Dragos Platform - Industrial Cybersecurity for OT Environments logo

    Dragos Platform - Industrial Cybersecurity for OT Environments

    Sold by
    Built by practitioners for practitioners, the Dragos Platform equips your cybersecurity team with the most up-to-date technology, and OT-specific intelligence to combat industrial adversaries, codified by our experts on the front lines every day hunting, and responding to the most advanced ICS threats globally. The Dragos Platform unifies OT asset visibility, threat detection, vulnerability management, and investigation & response in a single solution purpose-built for ICS/OT environments.

    Ratings and reviews

    4
    2 ratings
    3 star
    2 star
    1 star
    50%
    50%
    0%
    0%
    0%
    1 AWS reviews
    |
    1 external reviews
    External reviews are from PeerSpot .

    Filters

    Review type

    AWS Marketplace reviews
    External reviews
    Reviews (2)
    Jehin Nadar

    Offers strong incident response features but requires more asset visibility and flexibility

    Reviewed on Jun 04, 2025
    Review from a verified AWS customer

    What is our primary use case?

    I am an engineer in a service provider company where we help clients choose and implement security solutions, and I'm still looking for a new solution.

    I am certified in Dragos, but I have not deployed it in client sites.

    I used Nozomi a few years ago for two years, and now I'm getting trained in it so that I can help clients implement the tool. My customers are still using it.

    What is most valuable?

    Dragos' best features are that they are more focused towards Incident Response, so they have a dedicated playbook in their platform, making it easier for anyone investigating any incidents to investigate the alerts. One of the main features of Dragos is that they have a dedicated Incident Response team, so if clients need any help, they are there to help.

    Dragos does real-time monitoring as well, collecting mirror traffic from the span port of the switch, and as soon as it gets the traffic, it analyzes it in real time and shows what's going on in the networks, which relates to the real-time visibility feature for ICS networks.

    What needs improvement?

    I think Dragos could be improved, as I have worked in Nozomi and compared it to Nozomi. Nozomi offers a lot of flexibility in what I am able to learn and unlearn, and I have more visibility towards the nodes, links, and process variables, which I think is missing in Dragos.

    I think Dragos can offer more flexibility similar to Nozomi and more visibility into the assets, nodes, and links, which would make it more competitive in the future.

    For how long have I used the solution?

    I have used Clarity for two years, and it has been one year since I last used Clarity. That is how long I have been dealing with the Clarity platform.

    What other advice do I have?

    I have experience managing the tools Clarity, Nozomi, Dragos, Sangfor, and I am familiar with these products.

    My customers are already working with Devo, Dragos, Nozomi, Clarity, and these are locally deployed in the client sites, not bought on the AWS Marketplace.

    I have not used Devo, but I have used Nozomi and Dragos, so I do have experience with those products.

    I completed my certification in Dragos and recommend it to my customers already, and I have been dealing with Dragos for a while now.

    Dragos offers a threat intelligence subscription called worldview, so if a customer subscribes to that, they will get regular threat intelligence.

    I have not used much of the detailed analytics and reporting functionalities of Dragos.

    Dragos is a good option to choose, as it performs well in the market.

    Dragos is a big name, and there is room for Dragos in the India market, and they should promote it more.

    The company that I'm working for is a partner with Dragos. I also have partnerships with other vendors including Clarity, Nozomi, and Fortinet.

    I was learning FortiSIEM three months back, but I am not certified in it, so I have been dealing with Fortinet products in a somewhat limited manner. FortiGate is what I mostly deal with from Fortinet.

    On a scale of 1-10, I would rate this solution a 6 or 6.5.

    Which deployment model are you using for this solution?

    On-premises

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    MarkLopez

    Centralized management and cybersecurity features enhance IoT device oversight

    Reviewed on Apr 25, 2025
    Review provided by PeerSpot

    What is our primary use case?

    We use Dragos specifically for managing IoT devices in the industrial sector within our manufacturing ecosystem. It provides a platform to manage, update, and keep track of all network information related to IoT devices. It allows centralized management of industrial IoT devices.

    What is most valuable?

    Dragos offers several valuable features, including the capability to manage IoT devices on a centralized platform. It allows for updates to devices and uniform management counsel, enabling updates to all devices. Another key feature is its ability to manage cybersecurity aspects of devices, such as updating or isolating devices found to have vulnerabilities. It includes features for automatic discovery of devices and inventory management of devices, and it facilitates incident response by allowing for isolation or shutdown of devices in case of critical vulnerabilities.

    What needs improvement?

    Dragos could improve its asset visibility and discovery tools, as the competitor Claroty has better options in this area. Additionally, integrating out-of-the-box with major ERPs like SAP would be beneficial. Claroty performs slightly better in native cloud environments.

    For how long have I used the solution?

    I have used Dragos for about two years.

    How are customer service and support?

    Customer service and support have been generally good. Support requests typically do not exceed twenty-four hours for resolution, and the cybersecurity support has been helpful. The platform's ease of use and device discovery ease are notable.

    What was our ROI?

    Security does not provide direct ROI as it is not related to our products but is critical for maintaining operations. It is more of an insurance policy.

    What's my experience with pricing, setup cost, and licensing?

    Dragos is more expensive than other vendors, probably about fifteen to twenty percent more, but it is generally worth the investment.

    Which other solutions did I evaluate?

    Competitor Claroty was mentioned as an alternative solution.

    What other advice do I have?

    Overall, I would rate Dragos around nine. It is crucial to use anonymous information in reviews to avoid internal distractions.