Aligned to
  • NIST SP 800-82 rev3
  • IEC 62443
  • MITRE ATT&CK for ICS
  • NERC CIP
  • DoW Zero Trust for OT
Purpose-built for Level 0 & Level 1
Why it matters in Water

The risks water can't afford to miss.

Chemical dosing manipulation

Sodium hydroxide overdose attempts (Oldsmar, 2021) show what unauthorized dosing changes look like before traditional alarms fire. The PLC write is fast — operator response can't be.

ICS-CERT AA21-042A

Distribution pressure tampering

Unauthorized writes to pump-station controllers can drop distribution pressure, trigger boil-water notices, and stress aging mains. The damage is downstream and slow to recover.

Insider or workstation-driven PLC changes

Whether the source is a credentialed insider, a compromised engineering workstation, or a third-party integrator, unauthorized writes to dosing PLCs, valve controllers, and pump-station logic all surface the same way — as a PLC-side change OTegrity catches the moment it happens.

Sensor drift hiding violations

Slow chlorine residual or turbidity drift can hide MCL excursions that should trigger EPA reporting. The drift is invisible to alarm-only monitoring.

EPA SDWA MCLs
How OTegrity helps

What OTegrity does for water.

Per-pump behavioral baseline

Self-calibrated baselines for dosing rates, valve actuation, and level controls — unauthorized deviations are detected within seconds, with no manual threshold tuning.

Integrity-anchored classification

When dosing changes coincide with PLC program changes, OTegrity automatically classifies the event as a Cyber Attack — not as a fault or routine drift.

Cyber-vs-fault discrimination

Equipment fault, sensor failure, drift, or cyber manipulation — every alert tells operations and the SOC the same thing, with the same evidence.

Relevant frameworks
  • America's Water Infrastructure Act §2013
  • EPA Safe Drinking Water Act
  • CISA Water Sector OT Guidance
  • NIST SP 800-82 rev3
  • IEC 62443
Bring it to your environment

See OTegrity on your water process.

A live walkthrough on a process similar to yours — values, rates, timing, relationships, and classification — and how it fits alongside your existing stack.