Who is Dragos?
Dragos is an industrial cybersecurity company focused on protecting Operational technology (OT) and industrial control system environments for critical infrastructure and manufacturing operators.
- Platform-based monitoring and threat detection for industrial control systems (ICS security / OT security)
- Threat intelligence services focused on ICS/OT adversaries and attack campaigns (threat intelligence)
- Incident response and compromise assessment services for industrial environments (incident response)
- Professional services for architecture assessment, threat hunting, and security program development in OT networks (security services)
- Training and community resources for ICS/OT cybersecurity practitioners (training and enablement)
Show more
More About Dragos
Dragos focuses on cybersecurity for OT and industrial control system (ICS) environments used in sectors such as electric utilities, oil and gas, manufacturing, water, and transportation. Its offerings are deployed in environments that operate physical processes, including Supervisory Control and Data Acquisition (SCADA) systems, distributed control systems (DCS), and other automation and safety platforms common in industrial networks.
The Dragos platform (ICS/OT security) provides asset visibility, network monitoring, and threat detection tailored to industrial protocols and control networks. It ingests telemetry from OT network traffic and other data sources to identify malicious activity, misconfigurations, and vulnerabilities within ICS and OT environments. The platform maps detections to threat behaviors and industrial-specific adversary techniques so that security teams and engineers can triage and respond in coordination with operations personnel.
Dragos threat intelligence services (threat intelligence) focus on adversary groups, malware, and campaigns targeting ICS and OT systems. These services provide reporting, indicators, and analytic context that security teams use within Security Operations (SecOps) centers (SOCs), industrial SOCs, and incident response workflows. The intelligence is oriented to industrial protocols, engineering assets, and process-oriented impacts rather than only IT endpoints.
The company also provides incident response and professional services (incident response / security services) for industrial operators. These services typically include compromise assessments of OT networks, incident handling in the event of ICS-related intrusions, architecture reviews, and guidance for segmentation and hardening of control system networks. Engagements commonly involve collaboration between cybersecurity teams, control engineers, and plant operations staff to align security measures with process safety and availability requirements.
From an enterprise architecture perspective, Dragos is positioned in the OT security and ICS monitoring segment, adjacent to but distinct from traditional IT security tools. Its technology is designed to integrate with existing Security Information and Event Management (SIEM) platforms, ticketing systems, and SOC workflows while maintaining awareness of constraints in industrial environments, such as legacy devices, proprietary protocols, and strict uptime requirements.
Dragos offerings make use of and monitor industrial protocols and technologies common in ICS networks, such as Modbus, DNP3, and various vendor-specific control system protocols. The platform and services are typically deployed alongside firewalls, intrusion detection systems, and endpoint tools but are tuned for process control networks, engineering workstations, programmable logic controllers (PLCs), and safety instrumented systems (SIS). In a directory or marketplace taxonomy, Dragos aligns to categories such as ICS/OT security, industrial threat detection, industrial threat intelligence, and OT incident response and advisory services.
Our description of Dragos. Updated December 2025.
