In April 2026, seven U.S. agencies issued an emergency joint advisory: Iranian state-sponsored hackers are actively inside American water treatment plants and energy grids. Not "could be." Inside, right now.
IRGC-affiliated actors are exploiting internet-exposed Rockwell and Allen-Bradley PLCs, manipulating the SCADA and HMI screens that operators rely on to run a plant. An operator in Ohio could be watching a perfectly green dashboard while an attacker quietly changes the chemical mix in the city's water supply.
This is not a forecast or a tabletop exercise. It is happening today, across U.S. utilities that assume "we're too small to be a target." You are exactly the target.
Internet-exposed PLCs and chemical-dosing controls make drinking-water plants a top target.
SCADA and HMI manipulation can disrupt treatment and discharge safely-critical processes.
Fragmented grids with thin cyber oversight are squarely in the adversary's sights.
Remote-access pathways and legacy controllers expose distribution and metering systems.
Connected production lines and OT networks are exploited for disruption and extortion.
BAS, HVAC, and access controllers are an overlooked foothold into broader OT networks.
We find the attacker without touching your process. Every phase is designed to run safely alongside live operations.
Lightweight, in-environment monitoring: all data stays in your network, analysts connect over a secure tunnel, and you own everything. No appliances, no data leaving your facility, no vendor lock-in.
Our team has defended Fortune 500 companies, federal agencies, and critical-infrastructure operators, against the same adversaries now targeting water and energy.
Detections run on Caver, our enterprise SIEM on an open OCSF lakehouse with 4,000+ rules. Your data stays on storage you own; detection runs where your telemetry already lives.
Based in Tennessee, we understand regional water and energy utilities and how they actually run.
Deliverables map to AWIA §2013 and the federal programs that fund this work (SLCGP, state SRF), so the assessment is something your budget can approve.
Let us help you secure your systems properly.
"The United States has hundreds of fragmented electric companies. Hundreds of water companies. All separate. All running different systems. All with barely any cyber oversight."