Dragos acquires Phosphorus to expand OT security across connected devices

Dragos has acquired Phosphorus to extend its operational technology security platform across the broader xOT environment, which includes traditional OT systems as well as the connected devices now embedded across critical infrastructure, manufacturing, energy, transportation, water, data centers, and other operational networks.

The deal gives Dragos deeper visibility into devices that often sit outside traditional OT security programs. These can include unmanaged connected assets, devices with default credentials, outdated firmware, weak certificates, or configuration issues that create risk across operational environments. As more industrial and critical infrastructure environments depend on connected devices, security teams need a clearer view of what is running across those networks and how those assets are being managed.

Phosphorus brings discovery and remediation capabilities for connected devices across OT and enterprise environments. Its platform supports device visibility, risk context, and automated remediation workflows, including password rotation, firmware updates, certificate management, and configuration hardening. Dragos said customers will gain expanded asset visibility and device intelligence first, with automated remediation workflows and a unified platform experience to follow as the integration progresses.

The acquisition also builds on Dragos’ October 2024 acquisition of Network Perception, which added OT network visibility, segmentation validation, and compliance capabilities to the Dragos platform. With Phosphorus, Dragos is adding device-level security to that broader OT security strategy. Phosphorus customers will continue to receive support, and Sonu Shankar will lead the Phosphorus business as general manager within Dragos during the phased integration.