Skip to Content

Trust is verified,
not assumed.

Banks and utilities are under attack by adversaries weaponizing AI against people, Information Technology (IT) and Operational Technology (OT). Digital Verity builds the communities, research, and products that enhance trust in digital infrastructure.

The people on the other end of the numbers

Every threat model ends at a person. A retiree who trusted a voice on the phone, a business that mailed a check, a town whose water system was locked out of its own controls. Americans reported $20.9 billion in internet-crime losses to the FBI in 2025, the most in its history. One in five adults was defrauded, and four in five never filed a report. Then in July 2026, attackers reached the controllers of more than 30 Minnesota water systems and operators watched control slip away, with households, schools, and clinics downstream with no way to know. It was the wake-up call for every small utility running on the public internet with no security engineer on staff. Digital Verity exists because those people are defended by institutions with the same obligations as the largest, and a fraction of the staff.

$38,500
average loss for a victim over 60

The retiree

Scammers play the long game, calling week after week, until she trusts the voice on the phone more than her own bank. Americans over 60 lost $7.7 billion in 2025, up 59 percent in one year. More than 12,000 of them lost over $100,000 each, often from retirement savings that cannot be rebuilt.

$11,550
taken from one business in under 30 days

The small business

A crew pulls a payroll check from a company mailbox, washes it, prints a stack of counterfeits, and pays a homeless man $150 to cash each one at a drive-through lane. He is the one on camera, and the one who goes to jail. The business had another $33,000 in forged checks queued against it when the run was stopped.

30+
water systems where operators lost control in one month

The community

In July 2026 attackers reached internet-facing controllers at more than 30 Minnesota water systems, and the people running them watched control slip away. Downstream were households, schools and clinics with no way to know. Water and electric utilities were never built to be on the internet, and the grid is now extended to batteries, EVs and thermostats in homes the utility does not control.

Fraud sources

  • FBI Internet Crime Complaint Center, 2025 Internet Crime Report
  • Federal Reserve Board, Economic Well-Being of U.S. Households in 2025 (SHED), May 2026

 

  • AARP Fraud Watch Network, national survey, April 2026
  • Kentucky Bankers Association, Fraud Academy 2026: check fraud and elder financial abuse briefings

Critical infrastructure sources

  • FBI and EPA, Public Service Announcement I-073026-PSA on attacks against internet-facing water-system controllers, July 30, 2026
  • CISA, Advisory AA26-097A on programmable logic controller exploitation, updated July 2026
  • Minnesota IT Services, statements on the July 26–27, 2026 water-system incidents

New capability brings new adversaries, unlike the ones we already understand.

Financial services

AI has made impersonation and synthetic identity cheap. Instant and tokenized rails settle value in seconds, with no batch window to review it. Agentic AI runs at machine speed and does not rest, on both sides of the wall.

You can hold an employee accountable. You cannot fire an AI agent.

Utilities

Utilities are putting Operational Technology on the internet and extending the grid to batteries, EVs and thermostats they neither own nor control, pushing the attack surface into homes.

After the Minnesota water-system attacks in July 2026, the FBI confirmed within days that utilities in at least seven states had been hit the same way, operators locked out of their own controllers. That is the tip of the iceberg.

Digital Verity exists to enhance trust in that world.

Read more about why we exist

How we work

We build communities

We bring together the people facing the same problem in a sector — financial services in one room, utilities in another — so the threat picture is shared rather than rediscovered one institution at a time.

We promote research and talent

Experiential learning for university and community college students through sponsored research, capstone projects and research collaborations with top-tier universities. Students take on real problems and make real decisions on work that ships.

We incubate and build products

Products built at the intersection of knowledge graphs, AI and digital assets, shaped by what the community and the research surface rather than by what is easy to build.

More on how we work

Two verticals, two products

Financial services

VerityGraph

Fraud detection and loss control for community and regional banks

The problem

Fraud is moving faster than the institutions defending against it, and the fraud that will run on digital-asset rails has no incident history to learn from. Community banks are expected to catch it with a fraud team of two or three.

The product

One graph of the bank's own data across fraud, cyber and AML. Investigators get one case with one timeline, graded and tagged to MITRE F3; the board gets a weekly report of actual loss against a limit the bank set in advance. Each bank runs its own instance inside its own confidential computing environment.

Utilities

Arclight In incubation

Continuous threat exposure management for critical energy infrastructure

The problem

New Jersey is standing up a virtual power plant: hundreds of megawatts of customer-owned batteries, EVs and thermostats the grid can call on at peak. It is a genuinely new attack surface, and its security has not been worked out.

The product

Unifies enterprise IT and the cyber-physical control layer in one context engine. Open-source anchored with no vendor lock-in, and every agent decision is written to an append-only cryptographic ledger.

What we commit to

  1. Your data stays yours. Each institution runs in its own secure environment. Only adversary indicators are shared.
  2. Full capability with a member count of one. You do not need to wait for a network to form before the product works for you.
  3. Every target is measured against your own baseline, agreed in writing before work begins.

Satya Vithala

Founder

Nearly four decades at Citigroup in technology, cybersecurity, data governance and board governance. In January 2026 he moved to incubating products at the intersection of cyber resilience and fraud forensics, and collaborating with universities for talent development.

Read the founder's story

Tell us what you are facing

Community banks, energy operators and research programs are all welcome.

Start a conversation