Dragos, a cybersecurity company focused on operational technology (OT) environments, announced the acquisition of Phosphorus, a provider of connected device security solutions. The deal expands Dragos’ platform beyond traditional OT systems to secure the broader Extended Operational Technology (xOT) environment, which includes billions of connected devices embedded across critical infrastructure and operational networks.
According to the company, modern critical infrastructure environments such as power grids, pipelines, manufacturing facilities, and data centers increasingly rely on a diverse mix of connected devices and digital systems. As adversaries target these broader environments, organizations require expanded visibility, intelligence, and control capabilities to defend them effectively.
The acquisition is designed to extend Dragos’ cybersecurity platform with Phosphorus’ device discovery and remediation capabilities. By integrating Phosphorus technology, Dragos aims to provide customers with deeper visibility into connected devices, automated remediation workflows, and continuous risk reduction across operational environments.
Phosphorus offers a platform that discovers and manages connected devices across OT and enterprise environments without requiring major architectural changes. Its capabilities include device visibility, risk assessment, password rotation, firmware updates, certificate management, configuration hardening, and compliance support.
Dragos said customers will initially gain expanded asset visibility and integrated device intelligence, followed by automated remediation workflows and a more unified platform experience as integration progresses. Existing Phosphorus customers will continue to receive support while gaining access to broader Dragos offerings.
As part of the transaction, Phosphorus President and COO Sonu Shankar will remain with the company, serving as General Manager of the Phosphorus business within Dragos during a phased integration process.
The acquisition follows Dragos’ October 2024 purchase of Network Perception, which added network visibility, segmentation validation, and compliance capabilities to the company’s platform. Dragos said the combination of Network Perception’s network architecture security capabilities and Phosphorus’ device security technology further strengthens its ability to protect operational environments. Following the acquisition, Dragos estimates its total addressable market opportunity exceeds $50 billion.
Founded to safeguard critical infrastructure, Dragos provides cybersecurity solutions for sectors including energy, manufacturing, water, transportation, and data centers. The company operates globally across North America, EMEA, and APAC.
KEY QUOTES:
“The connected devices you find everywhere in critical infrastructure are largely invisible to the cybersecurity programs that protect operational environments. With Phosphorus, we close that gap and secure xOT, the full environment that matters.”
Robert M. Lee, CEO and Co-Founder, Dragos
“We built Phosphorus to solve the connected device problem — the unmanaged devices, the default credentials, the firmware no one was updating. Together with Dragos, we can solve it with a depth and scale that wasn’t possible before. That’s what the next generation of OT cybersecurity looks like.”
Sonu Shankar, President and COO, Phosphorus
