Water utilities can strengthen defenses by identifying the systems and people essential to safe service, assessing cyber risks across business IT and operational technology (OT), and assigning owners and deadlines to practical mitigations. Secure remote access and human-machine interfaces, prepare to respond and restore operations, and coordinate with sector and government partners. No single device or checklist can substitute for a utility-specific plan.
Start by mapping the systems that keep water service running
Cyber risk is not limited to a control-room computer. It can involve enterprise IT, process-control OT, communications links, remote access, customer information, and contractors or other third parties who maintain systems. Depending on what is affected, an incident could disrupt treatment, distribution or conveyance; interrupt remote SCADA monitoring; damage components; or compromise a utility website, email or customer information.
As an Amazon Associate I earn from qualifying purchases.
Begin with an inventory that connects technology to essential functions. Record which systems support those functions, who operates and maintains them, and which outside organizations have access. Include both the equipment and the people responsible for it; an inventory without accountable owners is difficult to turn into action.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problems- Business and enterprise IT: identify the systems and accounts used for business operations and customer-facing services.
- OT and process control: identify mission-critical systems, SCADA and human-machine interfaces (HMIs) that operators use to monitor or control processes.
- Connections and access: map communications links, remote interfaces, remote access and third-party access relevant to those systems.
- Responsibilities: name the system managers and designate an overall security lead to coordinate them.
The U.S. Environmental Protection Agency (EPA), in its Guidance on Improving Cybersecurity at Drinking Water and Wastewater Systems, revised in August 2024, recommends that owners and operators evaluate risks to and resilience of IT and OT systems and develop risk-mitigation plans for vulnerabilities in critical operations. The guidance applies across system types and populations; it does not assume every utility has the same network or threat profile.
#1 Best Overall
- Breakthrough 1804 ft Connectivity: Engineered with advanced Sub-1G long-range wireless tech, our leak detector maintains robust signals over unprecedented distances—reaching up to 1804 feet even through 5 dense walls. Secure every critical space in expansive properties, from deep basements to detached garages and distant outbuildings.
- Multiple Reminder Methods: Our water leak sensor supports multiple remote alarm. It can instantly send SMS, APP, and Email notifications to your phone (no matter how many times the SMS is used, it's free). Also, the water leak sensor flashes red and sounds a 105 dB alarm. Perfect for the basement, kitchen, or vacation home!
- Feature-Rich App: Receive instant push notifications. Use the “Find Device” feature to quickly trigger audible beeps to retrieve misplaced sensors. Add multiple email addresses through the APP, and your family and friends can also receive reminders when there is a water leak at home.
- Industry Leading IP67 Waterproof: Its IP67 waterproof rating ensures durability against spills, humidity, and accidental submersion.It can be used multiple times after wiping dry.
- Four-level volume adjustment: Customize your own alarm to fit your life! Use the app to adjust the volume in 4 levels, with a maximum alarm volume of 105 decibels. Whether it's day or night, whether it's in the bedroom or the basement, you can find the right volume.
Turn assessment findings into a prioritized mitigation plan
Use the inventory to identify gaps, then choose actions according to their potential effect on essential service, feasibility at the utility, and available staff and resources. For every action, document a responsible owner, required resources and a target schedule. This makes the assessment a working plan rather than a checklist filed away after completion.
EPA’s voluntary Cybersecurity Checklist is a gap-finding aid based on the Cybersecurity and Infrastructure Security Agency’s (CISA) Cross-Sector Cybersecurity Performance Goals, which align with the NIST Cybersecurity Framework. EPA encourages utilities to build mitigation plans from the gaps they find and points to its eight “Top Cyber Actions for Securing Water Systems.” The checklist is one route for assessment, not a requirement to use that specific tool or the only available framework.
Rank #2
- Breakthrough 1804 ft Connectivity: Engineered with advanced Sub-1G long-range wireless tech, our leak detector maintains robust signals over unprecedented distances—reaching up to 1804 feet even through 5 dense walls. Secure every critical space in expansive properties, from deep basements to detached garages and distant outbuildings.
- Multiple Reminder Methods: Our water leak sensor supports multiple remote alarm. It can instantly send SMS, APP, and Email notifications to your phone (no matter how many times the SMS is used, it's free). Also, the water leak sensor flashes red and sounds a 105 dB alarm. Perfect for the basement, kitchen, or vacation home!
- Feature-Rich App: Receive instant push notifications. Use the “Find Device” feature to quickly trigger audible beeps to retrieve misplaced sensors. Add multiple email addresses through the APP, and your family and friends can also receive reminders when there is a water leak at home.
- Industry Leading IP67 Waterproof: Its IP67 waterproof rating ensures durability against spills, humidity, and accidental submersion.It can be used multiple times after wiping dry.
- Four-level volume adjustment: Customize your own alarm to fit your life! Use the app to adjust the volume in 4 levels, with a maximum alarm volume of 105 decibels. Whether it's day or night, whether it's in the bedroom or the basement, you can find the right volume.
Prioritize controls that protect critical service
- Limit and review access. Understand who can reach critical systems, including staff, service providers and remote users, and include access in the utility’s review and mitigation plan.
- Assess remote interfaces and HMI exposure. EPA and CISA have warned that unsecured HMI devices may allow unauthorized remote users to view or change real-time system settings, potentially disrupting treatment. Determine whether this applies to the utility’s own systems before selecting a response; the warning does not mean every HMI is exposed.
- Maintain threat and vulnerability awareness. Establish how the utility will receive and review relevant information and decide who is responsible for acting on it.
- Document incident reporting and restoration. Make reporting contacts, escalation responsibilities and procedures for restoring business- and mission-critical systems part of the plan.
EPA advises utilities that cannot implement a particular practice because of logistical, infrastructure or other constraints to seek an alternative or compensating measure that reduces the vulnerability. The appropriate measure depends on the utility’s equipment and operating conditions; do not treat a generic technical configuration as safe for every plant.
Free tools Windows power users keep installed
One-click scans. No signup required.
Know which planning obligations apply to your system
EPA states that community water systems serving more than 3,300 people are subject to section 1433 of the Safe Drinking Water Act (SDWA), as amended by the America’s Water Infrastructure Act of 2018 (AWIA). For those systems, cybersecurity must be addressed as part of the required risk and resilience assessment (RRA) and emergency response plan, including risks to electronic, computer and automated systems. The 3,300 figure is a regulatory applicability threshold, not an estimate of cyberattack frequency.
Rank #3
- Leaking & Dripping: 2 water sensitive probes on the front for monitoring pipe/drain drip and 4 rear probes for detection water leak & floor moisture/flood. Both are work simultaneously, whatever leak sensors contact water, it will warning you in time.
- Loud & Mute: Our water leak alarm have loud and Mute Mode. It can emit 100 dB audio and loud enough to be heard even if leaks happened in basement. Press the button to mute the Water Detector Alarm when you arrived the flooded place.
- Tiny & Wireless: No Wire, Installation Required. Mini size allows you to put water leak alarms on any places, where the water leak may be happened. Such as house, underground, Pool, under Washing Machine, or unexpected disasters that may burst pipes, etc..
- Ultra Lifespan: Due to built-in 2*AAA Battery and energy-efficient circuit, our Floor Water Sensor Moisture Alarm has over 2 years standby time with Low Battery Alert, which reminds you to replace battery in time via flashing red light.
- Real IP66 Waterproof: The Water Alarm Detector is made of ABS & Stainless Steel, helps water sensor keep sensibility during the long time used without rust. Mounting Battery from the front to protect battery from getting wet and safer.
EPA recommends that all drinking water and wastewater system owners and operators evaluate IT and OT cyber risks and develop mitigation plans, regardless of system type or population served. A system outside the stated section 1433 threshold should not assume that the voluntary checklist replaces other obligations that may apply; confirm current requirements with the relevant regulator.
Choose an assessment route that fits your utility
EPA lists a free Water Cybersecurity Assessment Tool for self-assessment, its Water Sector Cybersecurity Evaluation Program for third-party assessment, and links to methods from CISA, NIST and the American Water Works Association (AWWA). EPA also offers water-sector cybersecurity technical assistance. Select a route based on in-house expertise, system risk, staff capacity and the need for independent perspective, and confirm current availability with EPA.
Rank #4
- High Sensitivity Leak & Drip Water Detections: Equipped with 4 bottom and 2 top high-sensitivity sensor probes. The adjacent bottom probes trigger the alarm once touching water, while the top probes may be activated by heavy humid mist. It precisely detects dripping water, minor water pooling and flooding on tile, wood, concrete and all flat surfaces, helping you prevent costly household water damage in advance.
- Long Lasting Power Supply: Comes with 10 durable AAA batteries for ultra-long standby use, no frequent battery replacement needed. It will sound an alarm and flash red LED once water leakage is detected. Built-in low battery reminder with red flashing light reminds you to replace batteries in time for uninterrupted leak monitoring.
- 0-120dB Adjustable Volume & Silent Mode: Support 4 adjustable volume levels from 0dB mute mode up to 120dB super loud alarm. Long press the TEST button freely switch volume as needed. You can easily mute the alarm after finding water leakage, when you at bedroom, kitchen and quiet living scenes.
- IP67 Full Waterproof & Dustproof: Built to withstand harsh conditions, this water sensor alarm leak detector is fully waterproof (IP67-rated allow short term immersion in water) and resistant to dust, Its durable structure and rust-resistant coating allow for long-term use, ideal for basements, laundry room, under kitchen sink,water pipe, beside the bathtub and washing machine.
- Easy Place Installation: No complicated wiring or extra tools required. Simply place the water sensor alarm in leak-prone areas, it will start 24-hour all-round automatic monitoring right away.
| Route | What it offers | What to establish before choosing |
|---|---|---|
| EPA Water Cybersecurity Assessment Tool | Free self-assessment resource listed by EPA. | Who will lead the work, whether the team has the expertise to assess OT as well as IT, and how findings will become owned, scheduled mitigations. |
| EPA Water Sector Cybersecurity Evaluation Program | Third-party assessment resource listed by EPA. | Scope, OT expertise, staff effort, follow-up support and how the results will inform required planning. EPA’s cited resource pages do not state comparative price or outcome data. |
| CISA, NIST or AWWA methods; EPA technical assistance | Other methods and assistance identified by EPA. | Whether the selected method fits the utility’s needs and whether the available support and expertise are appropriate. Confirm details with the relevant organization. |
Whichever route you use, ask whether it covers the utility’s actual IT/OT environment, identifies prioritized actions, and gives the team a practical basis for assigning owners and schedules. An assessment is useful only when its findings lead to decisions and follow-through.
Plan preparation, response and recovery together
EPA’s 2024 incident action checklist is organized around preparation, response and recovery. Use that structure before an incident: identify critical systems and functions, responsible personnel, contacts and actions in advance. A plan should address what happens if treatment, distribution or conveyance is interrupted, customer information is stolen, a website or email account is compromised, components are damaged, or remote SCADA monitoring is lost.
Best Value
- Note: The sensor cannot be directly added to the app and a GoveeLife H5044 gateway is required(not compatible with H5040/H5043 gateway). With the kit "BB0DQLDBXWF", you can remotely monitor water leaks via your phone. "B0DQLDBXWF" is not included in the package.
- Ultra-Sensitive Detection: Equipped with 2 sets of sensor probes, ensuring early detection for basements, kitchens, bathrooms, and near appliances like dishwashers, water heaters, or washing machines. Protect your property from costly damage.
- Loud Alarm Sound With Customizable Volume: Maximize safety with a 105dB audible alarm that alerts you instantly to water threats. Customize alerts to 4 adjustable volume settings—ideal for quiet homes or noisy environments.
- 5 Years of Hassle-Free Operation: The water leak detector enjoys long-term protection with a built-in battery that lasts 5 years—no frequent replacements needed.
- IP67 Waterproof & Durable Design: Built to withstand harsh conditions, the water sensor with an IP67 waterproof rating ensures reliable performance in damp areas like under sinks, laundry rooms, or near sump pumps.
Prepare
- Maintain the critical-system inventory, named system managers and an overall security lead.
- Establish whom staff and contractors should notify, how incidents will be escalated, and which current regulator or other reporting requirements apply.
- Document how the utility will prioritize restoration of business and mission-critical systems and who can authorize response actions.
Respond and recover
- Use the utility’s incident response plan and current official procedures to coordinate response; do not rely on a contact list or deadline that may have become outdated.
- Track affected functions and systems, the people responsible for them, and the decisions needed to maintain or restore service.
- Follow documented restoration procedures and update the plan with lessons from exercises or incidents.
EPA’s planning resources include a Water and Wastewater Sector Incident Response Guide co-sealed by CISA, EPA and the Federal Bureau of Investigation (FBI), as well as an incident response plan template. Consult the agencies’ current materials and contact information. Reporting duties depend on current laws and rules; verify the requirements that apply to your utility rather than assuming a universal reporting deadline.
Coordinate with the water sector and government partners
A utility’s own inventory and mitigation work remains central, but coordination can add threat awareness, assistance and practice responding with others. EPA identifies WaterISAC as a subscription-based source of water-sector threat information, analysis, and response and mitigation resources; check its current membership details directly. Exercises and information sharing can complement the utility’s own plans, not replace them.
EPA’s 2024 water-sector cybersecurity roadmap was developed by a work group that included water-sector associations, utilities, EPA and CISA. EPA’s July 2025 report calls for a holistic approach involving coordination across government, associations and utilities. For utility leaders, that means treating sector coordination as part of resilience planning alongside local ownership, mitigation and recovery responsibilities.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
