Industries

Utilities

Water systems, electric utilities, and municipal services are under sustained attack from nation-state actors pre-positioning for disruption. Aktoh deploys autonomous AI defense for utilities operating under NERC CIP, AWIA, and EPA cybersecurity requirements.

500%

Increase in cyberattacks targeting water and wastewater systems since 2021

EPA / CISA Water Sector Cybersecurity Report 2024

70%

Of water utilities report cybersecurity vulnerabilities in their OT/ICS systems

AWWA Cybersecurity Survey 2024

$8.2M

Average cost of a cyberattack on a utility organization, including operational disruption costs

IBM Cost of a Data Breach Report 2024

A Letter to Utility Leaders

— James Spitler, Founder & CEO, Aktoh Cyber

Volt Typhoon pre-positioned Chinese malware inside U.S. utility infrastructure specifically to be activated during a geopolitical crisis. Iranian-backed groups attempted to access water utility treatment controls. The Oldsmar water treatment attack demonstrated that a single compromised workstation could allow an attacker to raise sodium hydroxide to dangerous levels in the public water supply. Utilities are the definition of critical infrastructure — and they operate in an environment where operational disruption has direct public safety consequences. Aktoh deploys autonomous AI defense that works within the operational constraints of utility environments, providing continuous visibility without disrupting the services communities depend on.

OT/ICS Passive Monitoring

Treatment & Distribution System Security

Passive behavioral monitoring of SCADA, ICCP, and industrial control systems without interfering with water treatment, power generation, or distribution operations.

Nation-State Pre-Positioning Detection

Volt Typhoon Coverage

Detect the living-off-the-land techniques used by Volt Typhoon and Iranian-linked groups that have been confirmed inside U.S. utility infrastructure.

Physical Process Protection

Treatment Parameter Monitoring

Monitor setpoint changes, valve commands, and treatment chemical controls for unauthorized modifications — the Oldsmar lesson applied systematically.

NERC CIP & AWIA Compliance

Regulatory Standard Alignment

Continuous monitoring aligned to NERC CIP for electric utilities and AWIA requirements for water sector — with documentation supporting regulatory audits.

IT/OT Network Segmentation

Boundary Protection

Monitor and enforce boundaries between business networks and operational technology — the most common attack pivot in utility sector breaches.

Incident Response for Essential Services

Continuity-First Planning

Incident response planning that maintains essential service delivery — because utilities cannot suspend water treatment or power distribution during security incidents.