The National Rural Water Association is inviting small and rural water utilities across the United States to register for free cybersecurity support through its new Water Watch Center.
The programme connects participating water and wastewater systems with specialist security providers offering continuous threat monitoring, detection and response. Utilities are currently being identified and onboarded for the initial pilot phase.
Interested systems can submit their details through the Water Watch Center registration page. The programme warns that utilities may be enrolled in the pilot or placed on standby until further capacity and funding become available.
Continuous monitoring for rural water systems
The Water Watch Center has been established as a central hub for sharing cybersecurity information affecting rural water and wastewater utilities. Its services include monitoring information technology and operational technology environments for potential attacks.
Five managed security service providers are involved in the initial programme: Defendify, Legato Security, L1 Secure, Rapid7 and Sentinel Technologies. These companies will work with participating utilities to monitor networks, identify suspicious activity and support responses to detected threats.
The providers will also share relevant threat information through the Water Watch Center. The approach is intended to help other participating utilities and service providers recognise similar tactics, address vulnerabilities and respond more quickly when patterns of malicious activity emerge.
The programme is currently offering these services without charge to participating utilities. However, admission will depend on capacity and the funding available as the pilot develops.
Small utilities face resource constraints
Small water systems can face many of the same cyber threats as larger operators but often have limited budgets, technical staff and access to specialist security services. Cybersecurity investment must also compete with operational priorities such as treatment, maintenance, compliance and infrastructure renewal.
The Water Watch Center says continuous monitoring can give participating utilities access to security capabilities that would otherwise be difficult to staff or purchase independently. Its model combines support from cybersecurity companies, water-sector organisations, universities, government bodies and philanthropic funders.
Matthew Holmes, chief executive of the National Rural Water Association, said rural water and wastewater systems needed to identify and reduce their exposure to cyber risks.
“The WWC will deliver 24/7 cyber threat monitoring to rural America to help ensure utilities can be proactive in their cybersecurity efforts,” Holmes said.
The programme covers both conventional business systems and operational technology used to monitor or control physical treatment and distribution processes. These environments can include supervisory control and data acquisition systems, programmable logic controllers, operator interfaces and remote access tools.
Programme builds on DEF CON Franklin
The Water Watch Center is being developed in collaboration with the University of Chicago Harris School of Public Policy’s DEF CON Franklin project. The initiative was announced at the DEF CON conference in Las Vegas in August 2026.
DEF CON Franklin previously created a volunteer task force that pairs cybersecurity specialists with under-resourced water and wastewater systems. Volunteers have worked with utility employees to assess and strengthen information technology and operational technology systems.
Jake Braun, co-founder of DEF CON Franklin, said the Water Watch Center was intended to extend that work by making continuous detection and response available to more utilities.
“For more than two years, DEF CON Franklin volunteers have worked arm in arm with utility staff to harden their systems,” Braun said. “The Water Watch Center is the next phase of that work, making round-the-clock protection permanent.”
The initiative has received backing from the Newmark Foundation, the Hewlett Foundation and the US Defense Advanced Research Projects Agency, according to NRWA.
NRWA expands its cybersecurity support
NRWA said the Water Watch Center formed part of a wider programme of cybersecurity training, technical assistance and advocacy for rural utilities. The association has worked with organisations including WaterISAC, the Cyber Readiness Institute, the SANS Institute and Dragos.
Information about these programmes is available through the association’s National Rural Water Cybersecurity Center.
The organisation represents more than 31,000 utility systems through its network of state rural water associations. Its members include water and wastewater systems serving communities across all 50 US states and Puerto Rico.
Cybersecurity has become a growing operational concern as utilities connect more treatment, pumping and distribution assets to digital monitoring and control platforms. H2O Global News has previously examined cybersecurity strategies for water utilities and efforts to develop cybersecure water treatment systems.
Frequently asked questions
What is the Water Watch Center?
The Water Watch Center is an NRWA initiative that connects small and rural water and wastewater utilities with cybersecurity providers. It supports continuous monitoring, threat detection, incident response and the sharing of relevant threat information.
Who can apply to the programme?
Small and rural water and wastewater utilities in the United States can register their interest. Admission to the pilot depends on available capacity and funding, and some systems may initially be placed on standby.
Are the Water Watch Center’s services free?
The initial programme is offering cybersecurity services free of charge to participating utilities. Continued availability and expansion will depend on programme funding.
Which cybersecurity providers are participating?
The initial providers are Defendify, Legato Security, L1 Secure, Rapid7 and Sentinel Technologies.
How can a utility register its interest?
Utilities can complete the registration form on the Water Watch Center website. Registration does not guarantee immediate enrolment because the programme may place systems on standby until capacity becomes available.
