Finding 01Exposure
Controllers reachable from the public internet
Equipment listening for connections, waiting for anyone who found it.
Cloud SCADA for water & wastewater
Secure. Simple. Supported.
Modern SCADA for water and wastewater, Secure By Design. Every component, from the controller at your sites to the cloud, is designed and built by D6 Labs in Oklahoma City with security as a foundation, not something a customer has to bolt on.
- Field site
- Encrypted, outbound only
- Hacker scan attempt
01 The problem
Hackers don't need sophisticated attacks.
Publicly reported attacks on US water systems didn't require complex attacks. Attackers simply found doors that were already open, the kind of openings conventional SCADA was never designed to close.
Finding 02Credentials
Default or shared passwords
One login passed around a crew, or never changed from the factory setting.
Finding 03Remote access
Consumer remote-access software, no second factor
Desktop-sharing tools meant for home use, protected by a single password.
Hardening security on a conventional system has a ceiling. It can't change what the system fundamentally is.
02 Secure By Design
Security isn't something we bolt on. It's the foundation we build on.
Every D6 component is designed from the ground up with security as a feature. It starts at your sites, and carries all the way to the phone in your pocket.
00 / 05 · Start at the site
Every site in your system. One secure system.
Wells, towers, storage tanks, booster and pump stations, lift stations, master meters, leak sensors, generators, water and wastewater treatment plants — if it has a level, a pump, a flow or an alarm, we can add it. A D6 controller at each location reads the equipment and reports to Whisker.io.
- Add sites as you grow, one at a time or all at once
- Water and wastewater on the same screens
- Tap a site to see its solution →
01 / 05
Outbound-only connectivity
Field devices open connections outward to the cloud. Nothing at your utility listens for incoming traffic, so a scanner finds nothing to talk to.
- No open inbound ports at your sites
- No port-forwarding to maintain
02 / 05
Always On Encryption
Two layers of encryption protect every message. AES-256 encrypts the cellular link between the controller and the tower, and TLS encrypts the connection between the controller and our cloud platform. Both are always on, and they cannot be switched off.
- Layer 1: AES-256 between the controller and the cell tower
- Layer 2: TLS between the controller and the D6 cloud platform
- No setting to forget, no toggle to misconfigure
03 / 05
Certificates, not passwords
Each device holds a certificate issued at deployment. There are no default device passwords to guess or share, and when someone leaves you revoke their access instantly.
- No default device passwords
- Certificate issued at deployment
- Revoke a departing employee in one step
04 / 05
Locked-down local access
No USB. No Bluetooth. No Wi-Fi. Where a controller does have a port — like the Ethernet ports on the Nexus.io AC — it is locked down. Cut the padlock, open the panel, plug in a laptop, and you get nothing without a valid certificate issued for that system.
- No USB, Bluetooth or Wi-Fi to exploit
- Ethernet ports accept certificate-holding devices only
- Programs and configs arrive signed, through the cloud
05 / 05
Per-person access, fully logged
Everyone signs in as themselves, with role-based permissions that match their job. Every action lands in a full audit trail, so you always know who did what, and when.
- Role-based permissions
- Individual accounts, never shared logins
- Full audit trail
Nothing listening. Nothing that trusts a stranger. Nothing to steal and reuse.
Outbound-only connectionsCertificate-only local portsRevocable certificates
Honest by design
What still needs you.
We won't pretend architecture solves everything. Secure By Design dramatically reduces whole categories of risk, and these four stay on your list. Many attacks still start with an email, so keep your email protection switched on and your people trained.
Download the Security Self-Audit (PDF)All free security guides
Phishing awareness
Help your staff recognize suspicious emails, links and calls. People are still a target.
Business & billing network
Office computers, billing and email systems need their own protection, separate from SCADA.
Physical protection
Fences, locks and site checks still matter for pumps, tanks and treatment equipment.
Emergency manual-operation plan
Know how your crew will run the system by hand, and practice it before you ever need it.
03 The platform
Whisker.io® Cloud SCADA
A single pane of glass for every tower, well, booster and lift station, on your desktop or your phone. These are the screens your operators actually use.
- 1 year of data storage included
- Analytics & trends across every site
- Custom alerting by SMS, email or voice
- Role-based access for every user
- Full mobile access, anywhere
- Operator-editable HMI screens & alarms
Designed & built by D6
Every piece, from sensor to cloud.
-
Flagship
Automation controller
Nexus.io AC
Our flagship controller. IEC 61131 ladder plus Python via WhiskerIDE, with signed programs and configs from a private CA unique to your organization.
- Quad-core 2 GHz
- 2 GB RAM · 16 GB SSD
- 10.1" IP65/66 touch
- Sunlight-readable
-
All-in-one
PLC + HMI + cloud gateway
SmartController™ Classic
PLC, HMI and secure cloud gateway in one IP67 PETG-CF device. Python programmable: SmartLift™, SmartPump™ or custom.
- IP67
- 2.7" sunlight LCD
- Up to 192 I/O
- Double-encrypted Cat-M1
-
I/O
DIN-rail Modbus RTU
m.Smart Universal I/O
Bus-powered 8–30 V DC expansion module with built-in counters and 18 front-panel status LEDs.
- 6 DI
- 4 AI · 0–30 V / 4–20 mA
- 1 DO · 1 AO
- Counters
-
Sensing
Radar level sensor
PulsarQ™
60 GHz pulsed coherent radar. Non-contact, and it reads straight through plastic chemical tank walls.
- 60 GHz
- 10 updates/sec
- 30 ft range
- <50 mW
- 4–20 mA / Modbus
-
Kit
m.Smart Automation Kit
MAK Gateway
Pre-wired and pre-configured under one part number, for towers, master meters, leak detection and generators.
- One part number
- Solar option
- 7-day autonomy
-
Kit
m.Smart Automation Kit
MAK Lift Station
SmartLift™ duplex pump control with PulsarQ level sensing, current transformers and battery backup.
- Duplex pumps
- PulsarQ + CTs
- 144 W SmartUPS
- 8+ hr backup
-
Kit
m.Smart Automation Kit
MAK Pump Station
SmartPump™ control in tower-level or pressure mode, with automatic failover.
- Up to 32 pumps/wells
- Level or pressure
- Auto failover
-
One vendor
No integrator. No finger-pointing.
We design, manufacture, sell and install the complete solution, so there is one team to call and a lower total cost.
Talk to an engineer
04 Hot-swap
Minutes, not hours.
Configuration lives in the cloud, not in the box. When a device fails, any trained operator swaps it and the new one pulls its configuration down automatically. No reprogramming. No laptop. No call to an integrator.
- 01Swap deviceAny trained operator
- 02Power onConnects outbound
- 03DoneConfig pulled from cloud
05 Easy to learn
Easy to learn. Always getting better.
Whisker.io is built for operators, not engineers. If you can use a smartphone, you can run your system — and change it yourself.
- 01Looks like your plantTanks, pumps, gauges and trends that look like the equipment they represent.
- 02Change it yourselfMove a widget, add a screen, adjust an alarm or setpoint — in minutes, without calling an engineer.
- 03Same screens everywhereAt the desk, on a tablet in the truck, or on your phone at home.
- 04Help from the people who built itQuestions go straight to our engineers in Oklahoma City.
Drag, drop, done · no programming
Continuous improvement
We never stop improving it.
We're continuously improving Whisker.io and our hardware, and we release new products and features regularly. Updates are delivered remotely, so your supported equipment keeps getting better without a site visit.
Most of our best features started as suggestions from the operators who use them every day. Tell us what would make your job easier.
- ReleasedWhisker.io MobileHMI screens, trends and device status on your phone.
- ReleasedNexus.io AC10.1" automation controller, programmed in WhiskerIDE.
- Releasedm.Smart Automation KitsGateway, Lift Station and Pump Station, one part number each.
- ReleasedPulsarQ™60 GHz radar level that reads through plastic tanks.
- OngoingRemote updatesFixes and new features delivered to the field.
- OpenYour suggestionWhere most of our best features begin.
06 Where it works
From the well to the lift station.
Water
Supply, storage, treatment and distribution.
Wastewater
Collection, pumping, treatment and overflow prevention.
07 Proof
Small towns. Real results.
Town of Goldsby, OK
From Windows 98 to every site on their phones.
100,000+
gallons saved in the first year
40%
lower cost than competing bids
9 wells · treatment plant · 2 boosters · 2 towers. Clearwell-overflow logic redirects water to the towers.
We went from an old Windows 98 system to being able to monitor and control everything from our phones. The intelligence built into the system has already saved us over 100,000 gallons of water.Town of Goldsby, Oklahoma Read the Goldsby story
Town of Washington, OK
First-time SCADA. Overflows eliminated.
Lift station overflows eliminated
with PulsarQ level sensing and pump current monitoring
Before D6 Labs, we wouldn't know about a pump failure until the lift station overflowed. Now we get alerts immediately and can fix problems before they become emergencies.Town of Washington, Oklahoma Read the Washington story
Okmulgee RWD #2, OK
Self-service HMI across a rural district.
22%
lower cost than competing bids
8
sites: 4 towers + 4 boosters
With our old system, we had to call an engineer every time we needed to change an alarm or update a screen. Now we can do it ourselves in minutes from anywhere.Okmulgee Rural Water District #2 Read the Okmulgee RWD #2 story
08 Built in Oklahoma City
We build it. We answer the phone.
We design the circuits, run our own SMT line with MyData pick-and-place and automated optical inspection, then build, install and support every system. When you call, you talk to the engineers who built it.
- Design
- SMT build
- AOI
- Install
- Support
No outsourcing.No call centers.Parts ship same day.
2yr
Warranty
And covered for as long as you keep the Uptime Plan.
20yr
Parts availability
Plan your infrastructure for decades, not product cycles.
1yr
Data storage included
A full year of history in Whisker.io, at no extra cost.
UptimePlan
One fixed monthly fee
Covers warranty, parts and service calls. About the Uptime Plan
09 Side by side
D6 vs. traditional SCADA.
| Category |  D6 Labs | Traditional SCADA |
|---|---|---|
| Security | Outbound-only connections | Open ports and VPNs |
| Credentials | Revocable certificates | Shared passwords |
| Replacement | Hot-swap, config from the cloud | Reprogramming |
| Warranty | 2 years, extended with the Uptime Plan | 1–3 years |
| Integration | None needed | Expensive integrator |
| Support | Engineers, direct | Multiple vendors |
| Data | 1 year included | Limited or extra cost |
Get started
See it running on a real system.
Schedule a demo or ask for information. You'll talk directly with the people who design and build it.
- sales@d6labs.com
- 1-844-365-8647
- 425 N. Meridian Ave., Oklahoma City, OK 73107
Request information
Tell us about your project.
We'll get back to you promptly. Fields marked with an asterisk are required.