Technology

Volunteer cybersecurity initiative helps protect vulnerable rural water systems

DEF CON Franklin pairs tech volunteers with small municipal water operators to address basic digital security vulnerabilities.

Updated Sep 2, 2026 · 12:18 UTC1 reports

The short version

A volunteer initiative called DEF CON Franklin connects cybersecurity professionals with under-resourced rural water utilities to improve network defenses.
Small municipal water operators often run outdated or bespoke equipment and lack dedicated security staff, making them vulnerable to network intrusions.
Organizers emphasize that grassroots volunteer efforts cannot replace sustained federal and state funding for critical infrastructure cybersecurity.

DEF CON Franklin was launched as a spin-off from the 2024 DEF CON Hacker Conference to pair volunteer security specialists with infrastructure operators in need of assistance.[Scientific American]
Municipal water utilities frequently operate on limited budgets, utilize legacy operating systems, and rely on nonstandard equipment with default passwords or exposed internet connections.[Scientific American]
Volunteers assist operators with targeted safeguards, including inventorying connected network hardware and implementing multifactor authentication.[Scientific American]
To establish trust with local operators, DEF CON Franklin partnered with a national association representing rural water systems and its state-level affiliates.[Scientific American]
Organizers, including former White House and DHS official Jake Braun, state that long-term protection requires dedicated government funding rather than reliance on volunteers alone.[Scientific American]

Whether federal or state governments will provide permanent, dedicated funding mechanisms to modernize and secure rural water cybersecurity infrastructure remains uncertain.[Scientific American]