Find out where
you stand. Today.
Not sure if your RRA or ERP is current — or if you even need both? The penalty clock started July 1. Iranian-affiliated actors are actively targeting water PLCs across 12 states right now (CISA AA26-097A). The Risk Snapshot tells you exactly what you're missing, what your penalty exposure is, and where you're vulnerable on both fronts — regulatory and operational. Don't guess. Don't overbuy. Know.
Know exactly where you stand — right now.
The June 30 deadline has passed. The worst thing you can do now is spend money on the wrong fix while the penalty clock runs. $497 and 24 hours buys you the exact picture of your exposure and what closes it.
What's inside the report.
A real compliance gap analysis built from your PWSID record, EPA data, and a 22-question intake — not a generic checklist.
Overall Risk Score
A 0–100 compliance risk score across all assessed mandates. CRITICAL, HIGH, MEDIUM, or LOW — with domain-by-domain breakdowns showing exactly where your exposure is concentrated.
9-Mandate Gap Table
Every applicable federal and state mandate assessed against your record. Status (Missing, Partial, Verified), risk level, deadline, and a gap summary for each — in one table.
Penalty Exposure Timeline
The exact penalty math for your gap configuration — $71,545/day projected weekly and monthly — with a timeline from today through the deadline and beyond.
Domain Risk Breakdown
Score bars across six domains: AWIA Regulatory, OT/SCADA Security, Incident Readiness, Physical Infrastructure, Chemical & Contamination, Financial Resilience. Know where to focus first.
Finding Blocks
CRITICAL, HIGH, and MEDIUM findings called out individually with plain-English explanations — what the gap is, why it matters, what it means for your system specifically.
Recommended Path Forward
One clear recommendation with rationale specific to your system. Includes an immediate action table with deadlines, owners, and what to order first.
This is what lands in your inbox.
Not a one-page summary. A full compliance gap report — mandate by mandate, domain by domain — built from your EPA record and your intake answers. Branded PDF, printable, audit-ready.
-
✓Built from your PWSID record, not generic data We pull your utility's EPA record — PWSID, population tier, violation history, certification status — before your intake is complete. Your report reflects your actual situation.
-
✓9 mandates assessed in a single report AWIA RRA and ERP, CISA OT guidance, CIRCIA incident reporting, NIST CSF cyber alignment, SDWA retention, TCEQ self-assessment, EPA violation status, and EPA SDWIS certification filing.
-
✓Plain-English, not consultant-speak Every finding is written for a utility GM or operator. The report tells you exactly what's missing and what it means without the jargon.
-
✓$497 credited toward any package within 30 days If you purchase any KORVA compliance package within 30 days of report delivery, your $497 is credited in full. You're not paying $497 on top of the package price.
Every applicable mandate — one report.
The Risk Snapshot goes beyond AWIA. We assess your posture against every federal and state requirement that applies to a community water system in your tier and state.
This is a diagnostic, not a certification package.
The Risk Snapshot shows you exactly where you stand and what you need. It doesn't certify your RRA or ERP with EPA, and it doesn't replace the documentation your utility needs to file. What it does: eliminate the guesswork so you spend the right money on the right thing — and get certified as fast as possible.
Already know what you need?
If you already know the answer, skip the Snapshot and go straight to the right fix. The $497 is a decision tool — not a requirement.
We know your compliance status before you submit your intake.
KORVA Sentinel maintains 27,575+ water utility records sourced from EPA SDWIS and AWIA federal certification data. When you submit your intake, we already have your PWSID, violation history, population tier, and AWIA certification status. Your 22-question intake adds the operational context public records can't tell us — producing a report with the depth of an on-site assessment at a fraction of the cost.
What happens after you pay.
Three steps. About 10 minutes of your time. Full compliance gap report in your inbox within 24 hours.
Complete Intake
After checkout you're routed immediately to the intake form — 22 questions about your utility, PWSID, system type, and AWIA certification history. About 10 minutes. The more complete your answers, the stronger your report.
Analysis & Report Build
KORVA Sentinel runs your intake against your EPA record and our 27,575-record compliance database. Sentinel generates your full gap analysis — 9 mandates, risk score, domain breakdown, penalty timeline — as a branded PDF.
Delivered to Your Inbox
Full report delivered within 24 hours of intake submission. Review your risk score, mandate-by-mandate gaps, and specific recommendation. Order the right package with your $497 credited in full within 30 days.
$71,545 per day.
And 12 states under active attack.
The SDWA civil penalty cap is $71,545 per day (40 CFR §19). That clock started July 1, 2026. Meanwhile, Iranian-affiliated actors are actively exploiting exposed PLCs at water utilities across 12 states — CISA AA26-097A. $497 and 24 hours tells you exactly where you stand on both fronts — regulatory and operational — and what to do about it.
Questions we hear every time.
It depends on whether your 2021 documents satisfy the second recertification cycle. AWIA §2013 requires updated documents every five years. The second cycle requires documents reflecting current threats and operational context. The Snapshot will tell you definitively whether your existing documents satisfy the recertification requirement or whether you need new ones — and since the June 30 deadline has now passed, knowing this quickly matters. If you're not certain, $497 is worth the certainty.
EPA's public records tell you whether a certification was filed — not whether the content of that certification is adequate for the current cycle, not what your CISA or CIRCIA posture looks like, and not what your penalty exposure is or which package resolves it. The Snapshot assesses 9 mandates (not just AWIA), cross-references against your intake answers, quantifies the penalty timeline specific to your gap configuration, and gives you one specific recommended next step.
Yes. If you purchase any KORVA compliance package — RRA Package ($3,997), ERP Package ($3,997), or AWIA Bundle ($5,497) — within 30 days of your Risk Snapshot report delivery date, your $497 is credited in full against the package price. Contact info@securemywater.site with your Snapshot report reference number to apply the credit before checkout.
Yes — and urgently. The deadline has passed, which means every day you wait without a clear picture of your exposure is another day the penalty clock runs. Order the Snapshot today, receive your report in 24 hours, and order the right package immediately after. KORVA delivers all compliance documents within 48 hours of intake submission. The path to certified is still fast — and getting certified now, with documented remediation effort, is the strongest position you can be in for any enforcement conversation.
The report is written for utility GMs, operations directors, board members, and public works officials — not compliance attorneys. Plain-English findings, visual risk score, specific action table with deadlines and owners. If you need to share it with your board to get approval for the bundle purchase, it's structured to do that job too.
Skip the Snapshot and go straight to the AWIA Recertification Bundle ($5,497). The Snapshot is a decision tool — if you already have the information, you don't need it. The Bundle builds both documents from one intake, delivers in 48 hours, and costs $2,497 less than buying the RRA and ERP packages separately.
Don't guess your way into the wrong package.
$497 and 24 hours to know exactly where you stand on both fronts — penalty exposure and cyber vulnerability. Iranian-affiliated actors are actively targeting water PLCs in 12 states right now (CISA AA26-097A). Know before the next inspection or the next attack.
The Compliance Risk Snapshot is a gap identification and advisory report generated from EPA SDWIS data, AWIA certification records, and KORVA Sentinel's 27,575-record compliance database. It is not legal advice, not a certified RRA or ERP, and does not guarantee EPA acceptance, penalty avoidance, or regulatory outcomes. Gap determinations for controls not in public records reflect absence of documentation in available sources — not confirmed deficiencies. Utilities should verify specific obligations with EPA, CISA, state primacy agencies, and qualified legal counsel before final compliance action. Civil penalty figures reflect the 40 CFR §19 statutory maximum; actual enforcement is at EPA discretion. $497 credit valid within 30 days of report delivery; contact info@securemywater.site to apply.