Dragos buys Phosphorus to protect expanded OT networks

Dragos has completed the acquisition of Phosphorus, a move that significantly expands the reach of the Dragos Platform into the vast ecosystem of connected devices embedded in critical infrastructure and industrial networks. Traditional operational technology (OT) perimeters no longer define the full attack surface. Today, power grids, pipeline monitoring systems, and manufacturing floors are filled with billions of sensors, controllers, and edge devices that sit outside conventional security visibility.

By integrating Phosphorus’s technology, Dragos aims to close that gap. The combined platform now offers unified visibility and protection across both traditional OT assets and the rapidly expanding universe of Internet of Things (IoT) and cyber-physical devices. This is a direct response to the reality that adversaries increasingly target these less-guarded endpoints to gain footholds in critical environments.

Phosphorus brings a specialized capability for device discovery, inventory, and vulnerability management across a wide range of embedded systems. Instead of relying on agents or traditional scanning methods that can disrupt fragile industrial processes, the technology uses passive and low-impact techniques to identify and assess risk on devices that were never designed for security monitoring.

The acquisition signals a broader industry shift. As industrial operators digitize more of their physical operations, the boundary between IT, OT, and IoT blurs. Security teams can no longer afford to treat these as separate domains. Dragos is betting that its customers need a single pane of glass to understand threats across every connected device in their operational environment, from a programmable logic controller to a smart sensor monitoring pipeline pressure.

Financial terms of the deal were not disclosed. The integration of Phosphorus’s technology into the Dragos Platform is already underway, with early access available to select customers.