Dragos has published threat group profiles mapping adversary behaviors to the MITRE ATT&CK for ICS matrix, drawing on more than a decade of OT-specific telemetry and incident research. The mapped techniques include compromising dual-homed data historians...
Dragos describes its platform as a living knowledge engine built from over a decade of OT-specific telemetry, adversary research, and frontline incident experience. It says the platform turns anomaly-based alert floods into high-confidence detections and...
Dragos describes the SANS ICS 5 Critical Controls, which start with ICS-specific incident response plans and proceed through defensible architecture, network monitoring, secure remote access, and vulnerability management tailored to industrial...
Dragos describes its OT monitoring platform as built on more than a decade of OT-specific telemetry, adversary research, and frontline incident experience, with passive network sensors and ICS-aware deep packet inspection that read 600+ industrial and IT...
Dragos describes its platform as built on more than a decade of OT-specific telemetry, adversary research, and incident experience, and says it applies OT context and threat intelligence to prioritize ICS vulnerabilities using a "Now, Next, Never"...
Josh Hanrahan is a Principal Adversary Hunter at Dragos, working on the Threat Discovery team to uncover and track threat groups targeting ICS organizations globally, with a focus on the electric sector and the Asia Pacific region. Before Dragos, he was...
This Dragos blog page profiles Conor McLaren, a threat hunting and CTI specialist researching threats to ICS/OT organizations in the Oceania region, with prior experience in the resources, FMCG, government and technology sectors. The surrounding text...
Gregory Pollmann is a Senior Industrial Consultant on Dragos's Professional Services Team, where he manages, develops, models, and executes incident response and recovery exercises and consequence-based systems-of-systems analysis. Before Dragos, he spent...
Reid Wightman is a Senior Vulnerability Researcher on Dragos' Intel team, where he analyzes publicly disclosed vulnerabilities to check whether public reporting is accurate and to determine their true industrial impact. Before Dragos, he worked as a...
This Dragos blog page profiles Justin Pascale, a Principal Industrial Consultant at Dragos who performs architecture assessments, network vulnerability assessments, and consequence-driven modeling of industrial environments for customers. Before Dragos he...
Dr. Jacob Benjamin is the Global Practice Lead for ICS/OT Consulting at Dragos, where he owns the methodology, quality, and delivery of consulting engagements across industrial sectors worldwide. Before Dragos, he was a nuclear cybersecurity researcher at...
Dragos published referral partner terms under which a partner earns a 5% referral commission on net fees collected for an Order, excluding hardware, taxes and duties, capped at $20,000 USD and paid within 45 days of Dragos receiving full payment. To...
Dragos published a vulnerability disclosure policy inviting security researchers to privately and responsibly report flaws in the Dragos Platform, Hardware, Services, and Threat Intelligence solutions, with submissions sent to a single designated email...
Dragos publishes a security program description covering its OT platform, stating that its information security program aligns with industry standards and that its products align with NIST CSF, ISO 27001 and SOC 2 Type 2. The program covers background...
Dragos published Delivery Partner support terms covering general requirements, Tier-1 and Tier-2 support, Dragos Platform deployments, and Delivery Partner SLAs. The document states that tickets logged with a Delivery Partner are assigned a severity, that...
Dragos describes how its platform and services map to NERC CIP requirements, including passive device monitoring with custom asset tagging for EACMS, PACS, and BCS, active collection through an Extended Visibility Agent, and sensor deployment inside and...
Internal Network Security Monitoring (INSM) continuously observes and analyzes traffic inside an organization's internal infrastructure, and for electric utilities it targets anomalous activity within trusted network zones. NERC CIP-015 requires collecting...
Dragos describes a distinction between frameworks, which are detailed guidelines for implementing controls such as NIST CSF, ISA/IEC 62443 and C2M2 and carry no enforcement power unless written into contracts, and regulations, which are legal requirements...
Dragos published a vulnerability disclosure policy that gives vendors 28 days to acknowledge a reported flaw and confirms them, and sets a 90-day deadline from initial disclosure for publication of vulnerability information and mitigations. Dragos states...
Dragos describes a partner program built around its OT cybersecurity platform and what it calls the industry's largest team of ICS/OT practitioners, drawing on more than a decade of OT-specific telemetry, adversary research, and incident experience. The...
In February 2024, Dragos CEO and co-founder Robert M. Lee testified before the U.S. House of Representatives Subcommittee on Cybersecurity and Infrastructure Protection. His testimony addressed the state of operational technology in U.S. water systems,...
Dragos announced Dragos Platform 3.0 on September 23, 2025, adding an Insights Hub that consolidates risk-based vulnerability, asset, and threat alerts into a single prioritized view, along with AI-enhanced vulnerability analysis and smaller deployment...
Dragos announced Dragos Platform 3.0, which it describes as its most significant release yet, adding operating system and software package inventory that is automatically matched to vulnerabilities, expanded protocol and IoT device coverage, and a...
Dragos outlined an analyst-first approach to AI in OT security, built on models trained from more than a decade of OT-specific telemetry, adversary research, and incident response work, with privacy protection and customer data ownership as stated...
Dragos offers a Rapid Response Retainer giving 24/7 access to its xOT incident responders, with first contact within 1 hour for all retainer customers. Sites with the Dragos Platform deployed get guaranteed analysis within 4 hours, OT Watch analysis within...
Dragos offers xOT cybersecurity assessments that evaluate an organization's OT security state and recommend protective controls, with options ranging from a basic Architecture Review taking 1-2 weeks to a comprehensive OT Cybersecurity Assessment (OTCA)...
Dragos describes red team services built for xOT environments, combining network vulnerability assessment, penetration testing, and purple team exercises, with the company's platform automating data collection and analysis. The vendor states vulnerability...
Dragos introduced WorldView RFI and Concierge, two services that pair direct access to its OT-focused analysts with proprietary data and the Dragos Platform. RFI is on demand, with customers submitting targeted questions for OT-specific answers under a...
Dragos describes OT Watch Complete as a managed service in which its own teams operate the Dragos Platform for the customer, providing continuous monitoring, expert-validated escalations, ongoing tuning and enrichment, and hardening guidance. The service...
Dragos reports that adversary groups ranging from VOLTZITE to botnet and ransomware operators are already targeting distributed energy resources and microgrids, which combine solar, wind, battery storage, and smart inverters and are increasingly adopted by...