Cyber Risks · Dragos Blog

Test Against Real-World xOT Cyber Threats

Summary: Dragos describes red team services built for xOT environments, combining network vulnerability assessment, penetration testing, and purple team exercises, with the company's platform automating data collection and analysis. The vendor states vulnerability assessments typically take 3-5 days on-site, penetration tests 5-10 days depending on scope, and purple team exercises 3-5 days, with white box testing used on active production systems.

What's compelling: Testing that touches live industrial processes carries physical consequences, which is why Dragos scopes engagements to 3-10 days with defined rules of engagement and constant coordination with operations teams. The platform is required for purple team exercises and recommended for the other two services, so the depth of findings depends partly on which Dragos products you already run.

Read the original at Dragos Blog ↗

Topics
OT / ICS & Critical Infrastructure
Related
Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026