Critical Infrastructure AI Defense Network SentinelGrid: Real-Time Cyber Protection for Power Grids and Water Plants

SentinelGrid, jointly released by the US Cybersecurity and Infrastructure Security Agency and cybersecurity company Palo Alto Networks, is an AI network defense system for critical infrastructure. The system is designed for power companies, water utilities, natural gas pipelines, and traffic signal networks, and detects and blocks cyberattacks in real time without disrupting normal industrial control operations.

The project grew out of the recent surge in cyberattacks targeting critical infrastructure. In 2025, a major ransomware attack hit a power company in the US Midwest, leaving 140,000 households without power for more than 48 hours. The incident prompted the US Congress to pass the Critical Infrastructure AI Defense Act, authorizing CISA to lead the construction of a national-level defense network.

At the core of the system is an AI detection engine tailored for industrial control protocols. Traditional IT cybersecurity tools mainly target office network protocols such as HTTP and SMTP, while industrial control systems use specialized protocols like Modbus, DNP3, and IEC 60870. SentinelGrid has trained dedicated models for these protocols, capable of identifying anomalous patterns in control commands. For example, a water pump normally sends a heartbeat every 30 seconds. If a state query appears every 0.1 seconds, it means an attacker is attempting to enumerate system state.

As of June 2026, SentinelGrid has been deployed at 83 US power companies (62 percent of the total) and 26 water utilities (45 percent of large water utilities). The system has 14,000 edge nodes, each protecting the key controllers of one facility. In the first half of 2026, SentinelGrid successfully blocked 47 million attacks on industrial control systems, of which 8,200 were high-severity attacks that could have caused physical equipment damage.

For applications, CISA is extending the SentinelGrid model to allies. Similar agencies in Australia, Canada, the United Kingdom, and Japan have signed cooperation agreements with CISA to deploy localized versions of SentinelGrid in their respective countries. The European Union Agency for Cybersecurity (ENISA) has also launched a procurement procedure for the European version. This trend signals that cyber defense for critical infrastructure is shifting from the enterprise level to the national level.

On the commercialization path, SentinelGrid is provided by CISA on behalf of the government to infrastructure operators. Operators do not pay for the software, but do pay integration and operations costs (around 180,000 dollars per site per year). Palo Alto Networks is responsible for technical support and ongoing development. Nikesh Arora, CEO of Palo Alto Networks, said this represents a model shift in the cybersecurity industry. Defense for critical infrastructure cannot rely entirely on the commercial market and needs government leadership.

Critics point out that SentinelGrid's centralized architecture may introduce new risks. If an attacker breaches the central AI system, large amounts of infrastructure could be paralyzed simultaneously. CISA responded that SentinelGrid uses a federated learning architecture in which each edge node runs its local model independently, and central model updates are distributed through encrypted channels. Even if the central system is breached, the attacker cannot directly control edge nodes.