Accenture (NYSE: ACN) is placing a multibillion-dollar bet on OT cybersecurity, taking a controlling stake in Dragos and acquiring runZero and NetRise as part of a broader expansion estimated at roughly $4.1 billion.
Dragos is widely recognized for its vendor-neutral platform specializing in OT threat detection and industrial cybersecurity.
NetRise contributes deep firmware analysis and software supply chain visibility capabilities, while runZero, the company founded by renowned cybersecurity expert and Metasploit creator HD Moore, adds advanced asset discovery, exposure assessment, and attack surface intelligence.
Accenture says the combination of the three companies will deliver a unified solution that provides industrial and critical infrastructure operators with enhanced visibility across their OT environments, as well as improved threat detection and response capabilities.
“Our agreement to acquire a majority stake in Dragos and all of runZero and NetRise, leaders in OT Security, is the type of move that defines our strategy: it is expanding our addressable market, creating a new platform-led growth opportunity, and is positioning Accenture at the center of one of the most critical cybersecurity challenges our clients face,” said Accenture Chair and CEO Julie Sweet.
According to Accenture’s announcement, the combined enterprise value is roughly $4.175 billion, subject to standard price adjustments. The deals are expected to close in August and September.
Once the acquisitions are completed, runZero and NetRise will be led by Dragos CEO Robert Lee and they will operate under Dragos, which will remain an independent business.
Lee noted in a LinkedIn post that the deal values Dragos at $3.25 billion.
“We will remain an independent and vendor-neutral company as always, and Accenture is going to give us reach, and scale to find and remove adversaries from our community’s infrastructure,” Lee said. “Accenture will also contribute their OT cybersecurity expertise and unique datasets that no other provider has to help us make the Dragos Platform and our AI capabilities the most complete xOT cybersecurity platform in the market.”
According to Accenture, Dragos, runZero, and NetRise are projected to deliver roughly $208 million in ARR as of June 2026, representing a 53% increase from the prior year.
Accenture’s acquisition strategy may also be viewed as a competitive response to ServiceNow’s $7.75 billion acquisition of Armis and as an effort to extend its reach across IT, OT, IoT, and medical devices. Accenture is building a similar foundation through runZero’s asset discovery, NetRise’s device and firmware intelligence, and Dragos’ OT security platform, creating the building blocks of a comprehensive asset-centric security platform.
The transaction also brings together two cybersecurity firms founded by military veterans: Dragos, launched by former US Air Force cyber warfare officer Robert M. Lee, and NetRise, founded by former US Marine Thomas Pace. Lee is currently serving as a Lieutenant Colonel in the Army National Guard, serving as the Executive Officer at the IOSC in the 91st Brigade focused on OT/ICS cybersecurity and response.
Accenture announced two cybersecurity-related acquisitions last year: IAMConcepts and CyberCX. SecurityWeek’s M&A tracker has cataloged approximately 190 deals to date in 2026.
Accenture Places $4.1 Billion Bet on OT Cybersecurity
Accenture to will acquire a majority stake in OT security firm Dragos, and fully acquire runZero and NetRise in $4.1 billion OT cybersecurity push.
Mitsubishi Electric to Acquire Nozomi Networks
Industrial and technology giant Mitsubishi Electric has signed a definitive agreement to acquire OT and IoT cybersecurity company Nozomi Networks in a deal that values the industrial cybersecurity firm at nearly $1 billion. Mitsubishi Electric will acquire the Nozomi Networks shares it does not already own for $883 million in cash. Mitsubishi Electric already owns a 7% stake in Nozomi after participating in Nozomi’s $100 million Series E funding round in 2024. Nozomi has raised more than $250 million in funding
Volt Typhoon Hackers Dwelled in US Electric for 300+ Days: Report
Dragos shared some details describing an intrusion attributed to the notorious Chinese threat actor Volt Typhoon into the US electric grid.
ICS Patch Tuesday March 2025: Security Advisories by CISA, Schneider Electric, Siemens
Industrial giants Siemens and Schneider Electric have released March 2025 Patch Tuesday ICS security advisories.
ICS Patch Tuesday September 2024: Advisories Published by ABB, Siemens, Schneider, CISA
For September 2024, two dozen ICS Patch Tuesday advisories were published by Siemens, Schneider Electric, CISA and ABB.
Iran-Linked “Cyber Av3ngers” Hackers Compromise Control System at Pennsylvania Water Utility
Iran-Linked "Cyber Av3ngers" hackers compromised an industrial control system at the Municipal Water Authority of Aliquippa (MWAA) in Pennsylvania.
CISA Announces Free Vulnerability Scanning for Water Utilities
CISA announced a new vulnerability scanning service designed to help water utilities identify and address security holes that could expose their systems to remote attacks.
NSA, CISA Explain How Adversaries Plan and Execute ICS/OT Attacks
A joint advisory describes five typical steps involved in planning and executing an attack on Industrial control systems (ICS) and other operational technology (OT) systems
All ICS Vendors Impacted by OT:Icefall Vulnerabilities Have Released Advisories
All ICS vendors impacted by the recently-disclosed OT:Icefall vulnerabilities have released advisories to inform customers about the impact of the flaws and to provide mitigations.
Russia-Linked Pipedream/Incontroller ICS Malware Designed to Target Energy Facilities
A modular ICS attack framework and a collection of custom-made tools, can be used by threat actors to target ICS and SCADA devices, including programmable logic controllers (PLCs) from Schneider Electric and Omron, and OPC UA servers.