Dragos unveils Platform 3.0 with AI tools for OT cyber defence

Dragos has announced the release of its latest cybersecurity solution for operational technology environments, Platform 3.0.

The company states that the new platform is aimed at enabling defenders of industrial infrastructure to respond more rapidly and effectively to cyber threats, particularly against a backdrop of increasing risks to critical systems worldwide.

Rising risks to industrial operations

Dragos referenced its 2025 OT Security Financial Risk Report, produced in collaboration with the Marsh McLennan Cyber Risk Intelligence Centre, which estimates that the worst-case global costs for OT cyber incidents involving business interruption could amount to USD $172.4 billion in a single year. The report also suggests that the majority of losses would come from indirect costs rather than direct incident losses.

Attack timelines for adversaries have reportedly shortened, with some incidents unfolding in weeks or even days, highlighting the need for defenders to act quickly using reliable intelligence and recommendations from their OT cybersecurity platforms.

Platform 3.0 features

The central addition to Platform 3.0 is the Insights Hub, which is designed to give operators an aggregated and prioritised overview of risks, vulnerabilities, assets, and threat alerts. According to Dragos, this tool allows teams to make quicker, more informed decisions by displaying risk-weighted summaries and clearly outlined response recommendations produced by OT cybersecurity experts.

Furthermore, Platform 3.0 incorporates AI-enhanced vulnerability analysis. Dragos indicates that its OT vulnerability intelligence has been built upon extensive data and analysis conducted by specialists in OT threats. The use of artificial intelligence is expected to accelerate back-end analysis, improving the delivery speed of contextualised vulnerability information whilst maintaining accuracy.

The platform's risk prioritisation methodology, referred to as "Now, Next, Never," reportedly assists customers in evaluating their exposure and determining the actions required, without overburdening security teams with alerts that lack actionable outcomes. This methodology expands vulnerability identification to cover both software and operating systems used throughout the industrial environment.

Deployment options and management

Platform 3.0 introduces deployment capabilities intended to support organisations of diverse sizes and operational complexity. Among these is the STS-50 device, along with a combined Sensor/SiteStore configuration, aimed at extending security coverage into smaller facilities or those with unique requirements. The system's expanded Active Collection functionality now supports scenarios such as air-gapped sites or environments with intermittent connectivity, helping organisations gain broader vulnerability management coverage even in isolated areas.

Management and integration have been addressed through centralised sensor configuration and administration tools, along with streamlined connections to both OT and IT security workflows. Dragos also offers complete managed security via its OT Watch Complete service, which delivers round-the-clock monitoring, proactive hardening, threat hunting, triage, and investigation support. These services are available directly or through partners as part of managed detection and response portfolios.

Industry recognition and company comments

Robert M. Lee, Chief Executive Officer and co-founder of Dragos, commented on the growing need for actionable intelligence and speed within OT security operations. He said,

"The cost of inaction is too high in OT. The latest updates to the Dragos Platform focus on giving industrial defenders the visibility, speed, and confidence they need to take action and reduce risk before incidents escalate. Alerts, detections, and recommendations are grounded in insights supported by Dragos OT threat intelligence, which is unmatched in the industry. We are helping organizations build operational resilience to ensure the industrial and critical infrastructure they defend is prepared for today's threats as well as tomorrow's."

Jodi Schatz, Chief Product Officer at Dragos, also highlighted the intent behind the new platform enhancements. She stated,

"This represents our commitment to delivering not just advanced technology, but technology that truly serves our industrial community. Every innovation - from the redesigned user experience, to the AI-enhanced vulnerability processes, to the Insights Hub - is designed to reduce the burden on security teams while increasing their effectiveness."

Platform 3.0 follows recognition for Dragos as a Leader in the first Gartner Magic Quadrant for Cyber-Physical Systems Protection Platforms, which the company notes as an acknowledgment of its capabilities and completeness of vision in the field.