New EmberAI platform leverages more than a decade of operational technology threat intelligence to help security teams analyse risks and prioritise threats.
Dragos has launched EmberAI, a new artificial intelligence assistant designed specifically for operational technology environments, as critical infrastructure operators face a growing shortage of specialised cyber security expertise.
The company said EmberAI is built on its proprietary Intelligence Fabric, which combines more than a decade of OT threat intelligence, incident response experience, vulnerability research, and telemetry collected from industrial environments across the globe.
You’re out of free articles for this month
To continue reading the rest of this article, please log in.
Unlike general-purpose AI tools, EmberAI is designed to provide operational context for security analysts working in sectors such as energy, manufacturing, water, pipelines and data centres, helping them understand the real-world impact of vulnerabilities and threats on industrial operations.
“We built EmberAI to harness Dragos’s decade-plus of experience in threat intelligence, incident response, adversary tracking, and frontline operations for OT environments,” Robert M. Lee, CEO and co-founder of Dragos, said in a 24 June statement.
“It is hard to reproduce this depth of OT-specific expertise and build AI that understands and can action OT specific findings.”
According to Dragos, EmberAI allows analysts to query OT environments using natural language and receive responses grounded in the company’s intelligence data. The platform correlates information on assets, vulnerabilities, network activity and known threat actor behaviours to help organisations prioritise remediation efforts and respond more quickly to incidents.
EmberAI also includes workflow automation capabilities designed to reduce manual analysis and reporting tasks, while a forthcoming library of expert-developed workflows will provide guided investigations and response processes based on Dragos analysts’ field experience.
Dragos emphasised that analysts remain responsible for final decisions, with all recommendations designed to be transparent and auditable. The company also said customer data remains within existing Dragos Platform deployments rather than being sent to external AI models.
EmberAI is available immediately as part of the Dragos Platform.
Want to see more stories from trusted news sources?
Make Cyber Daily a preferred news source on Google.
David Hollingworth
David Hollingworth has been writing about technology for over 20 years, and has worked for a range of print and online titles in his career. He is enjoying getting to grips with cyber security, especially when it lets him talk about Lego.