Thanks for the response.
The front end (consumer view) would look like a shopping site, like Amazon’s shop by department view (with category images): https://www.amazon.co.uk/gp/site-directory/ref=nav_shopall_btn
The visitor could search and click through via category and see the associated vulnerable devices.
The page showing the vulnerable IoT device would have a number of custom fields to show various information about the risk.
The back end (researcher view) would be a form which they’d fill in and the team would review and publish it to the catalogue, once verified.
I’ve looked into Product catalogue plugins but they all seem very rigid.
Regards,
Paul