Dragos
Dragos is an industrial cybersecurity company providing OT-native asset visibility, threat detection, vulnerability management, and incident response for critical infrastructure operators across electric, oil and gas, water, manufacturing, and federal sectors.
- Company typePrivate
- Founded2016
- HeadquartersHanover, United States
- Headcount501–1,000
- GTM typeB2B
- OfferingSoftware
What Dragos does
Dragos, founded in 2016 and headquartered in the Washington, DC / Maryland metro area, is an industrial cybersecurity company purpose-built for operational technology (OT) and industrial control system (ICS) environments. The company's core offering, the Dragos Platform, delivers passive-first network monitoring with deep packet inspection across 600+ industrial protocols, asset visibility, vulnerability management, threat detection, and OT-native incident response workflows. It is anchored on the Dragos Intelligence Fabric — a proprietary knowledge base aggregating 5+ petabytes of OT telemetry, research on 26+ named OT threat groups, and more than a decade of incident response data. In June 2026 the company launched EmberAI, a generative AI assistant embedded in the platform that exposes this corpus through natural-language queries while keeping customer data on-platform. The portfolio is extended by acquired capabilities including NP-View (network configuration analysis, from the October 2024 Network Perception acquisition) and Phosphorus (connected-device discovery and remediation for xOT environments, acquired June 2026).
Dragos monetizes primarily through multi-year enterprise subscriptions for the Dragos Platform, recurring subscriptions to Dragos WorldView OT threat intelligence, and a hybrid credit/consumption plus subscription model for RFI/Concierge services. A meaningful professional and managed services layer — OT Cybersecurity Assessments, Red Team / Purple Team exercises, Threat Baselines & Tabletop Exercises, the Rapid Response Retainer (Essential 80 hrs, Standard 160 hrs, Enhanced 240 hrs), and the OT Watch / OT Watch Complete managed detection and response services — supplements platform revenue. Pricing is quote-based and not publicly disclosed. Go-to-market combines enterprise field sales anchored on platform demos, a global channel/SI ecosystem (Accenture as majority owner pending close, Microsoft Azure Marketplace, AWS, CrowdStrike, ServiceNow, Splunk, Fortinet, Yokogawa, Emerson, Rockwell, SEL, GuidePoint, Optiv, WWT, Carahsoft, Macnica), heavy event-led demand generation (DISC, Dragos Forums, RSAC, DTECH), and community programs (OT-CERT, Neighborhood Keeper, Dragos Academy).
The company serves critical infrastructure operators across electric utilities, oil and gas, water and wastewater, manufacturing, federal/public sector/defense, transportation, pharmaceuticals, food and beverage, mining, and chemicals. On June 18, 2026 Accenture announced an agreement to acquire a majority stake in Dragos at a $3.25 billion valuation alongside full acquisitions of runZero and NetRise for a combined enterprise value of approximately $4.175 billion, with closing expected in August or September 2026. Until close, Dragos operates independently under founder and CEO Robert M. Lee.
Dragos firmographics
Firmographics- Name
- Dragos
- Legal name
- Dragos, Inc.
- Website
- https://dragos.com
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 501–1,000 employees
- Short description
- Dragos is an industrial cybersecurity company providing OT-native asset visibility, threat detection, vulnerability management, and incident response for critical infrastructure operators across electric, oil and gas, water, manufacturing, and federal sectors.
- Ownership category
- akta.pro rank
Dragos industry classification
Industry- Product category
- OT/ICS Cybersecurity Platform
- akta.pro primary industry
- Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)
Keywords
Where Dragos is headquartered
LocationHeadquarters
- HQ city
- Hanover
- HQ country
- United States
- HQ region
- North America
Offices5 records
Markets served
Dragos business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations
Revenue model
- Dragos Platform subscriptions: Recurring software/platform subscriptions for the Dragos Platform (Asset Visibility, Vulnerability Management, Threat Detection, Response Playbooks, EmberAI) deployed as appliances and software across customer OT environments. Drives the bulk of recurring revenue.
- Professional and Managed Services: OT Cybersecurity Assessments (Architecture Review, CADR, OTCA), Red Team / Penetration Testing / Purple Team services, Threat Baselines and Tabletop Exercises, Incident Response Retainers (Rapid Response Retainer with Essential/Standard/Enhanced tiers of 80/160/240 hours), and OT Watch managed detection and response (24/7 monitoring, threat hunting, expert escalation).
- Threat Intelligence Subscriptions (WorldView, RFI, Concierge): Recurring subscription to Dragos WorldView OT-exclusive threat intelligence plus on-demand Request for Intelligence (RFI) credit/consumption model and ongoing Concierge Services subscription tiers that deliver tailored OT intelligence and analyst access.
- Training and Education (Dragos Academy): On-demand training, courses, and certifications delivered through Dragos Academy for OT/ICS defenders, contributing to recurring and one-time training revenue.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Multi-year contract | Enterprise platform + services — quote-based, not publicly disclosed |
| Hybrid | Annual | WorldView RFI (consumption) and Concierge (subscription tiers) |
Go-to-market motion4 records
Distribution channels6 records
Marketing channels7 records
Dragos product offering
Product offeringCore offering
Dragos sells the Dragos Platform, an OT-native cybersecurity platform providing asset visibility, vulnerability management, threat detection, and incident response across IT, OT, IoT, and IIoT environments, supported by deep packet inspection of 600+ industrial protocols and the proprietary Dragos Intelligence Fabric. The platform is augmented by EmberAI (an OT-native AI assistant launched June 2026), managed services (OT Watch, Rapid Response Retainer), professional services (OT Cybersecurity Assessments, Red Team Services, Tabletop Exercises), and threat intelligence subscriptions (Dragos WorldView).
Product overview
Dragos operates a unified cybersecurity platform-plus-modules architecture purpose-built for operational technology (OT) and industrial control system (ICS) environments, complemented by a deep portfolio of professional and managed services and threat intelligence products. The core offering, The Dragos Platform, is anchored by modules for Asset Visibility, Vulnerability Management, Threat Detection, Network Monitoring, Investigation & Incident Response, and Neighborhood Keeper collective defense. In June 2026, Dragos added EmberAI, an OT-native generative AI assistant embedded in the Platform that overlays the Dragos Intelligence Fabric (5+ petabytes of OT telemetry, research on 26+ OT threat groups, 600+ protocols) onto customer environments via natural-language queries. The portfolio is extended by acquired capabilities including NP-View (network configuration analysis from the 2024 Network Perception acquisition) and Phosphorus (connected-device discovery and remediation acquired in 2026). Dragos's service layer includes OT Watch and OT Watch Complete (managed threat hunting and 24/7 monitoring), the Rapid Response Retainer (SLA-backed incident response), OT Cybersecurity Assessments, Red Team Services, and Threat Baselines & Tabletop Exercises. The intelligence layer comprises Dragos WorldView and WorldView Concierge & RFI, delivered as Knowledge Packs into the Platform. The annual OT/ICS Cybersecurity Year in Review report and the Dragos Academy training program complete the offering. In June 2026, Accenture announced a $4.175 billion deal (with a $3.25 billion Dragos valuation) to acquire a majority stake in Dragos alongside runZero and NetRise, with Dragos continuing to operate independently under CEO Robert M. Lee.
Differentiator
Problem solved
Functional benefit
Brands
- Dragos Platform: The xOT cybersecurity platform delivering real-time threat detection, asset visibility, vulnerability management, and incident response for industrial environments
- EmberAI
- Dragos WorldView
- Neighborhood Keeper
- OT Watch
- Dragos Academy
- Dragos Rapid Response Retainer
Products and services
- The Dragos Platform OT-native cybersecurity platform delivering asset visibility, vulnerability management, threat detection, network monitoring, and incident response across IT, OT, IoT, and IIoT assets. Supports deep packet inspection of 600+ industrial protocols, protects 7.8 million assets across hundreds of industrial facilities, and underpins critical infrastructure serving 507 million lives. Now integrated with EmberAI for AI-augmented analyst workflows.
- EmberAI OT-native AI assistant embedded inside the Dragos Platform, trained on the Dragos Intelligence Fabric (5+ petabytes of OT telemetry, 26+ OT threat groups, 10+ years of incident response). Provides natural-language querying of assets, alerts, vulnerabilities, and threats, with responses grounded in OT-specific context and human oversight retained over final decisions. Generally available since June 2026.
- OT Watch / OT Watch Complete Proactive threat hunting and 24/7 monitoring service staffed by Dragos experts using the Dragos Platform. OT Watch provides threat hunting, critical escalations, response playbooks, and reporting; OT Watch Complete adds full Platform operation including tuning, alert triage, asset visibility, rogue device identification, vulnerability management, and direct expert access.
- Rapid Response Retainer (OT Incident Response Services) 24/7 OT incident response services with three retainer tiers (Essential 80 hrs, Standard 160 hrs, Enhanced 240 hrs). Platform customers receive first contact within 1 hour, analysis within 2-4 hours, and onsite response within 48 hours. Unused hours can be applied to proactive services such as architecture reviews, penetration testing, and tabletop exercises.
- OT Cybersecurity Assessment Comprehensive OT security evaluation with four modular options (Compromise Assessment, Architecture Review, CADR, OTCA) ranging from foundational to comprehensive. Includes documentation reviews, interviews, technical analysis, crown jewel analysis, IOC sweeps, threat discovery, and platform-enhanced visibility using the Dragos Platform.
- Red Team Services OT-specific security validation services including Network Vulnerability Assessments (3-5 days), Penetration Testing (5-10 days), and Purple Team Exercises (3-5 days) leveraging Dragos threat intelligence and the Dragos Platform. Designed to identify hidden attack paths and validate security controls without disrupting operations.
- Threat Baselines & Tabletop Exercises Expert-led workshops using real-world attack scenarios (trusted vendor compromise, ransomware, PIPEDREAM, etc.) to evaluate incident response readiness across electric, oil and gas, water, transportation, manufacturing, and other critical sectors. Includes threat briefing packs, facilitator handbooks, participant materials, and post-exercise reports.
- Dragos WorldView OT-exclusive threat intelligence service covering 26+ named threat groups, ICS malware analysis (TRISIS, PIPEDREAM, FrostyGoop), and vulnerability insights with MITRE ATT&CK for ICS mapping. Delivers adversary research, prioritized vulnerability guidance, and timely reports; intelligence is integrated into the Dragos Platform as Knowledge Packs.
- WorldView RFI & Concierge Tailored OT cyber threat intelligence services. RFI (Requests for Intelligence) provides on-demand answers on a credit/consumption model; Concierge offers subscription-based ongoing partnership with Dragos analysts providing continuous guidance, prioritized hunts, mitigations, and executive briefings mapped to MITRE ATT&CK for ICS.
- NP-View (Network Perception) Network configuration analysis technology acquired from Network Perception (October 2024). Analyzes network segmentation and access paths to support regulatory compliance and threat detection in critical sectors including electric, oil and gas, and manufacturing. Combines real-time network traffic monitoring with detailed network configuration analysis.
- Phosphorus (Connected Device Security) Connected-device discovery and remediation platform acquired in June 2026. Provides automated capabilities for device discovery, risk assessment, password rotation, firmware updates, certificate management, and configuration hardening for billions of connected devices across critical infrastructure environments. Operates as a Dragos business unit under Sonu Shankar as General Manager.
Quantifiable outcome
- 507 million lives protected by the Dragos Platform
- +7 more outcomes
Companies that use Dragos
Customer profileNamed customers12 records
Segments8 records
Ideal customer profiles5 records
Dragos technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration2 records
AI capability8 records
Feature7 records
Dragos partnerships and signals
Strategic signalPartnerships
27 partnerships are on record, tiered flagship - majority owner and core strategic partner, flagship public-sector / middle east partner, flagship technology partner, featured channel/si partner, major technology partner, technology integration partner, strategic ot automation partner, featured public-sector channel partner, strategic japan channel partner, ot technology partner, channel partner, strategic ot technology partner, channel/si partner, strategic partner (joint ot cybersecurity solution), strategic ai access partner, strategic acquired company, strategic acquisition target (accenture deal), strategic grid partner and european institutional partner context.
- Accentureflagship - majority owner and core strategic partnerAccenture agreed to acquire a majority stake in Dragos at a $3.25B valuation and fully acquire runZero and NetRise for a combined enterprise value of ~$4.175B. The three companies combine Dragos OT threat detection, runZero asset intelligence, and NetRise firmware/supply chain visibility into a unified OT cybersecurity platform; transactions expected to close August/September 2026. Dragos continues to operate independently under CEO Robert M. Lee.
- UAE Cyber Security Councilflagship public-sector / middle east partnerDragos and the UAE Cyber Security Council announced a public-private partnership under the 'Make it in the Emirates' Forum to establish an OT Cyber Security Centre of Excellence in the UAE. The center will provide a specialized OT environment for practitioners to simulate real-world attack and defense scenarios, supporting the UAE's ambition to localize advanced cybersecurity capabilities and build a world-class cyber workforce.
- Microsoftflagship technology partnerDragos is on the Microsoft Azure Marketplace and sends OT threat data into Microsoft Sentinel for unified IT-to-OT detection. Microsoft and Dragos announced expanded partnership at DTECH 2026 alongside GE Vernova, Hitachi Energy, Itron, and Schneider Electric for grid modernization solutions including cybersecurity.
- World Wide Technology (WWT)featured channel/si partnerFeatured Dragos partner providing OT security delivery through expert integration, pairing proven systems integration and managed services with the Dragos Platform from architecture through ongoing operations.
- AWS (Amazon Web Services)major technology partnerAWS is listed as a Dragos partner in the AI for OT Security partner ecosystem, supporting Dragos Platform deployments and integrations in cloud environments.
- CrowdStrikemajor technology partnerCrowdStrike is a Dragos technology partner in the OT/IT integration ecosystem; Dragos and CrowdStrike Services jointly offer architecture review datasheets and IT-OT detection integration.
- ServiceNowtechnology integration partnerServiceNow is listed as a Dragos partner for workflow and security orchestration integrations with the Dragos Platform.
- Fortinettechnology integration partnerFortinet is a listed Dragos technology partner for network security and OT/IT integration use cases.
- Yokogawastrategic ot automation partnerYokogawa announced a cybersecurity collaboration with Dragos, integrating Dragos OT cybersecurity with Yokogawa's distributed control systems for industrial automation customers.
- GuidePoint Securityfeatured channel/si partnerGuidePoint Security is a listed Dragos partner providing cybersecurity products and services to enterprise and public-sector customers.
- Carahsoftfeatured public-sector channel partnerCarahsoft is Dragos's featured public-sector distribution partner, supporting procurement of Dragos solutions by federal, state, and local government agencies.
- Macnicastrategic japan channel partnerMacnica is Dragos's channel partner in Japan, supporting the formal expansion of Dragos's presence in the Japanese industrial and critical infrastructure market under Country Manager Kaori Nieda.
- Schweitzer Engineering Laboratories (SEL)ot technology partnerSEL is a listed Dragos technology partner for OT network and protection systems in the electric utility sector.
- SHI Internationalchannel partnerSHI is listed as a Dragos partner for IT procurement and reselling to enterprise customers.
- GE (General Electric / GE Vernova)strategic ot technology partnerGE / GE Vernova is a Dragos partner; at DTECH 2026, Microsoft announced expanded partnership with Dragos alongside GE Vernova, Hitachi Energy, Itron, and Schneider Electric to deliver interoperable grid modernization solutions across planning, operations, and cybersecurity.
- Splunkmajor technology partnerSplunk is a listed Dragos technology partner, with Dragos Platform integrating OT threat data into Splunk for enterprise SOC visibility.
- Optivchannel/si partnerOptiv is a listed Dragos partner providing security solutions and integration services to enterprise clients.
- Corshastrategic partner (joint ot cybersecurity solution)Corsha and Dragos announced a strategic partnership to deliver combined OT cybersecurity solutions, with Corsha's machine identity and Dragos's OT platform addressing authentication and access for industrial environments.
- Anthropic (Project Glasswing)strategic ai access partnerDragos is a confirmed participant in Anthropic's Project Glasswing program with early access to the Mythos AI model for hunting software vulnerabilities; Dragos has continued using Anthropic products despite the US Defense Secretary's designation of Anthropic as a supply-chain risk, with CEO Robert M. Lee stating Dragos will not stop using Anthropic AI products unless ordered.
- Phosphorus Cybersecuritystrategic acquired companyDragos acquired Phosphorus Cybersecurity in June 2026 to extend its OT cybersecurity platform to connected devices across xOT (extended operational technology) environments. Phosphorus brings automated device discovery, password rotation, firmware updates, certificate management, and configuration hardening capabilities. President and COO Sonu Shankar continues as General Manager within Dragos.
- Network Perceptionstrategic acquired companyDragos acquired Network Perception in October 2024, integrating NP-View technology into the Dragos Platform to enhance OT network visualization, segmentation analysis, vulnerability detection, and regulatory compliance for electric, oil and gas, and manufacturing sectors.
- runZerostrategic acquisition target (accenture deal)Accenture announced acquisition of 100% of runZero alongside the majority stake in Dragos and acquisition of NetRise, for a combined enterprise value of ~$4.175B. runZero provides asset discovery and attack-surface intelligence, integrating with Dragos's OT threat detection into a unified OT cybersecurity platform.
- NetRisestrategic acquisition target (accenture deal)Accenture announced acquisition of 100% of NetRise alongside the majority stake in Dragos and acquisition of runZero, for a combined enterprise value of ~$4.175B. NetRise provides firmware and software supply chain visibility, integrating with Dragos's OT threat detection and runZero's exposure assessment into a unified OT cybersecurity platform.
- Hitachi Energystrategic grid partnerHitachi Energy was announced as a partner alongside Dragos, GE Vernova, Itron, and Schneider Electric at DTECH 2026 in collaboration with Microsoft, delivering interoperable grid modernization solutions including cybersecurity for utilities.
- Itronstrategic grid partnerItron is a partner alongside Dragos in the Microsoft-led DTECH 2026 expanded partnership to deliver grid modernization solutions across planning, operations, and cybersecurity for utilities.
- Schneider Electricstrategic grid partnerSchneider Electric is a partner alongside Dragos in the Microsoft-led DTECH 2026 expanded partnership to deliver grid modernization solutions including cybersecurity for utilities.
- ENISA (European Union Agency for Cybersecurity)european institutional partner contextENISA, the EU cybersecurity agency, signed a €36 million agreement with the European Commission in 2025 to support cyber incident response in critical sectors; Dragos is referenced as an ENISA-adjacent context in European critical infrastructure cybersecurity coordination.
Scale indicators15 records
Recent moves8 records
Expansion highlights8 records
Dragos competitors and assessment
Company assessmentBroad incumbents
- Palo Alto Networks (OT Security):
- Cisco (Cyber Vision): Cisco Cyber Vision provides OT asset visibility and threat detection as part of Cisco's industrial networking portfolio. As a broad incumbent, Cisco bundles OT security with its industrial switches/routers, creating competitive pricing pressure against pure-play OT vendors like Dragos.
Direct peers
- Claroty: Closest direct competitor to Dragos in OT cybersecurity. Claroty offers asset discovery, vulnerability management, and threat detection for industrial environments, with strong CTD (Continuous Threat Detection) and SRA (Secure Remote Access) products serving the same electric, oil & gas, water, and manufacturing customer base as Dragos.
- Nozomi Networks: Direct competitor providing OT and IoT security with passive network monitoring, asset visibility, and threat detection across industrial protocols. Nozomi targets similar critical infrastructure customers and competes head-to-head in Gartner's CPS Protection Platforms Magic Quadrant.
- Armis: Asset intelligence and cybersecurity platform for OT, IoT, and connected medical devices. Armis competes with Dragos in asset visibility and threat detection for industrial environments and has expanded aggressively into OT, including a Centrix contract win in critical infrastructure.
- Tenable (OT Security): Tenable OT Security (formerly Indegy) provides OT asset discovery, vulnerability management, and threat detection for industrial control systems. Competes directly with Dragos Platform in the same verticals and was recently recognized as a Leader alongside Dragos in the Gartner CPS Protection Platforms Magic Quadrant.
Market position
Strengths5 records
Weaknesses4 records
Competitive moat8 records
Key risks6 records
Key highlights7 records
Customer concentration
Dragos social profiles
Digital presenceDragos compliance and trust
Trust signalCompliance3 records
Dragos financial estimates
Financial estimateRevenue estimate
Valuation estimate
Dragos leadership team
Management profileNumber of profiles
Profiles16 records
Dragos subsidiaries and ownership
Company hierarchySubsidiaries2 records
Dragos funding detail
Funding detailFunding overview
Funding rounds7 records
Investors18 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Dragos M&A and investment
M&A and investmentM&A5 records
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Dragos
What does Dragos do?
Dragos sells the Dragos Platform, an OT-native cybersecurity platform providing asset visibility, vulnerability management, threat detection, and incident response across IT, OT, IoT, and IIoT environments, supported by deep packet inspection of 600+ industrial protocols and the proprietary Dragos Intelligence Fabric. The platform is augmented by EmberAI (an OT-native AI assistant launched June 2026), managed services (OT Watch, Rapid Response Retainer), professional services (OT Cybersecurity Assessments, Red Team Services, Tabletop Exercises), and threat intelligence subscriptions (Dragos WorldView).
Is Dragos a public or private company?
Dragos is a private company. It is classified as venture growth investor backed and is currently operating.
When was Dragos founded?
Dragos was founded in 2016. It employs 501 to 1,000 people.
Where is Dragos based?
Dragos is headquartered in Hanover, United States, in the North America region.
How does Dragos make money?
Four revenue lines are on record. Dragos Platform subscriptions are the primary driver. The others are professional and Managed Services, threat Intelligence Subscriptions (WorldView, RFI, Concierge) and training and Education (Dragos Academy).
Who are Dragos's main competitors?
Broad incumbents on record are Palo Alto Networks (OT Security) and Cisco (Cyber Vision). Direct peers are Claroty, Nozomi Networks, Armis and Tenable (OT Security).
Does Dragos have an API?
Yes. Dragos offers the Dragos Platform MCP Server, which allows organizations to connect their enterprise AI tools directly to Platform data. The MCP server exposes Dragos OT telemetry, asset data, vulnerability intelligence, and threat research to AI tools. The platform also integrates with SIEM systems, SOAR platforms, and TIP (threat intelligence platforms) for intelligence and indicator ingestion.
What industry is Dragos in?
Dragos's product category is OT/ICS Cybersecurity Platform. Its primary akta.pro industry code is BPAEADAL, Data Security & Privacy Managed Services (DLP/Encryption).