Water Information Sharing and Analysis Center

What Water Information Sharing and Analysis Center does

Water Information Sharing and Analysis Center (WaterISAC) is a nonprofit, membership-based organization founded in 2002 by leading water associations in coordination with the U.S. EPA and authorized by Congress to serve as the designated information sharing and analysis center for the U.S. water and wastewater sector. It provides all-hazards security intelligence (cyber, physical, and natural disasters) to water and wastewater utilities, federal/state/local government agencies, consulting and engineering firms serving the sector, and water utility industry associations, with eligibility extending to organizations in the U.S., Canada, Australia, New Zealand, the U.K., and the Netherlands. The organization serves more than 3,800 professionals across these member organizations.

The core platform is the WaterISAC Resource Center, a secure portal holding 14,154+ curated resources, 9,082 cyber and physical security publications, and single-sign-on access to the EPA Water Contaminant Information Tool (800+ priority contaminants) and three chemical/biological databases (700+ substances). Member-facing products include twice-weekly Security & Resilience Update emails, Threat Advisories for imminent dangers, monthly Cyber Threat Web Briefings (with DHS and private firms), quarterly physical and natural disaster threat briefings, Quarterly Incident Summaries, an annual Threat Analysis Report, confidential incident reporting, and the 12 Cybersecurity Fundamentals for Water and Wastewater Utilities guide. An optional Perch Security upgrade provides continuous IT and OT network monitoring through a dedicated SOC.

Revenue is generated primarily through annual membership dues on a tiered subscription basis: small water/wastewater utilities serving ≤3,300 people pay $125/year, with tiers scaling up to $8,500 (water-only) or $11,800 (combined) for utilities serving 1.5 million or more. Government agencies pay $625/year (state/regional/local) or $1,225 per user (federal), with homeland security agencies and fusion centers receiving courtesy memberships. Consulting and engineering firm dues scale from $1,300 to $8,925/year based on annual sales to the water sector. All employees of a member organization gain access under a single membership. Distribution is direct, supported by an NRWA signup channel and a 60-day no-credit-card free trial, with no resellers or third-party channels used.

Name

Water Information Sharing and Analysis Center

Legal name

Water Information Sharing and Analysis Center

Website

https://waterisac.org

Company type

Private

Founded year

2002

Operating status

Operating

Headcount range

1–10 employees

Short description

WaterISAC is a nonprofit, Congressionally authorized information sharing and analysis center serving the U.S. water and wastewater sector. It provides all-hazards cyber, physical, and natural disaster threat intelligence, alerts, and a curated Resource Center to utilities, government agencies, and sector partners across six countries on a tiered membership-dues model.

Ownership category

akta.pro rank

Product category

Sector Threat Intelligence Services

NAICS

Administration of Environmental Quality Programs (9241), Water, Sewage and Other Systems (2213), Environmental Consulting Services (541620)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Electric, Gas & Sanitary Services (4900)

akta.pro primary industry

Water Supply & Wastewater Utilities Administration (BPAIACAG)

Keywords

• Water sector security
• Threat intelligence sharing
• Critical infrastructure protection
• Cyber physical security
• Water utility information

Headquarters

HQ city

Washington

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Infrastructure, Others

Revenue model

1. Water and Wastewater Utility Membership Dues: WaterISAC's primary revenue stream is annual membership dues from water and wastewater utilities. Dues are tiered based on utility type and population served. Utilities serving 3,300 or fewer people pay $125/year (water-only), while utilities serving 1.5 million or more pay up to $8,500/year (water-only) or $11,800/year (combined water and wastewater). All employees of member organizations receive access as part of annual dues at no additional charge.
2. Government Agency Membership Dues: State, regional, and local government agencies (non-utilities) pay $625/year. Federal agencies pay $1,225 per user. Homeland Security agencies and fusion centers receive courtesy memberships. All employees of member government organizations get access.
3. Consulting and Engineering Firm Dues: Consulting or engineering firms contracted by water sector utilities pay dues based on their annual sales to water and wastewater utilities, ranging from $1,300/year (less than $1 million in sales) to $8,925/year ($1 billion or more in sales).
4. Association Membership Dues: Advocacy organizations principally comprising water and wastewater utilities and/or their personnel pay $625/year.
5. Perch Security Upgrade Option: An optional paid upgrade for cyber threat monitoring by Perch Security, available to members at additional cost. This provides continuous monitoring of IT and OT networks with a dedicated security operations center.

Pricing tiers

Go-to-market motion1 record

Distribution channels4 records

Marketing channels10 records

Core offering

WaterISAC is a membership-based information sharing and analysis center that delivers all-hazards (cyber, physical, natural disaster) threat intelligence to water and wastewater utilities, government agencies, and industry partners. Core offerings include a secure online Resource Center containing 14,000+ articles, reports, and tools; twice-weekly Security & Resilience Update emails; threat advisories; monthly and quarterly webinars and briefings; an annual Threat Analysis Report; Quarterly Incident Summaries; the 12 Cybersecurity Fundamentals guide; single-sign-on access to EPA's Water Contaminant Information Tool (WCIT); and an optional Perch Security upgrade for continuous IT/OT cyber threat monitoring.

Product overview

WaterISAC operates as a security information and analysis center for the water and wastewater sector, offering a unified platform of intelligence products and services. The core offering includes a Resource Center with thousands of security resources, twice-weekly Security & Resilience Updates, Threat Advisories for imminent dangers, and monthly Cyber Threat Web Briefings. Additional products include Quarterly Incident Summaries, an annual Threat Analysis Report, the 12 Cybersecurity Fundamentals guide, and access to the EPA's Water Contaminant Information Tool. An optional Perch Security upgrade provides enhanced 24/7 cyber threat monitoring for IT and OT networks. All products are delivered exclusively to members through the secure portal, email communications, and webcasts.

Differentiator

Problem solved

Functional benefit

Products and services

• Threat Advisories Physical and cyber threat advisories emailed to members when imminent dangers to water and wastewater utilities are identified, providing timely situational awareness for utility security and emergency management teams.
• Security & Resilience Update Twice-weekly email update containing the latest advisories, best practices, reports, and upcoming events relevant to water and wastewater sector security, delivered to all members.
• Resource Center Secure, confidential online source of water security information containing thousands of articles, reports, best practices, threat analyses, and tools focused on reducing risks to water and wastewater infrastructure, accessible to members via single-sign-on.
• Webinars and Webcasts Free on-demand and live webinars on current water security and emergency management topics, recorded and available for viewing at any time for members and prospective members.
• Monthly Cyber Threat Web Briefings Monthly webcast featuring representatives from U.S. Department of Homeland Security, WaterISAC analysts, and private cybersecurity firms discussing emerging cyber threats and mitigation strategies for the water and wastewater sector.
• Water and Wastewater Sector Threat Analysis Report Annual report addressing the threat environment from physical, cyber, and other threats, informed by member surveys and open source security incident analysis for the water and wastewater sector.
• Quarterly Incident Summaries Quarterly summary of incidents in the water sector, collected from anonymized survey results and direct reports from members, federal agencies, security firms, and open sources.
• 12 Cybersecurity Fundamentals for Water and Wastewater Utilities Updated guide covering 12 key cybersecurity best practices for protecting IT and OT systems at water and wastewater utilities, including mappings to CISA CPGs and ICS cybersecurity controls, plus a Small Systems Guidance Compendium.
• U.S. EPA Water Contaminant Information Tool (WCIT) Access Single-sign-on member access to EPA's Water Contaminant Information Tool database with over 800 priority chemical, biological, and radiological contaminants for contamination threat and incident response.
• Perch Security Threat Monitoring Upgrade Optional upgrade for cyber threat monitoring that continuously monitors members' IT and OT networks against WaterISAC's threat repository, with a dedicated security operations center evaluating threats and notifying members of validated malicious activity.
• Confidential Incident Reporting Confidential reporting system enabling utilities to report cyber and physical incidents and suspicious activity to WaterISAC analysts for sector-wide situational awareness and response coordination.

Quantifiable outcome

• Over 14,000 resources in the Resource Center covering cyber, physical, and natural disaster security for water utilities
• +4 more outcomes

Named customers10 records

Segments4 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

Feature4 records

Partnerships

18 partnerships are on record, tiered core and minor.

• U.S. Environmental Protection Agency (EPA)coreStrategic or Co-development Partner · 1 January 2002WaterISAC was founded in 2002 by leading water associations in coordination with EPA and authorized by Congress. EPA's Water Security Division collaborates with WaterISAC on multiple initiatives including AWIA compliance resources, risk assessment tools (VSAT Web), emergency response planning, and the Water Contaminant Information Tool (WCIT) which is accessible through WaterISAC's member portal.
• U.S. Department of Homeland Security (DHS)coreStrategic or Co-development PartnerDHS, through CISA and other components, is a key government partner. WaterISAC receives threat intelligence from DHS and cooperates on monthly Cyber Threat Web Briefings. DHS's National Cybersecurity and Communications Integration Center (NCCIC) serves as a reporting destination for water sector incidents. WaterISAC also coordinates with DHS on ANCHOR-CI (replacement for CIPAC).
• Cybersecurity and Infrastructure Security Agency (CISA)coreStrategic or Co-development PartnerCISA is a primary federal partner providing threat intelligence, advisories, and guidance. CISA publishes ICS advisories and alerts that WaterISAC curates and disseminates to members. CISA's ANCHOR-CI system (replacement for CIPAC) enables public-private infrastructure security collaboration in which WaterISAC participates.
• American Water Works Association (AWWA)coreStrategic or Co-development PartnerAWWA is one of the founding water associations that established WaterISAC in 2002. The organizations maintain an ongoing partnership with AWWA providing standards (J100 risk assessment standard), tools, and co-branded resources including webinars on AWIA compliance. WaterISAC's partnership with AWWA supports emergency coordination during incidents.
• Perch SecuritycoreTechnology or IntegrationPerch Security, a division of ConnectWise, provides continuous cybersecurity monitoring for WaterISAC members as an optional upgrade. Perch's dedicated security operations center monitors IT and OT networks against WaterISAC's threat repository, evaluates detected threats, and notifies members of validated malicious activity. This is a unique offering available exclusively to WaterISAC members.
• Federal Bureau of Investigation (FBI)coreStrategic or Co-development PartnerThe FBI encourages water sector utilities that are victims of internet crimes to contact FBI field offices or the Internet Crime Complaint Center (IC3). WaterISAC facilitates connections between members and the FBI for incident reporting and investigation support when appropriate.
• Gate 15coreStrategic or Co-development PartnerGate 15 is a trusted cyber and all-hazards risk and resilience firm that supports WaterISAC through threat analysis, incident preparedness, training, tabletop exercises, and operational collaboration. Their partnership enhances sector-wide security and resilience. Gate 15 contributes to WaterISAC's threat awareness and resilience guidance reports.
• Cyber Readiness Institute (CRI)minorStrategic or Co-development PartnerCRI is a Community Partner that provides free cybersecurity tools and resources for small and medium-sized businesses, including water utilities. CRI convenes business leaders across sectors to share resources and knowledge that inform the development of free cybersecurity tools.
• ClarotyminorGTM or Marketing PartnerClaroty is a Gold Champion of WaterISAC. The company empowers organizations to secure automation, control, and other cyber-physical systems across industrial, healthcare, commercial, and public sector environments (IIoT). Recognized as a Leader in the 2025 Gartner Magic Quadrant for CPS Protection Platforms. Headquartered in New York City with U.S. federal headquarters in Leesburg, VA.
• SANS InstituteminorGTM or Marketing PartnerSANS Institute is a Silver Champion of WaterISAC and the largest global provider of cybersecurity training, certifications, and research, offering over 60 courses, 35+ GIAC certifications, NetWars, and Security Awareness products. SANS delivers resources to the InfoSec community including research reports, webcasts, summits, and the Internet Storm Center.
• ThreatSTOPminorGTM or Marketing PartnerThreatSTOP is a Silver Champion of WaterISAC and a cloud-based, automated threat intelligence platform that helps organizations block malicious traffic before damage is done. Serves customers across critical infrastructure, education, government, and healthcare. Offers enterprise-grade protection accessible to organizations of all sizes.
• KeystrikeminorGTM or Marketing PartnerKeystrike is a Silver Champion of WaterISAC that helps protect critical infrastructure from attackers quietly lurking on compromised systems within a network. The company's CTO, Dr. Ymir Vigfusson, has presented at WaterISAC webinars on treating attackers as innovators.
• U.S. EPA Water Security DivisioncoreStrategic or Co-development PartnerEPA's Water Security Division develops resources required by AWIA including the Vulnerability Self-Assessment Tool (VSAT Web), emergency response plan templates, and baseline information on malevolent acts. These resources are distributed through WaterISAC's platform and promoted in joint webinars.
• Five Eyes Security Alliance Partners (Canada, Australia, New Zealand, U.K.)minorStrategic or Co-development PartnerWaterISAC membership is open to utilities and stakeholders based in Canada, Australia, New Zealand, the United Kingdom, and the Netherlands as part of the Five Eyes Security Alliance. These international partners enable cross-border water sector security intelligence sharing and collaboration.
• National Institute of Standards and Technology (NIST)minorStrategic or Co-development PartnerNIST resources, including the Guide for Conducting Risk Assessments, Cybersecurity Framework, and Cybersecurity Framework Reference Tool, are referenced in WaterISAC's AWIA compliance resources and Cybersecurity Fundamentals guidance.
• Electric Infrastructure Security CouncilminorStrategic or Co-development PartnerThe EIS Council provides resources on water sector resilience for Black Sky events and cross-sector coordination. WaterISAC references EIS Council publications including the E-Pro Handbooks on water sector resilience and Black Sky cross-sector coordination.
• Water Utility Climate Alliance (WUCA)minorStrategic or Co-development PartnerWUCA published reports referenced by WaterISAC including 'A Beginner's Guide to Decision Making Under Deep Uncertainty for Water Utilities' and 'Purpose-Driven Climate Data Selection and Application Case Studies.' WUCA also co-authored the 'It's Hot and Getting Hotter' report on extreme heat impacts on water utilities.
• Association of Metropolitan Water Agencies (AMWA)minorStrategic or Co-development PartnerAMWA collaborated with WUCA on the 'It's Hot and Getting Hotter' report addressing implications of extreme heat on water utility staff and infrastructure. AMWA resources are referenced in WaterISAC's guidance on protecting workers and adapting infrastructure for extreme temperatures.

Scale indicators11 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Financial Services Information Sharing and Analysis Center (FS-ISAC): The global ISAC for the financial services sector, providing threat intelligence, alerts, member collaboration tools, and incident response coordination to financial institutions. FS-ISAC shares WaterISAC's membership-organization model, focus on actionable sector-specific threat intelligence, and reliance on trusted-by-default information sharing under a nonprofit governance structure.
• Auto-ISAC: The ISAC for the automotive industry, established by automakers to share cyber threat intelligence across the connected-vehicle ecosystem. Auto-ISAC is a structural peer, sharing WaterISAC's membership-led model and focus on cyber-physical risk in an industry undergoing rapid digitalization.
• Electricity Information Sharing and Analysis Center (E-ISAC): The sector ISAC for the North American electricity industry, operated by NERC. E-ISAC is the closest functional analog to WaterISAC: a sector-mandated information-sharing hub providing cyber and physical threat intelligence, alerts, and analysis to asset owners and operators, with deep ties to CISA/DHS. The structure, governance, and product mix (alerts, briefings, secure portal, analyst desk) closely parallel WaterISAC's water-sector model.
• Downstream Natural Gas ISAC (DNG-ISAC): The ISAC for the U.S. downstream natural gas industry, providing sector-specific cyber and physical threat intelligence to natural gas utility and pipeline operators. DNG-ISAC is a near-analog for WaterISAC given shared customer archetype (municipal/utility asset operators), regulatory drivers, and OT-cyber threat profile.
• Information Technology ISAC (IT-ISAC): An ISAC for technology vendors and operators, providing threat intelligence and incident coordination across hardware, software, and services firms. IT-ISAC operates the same hub-and-spoke information-sharing architecture that WaterISAC replicates for the water sector.
• Oil and Natural Gas ISAC (ONG-ISAC): A sector ISAC serving the upstream and midstream oil and natural gas industry with threat intelligence, alerts, and analysis. ONG-ISAC shares WaterISAC's membership-based intelligence-sharing model, focus on OT cyber threats to industrial operations, and ties to federal critical-infrastructure protection programs.
• Health Information Sharing and Analysis Center (H-ISAC): The ISAC for the healthcare and public-health sector, providing threat intelligence and coordinated incident response to hospitals, payers, and health-tech firms. H-ISAC parallels WaterISAC's role as a critical-infrastructure sector ISAC with a focus on operational disruption risk, regulatory-driven member needs, and partnership with federal agencies for intelligence sharing.

Others

• Claroty: A cybersecurity vendor focused on cyber-physical systems protection across industrial, healthcare, and public-sector environments, named a Leader in the 2025 Gartner Magic Quadrant for CPS Protection Platforms. Claroty is also a Gold Champion of WaterISAC, illustrating the symbiosis — and the partial overlap in OT threat intelligence — between commercial CPS platforms and WaterISAC's information-sharing mission.

Emerging players

• Dragos: A commercial OT cybersecurity vendor with explicit water/wastewater sector coverage, providing threat intelligence (Dragos WorldView), incident response, and the Dragos Platform for asset identification and threat detection. Dragos overlaps with WaterISAC's informational role and competes for the same utility security budget, especially via direct threat-intelligence subscriptions.

Broad incumbents

• National Council of ISACs (NCI): The umbrella organization for the nation's critical-infrastructure ISACs, of which WaterISAC is a member. NCI coordinates cross-sector intelligence sharing, policy engagement, and federal partner relationships, and represents the broader ISAC ecosystem within which WaterISAC operates as the water-sector member.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat7 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/waterisac

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Water Information Sharing and Analysis Center