OT security vendors
We list 56 companies active in OT and ICS security, and 19 of them have it as their main focus. 3 are public, 16 are owned by another company and 37 are private. Most are based in the United States (25) and Germany (11). The oldest, TÜV NORD, was founded in 1869. By revenue from annual reports, the largest company here is Microsoft ($331.8bn in FY2026).
By countryUnited States 25Germany 11
Companies focused on OT and ICS security
19 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
Potenza Services Potenza Services is a veteran-owned firm based in Tampa, Florida, founded in 2012. | Q49255, United States | 2012 | 9 staff | Private | |
Claroty Claroty provides cybersecurity for cyber-physical systems in industrial, healthcare, and commercial settings. | New York, United States | Private | |||
C Corsha Corsha provides identity-based security for machine-to-machine connections in industrial and operational networks. | Vienna, United States | Private | |||
Cybersplice Cybersplice provides operational technology security solutions for industrial networks. | Cape Town, South Africa | Private | |||
C CybExer Technologies CybExer Technologies provides cyber range platforms for testing and training. | Tallinn, Estonia | 2016 | Private | ||
Cydome Provides cybersecurity protection and risk management for maritime vessels, offshore facilities and ports. | London, United Kingdom | Private | |||
Cylus Cylus provides cybersecurity solutions for railway operators to protect rail operational technology. | Tel Aviv, Israel | Private | |||
Dragos Dragos provides cybersecurity for industrial control systems and operational technology environments. | Houston, United States | 2016 | Part of Accenture | ||
Forescout Technologies Forescout provides a platform for managing cyber risk and mitigating threats across IT, OT, IoT, and IoMT devices. | San Jose, United States | Owned by Advent International and Crosspoint Capital Partners | |||
G Galvanick Galvanick provides behavioral threat detection for operational technology environments. | Seattle, United States | Private | |||
IGEL IGEL provides a secure endpoint operating system for cloud workspaces and virtual desktop environments. | Bremen, Germany | Owned by TA Associates | |||
Indurex Provides an AI-native platform for monitoring and managing risk in industrial cyber-physical systems. | Amsterdam, Netherlands | Private | |||
Nozomi Networks Nozomi Networks provides OT and IoT security solutions for critical infrastructure, offering asset visibility and threat detection. | San Francisco, United States | Owned by Mitsubishi Electric | |||
Shift5 Onboard monitoring platform that detects cyber and electronic warfare threats on military vehicles, aircraft, ships and trains. | Rosslyn, Virginia, United States | 2019 | Private | ||
TXOne Networks TXOne Networks provides operations-first cybersecurity for industrial operational technology environments. | Taipei, Taiwan | Private | |||
Waterfall Security Solutions Waterfall Security provides hardware-enforced OT security solutions for critical infrastructure and industrial systems. | Rosh HaAyin, Israel | 2007 | Private | ||
IRONVALD IRONVALD provides autonomous cybersecurity defence for critical infrastructure and industrial control systems. | Sarajevo, Bosnia and Herzegovina | 2025 | Private | ||
OPSWAT OPSWAT provides cybersecurity solutions to protect critical infrastructure from file-borne and device-borne threats. | Tampa, United States | Private | |||
S Secomea Secomea provides secure remote access software and hardware for industrial control systems. | Copenhagen, Denmark | 1999 | Private |
Also active in OT and ICS security
37 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
Microsoft Microsoft sells software, cloud services, hardware, and gaming products. | Redmond, United States | 1975 | 228,000 staff | Public, MSFT | $331.8bn (FY2026) |
Fortinet Fortinet provides cybersecurity solutions and services, including networking and security convergence, for enterprises and governments. | Sunnyvale, United States | 2000 | 15,109 staff | Public, FTNT | $6.8bn (FY2025) |
TÜV NORD German inspection group assessing vehicles and makers against UN R155, R156, ISO/SAE 21434 and ISO 24089. | Hannover, Germany | 1869 | 11,658 staff | Private | |
Airbus Protect Airbus group cybersecurity consultancy with ANSSI PASSI qualification. Aerospace, defence, and critical infrastructure penetration testing across Europe. | Paris, France | 2022 | 500+ staff | Owned by Airbus | |
Sectra Sectra provides medical imaging IT and cybersecurity solutions for healthcare and critical infrastructure. | Linköping, Sweden | 1978 | 500 staff | Public, SECT-B | |
IOActive Boutique security consultancy specialising in IoT, SCADA/ICS, embedded systems, and hardware security research with world-renowned researchers. | Seattle, United States | 1998 | 51-200 staff | Private | |
Aristi CHECK and CREST-accredited Birmingham-based cyber security consultancy with over 15 years of experience delivering penetration testing, red teaming, and OT security assessments for government and private sector clients. | Birmingham, United Kingdom | 2008 | 11-50 staff | Owned by Limerston Capital | |
ARIA Cybersecurity ARIA Cybersecurity provides AI-driven threat detection and response solutions for IT and OT infrastructure. | Lowell, United States | Owned by CSPi | |||
Armis Armis provides cyber exposure management and security for connected devices and operational technology. | United States | Part of ServiceNow | |||
Asimily Asimily provides a platform to discover, assess, and mitigate risks for IoT, OT, and IoMT devices. | Sunnyvale, United States | Private | |||
asvin Software and services for cyber risk analysis, secure software updates and UNECE R155 and R156 compliance. | Stuttgart, Germany | 2018 | Private | ||
AtlasCyber Provides agentic threat intelligence and validation for critical infrastructure security teams. | Merrimack, United States | Private | |||
CCLab Hungarian security evaluation lab offering ISO/SAE 21434 gap analysis, CSMS set-up and type-approval support. | Budapest, Hungary | 2013 | Owned by QIMA | ||
ETAS Bosch subsidiary selling ESCRYPT HSM firmware, intrusion detection, risk analysis tools and a managed vehicle SOC. | Stuttgart, Germany | 1994 | Owned by Robert Bosch | ||
FEV Engineering services group whose FEV.io arm runs TARA, ISO 21434 work, secure lab testing and vehicle pentests. | Aachen, Germany | 1978 | Private | ||
Fleet Defender Hardware and software that detect cyber attacks and cargo theft on fleet vehicles, backed by a vehicle SOC. | Omaha, United States | Private | |||
Fuzzware Fuzzes compiled ECU and embedded firmware in emulation, finding memory bugs without needing the physical hardware. | Bochum, Germany | Private | |||
genua GmbH genua GmbH is a German IT security company that protects critical and highly sensitive digital infrastructures. | Kirchheim bei München, Germany | 1992 | Owned by Bundesdruckerei | ||
GLIMPS GLIMPS provides cybersecurity solutions for malware detection and analysis. | Cesson-Sévigné, France | 2019 | Private | ||
GRIMM Michigan security research firm offering penetration testing and training for vehicles and other transport systems. | Cedar Springs, United States | Private | |||
IKARUS Security Software IKARUS Security Software is an Austrian cybersecurity vendor. | Vienna, Austria | 1986 | Private | ||
InchTek Beijing supplier of vehicle security gateways, intrusion detection, HSM firmware, a vehicle SOC platform and compliance consulting. | Beijing, China | Private | |||
LegacyMind GmbH LegacyMind GmbH provides a firmware security platform that analyses firmware at the binary level. | Ingolstadt, Germany | 2025 | Private | ||
Ordr Ordr provides a platform that discovers and enforces security policies for connected devices across IT, IoT, OT, and IoMT. | Santa Clara, United States | 2015 | Private | ||
SCYTHE SCYTHE provides a platform for continuous adversarial exposure validation across IT, cloud, and OT environments. | Columbia, United States | 2018 | Private | ||
SecureThings.ai Sunnyvale and Pune firm selling in-vehicle intrusion detection, vehicle SOC analytics, secure OTA and security assessments. | Sunnyvale, United States | Private | |||
SERMA Safety & Security French security evaluation lab (ITSEF/CESTI) recognised by the PCI SSC for PTS device evaluation, plus EMVCo and Common Criteria. | Pessac (Bordeaux), France | Owned by SERMA Group | |||
SYSGO PikeOS hypervisor maker offering a secure vehicle gateway platform with firewall and IDS, plus a host-based IDS. | Klein-Winternheim, Germany | 1991 | Part of Thales Cyber Solutions | ||
wolfSSL Embedded cryptography firm whose wolfHSM ports its crypto library to automotive hardware security modules in ECUs. | Edmonds, Washington, United States | 2004 | Private | ||
Y Yarix Italian Var Group security firm that absorbed Munich automotive consultancy CYRES and offers a vehicle SOC service. | Treviso, Italy | Owned by Var Group | |||
Accenture Cybersecurity consulting and managed security services covering cyber strategy, resilience, zero trust protection and operational technology security, within a global IT services firm. | Dublin, Ireland | Private | |||
Enigmatos Israeli company that detects cyber attacks and tampering on fleet vehicles through CAN bus monitoring. | Yavne, Israel | Private | |||
itemis Tool for building and updating threat analyses and risk assessments to ISO/SAE 21434, IEC 62443 and the CRA. | Dortmund, Germany | Private | |||
runZero runZero provides exposure management software that discovers and profiles assets across IT, OT, IoT, cloud and mobile networks. | Austin, United States | 2018 | Part of Dragos | ||
Sibros Connected vehicle software firm offering OTA updates, data logging and a vehicle security operations centre for fleets. | San Jose, California, United States | 2018 | Private | ||
TigerByte Cyber TigerByte Cyber provides cyber hardening for AI and edge devices in mission-critical environments. | Hanover, United States | Private | |||
Utimaco Utimaco provides hardware security modules, encryption, and key management for data protection and critical infrastructure. | Aachen, Germany | 1989 | Owned by SGT Capital |
Recent deals in OT and ICS security
All OT and ICS security dealsAcquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.