Dragos Acquires Phosphorus to Expand xOT Device Security

Why It Matters

By bringing device‑level remediation into its portfolio, Dragos can protect the expanding attack surface of critical‑infrastructure environments, positioning itself as a one‑stop solution for OT and xOT security.

Key Takeaways

• Dragos adds Phosphorus to secure billions of xOT devices
• Acquisition lifts Dragos TAM to over $50 bn
• Phosphorus enables automated remediation like password rotation and firmware updates
• Integration expands Dragos visibility from OT networks to edge devices
• Sonu Shankar remains GM, guiding phased integration

Pulse Analysis

The convergence of traditional operational technology with consumer‑grade connected devices has created a sprawling "Extended OT" (xOT) landscape that traditional security tools struggle to monitor. Power grids, pipelines and manufacturing plants now host millions of sensors, controllers and IoT endpoints, each presenting a potential entry point for attackers. As these devices proliferate, the need for continuous discovery, risk scoring and automated remediation has become a strategic priority for operators seeking to maintain uptime and regulatory compliance.

Dragos’ purchase of Phosphorus directly addresses that gap. Phosphorus offers a platform that can automatically discover devices across OT and enterprise networks, assign contextual risk, and execute remediation workflows such as password rotations, firmware patches, and certificate renewals without requiring architectural changes. By integrating these capabilities into Dragos’ existing threat‑intel and network‑visibility engine, customers gain a unified view that spans from high‑level network topology down to individual device configurations, dramatically reducing the time to detect and neutralize threats.

The acquisition also reshapes the competitive dynamics of the industrial cybersecurity market. With an estimated total addressable market now exceeding $50 billion, Dragos positions itself alongside larger players like Palo Alto Networks and Fortinet, while differentiating through its deep OT expertise and now comprehensive xOT coverage. The move signals to investors and customers that securing the full device ecosystem—not just the traditional PLCs and SCADA systems—is becoming a baseline expectation for critical‑infrastructure protection. Future product roadmaps are likely to emphasize AI‑driven risk prioritization and tighter integration with cloud‑based compliance frameworks, further cementing Dragos’ role as a holistic security platform for the evolving industrial landscape.

Deal Summary

Dragos announced it has completed the acquisition of Phosphorus, a connected‑device security firm, to extend its OT cybersecurity platform into the extended operational technology (xOT) space. The deal adds Phosphorus’s discovery and remediation capabilities, giving Dragos broader device visibility and automated remediation across critical infrastructure. The purchase price was not disclosed.