Dragos, a leader in operational technology (OT) cybersecurity, has announced its acquisition of Phosphorus, a move that enhances its platform to safeguard the vast array of connected devices integral to critical infrastructure and operational networks.
As OT environments grow beyond traditional boundaries, incorporating a myriad of connected devices, the need for comprehensive security measures becomes increasingly vital. This expanded landscape, known as the Extended Operational Technology environment (xOT), requires heightened visibility, intelligence, and control to effectively counter threats.
Advancing OT Security with Phosphorus
The acquisition of Phosphorus by Dragos aligns with its strategic focus on protecting contemporary operational environments.
Integrating Phosphorus strengthens Dragos's capabilities by securing connected devices across the xOT landscape, enhancing visibility, automating remediation, and fostering continuous risk mitigation. Robert M. Lee, CEO and Co-Founder of Dragos, emphasized the importance of securing the previously overlooked connected devices within critical infrastructure, describing the acquisition as a means to close this security gap.
Enhanced Device Management
Dragos customers will experience improved asset visibility and integrated device intelligence
Sonu Shankar, President and COO of Phosphorus, shared insights into Phosphorus’s mission to address challenges posed by connected devices, such as unmanaged devices and outdated firmware. He stated, "Together with Dragos, we can solve it with a depth and scale that wasn't possible before. That's what the next generation of OT cybersecurity looks like."
Phosphorus offers an advanced discovery and remediation platform that seamlessly integrates with existing systems, enhancing device visibility, delivering comprehensive risk assessments, and maintaining continuous situational awareness.
Integration and Market Expansion
As the integration progresses, Dragos customers will experience improved asset visibility and integrated device intelligence. Phosphorus users will receive ongoing support, with expanded access to Dragos's solutions.
Sonu Shankar will continue to oversee the Phosphorus operations as a General Manager within Dragos, ensuring a phased integration. The acquisition also significantly broadens Dragos's market opportunity, estimated at over $50 billion, augmenting the capabilities added by its previous acquisition of Network Perception, which enhanced OT network visibility and compliance features.
Dragos, the pioneer in cybersecurity for operational technology (OT) environments, announces it has acquired Phosphorus, extending the Dragos Platform to protect the billions of connected devices embedded across critical infrastructure and other operational networks.
Operational environments have outgrown traditional OT boundaries. Extended Operational Technology Traditional and non-traditional assets alike are woven throughout their operational environments. This expanded environment — OT systems and the billions of connected devices that have reshaped how critical infrastructure operates — is the Extended Operational Technology environment, or xOT. Adversaries are already operating across it. Defenders need a broader scope of visibility, intelligence, and control to defend it.
Continuous risk reduction
Dragos's acquisition of Phosphorus reflects a deliberate strategy to protect the full operational environment as it exists and operates today. Dragos offers the industry's most comprehensive OT cybersecurity platform. Adding Phosphorus extends Dragos capabilities to secure connected devices across the full xOT environment, delivering deeper device visibility, automated remediation, and continuous risk reduction.
“The connected devices you find everywhere in critical infrastructure are largely invisible to the cybersecurity programs that protect operational environments,” said Robert M. Lee, CEO and Co-Founder of Dragos. “With Phosphorus, we close that gap and secure xOT, the full environment that matters.”
Disruptive architectural changes
"We built Phosphorus to solve the connected device problem — the unmanaged devices, the default credentials, the firmware no one was updating. Together with Dragos, we can solve it with a depth and scale that wasn't possible before. That's what the next generation of OT cybersecurity looks like," said Sonu Shankar, President and COO of Phosphorus.
Phosphorus offers the industry’s most comprehensive discovery and remediation platform for connected devices, which integrates with customers' existing infrastructure without requiring disruptive architectural changes. The platform actively discovers and provides deep visibility into devices across OT and enterprise environments, delivering detailed risk context and continuous situational awareness across the extended device landscape. Phosphorus automates remediation workflows, including password rotations, firmware updates, certificate management, and configuration hardening, while helping organizations address compliance and reduce risk at scale.
OT network visibility
Dragos customers will gain expanded asset visibility and integrated device intelligence in the near term, with automated remediation workflows and a unified platform experience to follow. Phosphorus customers will continue to be fully supported, with expanded access to Dragos offerings as integration progresses. Sonu Shankar will continue to lead the Phosphorus business as a General Manager within Dragos, through a structured, phased integration.
With the addition of Phosphorus, Dragos estimates its total addressable market opportunity at more than $50 billion. The acquisition builds on Dragos's October 2024 acquisition of Network Perception, which added expanded OT network visibility, segmentation validation, and compliance to the Dragos platform. Where Network Perception maps and secures the network architecture, Phosphorus secures the devices running on it.
