Dragos Completes NetRise and runZero Acquisitions Following Accenture Deal

Open the source listing →

Dragos has closed its acquisitions of NetRise and runZero, completing a pair of deals that expand the operational technology cybersecurity firm well beyond its industrial control system roots. Both transactions arrived in the wake of the $4.1 billion arrangement in which Accenture acquired a majority stake in Dragos, giving the combined entity fresh capital and strategic reach to absorb two firms that specialize in asset visibility and exposure management.

This piece breaks down what each acquisition adds to the Dragos platform, how the combined offer reaches customers, how it stacks up against alternatives, and what security and OT teams should verify before committing. It is written for security architects, procurement leads, and engineers who manage industrial or converged IT/OT environments and are evaluating whether the newly enlarged Dragos fits their roadmap.

The offer: Dragos Completes NetRise and runZero

Dragos now brings together its core OT threat detection and intelligence capabilities with NetRise's firmware and software supply-chain analysis and runZero's agentless network discovery and asset inventory. NetRise focuses on decomposing embedded software — firmware images, IoT binaries — to surface known vulnerabilities and software bill of materials data without requiring agents on the devices being analyzed. runZero built its reputation on fast, safe active scanning that maps assets across IT and OT segments, including devices that traditional vulnerability scanners cannot safely reach.

Together, the three products form a broader platform that covers the detection side Dragos is known for and the asset and supply-chain visibility that has historically required separate tools and separate vendor relationships. For organizations running mixed IT/OT environments — common in manufacturing, energy, and utilities — having inventory, firmware risk, and threat detection under one contractual roof reduces integration overhead and gives analysts a more complete picture of what is running and what is exposed.

How to get Dragos Completes NetRise and runZero

Customers interested in the combined offering should engage Dragos directly, as no public pricing tiers or standalone packaging for the post-acquisition platform has been announced at this time. Existing NetRise and runZero customers will likely continue service under their current agreements while Dragos works through commercial integration; buyers should ask their account contacts for clarity on contract migration timelines and any changes to support structures.

The Accenture majority stake that preceded these closings is relevant here. Accenture brings enterprise sales scale and managed security service capacity, which may mean the combined platform eventually surfaces through Accenture's managed services channel in addition to direct Dragos sales. Organizations already in Accenture's managed services ecosystem should ask their relationship managers whether bundled offerings are on the roadmap, particularly for managed OT security engagements.

How Dragos Completes NetRise and runZero compares

The OT security market has seen a wave of platform consolidation, with Claroty, Nozomi Networks, and Tenable each expanding asset visibility and exposure management in adjacent directions. What distinguishes the Dragos-NetRise-runZero combination is the addition of firmware and software supply-chain analysis — a layer that most OT platform competitors have not natively integrated. Firmware risk has become a significant audit concern following a run of vulnerabilities in PLCs, HMIs, and network gear that were introduced at the manufacturing stage rather than through operational misconfiguration.

Who should buy Dragos Completes NetRise and runZero

The combined platform targets organizations that already operate or are building a mature OT security program and need to close gaps in asset inventory and firmware risk without stitching together three separate vendor relationships. Critical infrastructure operators — power utilities, water authorities, oil and gas producers, discrete manufacturers — are the clearest fit, as they face both regulatory pressure to maintain complete asset inventories and the kind of supply-chain exposure that firmware analysis is designed to address.

Organizations earlier in their OT security journey, or those running mostly IT-centric environments with limited embedded device footprints, may find the platform broader than their immediate needs. For those buyers, purpose-built asset discovery tools or lighter OT monitoring solutions may offer faster time to value. The right fit is a team that already has the internal expertise to act on firmware findings and asset exposure data, not one that needs foundational OT security program-building before it can absorb the output.

The catch with Dragos Completes NetRise and runZero

Platform acquisitions create integration risk that is rarely resolved at close. NetRise and runZero were built independently, with their own data models, APIs, and user interfaces; the timeline for a unified analyst experience has not been disclosed. Buyers should ask Dragos for a specific integration roadmap before signing multi-year contracts that assume seamless cross-product workflows.

The Accenture majority stake also introduces a strategic variable worth tracking. Majority ownership by a global consulting and managed services firm can shift product investment priorities toward offerings that serve Accenture's managed service business rather than on-premises or self-operated deployments. Security teams that run their own OT security operations centers should press Dragos on whether self-operated deployment models for the full combined platform will remain a supported and prioritized path going forward.