Dragos launches EmberAI for operational technology security

Dragos has launched EmberAI, an artificial intelligence capability built natively for operational technology (OT) environments and integrated into its existing Dragos Platform.

EmberAI is built on what Dragos calls the Dragos Intelligence Fabric - a data set the company said comprises more than five petabytes of daily OT telemetry, a decade-plus of tracking across named OT threat groups, proprietary vulnerability research as a CVE Numbering Authority, and asset and protocol research spanning more than 600 OT protocols.

The capability is aimed at security analysts across the experience spectrum - from IT practitioners and plant engineers working in OT environments to seasoned OT security professionals - giving them access to OT-specific intelligence via plain-language queries. 

For partners servicing critical infrastructure operators, including power grids, manufacturing plants, water systems, pipelines and data centres, the launch adds an AI-assisted triage and investigation layer to a platform many already resell or manage.

Key capabilities include an intelligence-driven query engine, contextual correlation across assets, vulnerabilities, threat intelligence and network activity, and adversary-informed guidance that maps detections to known OT threat groups and observed attack patterns. Dragos said the tool also automates workflow steps such as alert triage, incident summaries and reporting.

The company said a library of guided, repeatable analyst workflows - built and validated by Dragos's own practitioners - will be available soon.

On data handling, Dragos said customer data does not leave the customer's environment and that EmberAI operates inside the organisation's existing Dragos Platform deployment, with a 'human in the loop' design principle keeping analysts responsible for final decisions.

"We built EmberAI to harness Dragos's decade-plus of experience in threat intelligence, incident response, adversary tracking, and frontline operations for OT environments," said Robert M. Lee, chief executive and co-founder at Dragos.

"It is hard to reproduce this depth of OT-specific expertise and build AI that understands and can action OT-specific findings."