AquaGuard OT
AI security copilot for small water utilities that scans their PLCs for internet exposure, translates CISA alerts into plain-English fix lists, and generates AWIA compliance reports a non-technical operator can hand to a state inspector.
Operations managers and superintendents at small municipal water utilities (serving 500-50,000 customers) with zero in-house cybersecurity staff
- One-click PLC exposure scan with risk score showing whether Rockwell, Siemens, or Schneider controllers are reachable from the public internet
- Step-by-step remediation playbook in plain English (no jargon) covering VPN setup, password changes, and IP allow-listing, tailored to their specific equipment
- AWIA Section 2013 risk-and-resilience assessment report generator exportable to PDF
- Monthly digest of new CISA advisories filtered to only the vendors in their plant
CISA's July 2026 alert documented 4,148 internet-exposed Rockwell PLCs and 4,117 exposed Siemens S7-1200s globally, with Iran-attributed actors already locking operators out and forcing boil-water notices — small utilities cannot afford enterprise tools like Claroty or Nozomi but face the exact same threat actors
CISA Advisory AA26-097A (July 22, 2026) documented 4,148 exposed Rockwell/Allen-Bradley and 4,117 Siemens S7-1200 PLCs; Censys confirmed 71% US exposure and Iran-attributed actors causing boil-water notices, with even mature utilities hit — Minnesota coordinated attacks on dozens of water utilities further validated the urgency.CISA Alert: Water Sector PLC Targeting ↗Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers ↗
Dragos Community Defense Program provides its OT platform free to US/Canada water/electric/gas providers under $100M revenue (the exact target segment), AWWA publishes its own compliance/assessment tool, and Claroty/Nozomi/Censys own the enterprise tier — leaving a narrow copilot/compliance-report niche rather than a wide-open market.Community Defense Program - Dragos ↗Canada: Free cybersecurity tools for small water, electricity, and gas providers ↗
Direct pricing competitor Dragos is free for the entire target segment (utilities <$100M revenue), and small municipal utilities historically defer OT spend until a breach or EPA enforcement action — willingness-to-pay is structurally weak unless anchored to AWIA compliance deadlines.Community Defense Program - Dragos ↗AWIA Section 2013/SDWA Section 1433: Risk and Resilience Assessments ↗
AWIA Section 2013 mandate, EPA emergency-response-plan enforcement, and persistent CISA advisories on Iran/Russia-linked OT actors create a durable regulatory and threat-driven tailwind that doesn't require product-led growth to sustain demand.Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers ↗IRGC-Affiliated Cyber Actors Exploit PLCs in Multiple Sectors ↗
Requires either building or partnering for internet-scale PLC scanning (Censys/Shodan-class infrastructure), maintaining a live CISA advisory parser, and mapping outputs to AWIA Section 2013/RRA-ERP templates — non-trivial but achievable with existing data APIs and LLM summarization.