Robert M. Lee

They say OT runs electric grids, water systems, manufacturing plants, data centers, and transportation networks; defending them was not just a business decision but a moral one. These systems are too important to leave to a security model built for IT alone.

Lee recalls that almost every investor said an OT cybersecurity focus was a mistake, and some called it unfundable or "stupid" because they believed OT would go away. In a later post, Lee pushes back on people who say security is "all T" and argue that OT security should not exist.

The argument shifts from skeptical investors at Dragos’s founding to an anti-OT cybersecurity crowd in later public posts.

Read original · Original 2

Defenders already know what to do, they argue, and every avoidable loss of life is unacceptable. They call for a fundamental step change rather than incremental discussion.

Lee writes that over 80 water utilities were hit by cyber attacks in one campaign in a month, that the number is higher and many are undisclosed, and that the attacks were not limited to the U.S. They also cite $300 million in damages and an attempt to kill people at an oil refinery.

Read original

A mission worthy of lasting 100 years requires culture, values, autonomy, and work whose benefits the current team will never see. Valuations are not the driver.

In a ten-year reflection, Lee notes Dragos became the first OT company valued at $1 billion or more, but says valuations have never driven the team. Later, they describe the Accenture majority investment as putting the OT cybersecurity mission into the company’s governing documents, keeping Dragos independent and vendor-neutral, and giving them operational control as CEO to provide permanence for the next 100-plus years.

The permanence argument moves from a founder’s long-term mindset to a specific governance structure through the Accenture investment.

Read original · Original 2 · Original 3

Customers need coverage across more of the operational stack; acquisitions and Accenture’s reach and datasets are the way to get there.

Lee announces that Dragos acquired NetRise and runZero after earlier acquisitions of Network Perception and Phosphorus Cybersecurity, with Accenture’s majority investment clearing government approvals. The combined enterprise value is described as $4.175 billion, with over 100 positions opened in recent months and hundreds more expected, mostly in R&D.

Read original · Original 2

Board slides and green KPIs, they argue, did not capture operational reality. The danger lies where capable AI meets under-protected systems.

Lee writes that far less is being done in certain areas, including OT security, than people realize. The dangerous part is the intersection, not simply that AI is that good.

Read original

They also frame cybersecurity as an enabler, not the mission, and celebrate the frontline workers who keep infrastructure operating.

Dragos, Accenture, and SANS Institute launched the Community Cyber Resilience Foundation with support from Elastic, making $10 million in resources immediately available to U.S. electric, gas, or water utilities under $100 million in revenue.

• The resources include free software, hardware, deployment support, training, and GIAC certifications.
• In a separate post, Lee celebrates linemen, wastewater treatment engineers, and manufacturing line workers as unsung heroes and says cybersecurity is not the mission but the enabler.

Read original · Original 2

Lee recalls co-founding Dragos ten years earlier with Jon Lavender and Justin Cavinee.

• They describe the OT/ICS cybersecurity community as overlooked and underserved but vital, pointing to electric grids, manufacturing plants, water systems, data centers, and other infrastructure that make modern life possible.
• They note that skeptics said an OT-focused cybersecurity company was impossible, that Dragos became the first OT company valued at $1b+, and that the goal is to build a company to last 100+ years through culture, values, and people who will never meet.

For brands planning a campaign

A critical-infrastructure cybersecurity vendor can use this as an anchor for mission alignment: propose co-marketing around protecting OT/ICS communities and long-term stewardship, rather than short-term product promotion. It also offers a speaking angle on building a durable security company.

It is the clearest recent update on scale, ownership, and leadership.

Lee writes that the Accenture majority investment in Dragos has cleared government approvals and is now official, and that Dragos has acquired NetRise and runZero.

• They also cite earlier acquisitions of Network Perception and Phosphorus Cybersecurity and describe the aim as building the industry's first end-to-end xOT cybersecurity platform, from the software supply chain and connected devices to the operational core.
• They say they remain CEO and have been elevated to Chairman of the Board of Directors.
• The post notes over 100 positions opened in recent months and hundreds more expected, mostly in R&D, and welcomes HD Moore, Thomas Pace, Michael Scott, and their teams to Dragos.

For brands planning a campaign

A partner should account for the expanded platform and corporate backing. Co-marketing and speaking opportunities can focus on xOT platform consolidation, R&D investment, and the combined Dragos-Accenture reach, rather than pitching Dragos as a small independent startup.

It also shows why the Accenture deal changes partnership scale.

Lee recalls that investors called an OT cybersecurity focus a mistake and said it was unfundable, and that some called it stupid because they believed OT would go away.

• They say the alternative—leaving power systems, water systems, manufacturing plants, data centers, and transportation networks undefended—was a moral decision, not a business decision.
• The post announces that Accenture is acquiring a majority stake in Dragos at a $3.25 billion valuation, along with all of runZero and NetRise, bringing combined enterprise value to $4.175 billion.
• They say Accenture is moving the OT cybersecurity mission into the company's governing documents, that Dragos remains an independent and vendor-neutral company, that they have operational control as CEO, and that the structure is meant to give Dragos permanence for the next 100+ years.
• Accenture is described as contributing reach, scale, OT cybersecurity expertise, and unique datasets.

For brands planning a campaign

This is the strongest proof of scale for a partnership pitch.

• A vendor can propose co-marketing around mission-driven M&A, independent vendor-neutral security, and the moment in the OT market.
• A speaking angle could explore why critical-infrastructure security needs long-term governance, not just quarterly goals.

It offers a starting point for understanding their current technical argument beyond company news.

Lee argues that a major consideration in frontier AI models and scary scenarios is not simply model capability but the lack of cybersecurity work.

• They say far less is being done in certain areas, including OT security, than people realize, and that board slides and green KPIs did not capture reality.
• In their view, the danger lies in that intersection—not merely in AI being good.

For brands planning a campaign

An AI-security partner can co-create content on the gap between board reporting and operational reality in OT security. A campaign can frame AI risk as a cybersecurity-readiness problem, not only a model-capability problem.

It offers important context on tone and stakes before proposing a partnership.

Lee says they are exhausted and done with the anti-OT cybersecurity crowd and with OT cyber people who do not advocate for more than preventive measures.

• They write that people are going to die, that over 80 water utilities were hit by cyber attacks in one campaign in the past month, that the number is higher and many attacks are undisclosed, and that the attacks were not limited to the U.S.
• They reference $300m in damages and an attempt to kill people at an oil refinery, argue that the response has been too incremental, and call for a fundamental step change.
• They close by saying they will work on something new.

For brands planning a campaign

A partner should avoid soft awareness campaigns that treat OT security as a distant risk.

• This post supports urgent advocacy, incident response, and water-utility protection messaging.
• The confrontational tone may not suit neutral co-marketing, so pair it with a concrete program or resource.

It shows what a partner could actually support.

Lee writes that many small utilities lack the financial resources and trained staff to do OT cybersecurity even when they know they are at risk.

• Dragos, Accenture, and SANS Institute are launching the Community Cyber Resilience Foundation with additional support from Elastic.
• The announcement makes $10m of resources immediately available.
• Any U.S. electric, gas, or water utility under $100 million in revenue can apply for free cybersecurity software, hardware, deployment support, and training including GIAC certifications, described as free forever.
• Lee says a blog covers what Dragos learned from giving software to small utilities and why those utilities matter beyond their own communities.

For brands planning a campaign

This is a concrete CSR and partnership program. A vendor can amplify, sponsor, or co-market training and small-utility outreach, or build a speaking session around closing the resource gap for under-resourced utilities.

Lee writes about having fun with AI to celebrate linemen, wastewater treatment facility engineers, and people working manufacturing lines. They call them unsung heroes and say it is a privilege to work in cybersecurity, but cybersecurity is not the mission—just the enablers—and that this is beautiful too.

For brands planning a campaign

A partner can use this as a low-risk, human-focused creative starting point: celebrate frontline infrastructure workers without product-heavy messaging. It suits community, employer-brand, or mission-support campaigns.

Lee’s posts focus on protecting the operational technology and industrial control systems that run electric grids, water systems, manufacturing plants, data centers, and transportation networks. They argue that these systems are vital, often overlooked, and should be off limits to cyber attacks.

For brands planning a campaign

A critical-infrastructure cybersecurity vendor can build co-marketing and speaking opportunities around OT-specific defense, drawing on Robert M. Lee’s framing of the mission and its consequences for local communities.

Examples: Source 1 · Source 2 · Source 3 · Source 4

Lee describes founding Dragos with a stated mission to safeguard civilization and frames the company as built to last 100-plus years through culture, values, and autonomy—not just quarterly results. Reflections on its first ten years set the company’s work against a pandemic, war in Europe, market instability, and geopolitical uncertainty.

For brands planning a campaign

A partner can propose founder-story keynotes, long-term partnership narratives, or employer-brand content centered on a lasting mission and shared values. The material supports a message about commitment beyond a single product cycle.

Examples: Source 1 · Source 2 · Source 3

Robert M. Lee argues that OT security should be a distinct discipline and that incremental discussion is not enough.

The sharpest criticism invokes the risk of people dying and rejects debates over risk and frequency—a powerful but polarizing message for partner campaigns.

For brands planning a campaign

A brand can use debate-style panels, myth-busting explainers, or advocacy campaigns aimed at OT and IT decision-makers. The stark, mortality-focused posts can be powerful but polarizing; provide context before using excerpts.

Examples: Source 1 · Source 2

Robert M. Lee describes the goal as an end-to-end xOT cybersecurity platform spanning software supply chain, connected devices, and the operational core, while Dragos remains independently operated.

For brands planning a campaign

A partner should align with the platform and independence message.

• Co-announcements, technical integration content, or webinars with Robert M.
• Lee may fit if the partner’s capabilities complement the xOT platform rather than compete with it.

Examples: Source 1 · Source 2

Lee highlights the launch of the Community Cyber Resilience Foundation with Accenture and SANS Institute, supported by Elastic. The foundation makes $10 million in resources immediately available to U.S. electric, gas, and water utilities with under $100 million in revenue, including free software, hardware, deployment support, training, and GIAC certifications.

For brands planning a campaign

A brand can propose co-marketing around workforce training, small-utility resilience, or corporate social responsibility, drawing on a concrete program and audience rather than a general charitable claim.

Examples: Source 1

Lee argues that frightening AI scenarios stem not only from model capability but also from weak cybersecurity, especially in OT. In their view, board slides and green KPIs missed the real danger at the intersection of AI and under-protected operational systems.

For brands planning a campaign

A brand can pitch responsible-AI and cyber-physical risk panels or written commentary. The angle can reach technical and board-level audiences if the campaign focuses on cybersecurity practice rather than AI hype.

Examples: Source 1

Robert M. Lee presents cybersecurity as an enabler, not the mission itself.

For brands planning a campaign

A partner can build human-interest content around the people who keep infrastructure running, presenting security as support for their work. This softer angle can balance more technical or acquisition-focused material.

Examples: Source 1

Robert M. Lee writes in direct, declarative paragraphs, often returning to mission, long-term thinking, and the difference between OT and IT security.

For brands planning a campaign

A partner should expect a founder-voice format rather than ghostwritten corporate copy.

• Co-created content should leave room for Robert M.
• Lee’s mission framing and directness, especially on OT-specific arguments.

Examples: Source 1 · Source 2 · Source 3 · Source 4 · Source 5 · Source 6 · Source 7

Their posts describe Dragos’s focus on operational technology cybersecurity and critical infrastructure.

View example

This is an investment in Dragos, not evidence of sponsorship or client work.

View example

View example

View example

Ask what form that support took.

View example

Odess breaks down acquisitions and market structure, including the ASSA ABLOY deal for PACLOCK and an episode on European regulation—topics close to Robert M. Lee's acquisition and market commentary.

Odess focuses on the physical and access-control security market, product positioning, and regulation as a competitive moat—not OT and ICS defense or mission-driven company building.

Read original · Original 2

Lee's emphasis on the operators and incident teams behind the tools and on what work goes unseen.

Licciardi focuses on national CSIRT and SOC work, workforce recognition, and resilience culture—not OT and ICS platforms, acquisitions, or founder-level strategy.

Read original · Original 2

Like Robert M. Lee, they argue that OT security is not simply IT security.

Harp's posts largely promote courses and events for CambiOS Academy, while Robert M. Lee writes about founder-level strategy, mission, and community programs.

Read original · Original 2

The posts analyze ASSA ABLOY's acquisition of PACLOCK, the value of a US-made hardware story in critical infrastructure procurement, and European regulation as product discipline and a market moat. For a vendor whose audience includes security integrators, facilities and access-control buyers, or manufacturers navigating compliance as a competitive filter, Odess speaks to the same purchasing decisions from the physical security side.

The tradeoff is distance from the OT/ICS mission Robert M.

• Lee leads.
• Lee Odess's posts focus on physical security hardware, access control, mergers and acquisitions, and regulatory strategy—not electric grids, water utilities, or industrial control system defense.
• A co-marketing campaign aimed at protecting small utilities would lack the firsthand OT threat and utility-resource argument; a keynote or co-authored piece would need to focus instead on security market structure, compliance, and channel strategy.
• Ask about sponsorship availability, rates, and audience composition before proceeding.

Examples: Source 1 · Source 2

The posts show work around national CSIRT and SOC functions, a defense of the invisible output of containment work, a documentary about the people behind incident response, and an argument that diverse thinking is itself a control. A vendor selling incident response, resilience services, SOC support, or workforce and inclusion programs can use that register for a webinar or panel on what actually happens during a bad night.

The tradeoff is that the posts focus on cyber-resilience and people, not OT/ICS specifically.

• They say nothing about the small-utility funding gap, industrial control system defenses, or the 100-year critical infrastructure framing that makes Robert M.
• Lee a direct fit for a campaign aimed at small utilities.
• This alternative could support a campaign about the human side of response, but a separate OT technical voice would be needed for the industrial systems content.

Examples: Source 1 · Source 2

The posts promote CambiOS Academy and argue that OT courses should be built by instructors with real plant-floor experience.

• They also convene an oil-and-gas OT security webinar on governance, incident response readiness, IT/OT segmentation, and sector threats.
• A vendor selling OT security services or software and seeking a course, bootcamp, or expert-panel format can use this alternative to reach practitioners who buy training and peer advice.

The tradeoff is that the posts focus more on education marketing and event promotion than on the founder-led mission and company-news posts that define Robert M.

• Lee's voice.
• They say less about executive-level brand partnerships, large audience reach, or a utilities-specific philanthropic program.
• For a co-marketing campaign aimed at small utilities, Derek Harp could provide the technical training layer, but Lee remains the stronger match for the mission and platform-level partnership.
• Ask about rates and sponsorship policy before proceeding.

Examples: Source 1 · Source 2