Dragos Acquires Phosphorus to Expand xOT Cybersecurity Coverage

Dragos, a global leader in cybersecurity for operational technology (OT) environments, announced on June 1, 2026, the acquisition of Phosphorus, a company specializing in connected device discovery and remediation. This strategic move expands Dragos’s platform to secure the extended operational technology environment (xOT), which includes billions of connected devices embedded across critical infrastructure and operational networks.

Operational environments such as power grids, pipelines, manufacturing plants, and data centers have evolved beyond traditional OT boundaries. They now rely on a diverse array of connected devices and digital systems, collectively referred to as xOT. This expanded environment presents new cybersecurity challenges, as adversaries increasingly target these connected assets. Dragos’s acquisition of Phosphorus aims to provide comprehensive visibility, intelligence, and control across this broader landscape.

While the financial terms of the deal were not disclosed, Dragos acquired 100% ownership of Phosphorus. The integration will be phased, with Phosphorus’s President and COO, Sonu Shankar, continuing to lead the business as a General Manager within Dragos.

Dragos, headquartered in the Washington, DC area, is renowned for its comprehensive OT cybersecurity platform that delivers asset visibility, continuous monitoring, vulnerability management, segmentation validation, device protection, and real-time threat detection. Phosphorus complements this offering by providing a discovery and remediation platform that actively identifies connected devices across OT and enterprise environments without requiring disruptive infrastructure changes.

Phosphorus’s platform enhances device visibility and automates remediation workflows such as password rotations, firmware updates, certificate management, and configuration hardening. This capability addresses unmanaged devices, default credentials, and outdated firmware—common vulnerabilities in critical infrastructure. Together, the combined platform aims to reduce risk continuously and improve compliance at scale.

Robert M. Lee, CEO and Co-Founder of Dragos, emphasized the importance of securing the full operational environment: “The connected devices you find everywhere in critical infrastructure are largely invisible to the cybersecurity programs that protect operational environments. With Phosphorus, we close that gap and secure xOT, the full environment that matters.” Sonu Shankar added, “We built Phosphorus to solve the connected device problem. Together with Dragos, we can solve it with a depth and scale that wasn’t possible before. That’s what the next generation of OT cybersecurity looks like.”

This acquisition follows Dragos’s October 2024 purchase of Network Perception, which enhanced OT network visibility and compliance capabilities. While Network Perception focuses on mapping and securing network architecture, Phosphorus secures the devices operating within those networks, creating a more unified and comprehensive security solution.

Dragos estimates its total addressable market opportunity at over $50 billion, reflecting the growing demand for cybersecurity solutions that cover the full spectrum of operational technology and connected devices. The acquisition is expected to generate synergies through cross-selling, expanded customer reach, and streamlined operations, although integration challenges such as aligning product roadmaps and maintaining service continuity remain.

Industry analysts note that this move strengthens Dragos’s leadership in OT cybersecurity and may accelerate consolidation and innovation as competitors respond by enhancing their own connected device security offerings.

Looking ahead, Dragos plans to integrate Phosphorus’s capabilities into its platform, delivering expanded asset visibility and automated remediation workflows to customers. Phosphorus clients will continue to receive full support with access to Dragos’s broader offerings as integration progresses.

With this acquisition, Dragos reinforces its mission to safeguard critical infrastructure globally by addressing the evolving threat landscape of the extended operational technology environment.