New Dragos AI assistant EmberAI targets the OT security skills gap
cybernewschronicle.com · post 61385 · 2026-06-23
WASHINGTON, June 23 — Industrial control system cybersecurity company Dragos Inc. has launched EmberAI, an artificial intelligence assistant built specifically for operational technology environments, aiming to put the company’s threat intelligence in the hands of analysts at any experience level. The launch of EmberAI comes at a time when attacks on critical infrastructure are on the rise, and there is a shortage of operational technology security specialists to tackle these threats.
Dragos argues that general-purpose AI is not equipped to handle the complexities of operational technology environments, as it cannot distinguish between critical exposures and routine noise due to its lack of understanding of the plant and its systems. EmberAI runs on the Dragos Intelligence Fabric, which the company describes as the world’s largest OT cybersecurity data set, built from more than a decade of adversary tracking and incident response work.
This data set is enormous, comprising more than 5 petabytes of daily OT telemetry, as well as research conducted under the company’s status as a Common Vulnerabilities and Exposures Numbering Authority, and research spanning more than 600 OT protocols. Analysts can use EmberAI to query their assets, vulnerabilities, and network activity in plain language, and rank threats by operational impact.
This capability is designed to be accessible to a wide range of users, from information technology practitioners and plant engineers to veteran OT specialists, making it a valuable tool for organizations securing critical infrastructure such as power grids, manufacturing plants, water systems, pipelines, and data centers. A significant advantage of EmberAI is its ability to understand the nuances of operational technology environments, allowing it to provide more accurate and relevant threat intelligence.
This is particularly important in OT environments, where a bad call can have serious consequences for safety and physical systems, not just data. By providing analysts with a tool that can help them make more informed decisions, Dragos aims to help organizations better protect themselves against the growing threat of attacks on critical infrastructure. As the threat landscape continues to evolve, the need for effective operational technology security solutions is becoming increasingly urgent.
The launch of EmberAI is a significant development in this area, and its potential to help organizations improve their defenses is substantial. As the situation continues to unfold, it will be important to watch how EmberAI is received by the industry, and how it contributes to the ongoing efforts to secure critical infrastructure.
The encouraging part is that EmberAI is designed to be used by analysts at any experience level, which means that it has the potential to help address the staffing squeeze that is currently affecting the OT security industry. By providing a tool that can help analysts make more informed decisions, Dragos is helping to level the playing field, and giving organizations the ability to better protect themselves against the growing threat of attacks on critical infrastructure.
Patients should talk to their doctor about the implications of this development, and how it may impact their own security protocols.