OT/ICS cybersecurity is a structurally distinct vertical from enterprise IT security — industrial/utility buyers, nation-state pre-positioning and physical-consequence threats rather than data breaches — and 2025-2026 has seen its cleanest pure-plays (Dragos, Nozomi, Armis) absorbed into strategic acquirers within months of each other, leaving Claroty as the last major scaled independent.
📈 What changed: Jul 22, 2026: CISA updated advisory AA26-097A to confirm Iranian-affiliated actors exploiting internet-connected Rockwell Automation, Schneider Electric and Siemens PLCs via the v…
| Indicator | Score | Reading |
|---|---|---|
| Maturity higher is better · high confidence | 59/100 | Early-mid scaling: real deployed products at critical-infrastructure operators, but industry-wide OT monitoring adoption remains nascent. |
| Evidence Strength higher is better · high confidence | 85/100 | M&A terms and threat activity independently corroborated across multiple 2025-2026 sources, anchored by an EU regulator primary source. |
| Commercial Proximity higher is better · high confidence | 69/100 | Recurring, fast-growing revenue at the pure-play layer, now proven enough that strategics are paying $1B+ multiples for it. |
| Capital & Policy Support higher is better · high confidence | 64/100 | Regulation-led, not subsidy-led: NIS2 and CIRCIA are binding mandates rather than public funding programmes. |
| Crowding Risk lower is better · medium confidence | 62/100 | Public-market crowding is modest — the cleanest pure-plays are private or just got acquired, so exposure is mostly embedded inside diversified names. |
| Reflexivity Risk lower is better · low confidence | 47/100 | Mixed: diversified public names are earnings-grounded; the pure-play layer is priced on growth narrative and strategic-buyer appetite. |
Every indicator score is computed by the Northstar engine from analyst-set ordinal bands — never hand-written, never stored.
The public page is the summary (backed by 16 cited sources). Full briefing — company map, catalysts, native signals and sources — is inside the app.
Open in the appStart free →The Northstar Signal — what moved across all 350 themes and why, in your inbox. Free, no spam, one-click unsubscribe.