--- title: "Secure Water Treatment SCADA Networks | Control" description: "Safeguard water treatment plants and pumping stations. Physically segment and control all network access to your critical OT and SCADA systems. Discover." lang: en-GB json-ld: | [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] } ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "knowsAbout": [ "Offline Secure Storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/control-for-water#webpage", "url": "https://fire-vault.com/control-for-water", "name": "Secure Water Treatment SCADA Networks", "description": "Safeguard water treatment plants and pumping stations. Physically segment and control all network access to your critical OT and SCADA systems. Discover.", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/images/og/og-base-platform.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/control-for-water#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/control-for-water#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Secure Water Treatment SCADA Networks", "item": "https://fire-vault.com/control-for-water" } ] } ] --- Recent Breaches Breaches [2026 PowerSchool 62.4M records ](/learn/breaches)[2026 DISA Global Solutions 3.3M records ](/learn/breaches)[2026 Globe Life 850K records ](/learn/breaches)[2026 Lidl GB Customer contact data ](/learn/breaches)[2026 Asahi Group Production systems disrupted ](/learn/breaches)[2026 Kido International 8K records ](/learn/breaches)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](/learn/breaches)[2026 Jaguar Land Rover Production and IT systems disru... ](/learn/breaches)[2026 Peter Green Chilled Order and logistics data ](/learn/breaches)[2026 Adidas UK Customer contact details ](/learn/breaches)[2026 PowerSchool 62.4M records ](/learn/breaches)[2026 DISA Global Solutions 3.3M records ](/learn/breaches)[2026 Globe Life 850K records ](/learn/breaches)[2026 Lidl GB Customer contact data ](/learn/breaches)[2026 Asahi Group Production systems disrupted ](/learn/breaches)[2026 Kido International 8K records ](/learn/breaches)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](/learn/breaches)[2026 Jaguar Land Rover Production and IT systems disru... ](/learn/breaches)[2026 Peter Green Chilled Order and logistics data ](/learn/breaches)[2026 Adidas UK Customer contact details ](/learn/breaches) [View All →](/learn/breaches) [![Firevault - offline secure storage, physically disconnected from the internet](/assets/logo-color-DBVl0KCg.png)](/) Products Solutions [Why OSS](/why-oss) More [Help](/help)[Get started](/get-started) Water # Treatment Plant and Distribution SCADA Path Control Water treatment and distribution systems directly affect public health. When control systems are compromised, attackers can alter chemical dosing, disrupt supply, or contaminate drinking water for entire populations. - SCADA compromise - Chemical dosing tampering - Ransomware - Third-party vendor access Schedule a Demo[Back to Control](/solutions/control) Control at a glance ![Water treatment facility at night with pipes and aeration tanks](/assets/water-aybC1Izu.jpg) Control removes the physical path. Blueprints show where each module sits. Overview ExposureHow it worksExplore moreQuestions Overview ## A real boundary between corporate IT and the chemistry of public water. [Read the Control for Water playbook](/playbook/firebreak-water) Water infrastructure presents attackers with the opportunity for catastrophic physical harm. Control uses physical isolation to render treatment SCADA, dosing controllers and distribution telemetry disconnected from corporate IT and the wider internet. Fast to deploy, non-disruptive, and fully aligned to NIS2, DWI and Ofwat expectations, with immutable evidence ready for audit. The exposure in numbers 01 Treatment SCADA isolation from corporate IT 100% Treatment SCADA isolation from corporate IT 02 Persistent remote access to dosing systems Zero Persistent remote access to dosing systems 03 Operational zones with independent governance 5 Operational zones with independent governance 04 NIS2 and DWI compliance evidence Full NIS2 and DWI compliance evidence The Challenge ## Water infrastructure faces direct public health threats. 01 ### Chemical Dosing Risks Compromised control systems could alter chlorine dosing or pH levels in treatment processes, directly threatening public health on a massive scale. 02 ### Remote Pumping Stations Hundreds of remote pumping stations and reservoirs rely on SCADA communications with limited local security, creating distributed entry points. 03 ### IT/OT Convergence Smart water network modernisation creates network paths between corporate IT and operational technology that attackers can traverse. Pain points - Software-only defences can be bypassed by zero-day exploits targeting SCADA systems. - Third-party SCADA vendor access creates persistent connectivity risks. - Chemical treatment and pump control systems require strict access governance. - NIS2, DWI and Ofwat security expectations require demonstrable segmentation and resilience. Water > When a water treatment control system is reachable from the corporate network, every phishing email becomes a potential path to altering the chemical composition of a city's drinking water. The Scenario ### Scenario: Water Treatment SCADA Compromise Attackers compromise a water company's corporate network through a targeted phishing campaign against the finance department. They move laterally until they reach a historian server that bridges the IT and OT networks. From there, they access the treatment plant SCADA system and modify chemical dosing parameters for chlorine and fluoride. The changes are subtle enough to avoid immediate alarm triggers but sufficient to affect water quality across the distribution area. With Control, the treatment SCADA network is physically disconnected from corporate IT. The historian server operates in a controlled zone with authorised, time-limited data transfer to corporate systems. The attack path from finance workstations to dosing controls does not exist. "The historian server was our biggest vulnerability. It sat on both the IT and OT networks because the business needed water quality data in their dashboards. It was the bridge that gave attackers a direct path from email to the chlorine dosing system." Module deployment · water utility network ## Where each Control module is deployed across treatment and distribution. Water companies run the same Purdue stack as power, with telemetry reaching every treatment plant, reservoir and pumping station. Control puts a real boundary between the office, the telemetry network and the SCADA that moves and treats the water. Grounded in NIST SP 800-82 Rev. 3, EPA Water Sector cybersecurity guidance and NIS2 Annex I. L5 Cloud / Internet External Customer portal Cloud services ![FV-Firebreak module icon](/assets/firebreak-icon-7zSCkB1t.png)Firebreak ![FV-Validate module icon](/assets/vault-icon-CD3Pv4ri.png)Validate Public traffic stops in the DMZ. L4 Enterprise IT SOC SIEM Billing Office, billing, customer services. Office, billing, customer services. ![FV-Isolate module icon](/assets/isolate-icon-B9t8fl3o.png)Isolate ![FV-Firebreak module icon](/assets/firebreak-icon-7zSCkB1t.png)Firebreak Office cannot reach the plant on its own. L3.5 Industrial DMZ DMZ · trust boundary Jump server Patch & AV Telemetry broker Brokered exchange. No straight-through paths into the plant. Brokered exchange. No straight-through paths into the plant. ![FV-Relay module icon](/assets/relay-icon-CVhJDRO7.png)Relay ![FV-Validate module icon](/assets/vault-icon-CD3Pv4ri.png)Validate Telemetry lands on a defined route only. L3 Operations systems OT Historian Engineering workstation ![FV-Isolate module icon](/assets/isolate-icon-B9t8fl3o.png)Isolate Engineering and SCADA on separate fabrics. L2 Supervisory control OT Treatment SCADA Distribution SCADA Control room view of treatment and the network. Control room view of treatment and the network. ![FV-Execute module icon](/assets/execute-icon-kJl5Gtmk.png)Execute Treatment changes are approved before they move. L1 Basic control Field PLCs RTUs Dosing controllers ![FV-Lock module icon](/assets/lock-icon-UU3vOaKE.png)Lock Field kit ties to named engineers. L0 Physical Field Pumps Valves Sensors OSS Crown jewels Off-network Detail callout · A Offline Secure Storage Treatment recipes, plant configurations, distribution network maps and the recovery sets you need after an incident. Offline by design · secure by default Modules & symbols ![FV-Firebreak module icon](/assets/firebreak-icon-7zSCkB1t.png)Firebreak Physical sever ![FV-Validate module icon](/assets/vault-icon-CD3Pv4ri.png)Validate Integrity check ![FV-Isolate module icon](/assets/isolate-icon-B9t8fl3o.png)Isolate Zone boundary ![FV-Relay module icon](/assets/relay-icon-CVhJDRO7.png)Relay Time-bound path ![FV-Execute module icon](/assets/execute-icon-kJl5Gtmk.png)Execute Approved action ![FV-Lock module icon](/assets/lock-icon-UU3vOaKE.png)Lock Named access DMZ boundary Trust transition OSS callout Off-network detail ### Where each module is deployed, and what it does there. One row per module. Placement on the network, then plain-English purpose at that point. 1. ![FV-Isolate module icon](/assets/isolate-icon-B9t8fl3o.png) Isolate At every Purdue boundary Office, telemetry, treatment and distribution sit on separate physical fabrics. A compromise on the corporate side cannot reach the plants. 2. ![FV-Firebreak module icon](/assets/firebreak-icon-7zSCkB1t.png) Firebreak On the L5 to L4 link and the L4 to L3.5 link A real hardware off switch on the public and office boundaries, cutting the live path between corporate and the treatment plants. 3. ![FV-Validate module icon](/assets/vault-icon-CD3Pv4ri.png) Validate On the L5 to L4 link and inside the L3.5 DMZ Before any reading or request reaches operations, Validate checks its origin and integrity. A spoofed telemetry value does not become a chemical dose. 4. ![FV-Relay module icon](/assets/relay-icon-CVhJDRO7.png) Relay Inside the L3.5 DMZ Sensor and pump data flows into SCADA on a scheduled, controlled route. Outside that route, telemetry cannot reach into control. 5. ![FV-Execute module icon](/assets/execute-icon-kJl5Gtmk.png) Execute On the L2 to L1 link Cross-plant actions need the right approval and the right state. Single clicks do not move treatment kit. 6. ![FV-Lock module icon](/assets/lock-icon-UU3vOaKE.png) Lock On the L1 to L0 link Field devices tie to named engineers, the right device and the right authority. Featured In [![TechRadar Pro logo](/press/techradar-pro-logo.svg) ](https://www.techradar.com/pro/uk-startup-put-physical-disconnect-switch-in-its-cloud-storage-offering-to-mitigate-ransomware-attacks-but-will-that-be-enough "Read about Firevault on TechRadar Pro") [![Yahoo Finance logo](/assets/yahoo-finance-logo-white-aNkUpCH7.png) ](https://uk.finance.yahoo.com/news/firevault-launches-help-businesses-directors-074500961.html "Read about Firevault on Yahoo Finance") [![Channel Insider logo](/assets/channel-insider-logo-white-CFFo4iu7.png) ](https://www.channelinsider.com/security/tools-and-platforms/firevault-security-offline-platform-offering/ "Read about Firevault on Channel Insider") [![Security Buyer logo](/assets/security-buyer-logo-white-o6oIaBWz.png) ](https://securitybuyer.com/uk-cybersecurity-startup-launches-firevault/ "Read about Firevault on Security Buyer") [![SecurityBrief logo](data:image/png;base64,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) ](https://securitybrief.com.au/story/firevault-unveils-offline-digital-vault-to-combat-rising-cyber-risks "Read about Firevault on SecurityBrief") Capabilities ## What you get with every deployment 01 ### Sovereign Water Data All treatment and distribution control data remains within the agreed jurisdiction in secured Firevault Bunkers, meeting Ofwat and DWI requirements. 02 ### Multi-Party Process Control Changes to treatment parameters require authorisation from both operations and water quality teams, preventing unilateral modifications. 03 ### DWI and NIS2 Evidence Automated compliance logging maps directly to Drinking Water Inspectorate requirements and NIS2 Article 21 outcomes for water companies. 04 ### Cellular SCADA Failover Out-of-band management via cellular connectivity ensures control over treatment systems independent of primary communications infrastructure. 05 ### Process Change Audit Every dosing parameter change, valve operation, and access authorisation is recorded in tamper-proof logs for DWI and regulatory audit. 06 ### Safe State Recovery Verified baselines of treatment configuration enable rapid restoration to known-safe operating parameters during compromise scenarios. Demo to Live ## Adoption Guide Step 1 #### Water Network Assessment Map all network paths between corporate IT, treatment SCADA, distribution SCADA, water quality systems, and remote pumping stations. Step 2 #### Treatment Zone Design Design physically separated zones for treatment, distribution, quality monitoring, and corporate systems with Control modules at each boundary. Step 3 #### Single Works Pilot Deploy at one treatment works with full SCADA isolation, multi-party process authorisation, and compliance logging to validate operational procedures. Step 4 #### Company-Wide Deployment Phased deployment across all treatment works and pumping stations with verified configuration baselines, continuous compliance evidence, and cellular management. Step 1 #### Water Network Assessment Map all network paths between corporate IT, treatment SCADA, distribution SCADA, water quality systems, and remote pumping stations. Step 2 #### Treatment Zone Design Design physically separated zones for treatment, distribution, quality monitoring, and corporate systems with Control modules at each boundary. Step 3 #### Single Works Pilot Deploy at one treatment works with full SCADA isolation, multi-party process authorisation, and compliance logging to validate operational procedures. Step 4 #### Company-Wide Deployment Phased deployment across all treatment works and pumping stations with verified configuration baselines, continuous compliance evidence, and cellular management. [Organise a Demo](/contact) Relevant Control Blueprints ## Deployment patterns that apply here [ CP-05 FIRE+VAULT ### Protect Critical Infrastructure Keep critical systems available, controlled and disconnected from unnecessary exposure. View blueprint ](/control-blueprints/cp-05)[ CP-04 FIRE ### Enforce Physical Segmentation Segmentation should not just be logical. It should be physically enforceable. View blueprint ](/control-blueprints/cp-04)[ CP-02 FIRE ### Contain Active Breaches When prevention fails, containment must be physical, immediate and provable. View blueprint ](/control-blueprints/cp-02) ## Explore More [ ### Control for Utilities Physical isolation for power grid and utility SCADA. Learn more about Control for Utilities ](/control-for-utilities)[ ### Control for Critical Infrastructure National-grade security for essential services. Learn more about Control for Critical Infrastructure ](/control-for-critical-infrastructure)[ ### IT/OT Convergence Threat Physically separate IT from operational technology. Learn more about IT/OT Convergence Threat ](/control-for-it-ot-convergence) Questions ## Frequently Asked How does Control affect real-time treatment monitoring? Can remote pumping stations still be monitored? How are emergency dosing changes handled? What about regulatory data reporting requirements? Water blueprint - PoC ### Speak to the team to organise a PoC Walk through your blueprint with the Firevault team and scope a proof of concept on your estate. 30 minutes, no sales pitch. Book a PoC conversation