Corsha & Dragos join forces to secure machine identities in OT

Corsha has entered into a partnership and platform integration with Dragos to address machine identity and threat detection within operational technology environments.

The collaboration aims to unite Corsha's automated machine identity capabilities with Dragos' expertise in industrial threat intelligence, providing organisations with the means to verify machine communications and identify, contain, and remediate cyber threats prior to operational disruptions.

Machine-to-machine security

The rising complexity of operational networks has highlighted the risks associated with machine-to-machine communication. Each new machine, sensor, or autonomous device integrated into an operational environment increases the potential attack surface, with many of these connections lacking strong authentication or accountability.

Adversaries are reportedly exploiting unverified machine communications to move laterally and avoid detection, driving the need for continuous verification across entire operational technology environments. The combined offering from Corsha and Dragos aims to address these challenges by authenticating each machine connection and adding a layer of identity-driven intelligence to threat response workflows.

"Machine-to-machine communication has become the backbone of modern operational systems, yet it remains one of the least protected layers of the OT environment," said Anusha Iyer, CEO and Founder of Corsha. "By integrating our machine identity platform with Dragos' threat detection platform, we are giving organizations the ability to continuously verify every connection and act on identity-driven intelligence in real time. This partnership brings Zero Trust for OT to life, strengthening resilience, accelerating response in real time, and securing the core of how critical industrial systems connect."

Integrated capabilities

The partnership involves a direct technical integration between the Corsha and Dragos platforms. This integration is designed to give security teams a comprehensive view of machine communication across operational technology environments while enhancing their ability to manage risk and maintain compliance with industry frameworks.

The partners describe several advantages for organisations adopting the unified approach. Firstly, they aim to prevent unauthorised or high-risk machine communications by combining Dragos' visibility and anomaly detection with Corsha's identity-driven microsegmentation. This strategy is intended to reduce opportunities for malicious lateral movement, ransomware attacks, and supply chain compromises.

Secondly, integrating Corsha and Dragos is positioned to enhance the deployment of a Zero Trust Architecture in operational technology, permitting enforcement of strict communication policies for devices and non-human endpoints. This goes beyond detection to active prevention of untrusted connections.

Thirdly, the platforms work together to improve the efficiency of incident response. The addition of machine identity context to Dragos' threat detection data is intended to make triage and investigation more actionable and timely. Security teams are thus equipped to respond quickly, with greater certainty regarding the trustworthiness of machine traffic.

The partners state that the combined solution also contributes to meeting the SANS Five ICS Critical Controls for Defensible Architecture. By continuously authenticating machine-to-machine connections, it assists organisations to implement layered, traceable defences that align with recognised industry standards.

"Securing OT environments requires both deep visibility into threats and confidence in every machine connection, and integrating Corsha's machine identity platform with the Dragos Platform gives customers context to act with speed and confidence," said Dan Dorchinsky, VP Public Sector, Dragos Inc. "By combining Corsha's machine identity with Dragos's deep industrial monitoring and visibility, asset discovery, risk-based vulnerability management, and threat detection, we are helping organizations strengthen their defenses and operational resilience."

Operational outcomes

The unified solution aims to give organisations the ability to validate every industrial machine connection, supplement detections with contextual identity, and control access dynamically based on assessed risk. This layered approach is targeted at reducing the time security operations teams need to identify and contain malicious activity, while supporting organisations in maintaining continuity in their industrial environments.