Vardar.aiVardar.aiCaught Attacks Galleryvardar.ai →
Real labeled attacks · multiple industrial sectors

Real attacks on real plants.
Here's where we caught them — and why.

Attacks from public ICS testbeds, replayed against the Vardar.ai detection stack: the timeline of the attack, the part of the plant it hit, and the per-sensor evidence behind every alert. Filter by sector to pivot the story.

SWaT 2015 · Water Treatment · 5 caught attacks

iTrust Secure Water Treatment testbed (SUTD) — 6-stage plant, 36 labeled attacks over 4 attack days.

85.5%
Detection recall
99.1%
Precision
0.55%
False-positive rate
11s
Median time-to-detect
32/36 attacks
Stack coverage
Attack #28Single Stage, Single Point
Water Treatment
P302 — UF feed pump

Intended impact: Stop inflow of tank T-401

2015-12-31 01:45:19570m 13sfirst catch: 13m 10s
Physical ResidualTemporal SequenceProcess InvariantsFused Ensemble
Walk through the attack
Attack #22Multi Stage, Multi Point
Water Treatment
UV401 + AIT502 + P501 — multi-point manipulation

Intended impact: Possible damage to RO

2015-12-29 22:55:187m 47sfirst catch: instant
Physical ResidualTemporal SequenceProcess InvariantsFused Ensemble
Walk through the attack
Attack #37Single Stage, Multi Point
Water Treatment
P501 + FIT502 — multi-point manipulation

Intended impact: Reduced output

2015-01-02 11:17:027m 53sfirst catch: 44s
Physical ResidualTemporal SequenceProcess InvariantsFused Ensemble
Walk through the attack
Attack #6Single Stage, Single Point
Water Treatment
AIT202 — pH analyzer (HCl dosing control)

Intended impact: P-203 turns off; Change in water quality

2015-12-28 12:00:553m 20sfirst catch: instant
Physical ResidualTemporal SequenceProcess InvariantsFused Ensemble
Walk through the attack
Attack #20Single Stage, Single Point
Water Treatment
AIT504 — RO permeate conductivity analyzer

Intended impact: RO shut down sequence starts after 30 minutes. Water should go to drain.

2015-12-29 18:15:436m 39sfirst catch: instant
Physical ResidualTemporal SequenceProcess InvariantsFused Ensemble
Walk through the attack

Provenance: official validation run 2026-06-11T22:34:18Z · model image sha-97752838a3f3 · artifact sha256 80c98149b000…. Recall is point-adjusted on the labeled attacks with the false-positive rate measured on held-out clean data.

WaDi 2017 · Water Distribution · 3 caught attacks

iTrust Water Distribution testbed (SUTD) — 3-stage distribution network, 16 labeled attacks.

100.0%
Detection recall
90.7%
Precision
2.07%
False-positive rate
57s
Median time-to-detect
15/16 attacks
Stack coverage
Attack #10Single Stage, Multi Point
Water Distribution
1P005ON + 1P006OFF — multi-point manipulation
2017-10-11 10:55:001m 32sfirst catch: 7s
Physical Residual
Walk through the attack
Attack #2Single Stage, Single Point
Water Distribution
1FIT001 — primary-grid inlet flow meter (chemical-dosing line)

Intended impact: No increase in level in primary grid

2017-10-10 10:24:109m 55sfirst catch: 2m 59s
Physical Residual
Walk through the attack
Attack #16Single Stage, Single Point
Water Distribution
2LIT002 — elevated-reservoir tank level transmitter

Intended impact: Stealthy attack

2017-07-11 15:26:3010m 35sfirst catch: 4m 43s
Physical Residual
Walk through the attack

Provenance: official validation run 2026-06-13T22:27:18Z · model image sha-de79dac53981 · artifact sha256 a05be50d6a12…. Recall is point-adjusted on the labeled attacks with the false-positive rate measured on held-out clean data.