Systems and methods include a computer-implemented method for monitoring fire water networks. A fire water network (FWN) is monitored for leaks in real-time. Current instrument readings are received from instruments in the FWN. A leak signature associated with the FWN is generated in real-time using the current instrument readings. The leak signature is configured to identify the presence or absence of leaks in the FWN. The leak signature is compared, in real-time, to historical leak signatures associated with historical leaks. A determination is made, based on the comparing, the presence or the absence of a leak in the FWN. Upon determining the presence of the leak, a notification of the leak is automatically provided. Upon determining the absence of the leak, monitoring of the FWN for leaks is continued.