THE INTERNATIONAL CYBER PORTAL / DIRECTORY

A world of cyber expertise.

Find a cybersecurity authority, CERT or CSIRT, research organisation or technical reference. Combine country, organisation type and topic filters to focus the search. Then check the official website for its remit, geographic scope and service conditions.

Search the directoryCountry or territoryOrganisation typeTopicFIRST profile sector

FIRST profile distribution · 883

Profiles in the snapshot : 883 · 2026-10-21

Government, Private and Public sectors252 / 883252
Other commercial207 / 883207
Industrial sector95 / 88395
Financial sector94 / 88394
ICT vendor customer base57 / 88357
Sector not stated50 / 88350
Government & military46 / 88346
Research & education45 / 88345
ISP customer base37 / 88337

A profile’s country and sector do not establish its constituency. Confirm eligibility and service terms on the official profile. FIRST ↗

952 results

Clear filters ↗

WICERT / CSIRT / SOC

WithSecure

Full name: WithSecure Limited
FIRST profile sector: ICT vendor customer base
Host organisation: WithSecure Limited
Declared team type: PSIRT, CSIRT, ISAC, SOC
Declared establishment: May 30, 2002
FIRST member since: July 21, 2021

Data retrieved on 2026-10-22 · FIRST

FinlandFIRST

WOCERT / CSIRT / SOC

World Bank

Full name: World Bank Group Office of Information Security Incident Response
FIRST profile sector: Government, Private and Public sectors
Host organisation: The World Bank Group
Declared establishment: July 1, 2002
FIRST member since: June 19, 2010

Data retrieved on 2026-10-22 · FIRST

United StatesFIRST

XSCERT / CSIRT / SOC

xSOC Trafford

Full name: xSOC Trafford
FIRST profile sector: Other commercial
Host organisation: Trafford IT Sp. z o.o. Sp. k.
Declared team type: SOC
Declared establishment: January 8, 2024
FIRST member since: April 22, 2026

Data retrieved on 2026-10-22 · FIRST

PolandFIRST

XSCERT / CSIRT / SOC

XSRC

Full name: Xerox Security Response Center
FIRST profile sector: Government, Private and Public sectors
Host organisation: XEROX
Declared team type: PSIRT
Declared establishment: September 1, 2012
FIRST member since: December 28, 2016

Data retrieved on 2026-10-22 · FIRST

United StatesFIRST

XYCERT / CSIRT / SOC

Xylem PSIRT

Full name: Xylem Product Security Incident Response Team
FIRST profile sector: Industrial sector
Host organisation: Xylem
Declared team type: PSIRT
Declared establishment: August 1, 2019
FIRST member since: November 17, 2022

Data retrieved on 2026-10-22 · FIRST

United StatesFIRST

YCCERT / CSIRT / SOC

YCERT

Full name: Yarix Computer Emergency Response Team
FIRST profile sector: Other commercial
Host organisation: Yarix S.R.L.
Declared team type: CSIRT
Declared establishment: September 1, 2009
FIRST member since: September 28, 2016

Data retrieved on 2026-10-22 · FIRST

ItalyFIRST

YKCERT / CSIRT / SOC

YKB-CERT

Full name: YapiKredi Bank CERT
FIRST profile sector: Financial sector
Host organisation: YapiKredi Bank
Declared team type: CSIRT
Declared establishment: January 1, 2015
FIRST member since: April 15, 2021

Data retrieved on 2026-10-22 · FIRST

TürkiyeFIRST

YSCERT / CSIRT / SOC

YSTW-CSIRT

Full name: YSTW-CSIRT
FIRST profile sector: Financial sector
Host organisation: Yuanta Securities Co., Ltd.
Declared team type: CSIRT, SOC
Declared establishment: December 21, 2023
FIRST member since: December 17, 2025

Data retrieved on 2026-10-22 · FIRST

TaiwanFIRST

Z-CERT / CSIRT / SOC

Z-CERT

Full name: Stichting Z-CERT
FIRST profile sector: Government, Private and Public sectors
Host organisation: -
Declared team type: CSIRT
Declared establishment: November 28, 2016
FIRST member since: May 23, 2019

Data retrieved on 2026-10-22 · FIRST

NetherlandsFIRST

ZACERT / CSIRT / SOC

ZATCA DFIR

Full name: ZATCA Digital Forensics and Incident Response Team
FIRST profile sector: Government, Private and Public sectors
Host organisation: Zakat, Tax, and Customs Authority - ZATCA
Declared establishment: September 1, 2018
FIRST member since: November 20, 2024

Data retrieved on 2026-10-22 · FIRST

Saudi ArabiaFIRST

ZECERT / CSIRT / SOC

Zendesk CSIRT

Full name: Zendesk
FIRST profile sector: ICT vendor customer base
Host organisation: Zendesk
Declared team type: CSIRT
Declared establishment: January 1, 2018
FIRST member since: May 23, 2019

Data retrieved on 2026-10-22 · FIRST

United StatesFIRST

ZECERT / CSIRT / SOC

ZeroFox

Full name: ZeroFox
FIRST profile sector: Other commercial
Host organisation: ZeroFox
Declared team type: SOC
Declared establishment: January 1, 2013
FIRST member since: August 19, 2026

Data retrieved on 2026-10-22 · FIRST

United StatesFIRST

ZFCERT / CSIRT / SOC

ZF SOC

Full name: ZF Security Operations Center - SOC
FIRST profile sector: Industrial sector
Host organisation: ZF Group
Declared team type: SOC
Declared establishment: January 1, 2014
FIRST member since: August 17, 2023

Data retrieved on 2026-10-22 · FIRST

GermanyFIRST

ZMCERT / CSIRT / SOC

ZmCIRT

Full name: Zambia Computer Incident Response Team
FIRST profile sector: Government, Private and Public sectors
Host organisation: Zambia Information and Communication Technology Authority
Declared team type: CSIRT
Declared establishment: September 20, 2012
FIRST member since: August 18, 2017

Data retrieved on 2026-10-22 · FIRST

ZambiaFIRST

ZTCERT / CSIRT / SOC

ZTE PSIRT

Full name: ZTE Product Security Incident Response Team
FIRST profile sector: ICT vendor customer base
Host organisation: ZTE Corporation
Declared team type: PSIRT
Declared establishment: October 15, 2013
FIRST member since: January 25, 2015

Data retrieved on 2026-10-22 · FIRST

ChinaFIRST

Z�CERT / CSIRT / SOC

Zürcher Kantonalbank - CSIRT

Full name: Zürcher Kantonalbank - CSIRT
FIRST profile sector: Financial sector

SwitzerlandFIRST

ZUCERT / CSIRT / SOC

ZUSO Advanced Research Team

Full name: ZUSO Advanced Research Team
FIRST profile sector: Other commercial
Host organisation: ZUSO Generation
Declared establishment: April 30, 2019
FIRST member since: January 17, 2025

Data retrieved on 2026-10-22 · FIRST

TaiwanFIRST

ZYCERT / CSIRT / SOC

Zyxel

Full name: Zyxel Corporation
FIRST profile sector: ICT vendor customer base
Host organisation: Zyxel Group Corporation
Declared team type: PSIRT
Declared establishment: April 21, 2021
FIRST member since: October 16, 2025

Data retrieved on 2026-10-22 · FIRST

TaiwanFIRST

CIInstitutions

CISA · Known Exploited Vulnerabilities

Identify vulnerabilities listed by CISA as known to be exploited.

Reference details

Verified data or benchmark: The catalogue includes CVE, product, date added and required action. Its official repository also provides the data schema.
How to use it: Check applicability to your products and retain the access date. Review the requested action and vendor advisory before confirming remediation.
Limitation to retain: Absence from the catalogue does not establish safety. Administrative deadlines in it are not automatically binding on every organisation.

Official reference ↗

Documentation reviewed on 2026-10-22

CVSS, EPSS, KEV and VEX

Is the vulnerability listed as known to be exploited?

Listing does not establish that the product exists in your estate; absence does not establish safety.

Read the CVSS, EPSS, KEV and VEX reference →

Primary sources and scope

CISA · KEV official data schema · Official CISA mirror · reviewed 2026-10-22
Catalog properties · vulnerability properties · required fields

Sources checked on 2026-10-22

Explore the CISA KEV catalogue

Scope of the KEV dataset

Entries preserve the CVE identifier, vendor or project, product, dates, action and published indicators. The schema distinguishes required and optional fields; absence must not silently become a negative value.

The data’s CC0 licence grants no rights to CISA’s logo or content on linked third-party websites.

1754 Entries · 2026.10.21

Explore the catalogue and method →

Official reference ↗

United StatesEN

NIInstitutions

NIST · SP 800-61 Rev. 3

Prepare incident response within cybersecurity risk management.

Reference details

Verified data or benchmark: Revision 3 was published in April 2025 and supersedes Revision 2. It is a CSF 2.0 Community Profile.
How to use it: Rehearse containment decisions, evidence preservation, communication and recovery. Compare planned actions with evidence produced during the exercise.
Limitation to retain: Reading the guide does not validate a local plan. Contacts, emergency access and dependencies need local testing.

Official reference ↗

Documentation reviewed on 2026-10-22

Cyber incidents: recovery decisions and evidence

Qualifying a signal, preserving investigative material and restoring a service answer different questions. CSF 2.0 distinguishes recovery initiation, integrity of restoration assets, validation of restored assets and the end of recovery. These are outcomes to document, not certification or one mandatory procedure.

The twelve entries below are a selected, paraphrased part of CSF 2.0. Evidence columns, timelines and injects are original teaching proposals. They do not replace a local plan and imply no universal timing, severity level or authority. SP 800-61 Revision 3 has been final since April 2025 and supersedes Revision 2.

Explore NIST outcomes and the timeline →

Primary references and limits

Identifiers and outcome meanings come from CSF 2.0; SP 800-61r3 adds incident response and recovery recommendations. Evidence tables, times and scenarios are educational, with no client results, certification or actual notification.

NIST · SP 800-61 Rev. 3 · Final · 2025-04-03
Community Profile CSF 2.0 ; remplace / supersedes Rev. 2
NIST · SP 800-61r3 — recommandations détaillées / detailed recommendations · April 2025
Pages imprimées / printed pages 27–29, 34–35 : RS.MA, RS.AN, RC.RP, RC.CO
NIST · Cybersecurity Framework 2.0 · 2024-02-26 · NIST CSWP 29
Appendix A, printed pages 22–23 : official outcome identifiers
NIST · SP 800-184 — Guide for Cybersecurity Event Recovery · Final · 2016-12-22
Recovery planning, playbooks, testing and improvement

References reviewed 2026-10-22

United StatesEN

SPCommunities & standards

SPDX · Specifications

Describe components and information in a software bill of materials.

Reference details

Verified data or benchmark: The official specifications page distinguishes SPDX 3.0 from earlier versions such as 2.3. Document version affects schema and tool compatibility.
How to use it: Request format, version, build scope and component identifiers. Compare the bill of materials with the delivered artefact.
Limitation to retain: A bill of materials alone proves neither vulnerability absence, dependency completeness nor compliance with every licence.

Official reference ↗

Documentation reviewed on 2026-10-22

InternationalEN

OWCommunities & standards

OWASP · CycloneDX

Exchange bills of materials and supply-chain information.

Reference details

Verified data or benchmark: The official overview dates specification 1.7 to 21 October 2025 and documents JSON, XML and Protobuf.
How to use it: Check version, component references and dependency links. Retain the connection between the bill of materials, build and deployed product.
Limitation to retain: Changing format does not fix missing components. A descriptive inventory and a vulnerability impact assessment answer different questions.

Official reference ↗

Documentation reviewed on 2026-10-22

InternationalEN

W3Communities & standards

W3C · WCAG 2.2

Evaluate accessibility criteria for web content.

Reference details

Verified data or benchmark: WCAG 2.2 is a W3C Recommendation. Success criteria have A, AA and AAA levels.
How to use it: Define tasks, pages and states, then combine inspection, keyboard, zoom and relevant assistive technology. Keep reproduction steps for barriers.
Limitation to retain: An automated scanner does not establish conformity of a complete journey. Evaluation must cover interactive states and actual content.

Official reference ↗

Documentation reviewed on 2026-10-22

Forms: criteria, errors and contrast

WCAG 2.2 is connected here to a selection of 17 form-related criteria: labels, errors, keyboard, focus, status messages and authentication. Understanding documents and WAI tutorials are informative. The calculator compares an opaque sRGB pair with contrast thresholds; it performs neither a journey audit nor a complete evaluation of exceptions.

Open the WCAG review grid and contrast calculator →

W3C · Web Content Accessibility Guidelines (WCAG) 2.2 · Recommendation · 12 December 2024

InternationalEN

GOPrivate sector

Google · Core Web Vitals

Distinguish loading, responsiveness and visual stability.

Reference details

Verified data or benchmark: Good thresholds are LCP ≤ 2.5 s, INP ≤ 200 ms and CLS ≤ 0.1 at the 75th percentile, segmented by mobile and desktop.
How to use it: Separate field measurement from laboratory tests. Record period, URL, device, population and sample size before comparing changes.
Limitation to retain: These thresholds are not measured results for this site. A good lab score alone does not establish visitor experience.

Official reference ↗

Documentation reviewed on 2026-10-22

InternationalEN