A new six-month pilot initiative in Texas is uniting federal, state, and private-sector cybersecurity efforts to identify and remediate weaknesses in water utility systems before potential attackers can exploit them. The program, spearheaded by the Trump administration, also serves as a test case for a potential nationwide expansion of this defense model.
According to a White House official, the initiative will deploy "red-teaming" exercises to rigorously evaluate water utilities' digital networks. This process involves simulating cyberattacks to uncover vulnerabilities that malicious actors might target, subsequently fortifying these systems with advanced cybersecurity measures.
Addressing Critical Vulnerabilities
Robert Lee, CEO of Dragos, highlighted the documented and active threats confronting U.S. water infrastructure, particularly noting that smaller utilities frequently possess inadequate cybersecurity protections. Lee stated that Project Watershed 250 is designed to deliver essential technology, training, and support to these susceptible systems preventatively, before any attacks materialize.
"There is nothing more important to Texans than clean, reliable drinking water," stated Texas Governor Greg Abbott. "Project Watershed 250 places federal, state, and private-sector cyber defenses behind our utilities at no cost. The White House, the Texas Cyber Command, and industry now operate from a unified strategy."
Despite recent cyberattacks affecting over 30 water systems in Minnesota—incidents that undeniably highlighted vulnerabilities in local infrastructure—a White House official clarified that the Texas program was not initiated as a direct response to these specific events.
The official emphasized, "However, these recent attacks have reiterated the need for this modernization and focus on water systems." They further noted that "Critical Infrastructure protection has long been a priority for ONCD and President Trump and this effort has been in the works since last year."
Collaborative Effort and National Vision
Federal collaboration in this endeavor includes the Environmental Protection Agency (EPA) and the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA). On the state level, Texas Cyber Command will collaborate with the White House, local governmental bodies, and technology firms such as Microsoft, Reflection AI, Palo Alto Networks, and Dragos Inc.
"Few things matter more than the safety of the water Americans drink," commented Becky Sosnov, head of corporate affairs at Reflection AI. "This initiative offers a potent illustration of how open-weight AI models, developed domestically and operating within a utility’s own infrastructure, can contribute to community safety."
"Microsoft commends the administration’s commitment to reinforcing the cybersecurity of America’s water infrastructure," stated Chris Barry, President of Microsoft US Public Sector. He added that the company is "proud to support the Project Watershed 250 effort in partnership with the Office of the National Cyber Director, the State of Texas, and Texas Cyber Command." Barry elaborated that "By bringing together Microsoft’s cybersecurity expertise, threat intelligence, and AI-powered security capabilities, we aim to help water utilities strengthen their resilience against evolving cyber threats and develop scalable approaches that can enhance the security of water systems nationwide."
This renewed focus on water system security coincides with the Trump administration's broader push to expand U.S. data center infrastructure, essential for supporting the burgeoning artificial intelligence sector. This expansion necessitates a heightened focus on the reliable water and power supplies required for these facilities.
Project Watershed 250 further develops concepts from the President's June executive order on Promoting Advanced Artificial Intelligence Innovation and Security, as well as the Cyber Strategy for America unveiled in March.
