Dragos has acquired Phosphorus in a move designed to extend its protection capabilities across the full extended operational technology (xOT) environment.
The acquisition adds Phosphorus’s device discovery and remediation capabilities to the Dragos Platform, broadening the company’s ability to secure the billions of connected devices embedded across critical infrastructure and other operational networks. With the deal, Dragos now estimates its total addressable market at more than $50bn.
Operational environments have evolved significantly beyond traditional OT boundaries. Power grids, pipelines, manufacturing facilities, and data centres now rely on a diverse and growing mix of connected devices and digital systems. Dragos describes this broader landscape — encompassing both OT systems and connected devices — as the xOT environment. The company argues that adversaries are already operating across it, and that defenders require wider visibility, intelligence, and control to mount an effective response.
Phosphorus offers what the company describes as the sector’s most comprehensive discovery and remediation platform for connected devices. The platform integrates with existing customer infrastructure without requiring major architectural changes, actively discovers devices across OT and enterprise environments, and provides detailed risk context and situational awareness. It also automates remediation workflows — including password rotations, firmware updates, certificate management, and configuration hardening — while supporting compliance management and risk reduction at scale.
Dragos customers will gain expanded asset visibility and integrated device intelligence in the near term, with automated remediation workflows and a unified platform experience to follow. Existing Phosphorus customers will continue to receive full support, with access to Dragos offerings expanding as integration progresses. Phosphorus president and COO Sonu Shankar will remain in post as a general manager within Dragos, overseeing a structured, phased integration.
The acquisition builds on Dragos’s October 2024 purchase of Network Perception, which brought OT network visibility, segmentation validation, and compliance capabilities to the Dragos platform. Where Network Perception focuses on mapping and securing network architecture, Phosphorus addresses the security of the devices operating on it.
Dragos CEO and co-founder Robert M. Lee said, “The connected devices you find everywhere in critical infrastructure are largely invisible to the cybersecurity programs that protect operational environments. With Phosphorus, we close that gap and secure xOT, the full environment that matters.”
Phosphorus president and COO Sonu Shankar said, “We built Phosphorus to solve the connected device problem — the unmanaged devices, the default credentials, the firmware no one was updating. Together with Dragos, we can solve it with a depth and scale that wasn’t possible before. That’s what the next generation of OT cybersecurity looks like.”
Copyright © 2026 RegTech Analyst
Copyright © 2018 RegTech Analyst
