cybersecdirectory

OT security vendors

We list 56 companies active in OT and ICS security, and 19 of them have it as their main focus. 3 are public, 16 are owned by another company and 37 are private. Most are based in the United States (25) and Germany (11). The oldest, TÜV NORD, was founded in 1869. By revenue from annual reports, the largest company here is Microsoft ($331.8bn in FY2026).

By countryUnited States 25Germany 11

Companies focused on OT and ICS security

19 companies
CompanyBased inFoundedSizeOwnershipRevenue
Potenza Services

Potenza Services is a veteran-owned firm based in Tampa, Florida, founded in 2012.

Q49255, United States20129 staffPrivate
Claroty

Claroty provides cybersecurity for cyber-physical systems in industrial, healthcare, and commercial settings.

New York, United StatesPrivate
Corsha

Corsha provides identity-based security for machine-to-machine connections in industrial and operational networks.

Vienna, United StatesPrivate
Cybersplice

Cybersplice provides operational technology security solutions for industrial networks.

Cape Town, South AfricaPrivate
CybExer Technologies

CybExer Technologies provides cyber range platforms for testing and training.

Tallinn, Estonia2016Private
Cydome

Provides cybersecurity protection and risk management for maritime vessels, offshore facilities and ports.

London, United KingdomPrivate
Cylus

Cylus provides cybersecurity solutions for railway operators to protect rail operational technology.

Tel Aviv, IsraelPrivate
Dragos

Dragos provides cybersecurity for industrial control systems and operational technology environments.

Houston, United States2016Part of Accenture
Forescout Technologies

Forescout provides a platform for managing cyber risk and mitigating threats across IT, OT, IoT, and IoMT devices.

San Jose, United StatesOwned by Advent International and Crosspoint Capital Partners
Galvanick

Galvanick provides behavioral threat detection for operational technology environments.

Seattle, United StatesPrivate
IGEL

IGEL provides a secure endpoint operating system for cloud workspaces and virtual desktop environments.

Bremen, GermanyOwned by TA Associates
Indurex

Provides an AI-native platform for monitoring and managing risk in industrial cyber-physical systems.

Amsterdam, NetherlandsPrivate
Nozomi Networks

Nozomi Networks provides OT and IoT security solutions for critical infrastructure, offering asset visibility and threat detection.

San Francisco, United StatesOwned by Mitsubishi Electric
Shift5

Onboard monitoring platform that detects cyber and electronic warfare threats on military vehicles, aircraft, ships and trains.

Rosslyn, Virginia, United States2019Private
TXOne Networks

TXOne Networks provides operations-first cybersecurity for industrial operational technology environments.

Taipei, TaiwanPrivate
Waterfall Security Solutions

Waterfall Security provides hardware-enforced OT security solutions for critical infrastructure and industrial systems.

Rosh HaAyin, Israel2007Private
IRONVALD

IRONVALD provides autonomous cybersecurity defence for critical infrastructure and industrial control systems.

Sarajevo, Bosnia and Herzegovina2025Private
OPSWAT

OPSWAT provides cybersecurity solutions to protect critical infrastructure from file-borne and device-borne threats.

Tampa, United StatesPrivate
Secomea

Secomea provides secure remote access software and hardware for industrial control systems.

Copenhagen, Denmark1999Private

Also active in OT and ICS security

37 companies
CompanyBased inFoundedSizeOwnershipRevenue
Microsoft

Microsoft sells software, cloud services, hardware, and gaming products.

Redmond, United States1975228,000 staffPublic, MSFT$331.8bn (FY2026)
Fortinet

Fortinet provides cybersecurity solutions and services, including networking and security convergence, for enterprises and governments.

Sunnyvale, United States200015,109 staffPublic, FTNT$6.8bn (FY2025)
TÜV NORD

German inspection group assessing vehicles and makers against UN R155, R156, ISO/SAE 21434 and ISO 24089.

Hannover, Germany186911,658 staffPrivate
Airbus Protect

Airbus group cybersecurity consultancy with ANSSI PASSI qualification. Aerospace, defence, and critical infrastructure penetration testing across Europe.

Paris, France2022500+ staffOwned by Airbus
Sectra

Sectra provides medical imaging IT and cybersecurity solutions for healthcare and critical infrastructure.

Linköping, Sweden1978500 staffPublic, SECT-B
IOActive

Boutique security consultancy specialising in IoT, SCADA/ICS, embedded systems, and hardware security research with world-renowned researchers.

Seattle, United States199851-200 staffPrivate
Aristi

CHECK and CREST-accredited Birmingham-based cyber security consultancy with over 15 years of experience delivering penetration testing, red teaming, and OT security assessments for government and private sector clients.

Birmingham, United Kingdom200811-50 staffOwned by Limerston Capital
ARIA Cybersecurity

ARIA Cybersecurity provides AI-driven threat detection and response solutions for IT and OT infrastructure.

Lowell, United StatesOwned by CSPi
Armis

Armis provides cyber exposure management and security for connected devices and operational technology.

United StatesPart of ServiceNow
Asimily

Asimily provides a platform to discover, assess, and mitigate risks for IoT, OT, and IoMT devices.

Sunnyvale, United StatesPrivate
asvin

Software and services for cyber risk analysis, secure software updates and UNECE R155 and R156 compliance.

Stuttgart, Germany2018Private
AtlasCyber

Provides agentic threat intelligence and validation for critical infrastructure security teams.

Merrimack, United StatesPrivate
CCLab

Hungarian security evaluation lab offering ISO/SAE 21434 gap analysis, CSMS set-up and type-approval support.

Budapest, Hungary2013Owned by QIMA
ETAS

Bosch subsidiary selling ESCRYPT HSM firmware, intrusion detection, risk analysis tools and a managed vehicle SOC.

Stuttgart, Germany1994Owned by Robert Bosch
FEV

Engineering services group whose FEV.io arm runs TARA, ISO 21434 work, secure lab testing and vehicle pentests.

Aachen, Germany1978Private
Fleet Defender

Hardware and software that detect cyber attacks and cargo theft on fleet vehicles, backed by a vehicle SOC.

Omaha, United StatesPrivate
Fuzzware

Fuzzes compiled ECU and embedded firmware in emulation, finding memory bugs without needing the physical hardware.

Bochum, GermanyPrivate
genua GmbH

genua GmbH is a German IT security company that protects critical and highly sensitive digital infrastructures.

Kirchheim bei München, Germany1992Owned by Bundesdruckerei
GLIMPS

GLIMPS provides cybersecurity solutions for malware detection and analysis.

Cesson-Sévigné, France2019Private
GRIMM

Michigan security research firm offering penetration testing and training for vehicles and other transport systems.

Cedar Springs, United StatesPrivate
IKARUS Security Software

IKARUS Security Software is an Austrian cybersecurity vendor.

Vienna, Austria1986Private
InchTek

Beijing supplier of vehicle security gateways, intrusion detection, HSM firmware, a vehicle SOC platform and compliance consulting.

Beijing, ChinaPrivate
LegacyMind GmbH

LegacyMind GmbH provides a firmware security platform that analyses firmware at the binary level.

Ingolstadt, Germany2025Private
Ordr

Ordr provides a platform that discovers and enforces security policies for connected devices across IT, IoT, OT, and IoMT.

Santa Clara, United States2015Private
SCYTHE

SCYTHE provides a platform for continuous adversarial exposure validation across IT, cloud, and OT environments.

Columbia, United States2018Private
SecureThings.ai

Sunnyvale and Pune firm selling in-vehicle intrusion detection, vehicle SOC analytics, secure OTA and security assessments.

Sunnyvale, United StatesPrivate
SERMA Safety & Security

French security evaluation lab (ITSEF/CESTI) recognised by the PCI SSC for PTS device evaluation, plus EMVCo and Common Criteria.

Pessac (Bordeaux), FranceOwned by SERMA Group
SYSGO

PikeOS hypervisor maker offering a secure vehicle gateway platform with firewall and IDS, plus a host-based IDS.

Klein-Winternheim, Germany1991Part of Thales Cyber Solutions
wolfSSL

Embedded cryptography firm whose wolfHSM ports its crypto library to automotive hardware security modules in ECUs.

Edmonds, Washington, United States2004Private
Yarix

Italian Var Group security firm that absorbed Munich automotive consultancy CYRES and offers a vehicle SOC service.

Treviso, ItalyOwned by Var Group
Accenture

Cybersecurity consulting and managed security services covering cyber strategy, resilience, zero trust protection and operational technology security, within a global IT services firm.

Dublin, IrelandPrivate
Enigmatos

Israeli company that detects cyber attacks and tampering on fleet vehicles through CAN bus monitoring.

Yavne, IsraelPrivate
itemis

Tool for building and updating threat analyses and risk assessments to ISO/SAE 21434, IEC 62443 and the CRA.

Dortmund, GermanyPrivate
runZero

runZero provides exposure management software that discovers and profiles assets across IT, OT, IoT, cloud and mobile networks.

Austin, United States2018Part of Dragos
Sibros

Connected vehicle software firm offering OTA updates, data logging and a vehicle security operations centre for fleets.

San Jose, California, United States2018Private
TigerByte Cyber

TigerByte Cyber provides cyber hardening for AI and edge devices in mission-critical environments.

Hanover, United StatesPrivate
Utimaco

Utimaco provides hardware security modules, encryption, and key management for data protection and critical infrastructure.

Aachen, Germany1989Owned by SGT Capital

Recent deals in OT and ICS security

All OT and ICS security deals
DateDealAmountSource
September 2026Dragos acquired runZeroSource for Dragos buying runZero, opens in a new tabUndisclosedSource for Dragos buying runZero, opens in a new tab
September 2026Dragos acquired NetRiseSource for Dragos buying NetRise, opens in a new tabUndisclosedSource for Dragos buying NetRise, opens in a new tab
18 Aug 2026Fortinet acquired Virtue AISource for Fortinet buying Virtue AI, opens in a new tabUndisclosedSource for Fortinet buying Virtue AI, opens in a new tab
June 2026Accenture acquired DragosSource for Accenture buying Dragos, opens in a new tabUndisclosedSource for Accenture buying Dragos, opens in a new tab
June 2026Accenture acquired NetRiseSource for Accenture buying NetRise, opens in a new tabUndisclosedSource for Accenture buying NetRise, opens in a new tab
June 2026Accenture acquired runZeroSource for Accenture buying runZero, opens in a new tabUndisclosedSource for Accenture buying runZero, opens in a new tab
May 2026Dragos acquired PhosphorusSource for Dragos buying Phosphorus, opens in a new tabUndisclosedSource for Dragos buying Phosphorus, opens in a new tab
December 2025Limerston Capital acquired AristiSource for Limerston Capital buying Aristi, opens in a new tabUndisclosedSource for Limerston Capital buying Aristi, opens in a new tab
December 2025ServiceNow acquired ArmisSource for ServiceNow buying Armis, opens in a new tab$7.8bnSource for ServiceNow buying Armis, opens in a new tab
September 2025Mitsubishi Electric acquired Nozomi NetworksSource for Mitsubishi Electric buying Nozomi Networks, opens in a new tab$883mSource for Mitsubishi Electric buying Nozomi Networks, opens in a new tab

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.

See every category

Often listed alongside OT and ICS security