Key Takeaways
- Accenture will acquire a majority stake in Dragos for $3.25 billion and purchase runZero and NetRise outright, bringing the total investment to roughly $4.18 billion.
- The move signals a major strategic shift toward operational‑technology (OT) cybersecurity, a market traditionally under‑funded compared with IT defenses.
- Dragos brings industry‑leading threat‑intelligence for industrial environments; runZero adds asset‑discovery and attack‑surface mapping; NetRise contributes firmware‑level visibility and software‑supply‑chain security.
- Dragos CEO Robert M. Lee will remain at the helm of the combined entity, with the founders of runZero and NetRise joining as senior executives.
- Accenture’s prior OT acquisitions (Cimation, Revolutionary Security, etc.) built services capacity; this deal adds software capabilities and positions Accenture to capture a growing xOT market projected to reach nearly $59 billion by 2031.
- The transactions are expected to close in August or September, pending standard regulatory approvals.
Overview of the Deal
Accenture announced on Thursday that it will acquire a controlling interest in industrial‑cybersecurity specialist Dragos for $3.25 billion and will buy two smaller security firms—runZero and NetRise—outright. Combined, the transactions represent a $4.18 billion investment aimed at bolstering defenses for the IT networks of power grids, pipelines, factories and other critical‑infrastructure sectors. The move reflects Accenture’s belief that protecting operational technology (OT) will become one of the defining challenges of the AI era, as adversaries increasingly use artificial intelligence to accelerate attacks from IT environments into OT systems.
Dragos: Leader in OT Threat Intelligence
Founded in 2016 by former intelligence specialists and headquartered in Hanover, Maryland, Dragos has earned a reputation as a top detector of threats in OT environments. Its proprietary dataset of industrial threat intelligence provides deep visibility into adversary tactics targeting manufacturing, energy, water and similar sectors. By continuously monitoring OT networks and correlating activity with its intelligence feed, Dragos helps operators identify and mitigate sophisticated intrusions before they cause physical disruption.
runZero: Asset Discovery and Attack‑Surface Mapping
Based in Austin, Texas, runZero specializes in discovering what devices are connected to a network and exposing where those assets are vulnerable. Its platform creates continuously updated inventories of hardware, software and cloud‑connected sensors, then highlights gaps that attackers could exploit. This capability is essential for OT environments, where legacy equipment often goes undocumented and unmanaged, creating blind spots that adversaries can leverage.
NetRise: Firmware Visibility and Supply‑Chain Security
Also headquartered in Austin, NetRise focuses on firmware‑level insight and software‑supply‑chain security for industrial devices. By analyzing the code embedded in controllers, PLCs and other OT gear, NetRise uncovers hidden vulnerabilities that could be exploited through compromised updates or third‑party components. Its tools help organizations verify the integrity of firmware throughout the device lifecycle, addressing a growing concern highlighted by high‑profile supply‑chain incidents.
Leadership Continuity Post‑Acquisition
Dragos co‑founder and CEO Robert M. Lee will continue to lead the combined entity, which will operate as an independent business under Accenture’s ownership. The chief executives of runZero (HD Moore) and NetRise (Tom Pace), together with NetRise’s chief technology officer Michael Scott, will join Dragos as senior executives. This structure aims to preserve the entrepreneurial drive and technical expertise that have made each company successful while leveraging Accenture’s global scale and go‑to‑market resources.
Accenture’s Prior OT Investments
The latest acquisition is not Accenture’s first foray into OT security. The firm previously bought Cimation in 2015 and Revolutionary Security in 2020, along with several smaller OT‑focused providers. Those deals primarily expanded Accenture’s consulting and implementation services for industrial clients. Thursday’s transaction, however, marks a shift from services‑only to a substantial software portfolio, giving Accenture direct ownership of the core detection, asset‑discovery and supply‑chain tools that underpin modern OT defense.
Strategic Rationale and Market Opportunity
Accenture and Dragos describe the expanding defense landscape—covering OT, Internet‑of‑Things devices, cloud‑connected sensors and related IT infrastructure—as “xOT.” They argue that as AI becomes embedded in industrial decision‑making, the attack surface widens, while adversaries simultaneously use AI to shrink the time needed to pivot from an IT breach to OT sabotage. Despite this convergence, most cybersecurity budgets still prioritize traditional IT, leaving critical infrastructure comparatively exposed. The OT cybersecurity services market is projected to be about $7 billion in 2026, and the broader OT market (including software) is estimated at $27 billion this year, with a compound annual growth rate of roughly 16% that could push it to nearly $59 billion by 2031. Accenture’s investment aims to capture a sizable share of that growth by delivering an integrated, end‑to‑end defense platform.
Vision for an Integrated xOT Platform
In a joint statement, Dragos CEO Robert M. Lee emphasized that energy, water, manufacturing, data‑center and other operational environments need cybersecurity built from the ground up for xOT and designed to evolve alongside threats. He warned that the consequences of inadequate protection extend beyond financial loss to societal risk. The addition of runZero and NetRise will enable the Dragos Platform to offer a unique combination of threat intelligence, asset discovery, attack‑surface insight and firmware‑level supply‑chain security. Accenture will contribute its decades of client relationships, industry expertise and global delivery capacity to help scale the solution and secure more critical infrastructure worldwide.
Timeline and Regulatory Steps
The transactions are expected to close in August or September, pending the usual regulatory approvals and customary closing conditions. Once completed, the combined organization will operate under Accenture’s ownership while maintaining operational independence, allowing it to innovate rapidly while benefiting from the consulting giant’s financial backing and market reach. The deal underscores a broader trend of large technology and services firms consolidating specialized cybersecurity capabilities to address the growing security demands of an increasingly AI‑driven industrial landscape.