | 3 | 0 | 0 | 6.9 | 2026-06-04 |
| FANUC | A | 8.3 | 3 | 0 | 0 | 6.8 | 2023-04-18 |
| MICROSYS | A | 8.3 | 4 | 0 | 0 | 6.3 | 2025-06-09 |
| Automated Logic Corporation (ALC) | A | 8.2 | 3 | 0 | 0 | 6.7 | 2022-04-19 |
| SonicWall | A | 7.9 | 3 | 0 | 0 | 6.4 | 2026-04-29 |
| Elipse | A | 7.8 | 3 | 0 | 0 | 6.3 | 2025-06-06 |
| HID Global | A | 7.7 | 3 | 0 | 0 | 6.2 | 2024-02-06 |
| Znuny | A | 7.6 | 3 | 0 | 0 | 6.1 | 2026-05-27 |
| Schweitzer Engineering Laboratories | A | 7.2 | 3 | 0 | 0 | 5.7 | 2025-06-06 |
| Check Point | A | 5.5 | 3 | 0 | 1 | 0 | 2026-06-11 |
| Octopus Deploy | A | 4.3 | 4 | 0 | 0 | 2.3 | 2026-06-14 |
| Codewrights | A | 4.1 | 4 | 0 | 0 | 2.1 | 2025-06-06 |
| Proxmox | A | 2.0 | 4 | 0 | 0 | 0 | 2026-04-23 |
| Sonatype | A | 2.0 | 4 | 0 | 0 | 0 | 2026-06-17 |
| JetBrains | A | 1.5 | 3 | 0 | 0 | 0 | 2026-05-31 |
Monitor Your Vendors
Get alerts when your vendors release new advisories
Add vendors to your watchlist and receive filtered email alerts with CVSS scores, CVE details, and remediation steps.
Start Free Trial → See Pricing