Dragos Platform

The Dragos Platform is specifically designed to detect threats targeting industrial control systems (ICS) and operational technology (OT) networks, including SCADA systems, distributed control systems (DCS), and programmable logic controllers (PLCs). It maps detected behaviors to the MITRE ATT&CK for ICS framework, which categorizes adversary tactics and techniques relevant to industrial environments, such as manipulation of control logic and disruption of physical processes.

The Dragos Platform is primarily deployed in critical infrastructure sectors including electric utilities, oil and gas, water and wastewater, manufacturing, and chemical processing. These industries rely on operational technology networks that traditional IT security tools cannot adequately monitor, making specialized ICS/OT threat detection platforms like Dragos essential for protecting physical processes.

Dragos was founded in 2016 by Robert M. Lee, a former U.S. National Security Agency cybersecurity specialist and recognized expert in ICS/OT threat intelligence. The company is headquartered in Hanover, Maryland, and has become one of the leading pure-play ICS cybersecurity vendors in the industrial security market.

Yes, the Dragos Platform supports integration with major Security Information and Event Management (SIEM) platforms and Security Orchestration, Automation, and Response (SOAR) tools, allowing ICS/OT alerts to be correlated with broader enterprise security data. This integration helps security operations teams triage and respond to industrial threats within their existing workflows rather than requiring a completely separate monitoring process.