Dragos is the leading platform for operational technology (OT) threat detection — monitoring industrial control systems, SCADA environments, and industrial protocols used in power grids, pipelines, manufacturing, and data centers. It's vendor-neutral and purpose-built for environments that traditional IT security tools can't adequately protect.

Why did Accenture buy runZero and NetRise too?

runZero handles network asset discovery (finding all devices on a network, including unmanaged OT equipment), and NetRise analyzes firmware and device software for vulnerabilities. Together with Dragos, they form a complete stack: discover assets, understand device risk, and detect threats — what Accenture is calling an end-to-end xOT security platform.

Will Dragos remain independent after the acquisition?

Dragos CEO Robert Lee will remain CEO and joins the board. The company's OT-focused mission is written into legally binding governing documents as a condition of the deal. However, the companies will eventually be integrated into Accenture's broader cybersecurity business, and the long-term implications for vendor neutrality are still to be determined.

Accenture's $4.2B Bet on OT Security: Dragos, runZero, NetRise

Q: What did Accenture acquire in this OT cybersecurity deal?

Accenture announced on June 18, 2026 that it's acquiring a majority stake in Dragos (valued at $3.25 billion) and 100% of runZero and NetRise, at a combined enterprise value of $4.175 billion. The deal is expected to close in August or September 2026 pending regulatory approval.

The OT security market just consolidated hard. On June 18, Accenture announced it's acquiring a majority stake in Dragos — the leading operational technology threat detection platform — plus 100% of runZero and NetRise, at a combined enterprise value of $4.175 billion. It's the largest OT cybersecurity deal on record.

If you work in security, DevSecOps, or any infrastructure that touches power grids, manufacturing, pipelines, or data centers, this changes who controls the tooling that protects those environments.

What Each Company Actually Does

Dragos is the market leader in OT threat detection — the industrial equivalent of EDR, built specifically for the PLCs, SCADA systems, and industrial protocols that run physical infrastructure. Its platform is vendor-neutral, monitoring environments that traditional IT security tools can't see. Dragos valued at $3.25 billion in this deal.

runZero handles network asset discovery — finding everything on a network, including unmanaged devices and OT equipment that doesn't announce itself. It was built by HD Moore, the creator of Metasploit. Full acquisition.

NetRise focuses on firmware and device intelligence — analyzing the software inside connected devices and industrial hardware for vulnerabilities. Think supply chain risk at the device level. Also full acquisition.

Combined, the three form a stack: discover what's on your network (runZero), understand what's inside the devices (NetRise), and monitor for threats against OT infrastructure (Dragos). Accenture is bundling this with its existing $10 billion cybersecurity services business to build end-to-end coverage.

The Numbers Behind the Deal

Together, the three companies generate approximately $208 million in annual recurring revenue as of June 2026 — up 53% year over year. That's strong growth but a relatively modest revenue base for a $4.175 billion acquisition price, which tells you this is a land-grab for market position in a fast-expanding space.

Accenture estimates the OT cybersecurity software market at $27 billion in 2026, growing to nearly $59 billion by 2031 at 16% CAGR. Their existing OT services business already leads an estimated $7 billion market. The software layer is the bigger prize.

Deal close is expected August or September 2026, pending regulatory approval. Dragos CEO Robert Lee will remain CEO and sits on the new board. HD Moore (runZero) and Thomas Pace (NetRise) become Dragos executives.

Why This Is Happening Now

OT security has been chronically underfunded and fragmented. Industrial environments run software that's decades old, unpatched by design, and increasingly connected to IT networks that expose them to internet-facing attacks. Nation-state attackers have been targeting critical infrastructure — power, water, manufacturing — with increasing frequency.

Accenture's move is also a direct competitive response to ServiceNow's $7.75 billion acquisition of Armis earlier this year. Armis covers IoT and OT asset visibility. Accenture is building its own version of that platform with Dragos at the core, plus runZero's network discovery and NetRise's firmware intelligence added on top.

The race is to own the "extended OT" — or xOT — security layer that spans IT, OT, IoT, and medical devices. Whoever builds the most comprehensive platform wins the contracts when critical infrastructure operators eventually modernize.

What Changes for Security Teams

In the short term, not much. Dragos, runZero, and NetRise continue operating under existing management with stated autonomy. Robert Lee specifically called out that Dragos's OT-focused mission is written into legally binding governing documents — that language was a condition of the deal.

Longer term, the integration question is real. Accenture is a massive professional services firm. Dragos's strength has been staying vendor-neutral and platform-agnostic. Whether that survives absorption into a company that sells implementation services alongside security tooling is worth watching.

For teams currently using any of these three tools: no forced migrations, no announced pricing changes. The deal doesn't close until late summer. But budget decisions that would have been straightforward platform renewals are now decisions about whether you want to deepen a relationship with Accenture-owned infrastructure.

Sources: Accenture Newsroom, SecurityWeek, Bank Info Security, Industrial Cyber, Dragos Blog