Dragos deepens Microsoft tie-up to secure OT on Azure

Dragos has expanded its collaboration with Microsoft through several new integrations involving the Dragos Platform, Microsoft Azure, Microsoft Sentinel, and the Microsoft Marketplace. According to the companies, this partnership focuses on enhancing operational technology (OT) security within industrial and critical infrastructure environments.

Under the new arrangement, the Dragos Platform will run on Azure and interface with Microsoft's security operations tools via Sentinel, while the Microsoft Marketplace will offer Dragos for procurement through Microsoft's commercial channels.

Dragos confirmed that the collaboration supports cloud, hybrid, and on-premises deployment models. Consequently, customers can expect improved visibility into industrial assets and related security telemetry within their existing Microsoft environments. This deeper integration aims to streamline how organisations monitor and protect essential infrastructure against evolving cyber threats.

Industrial focus

The companies positioned the expanded collaboration at sectors with large physical operations and connected assets. These include energy, manufacturing, utilities, transport and other asset-intensive industries.

OT environments often run equipment and processes that have safety and availability constraints. These systems increasingly connect to corporate networks and cloud services. Organisations also test AI-driven applications for operations and maintenance.

Dragos and Microsoft said this trend has increased attention on cyber risks that can affect physical processes. They also pointed to shorter timelines between intrusion and impact compared with earlier incidents.

According to MarketsandMarkets, the global OT security market is expected to grow from $23.5 billion in 2025 to $50.3 billion by 2030. The firm forecasts a compound annual growth rate of 16.5% over that period.

Platform integration

The Dragos Platform focuses on security monitoring for OT networks. Dragos said it uses asset context, OT-specific telemetry and threat intelligence for detection and investigation workflows.

Under the expanded arrangement, OT-related telemetry and context from Dragos will flow into Microsoft Sentinel. Sentinel is Microsoft's security information and event management product. The companies said the integration will align OT monitoring with existing security operations processes that already use Sentinel.

Dragos also said customers will be able to procure its products via Microsoft Marketplace. That can reduce friction for organisations that standardise procurement through Microsoft's channel and contract vehicles.

The companies also referenced Azure consumption commitments in the context of Marketplace purchasing. They said Marketplace availability creates an option to align OT security spending with broader Azure usage.

Deployment options

Dragos said the Dragos Platform will add a software-as-a-service deployment on Azure. The company said this will begin in Q1 2026. It will sit alongside existing on-premises and hybrid models.

The deployment plan matters for industrial organisations that keep parts of their control environments isolated from the internet. Some also run long-lived systems and use site-specific architectures. Cloud options have gained adoption in parts of security operations and analytics, while on-premises deployments remain common in plants and remote facilities.

Dragos said the new approach offers flexibility across cloud, hybrid and on-premises environments. It said this will suit customers with different infrastructure strategies across sites and regions.

Security operations

The companies said the integration gives security teams a more unified view across IT and OT. Many industrial organisations run separate processes and tools for corporate networks and plant networks. They also face skills shortages in OT security and challenges in collecting consistent data from operational sites.

Dragos and Microsoft said improved visibility into industrial assets and operational context will sit within Microsoft's tooling. They said this can affect detection, investigation and response decisions when incidents involve industrial systems.

Robert M. Lee, CEO and Co-Founder of Dragos, described the drivers behind the collaboration in the context of connected operations and AI use.

"As connectivity and AI extend deeper into physical operations, a rapidly growing number of organisations face increasing pressure to modernise without increasing security risk," said Robert M. Lee, CEO and Co-Founder, Dragos. "Microsoft recognises both the scale and strategic importance of operational technology security. By deeply integrating the Dragos Platform across the Microsoft ecosystem, we're enabling customers to pursue digital transformation with confidence, without compromising the specialised protections operational environments demand. This collaboration reflects a shared commitment to long-term cyber resilience for the systems that power and advance our world."

Microsoft framed the work around the tools customers already use for security operations and cloud services.

"By deeply integrating the Dragos Platform with Microsoft Azure and Microsoft Sentinel, we're giving energy and industrial customers a streamlined way to unify IT and OT security operations in the environments they already use," said Darryl Willis, Corporate Vice President, Energy & Resources Industry, Microsoft. "Our collaboration helps asset-intensive industries accelerate cloud and AI innovation while strengthening the safety, reliability, and resilience of the critical systems that power businesses and communities."

Dragos has stated that the collaboration spans a diverse range of sectors, including manufacturing, energy and utilities, defence, and natural resources. The partnership also extends to transportation and mobility, life sciences, building automation, logistics, and the food and beverage industry.

The companies noted that integration efforts will remain ongoing as operational technology, cloud, and AI environments continue to converge. Furthermore, Dragos confirmed that the Dragos Platform is scheduled to support SaaS deployments on Azure starting in the first quarter of 2026.