Dragos Acquires runZero and NetRise to Expand OT Security Platform
Dragos has completed its acquisitions of asset-discovery company runZero and firmware security specialist NetRise, expanding its operational technology platform beyond threat detection and incident response.
The deals closed alongside Accenture’s majority investment in Dragos. The companies initially announced transactions with a combined enterprise value of about $4.175 billion, subject to customary adjustments. Dragos said it will continue to operate independently, with founder Robert M. Lee adding the chairman role while remaining chief executive.
Asset visibility now reaches deeper into devices
runZero adds active and passive asset discovery across IT, OT and cloud environments. That capability is important in industrial networks, where unmanaged controllers, engineering workstations and remote-access appliances can remain invisible to conventional inventories.
NetRise analyzes firmware and software components inside connected devices. Its technology is designed to surface embedded risks such as outdated libraries, known vulnerabilities and hardcoded credentials, while producing documentation that can support compliance and supplier reviews.
Dragos said the full teams from both companies are joining the organization. runZero founder HD Moore, NetRise chief executive Thomas Pace and NetRise president Michael Scott will lead their respective integrations while continuing to support customers.
The strategic logic is clear: industrial defenders cannot protect what they cannot identify, and a visible device can still hide vulnerable code several layers below its interface. Bringing network discovery, firmware analysis and OT threat intelligence together could shorten that gap, but execution will depend on how quickly the products share data without disrupting sensitive operational environments.
For security teams evaluating the expanded platform, the key questions are integration depth, deployment safety, licensing changes and whether combined findings can be prioritized against real industrial impact.
