Provider Snapshot

Core services
Managed Detection & Response (MDR), Threat Intelligence, Incident Response +2 more
Client focus
Mid-Market (201-1000), Enterprise (1000+)
Response SLA
Not disclosed
Website
dragos.com

Company Details

Headquarters
Hanover, MD
Founded
2016
Employees
200-500
0
Response SLA
Not disclosed

Pricing

Pricing Model
Custom
Starting Price
Custom quote

About Dragos

Dragos is the leading pure-play industrial cybersecurity company, founded in 2016 by former NSA and ICS-CERT professionals. The company specializes exclusively in operational technology and industrial control system security, providing OT-specific managed threat detection, vulnerability management, and incident response. Dragos maintains a dedicated OT threat intelligence team that tracks activity groups targeting industrial environments worldwide. Their managed services offering, OT Watch, provides 24/7 monitoring by OT security specialists who understand the unique operational and safety requirements of industrial environments. Dragos serves electric utilities, oil and gas, manufacturing, water treatment, and other critical infrastructure operators.

Manage or promote this profile

Represent this provider? Claim and verify the profile, get Featured placement, or become a Top Provider.

Suggest an update

Services Offered

Dragos offers 5 security services. Click any service to see other providers that offer it.

Industries Served

Dragos has experience serving 4 industries, including the regulatory requirements and security challenges unique to each.

Client Company Sizes

Dragos serves Mid-Market (201-1000), Enterprise (1000+) organizations. Providers focused on your company size tend to offer pricing and service levels that match your budget and team capacity.

Compliance Frameworks Supported

Dragos provides compliance support for 3 frameworks. Compliance support typically includes control mapping, evidence collection, audit preparation, and ongoing monitoring to keep you audit-ready year-round.

NERC CIPIEC 62443NIST CSF

What Should You Ask When Evaluating Dragos?

Before engaging any MSSP, use these questions to assess whether the provider is the right fit for your organization. These apply to Dragos and any other provider on your shortlist.

  • What is included in the base service vs. what costs extra? Clarify whether incident response, compliance reporting, and additional log source onboarding are included or billed separately.
  • What response actions does the provider take directly? Some MSSPs only send alerts for your team to act on. Others take containment actions like host isolation or account lockout on your behalf.
  • What does the onboarding process look like? Ask about typical onboarding timelines, how much work your team needs to put in, and when full monitoring coverage goes live.
  • Can you provide references from similar organizations? Ask for references from companies in your industry and size segment. The experience of similar organizations is the best predictor of how the MSSP will perform for you.
  • What happens if we need to switch providers? Understand data portability, contract termination terms, and transition support. A transparent exit process is a sign of a provider that prioritizes long-term trust over lock-in.

Market Context

Selected insights from 401 MSSPs in our dataset