Dragos Expands its xOT Security Strategy With Phosphorus Acquisition

Dragos’s acquisition of Phosphorus signals a broader push to secure not just traditional OT assets, but also the expanding population of connected devices that increasingly shape modern operational environments.

Dragos announced on June 1 that it has acquired Phosphorus, adding connected-device discovery and remediation capabilities to its OT cybersecurity portfolio. The move extends Dragos beyond its established focus on industrial visibility, threat detection, and network-centric OT defense into a broader xOT model that includes the large and often poorly managed population of embedded and connected devices operating across critical infrastructure environments.

That broader framing matters. In power, oil and gas, manufacturing, transportation, and data center environments, operators increasingly depend on sensors, gateways, building systems, cameras, controllers, and other connected assets that sit adjacent to core control systems but still affect operational resilience. These assets often fall outside traditional OT security programs, creating blind spots in asset visibility, patching, credential hygiene, and configuration management. Dragos is using the term xOT to describe that larger operational footprint and to position the acquisition as a response to how industrial environments are actually evolving.

From a product strategy standpoint, the acquisition is complementary. Phosphorus brings automated capabilities for device discovery, risk assessment, password rotation, firmware updates, certificate management, and configuration hardening across large fleets of connected devices. Those functions address a persistent operational problem: many organizations can identify insecure devices, but far fewer can remediate them consistently at scale without disrupting operations. By bringing those capabilities into the Dragos platform, the company strengthens its position in the part of the market that sits between asset visibility and actual risk reduction.

The deal also reinforces a pattern in Drago’s expansion strategy. Its 2024 acquisition of Network Perception added OT network topology, segmentation validation, and compliance-oriented visibility. The addition of Phosphorus broadens that strategy from understanding network pathways to securing the devices attached to those pathways. In practical terms, this gives Dragos a stronger story around end-to-end xOT coverage, combining network insight with device-level hardening and remediation.