Port Cyber AlliancePort Cyber Alliance
Maritime Cybersecurity Alliance
Report an Incident
Connect your SIEM
Swagger
Github
Start
MANAGERIAL ASSESSMENT

Leading IT or a terminal? Test your team

Twelve questions, two minutes, in your browser. A check to start the talk, not to blame. Score and PDF.

Start the test
An engineer? Take your own test

The test

Answer Yes, Partly or No. The progress bar fills as you go; the score appears at the end.

Online test · about 2 minutes · runs in your browser

Managerial assessment

Twelve questions, about two minutes. For IT directors and terminal directors who want a clear view of their team.

0 / 12 answered · Prefer paper? Download the blank sheet (PDF)

People

1One named person owns cybersecurity for the site, with time and budget for it.

2The team had cyber training in the last 12 months, phishing included.

3At least two people can do every critical admin task: no single key holder.

Visibility

4You receive a short monthly cyber report (patches, incidents, exposed services) that you can read.

5You have the list of vendors who can reach your systems remotely.

6The asset inventory (servers, equipment, software) was updated in the last 6 months.

Exercises

7A crisis exercise (for example ransomware on the TOS) took place in the last 12 months.

8A restore from backup was tested and timed.

9The incident procedure is written: who decides, who informs the authorities, and how fast.

Logistics chain

10Contracts with your vendors include security clauses (incident notice, remote access rules).

11You share security information with your neighbours in the chain: port authority, lines, hauliers.

12Your board or management reviewed cyber risk in the last 12 months.

You are an engineer? Take your own test →

For your engineers: our open-source packages

We build open-source tools for port engineers: snippets to send your security events to the alliance, advisories, terminal integration kits. Some are public, the others we send on request. Open a card for the details.

See every package and how to get them

Isometric illustration: Maritime cyber toolkit

PublicCyber security

Maritime cyber toolkit

Copy-paste snippets that send your security events to the Port Cyber Alliance API.

For
SIEM, SOC and integration engineers, and their coding agents
Stack
curl · Python · JavaScript · PHP · Go · OpenAPI
Licence
See the repository
State
The code is on our public GitHub. Use it today.

What is in it today

  • One snippet per language reports an incident to POST /incidents and prints 201 on success
  • Generated from the PCA OpenAPI description, never hand-written
  • AGENTS.md: instructions an AI coding agent can follow to wire your SIEM unattended
  • Error table: 401 bad key, 422 bad schema, 429 over quota
View on GitHubTalk to us about itGet an API key
Isometric illustration: Open detection rules (Sigma)

AvailableCyber security

Open detection rules (Sigma)

Sigma rules that spot abnormal access to a terminal operating system, convertible for most SIEMs.

For
SOC teams and security officers of ports and terminals
Stack
Sigma · Windows Security log · pySigma · sigma-cli
Licence
DRL-1.1
State
Free to download from this site, with its tests. Use it today.

What is in it today

  • A remote desktop logon (event 4624, type 10) on a TOS server from outside the approved admin network
  • An account added to the local Administrators group (event 4732) of a TOS server
  • Validated with sigma-cli; sample events that must and must not match, with a test script

What it will never do

  • Carry a real host name, address or customer name: every value is an example you replace
Download the rules (zip)Talk to us about itRead how to deploy them
Isometric illustration: Vendor cyber questionnaire

AvailableCyber security

Vendor cyber questionnaire

The cyber questions a terminal sends a software vendor, with an online form that sends nothing.

For
IT and security teams of ports and terminals, and the software vendors who answer them
Stack
YAML · JSON · PDF · HTML form · JavaScript
Licence
CC-BY-4.0
State
Free to download from this site, with its tests. Use it today.

What is in it today

  • 34 questions in eight families (access, data, logs, backups, incidents, subcontractors, penetration tests, end of contract), one id each
  • An online form that runs in the browser only: answers stay on the device until exported as JSON or CSV
  • The same questionnaire in YAML, JSON and PDF, with the dated public sources behind each family
  • Questionnaire under CC BY 4.0, form script under MIT, README in the zip

What it will never do

  • Send your answers anywhere: the form has no server and blocks every network call
  • Certify a vendor
Download the questionnaire (zip)Talk to us about itRead how to use it
Isometric illustration: Port SIEM rules and cyber governance

ComingCyber security

Port SIEM rules and cyber governance

The Wazuh detection rules and decoders we write, with the written rules behind them.

For
Security officers and SOC teams of ports and terminals
Stack
Wazuh rules · Wazuh decoders · Markdown
Licence
To be decided
State
Specified, being built. Ask us to be told first.

What it will contain

  • Wazuh detection rules and decoders
  • Security policy and risk analysis templates
  • Patch delays by severity
  • Incident notification procedure, 24 h and 72 h (NIS2 article 23), and an incident register

What it will never do

  • Carry a secret, an IP address, a host name or a customer name
Get the package and talk to usSIEM and AI agents for ports
Isometric illustration: Security advisories

ComingCyber security

Security advisories

Advisories on port and container-logistics software, under coordinated disclosure, machine-readable.

For
Security teams of ports and terminals, and the software vendors they rely on
Stack
CVE JSON 5 · CVSS · CSAF 2.0 · OSV · RSS / JSON feeds
Licence
CC-BY-4.0
State
Specified, being built. Ask us to be told first.

What it will contain

  • A disclosure policy
  • Advisory ids PCA-YYYY-NNNN, linked to a CVE id when one is assigned
  • Machine-readable records and RSS / JSON feeds

What it will never do

  • Publish a vendor's vulnerability without coordinating with the vendor
Get the package and talk to usRead the advisories
Isometric illustration: CVE sync for WordPress

ComingCyber security

CVE sync for WordPress

Mirror the CVE list into a WordPress site, filtered for port and terminal software.

For
Teams that run a security or community website on WordPress
Stack
PHP · WordPress · WP-CLI · NVD API 2.0 · CVE JSON 5
Licence
GPL-2.0-or-later
State
Specified, being built. Ask us to be told first.

What it will contain

  • Tables for CVEs, products, watchlists, sync log and advisories
  • Full and delta sync run by the system cron, resumable and idempotent
  • Admin filters (vendors, keywords, severity) and public pages with structured data

What it will never do

  • Scan your WordPress for vulnerabilities: other plugins do that
Get the package and talk to us
Isometric illustration: Error reporting

ComingCyber security

Error reporting

Send errors and security events from your own port systems to a receiver you control, without personal data.

For
Engineers who run port web systems, WordPress first
Stack
JSON Schema · WordPress agent · HTTP receiver
Licence
To be decided
State
Specified, being built. Ask us to be told first.

What it will contain

  • An event envelope (JSON Schema)
  • A WordPress agent
  • A receiver: HTTP endpoint, grouping, alerts
  • Scrubbing: no IP address, no secret, no personal data leaves

What it will never do

  • Send personal data
  • Phone home to anyone you did not configure
Get the package and talk to us
Isometric illustration: Open-source port community system

ComingPlatforms

Open-source port community system

A free port community system, built from bricks we already run at terminals.

For
Port authorities and port communities
Stack
PHP · REST API · Playwright tests
Licence
To be decided
State
Specified, being built. Ask us to be told first.

What is in it today

  • Specifications: 17 bricks, 48 features, 8 UML diagrams

Next

  • Each feature starts with its API contract test, then the code, then a browser test
Get the package and talk to us
Isometric illustration: Truck appointments (VBS) and gate (GOS)

ComingPlatforms

Truck appointments (VBS) and gate (GOS)

Our vehicle booking system and gate operating system, opened as open source.

For
Container terminals and their hauliers
Stack
PHP 8.1 · MySQL · REST API
Licence
To be decided before anything is published
State
Specified, being built. Ask us to be told first.

What it will contain

  • The core of the VBS and the GOS
  • Connectors and plugins around it
Get the package and talk to us

Questions about the test

The aim is a logistics chain where everyone is at the same level.

Launch offer: 10 hours of advice

No. It is a benevolent check to start a conversation with your team, not to blame anyone. The aim is a logistics chain where everyone is at the same level.

No. The test runs in your browser. Nothing leaves your screen unless you download the PDF or e-mail it to yourself.

Yes. They have their own version, and comparing both results is a good way to start the discussion.

Get the packages and talk to us

Leave your e-mail to receive the open-source packages for your team and to talk about your site. Everything stays confidential.

Leave your e-mail

Name(Required)

🔒 Your data is never shared with third parties or used for advertising. We use it only to answer you.

Your engineers' test

Send this page to a colleague

Someone in your team should read this? Add their e-mail, we send them the page from you.

Your colleagues' addresses are used for this mail only and are not kept.

Contact the alliance

Use our contact form: every message is read by the team.

Contact form
Report an incident

Port operators can report a cyber incident to the alliance at any time.

Incident reporting