Dragos

Dragos has completed its acquisitions of NetRise and runZero, expanding its industrial cybersecurity platform with exposure management and software supply chain security capabilities following the closing of Accenture’s majority investment in the company earlier this year. The acquisitions bring together three previously separate areas of cybersecurity within the Dragos Platform: operational technology asset visibility and threat detection, exposure management across IT, OT and cloud environments, and visibility into the firmware and software supply chain underlying connected devices.

Dragos said the combination will enable critical infrastructure organizations to see and defend their full extended operational technology, or xOT, environments. The company defines xOT broadly to encompass connected devices, networks, cloud infrastructure, software supply chains and the operational systems responsible for physical processes. Alongside the acquisitions, Dragos co-founder and CEO Robert M. Lee has been named Chairman of the Board. He will continue serving as CEO. Dragos will remain independently operated under its existing leadership team following Accenture’s majority investment.

The company said maintaining vendor neutrality is important because critical infrastructure environments typically rely on technologies from numerous equipment and software providers. The full NetRise and runZero teams are joining Dragos. runZero CEO HD Moore, NetRise CEO Thomas Pace and NetRise CTO and Chief Scientist Michael Scott will lead the integration of their respective technologies into the Dragos Platform while continuing to support existing customers. runZero adds asset discovery and exposure management capabilities that can aggregate IT, OT and cloud asset information from sources customers already use.

That technology is intended to give security teams a more complete inventory of the systems operating throughout an organization, including devices that may otherwise be difficult to identify or monitor. Understanding what assets exist has become increasingly challenging as industrial environments become connected to enterprise networks, cloud services, remote-management systems and other technologies. Dragos plans to combine runZero’s capabilities with its existing OT asset visibility and cybersecurity technology to create a more comprehensive inventory across these connected environments.

NetRise expands the platform in a different direction by analyzing the firmware and software operating inside devices. Its technology is designed to identify risks within software components, including outdated libraries, known vulnerabilities and hardcoded credentials. For organizations operating critical infrastructure, that visibility can provide a deeper understanding of risks that exist beneath the device level and may not be apparent from traditional network monitoring. NetRise can also help organizations develop the documentation required for cybersecurity and regulatory programs, including requirements associated with NERC CIP, NIS2 and Transportation Security Administration directives.

Together, the acquisitions extend Dragos’ visibility from the underlying firmware inside devices through operational networks and into enterprise IT and cloud infrastructure. Dragos argues that this broader approach has become necessary as the traditional separation between operational systems and other technology environments continues to disappear. Industrial cybersecurity historically operated around the assumption that many operational systems were isolated, or “air-gapped,” from external networks. In modern environments, however, industrial equipment increasingly connects with enterprise applications, cloud infrastructure, wireless systems and internet-connected devices.

That connectivity can improve efficiency and operational visibility, but it also expands the number of potential pathways an attacker can use to reach systems controlling physical processes. Dragos serves organizations across industries including electric power, oil and gas, manufacturing, water, transportation, data centers, mining and ports. The company sees protecting the complete xOT environment as increasingly important because attacks against those organizations can affect physical operations rather than only digital information. Earlier this year, Dragos acquired Phosphorus Cybersecurity, expanding its capabilities for identifying and protecting connected devices embedded across critical infrastructure and operational networks.

The NetRise and runZero acquisitions build on that strategy by adding broader exposure management and deeper software supply chain analysis. Dragos is also expanding the data available to its Intelligence Fabric, which combines more than a decade of OT-specific telemetry and incident-response intelligence used throughout the company’s platform. The additional asset, exposure and software information generated through NetRise and runZero will become part of that intelligence environment. Dragos EmberAI, the company’s AI technology developed specifically for operational environments, will also draw from the expanded data.

The company expects the combination to provide security analysts with faster and more detailed guidance when investigating vulnerabilities, exposures and potential threats. The acquisitions follow the completion of Accenture’s majority investment in Dragos in June 2026.