🤚 The Open-Palm Acquisition Spree

Accenture, the consulting colossus that has historically preferred telling companies what to buy over actually buying things itself, just announced $4.175 billion in combined cybersecurity acquisitions. The portfolio: a majority stake in Dragos, and full acquisitions of runZero and NetRise — three companies that collectively represent the operational technology cybersecurity market’s first, second, and third string.

Dragos, valued at $3.25 billion, is the industry’s leading OT threat detection platform, used by power grids, pipelines, and manufacturing plants across the globe. Its CEO, Robert M. Lee, has spent a decade telling critical infrastructure operators that their SCADA systems are one misconfigured firewall away from a very bad day.

runZero, founded by HD Moore — the person who created Metasploit, the penetration testing framework that taught an entire generation of security researchers how to break things — specializes in asset discovery: the deceptively unglamorous art of figuring out what is actually connected to your network before someone else does. NetRise handles firmware analysis and software supply chain security, the even less glamorous art of checking whether the code inside your industrial equipment was compromised before it left the factory.

Combined, the three companies project roughly $208 million in annual recurring revenue as of June 2026 — a 53% year-over-year increase, and a number that Accenture valued at approximately 20 times revenue. Which is perfectly reasonable if you believe the OT cybersecurity market will grow from $27 billion to $59 billion by 2031, and frankly deranged if you don’t.

👐 The Two-Handed Consulting Paradox

There is a certain narrative elegance in a consulting firm acquiring the companies whose products it recommends.

For years, Accenture’s cybersecurity practice has been advising Fortune 500 companies to invest in OT security platforms, asset visibility tools, and supply chain risk assessments. Now Accenture owns the platforms, the tools, and the assessments. The next time a client asks “what should we buy?”, the answer will be “us,” which does streamline the procurement process considerably.

CEO Julie Sweet described the deals as “expanding our addressable market” and “creating a new platform-led growth opportunity.” In consulting parlance, this translates to: the recommendation slide now has a purchase order attached.

Dragos will remain “independent and vendor-neutral,” according to Robert Lee, because nothing says independence like being majority-owned by a $260 billion consulting firm. runZero and NetRise will operate under Dragos, creating a three-company matryoshka doll inside a consulting giant’s cybersecurity practice.

HD Moore — the person who created Metasploit, who taught an entire generation how to think about offensive security — now ultimately reports to an executive whose LinkedIn bio contains the word “synergies.” The cybersecurity industry’s punk era has officially been acquired by its corporate era.

🌿 The Gentle Awakening

The uncomfortable truth beneath the deal is that it probably makes sense.

Operational technology security has spent the last decade being simultaneously the most important and most neglected corner of cybersecurity. Every critical infrastructure breach — every ransomwared pipeline, every compromised water treatment facility, every power grid intrusion attributed to nation-state actors — has reinforced the same lesson: OT environments are dangerously underprotected.

The market grew 53% year-over-year and still represents a fraction of what organizations actually need. The gap between “what companies spend on OT security” and “what would prevent their industrial control systems from being remotely operated by a threat actor in Minsk” is measured in billions of dollars and several deployment cycles.

Accenture has 7,500 cybersecurity professionals, global client relationships across every critical infrastructure sector, and the sales force to turn a specialist vendor’s technology into an enterprise standard. If the goal is to make OT security as ubiquitous as endpoint detection, a consulting firm with a $260 billion market cap is not the worst vehicle.

👑 The Gold-Leaf Industrial Reckoning

The deals are expected to close in August and September 2026, at which point the OT cybersecurity market will have a new gravitational center. Accenture’s bet is simple: the AI-driven threat landscape and escalating geopolitical risk will make OT security non-optional for every organization that operates physical infrastructure. And in a market projected to double by 2031, owning the platform is more profitable than recommending it.

For Dragos, runZero, and NetRise, the calculus is scale. Robert Lee has spent a decade building Dragos into a 580-person operation that protects the world’s most sensitive environments. HD Moore has spent decades building tools that security professionals actually use. Both now have access to a global sales, implementation, and consulting apparatus that could deploy their technology across every power grid, pipeline, and manufacturing plant on Earth.

Whether that constitutes progress or consolidation depends entirely on whether you trust a consulting firm to operate a security platform with the same intensity as the founders who built it.

The answer, historically, is mixed. But at $4.1 billion, Accenture is betting the slide deck is better with a product behind it.

“We used to recommend Dragos. Now we own Dragos. The deliverable is the same, the margin is better, and the org chart has never been more aligned.” — The Slap of Wisdom Management Consulting Practice, billable at $850 per hour plus a majority equity position