Dragos, Inc. has acquired Phosphorus Cybersecurity Inc. for an undisclosed amount. Phosphorus Cybersecurity® is a leading xIoT security and management platform, specializing in proactively managing the expanding IoT, OT, and IoMT attack surface. Its platform discovers and secures unknown and unmanaged devices across the extended Internet of Things landscape, providing high-fidelity discovery, risk assessment, proactive hardening, remediation, and continuous monitoring and management.
This acquisition marks a strategic expansion for Dragos, Inc., which focuses on industrial cybersecurity. By integrating Phosphorus's capabilities, Dragos aims to extend its reach beyond traditional operational technology (OT) environments into the broader xIoT domain. Phosphorus's patented xIoT Intelligent Active Discovery and risk assessment, coupled with its automated remediation of significant xIoT device and operational risks-including inaccurate asset inventory, default credentials, and vulnerable firmware-will complement Dragos's existing offerings.
The strategic rationale behind this move is to create a more comprehensive security solution for customers facing an increasingly complex threat landscape. The combination of Dragos's industrial cybersecurity expertise with Phosphorus's specialized xIoT security and management platform is expected to deliver enhanced visibility, risk assessment, and automated remediation across a wider array of connected devices. This synergy will enable organizations to better secure their converging IT, OT, and xIoT infrastructures.
The combined entity will offer a unified approach to managing and securing the full spectrum of connected devices, from critical industrial control systems to the myriad of IoT, OT, and IoMT devices. This integration is poised to provide customers with robust tools to address critical vulnerabilities, improve asset inventory accuracy, and enforce security policies across their entire digital footprint.
Looking forward, the acquisition positions Dragos to deliver a more integrated and proactive security posture for organizations navigating the complexities of modern industrial and extended IoT environments. The combined strengths are expected to enhance operational resilience and provide a more complete defense against evolving cyber threats targeting the expanding attack surface.