Skip to main content

The Forrester Wave™: XDR Platforms, Q2 2026

Access report
About usPartnersSupport|Log in
Elastic logo
Start free trialContact sales

Scaling cyber protection for US critical infrastructure: How Elastic supports the Community Cyber Resilience Foundation

By
Allison HalataeiChris Townsend

Over recent years, US critical infrastructure has become a primary target for coordinated cyber attacks. Small water, gas, and electric utilities have faced serious risk from cyber attacks while dealing with limited budgets, staff, and forensic expertise, leaving them further exposed.

Advancements in AI have made the cyber threat landscape even more challenging. AI has become an enabler of cyber attacks, rather than a solitary perpetrator.

In August, hackers used AI to generate scripts specifically designed to exploit Siemens Programmable Logic Controllers (PLCs), which are widespread in US water, energy, and food processing infrastructure. In a joint advisory from the National Security Agency (NSA), Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Department of Energy (DOE), and Environmental Protection Agency (EPA), the government explicitly noted that AI has reduced the technical expertise and time needed for malicious actors to exploit vulnerable industrial control systems (ICS attacks).

Recent months have seen a significant spike in cyber attacks targeting the operational technology (OT) of US critical infrastructure.

  • Vulnerable devices: Threat actors, including state-sponsored hackers and ransomware groups like SafePay, are actively exploiting internet-facing PLCs and edge devices across the energy and water sectors.

  • Loss of control: Attacks on utilities, such as those in Colorado, have successfully altered device passwords and IP addresses. This locks operators out of their own OT networks and causes a total loss of visibility into critical safety metrics.

  • The resource gap: Connecting previously isolated infrastructure to the public internet has exposed vast vulnerabilities. Smaller municipalities and local governments manage many of these utilities but severely lack the funding and cybersecurity resources to defend against these advanced threats, risking physical disruption and widespread supply chain failures.

The intersection of AI-enabled cyber threats and chronic underfunding has created a critical inflection point for US utilities. As adversaries leverage AI to accelerate attacks and bypass traditional defenses, the threat to foundational systems we rely on is dangerously outpacing local capabilities.

Providing these vulnerable utilities with immediate, robust cybersecurity support, including dedicated funding, modernized tools, and specialized expertise, is an urgent national imperative to prevent digital intrusions from triggering devastating real-world consequences.

The Community Cyber Resilience Foundation

On October 20, 2026, Accenture, Dragos, and the SANS Institute launched the Community Cyber Resilience Foundation, a nonprofit that helps under-resourced US water, electric, and natural gas utilities secure their operational technology.

As a core technology partner, Elastic is the primary log storage and query engine within the Dragos Platform. Elasticsearch enables the high-speed ingestion, full-text search, and massive scale required to provide the advanced cyber defense to participating utilities. Dragos leverages Kibana and Elasticsearch to allow public sector customers to quickly see and find what they are looking for to enhance cybersecurity operations and resiliency.

The rollout

The first phase of the initiative will provide cybersecurity software, hardware, deployment services, and SANS training free of charge to up to 500 utilities that lack the budget, technology, or skilled personnel needed to protect essential services. Accenture, Dragos and SANS are making an initial combined commitment of approximately $10 million in funding and services.

The foundation builds on the Dragos Community Defense Program, which already gives more than 100 utilities free access to the Dragos platform, and is a true example of how collaboration and resource sharing can bolster the cybersecurity defenses of critical infrastructure.

By offering access to advanced OT cybersecurity tools and training, these initiatives aim to alleviate resource strain, empowering small utilities to develop robust OT cybersecurity programs capable of defending against modern sophisticated cyber attacks.

Government and industry collaboration

Cyber threats to critical infrastructure are growing more complex, and no single organization can meet them alone. Government agencies like CISA, industry partners, and security and analytics firms, such as Dragos and Elastic, must work together.

The Community Cyber Resilience Foundation extends this continued effort by helping small US utilities strengthen their defenses against cyber attacks, protecting the water, power, and other essential services communities rely on every day. With shared commitment and sustained investment, we can build infrastructure that stays secure and resilient against today’s and tomorrow’s threats.

Who qualifies and how to apply

Eligible participants include US-based water, wastewater, electric, and natural gas utilities with less than $100 million in annual revenue. More than 97% of utilities fall below this threshold, representing more than 50,000 organizations that may need support.

Participants can expect:

  • Access to the Dragos Platform and services to help organizations know what’s on their networks and how to address vulnerabilities and threats. Elasticsearch provides the underlying log storage and search capabilities that help Dragos deliver the platform at scale to participating utilities.

  • Accenture deployment services, including expert configuration, integration, and ongoing support

  • SANS ICS/OT training to build and sustain in-house capabilities

  • Hardware and infrastructure funding to purchase the equipment needed to deploy and run the Dragos Platform

  • Peer community access connecting participants to a network of utilities sharing operational experience

  • Utilities interested in participating can learn more at https://www.ccrfoundation.org/#top

The release and timing of any features or functionality described in this post remain at Elastic's sole discretion. Any features or functionality not currently available may not be delivered on time or at all.

Sign up for Elastic Cloud free trial

Spin up a fully loaded deployment on the cloud provider you choose. As the company behind Elasticsearch, we bring our features and support to your Elastic clusters in the cloud.

Start free trial