Dragos Acquires NetRise and runZero to Expand xOT Cybersecurity Platform
  • News
  • North America

Dragos Acquires NetRise and runZero to Expand xOT Cybersecurity Platform

Dragos extends to exposure management and software supply chain security post Accenture investment

9/21/2026
Ali Abounasr El Alaoui
Back to News

Dragos, Inc., the global leader in extended operational technology (xOT) cybersecurity, has completed its acquisitions of NetRise and runZero. The acquisitions follow the close of Accenture’s majority investment in Dragos and expand its platform across exposure management and software supply chain security. Dragos also announced that Robert M. Lee, its chief executive officer, has been named chairman of the board.


Extending the xOT Platform

The combined capabilities allow Dragos to offer a more complete view of the extended operational technology environment. runZero contributes asset visibility and exposure management by integrating existing IT, OT, and cloud asset data from sources organizations already operate. NetRise adds visibility into firmware and software, surfacing risks such as outdated components and hardcoded credentials that support compliance with NERC CIP, NIS2, and TSA directives.

Leadership and Integration

Robert M. Lee will continue to lead the company as chairman and chief executive officer, maintaining Dragos’s independent operations and vendor neutrality. runZero chief executive HD Moore, NetRise chief executive Thomas Pace, and NetRise chief technology officer and chief scientist Michael Scott join Dragos with their full teams. They will lead the integration of NetRise and runZero into the Dragos Platform while continuing to serve their existing customers.

Strategic Rationale

Dragos said the world’s largest companies have invested heavily in enterprise IT security, but cyber-physical systems generate revenue and carry national and local security impact. Organizations across electric, oil and gas, manufacturing, data centers, and other critical infrastructure sectors need to defend every system that can influence a physical process. The company defines that extended environment as xOT, and the acquisitions place NetRise, runZero, and Dragos together to defend it.

Market Context

Gartner has noted that the bidirectional cyber-physical continuum is facing a significantly expanded attack surface as cyber-physical systems increasingly interconnect with each other, enterprise systems, and external networks. This effectively dismantles the legacy assumption of air-gapped isolation in today’s operational environments. The combined platform responds to that reality by giving defenders broader visibility and risk context across the xOT environment.

Platform and Intelligence Expansion

Beyond visibility, the acquisitions expand the Dragos Intelligence Fabric, which draws on a decade of operational technology telemetry and incident response insights. Dragos EmberAI, built specifically for operational environments, will use the expanded data set to provide analysts with faster and richer guidance. This integration is intended to improve threat detection and response across increasingly interconnected cyber-physical systems.

Board and Industry Perspective

New board members from Accenture include Harpreet Sidhu, global cybersecurity lead, Luis Luque, global operational technology cybersecurity lead, and John Coltsmann from corporate development. Dmitri Alperovitch, co-founder and former chief technology officer of CrowdStrike, returns to the Dragos board. Alperovitch said intrusions into operational technology networks have become a daily reality for critical infrastructure operators and that the combined companies give defenders the right xOT tools for that fight.


Dragos plans to share more details on its combined platform strategy, including integration plans for NetRise and runZero, during a webinar featuring Robert M. Lee, HD Moore, and Thomas Pace. The acquisition of Phosphorus earlier this year had already extended Dragos’s protection to connected devices across critical infrastructure, and these additions deepen its exposure management and software supply chain security capabilities. The company says the expanded platform is designed to safeguard civilization by securing the full xOT environment.