Secure every treatment plant and pump station. Water keeps flowing.

Yes. The Access Gate is agentless: it operates at the network level, and no agents are installed on PLCs, dosing controllers, SCADA servers or any OT device. It protects everything connected to the network, regardless of age, firmware or operating system.

No. The Access Gate connects to existing network infrastructure rather than cutting into it. No re-cabling, no process interruptions, no changes to control system configurations. Water operations continue normally during and after deployment.

The Access Gate creates encrypted overlay networks connecting all sites, treatment plants, pumping stations, lift stations, and control centers. Policy is managed centrally and enforced consistently at every location, including unmanned remote sites.

The Access Gate supports the cybersecurity work EPA expects of water systems, including the AWIA risk and resilience assessment, and IEC 62443 for industrial security. It generates assessment-ready documentation and provides continuous control enforcement for regulatory audits.

Yes. The Access Gate enforces identity-based access policies, so only authorized users reach specific process control systems. Every session is authenticated with MFA, scoped to authorized resources and fully logged. Unauthorized access attempts are detected and blocked in real time.

New York adopted first-in-nation water cybersecurity regulations on March 11, 2026. The DEC rules (6 NYCRR Parts 616, 650, and 750) require every SPDES-permitted wastewater system, of any size, to report cyber incidents within 24 hours, with access control, vulnerability management, network monitoring for POTWs at 10 MGD or more, and a response plan due by March 11, 2027, one year after the rule's adoption. The DOH rules (10 NYCRR Appendix 5-E) require community water systems serving more than 3,300 people to run an annual Cybersecurity Vulnerability Analysis and report incidents within 24 hours, with remaining controls due by January 1, 2027. Trout maps utility OT networks and enforces segmentation to meet these controls with no agents and no downtime.

The DEC and DOH requirements build on federal EPA obligations under America's Water Infrastructure Act, which already requires community water systems serving more than 3,300 people to include cybersecurity in their Risk and Resilience Assessments. To offset the cost, New York's EFC runs the SECURE grant program, with up to $50,000 for cybersecurity assessments and up to $100,000 for upgrades aligned to the new rules. Trout gives water and wastewater operators the network visibility, segmentation and access control needed to pass a DOH Cybersecurity Vulnerability Analysis and satisfy DEC controls, with nothing to install on existing SCADA and OT equipment.

Under Safe Drinking Water Act section 1433, community water systems serving more than 3,300 people certify a risk and resilience assessment and an emergency response plan to EPA, and review both at least every five years. In the current cycle, the last assessments (3,301 to 49,999 people) were due June 30, 2026, and the last plans are due December 31, 2026. In New York, the DOH operational technology rules for drinking water apply from January 1, 2027, and the DEC wastewater controls are due by March 11, 2027.

When a controller cannot be patched, like the Rockwell Logix authentication bypass CVE-2021-22681 on the CISA Known Exploited Vulnerabilities list, which has no vendor fix, the only remaining control is an enforcement point in front of it. The Trout Access Gate proxies the controller so no session reaches it without identity, MFA, and a full recording, and the PLC itself stays untouched.

Remote sites reached over cellular modems are a common water and wastewater attack surface. Access Gate brokers every remote session through an on-premise proxy with identity and recording, so the modem is no longer a direct, unauthenticated path into the control network. No re-cabling and no agent on the field equipment.

Under Safe Drinking Water Act Section 1433 (America's Water Infrastructure Act), community water systems serving more than 3,300 people must assess risks, including their electronic, computer and automated systems, and maintain an emergency response plan that includes cybersecurity. EPA has enforced these requirements since 2020 and issued a cybersecurity enforcement alert in May 2024. Access Gate delivers the asset inventory, segmentation, access control, and tamper-evident audit trail these call for, on-premise.