Market Sizing
The OT and cyber-physical systems (CPS) security market is one of the fastest-growing segments in cybersecurity, with a projected compound annual growth rate of 18.2% through 2034. The SCADA segment alone is valued at $12.89 billion in 2025 and is expected to reach $20 billion by 2030. These figures reflect a fundamental shift in how critical infrastructure operators budget for OT security: investment is now compliance-driven rather than discretionary, and regulatory mandates have shortened budget planning cycles from multi-year initiatives to immediate fiscal year requirements.
The acceleration in OT security investment traces two catalytic events. The May 2021 Colonial Pipeline ransomware attack demonstrated, in vivid and nationally visible terms, that OT security failures produce physical-world consequences — fuel shortages, declared states of emergency, and billions of dollars in economic disruption. The 2024 disclosure of the Volt Typhoon campaign, in which PRC-affiliated threat actors had pre-positioned access in U.S. water utilities, energy infrastructure, and transportation systems, elevated OT security from an operational concern to a national security priority. Both events produced regulatory responses — TSA Security Directives, CISA emergency guidance, and Congressional attention — that translated into mandatory spending rather than voluntary improvement.
The insurance market has compounded the regulatory pressure. Cyber insurers covering OT-heavy industries — manufacturing, energy, utilities — are increasingly requiring demonstrable OT security controls as a condition of policy issuance and renewal, not merely policy discounts. Organizations that cannot demonstrate network segmentation, asset visibility, and incident response plans are finding OT coverage either unavailable or priced prohibitively.
Notable Transactions (2024–2026)
| Transaction | Value | Date | Multiple | Market Signal |
|---|---|---|---|---|
| Nozomi Networks → Mitsubishi Electric | $883M | Closed Jan 2026 | ~10–12x revenue | Industrial conglomerates view OT security as core infrastructure, not a software category. |
| Dragos Series D — WestCap | $74M | Sept 2024 | N/A | Dragos remains independent; growth equity round ahead of potential IPO or strategic sale. |
| Claroty Series F — Golub Growth | $150M at $3B valuation | Jan 2026 | 80% valuation increase from prior round | IPO conversations underway; Claroty is the largest independent pure-play CPS security company. |
| Palo Alto Networks / CyberArk | $25B | 2024 | ~15x revenue | IT-side PAM acquisition brings privileged access management depth directly relevant to OT vendor access use cases. |
| Cisco / Splunk | $28B | 2024 | ~6x revenue | OT telemetry analytics and SIEM/SOAR capability acquired at scale; Cisco's industrial security story now includes Splunk's analytics depth. |
The transaction landscape reveals two parallel consolidation dynamics. Pure-play OT security companies are either being acquired by industrial conglomerates (Nozomi/Mitsubishi) or raising late-stage growth equity ahead of IPO or strategic sale (Claroty, Dragos). Simultaneously, IT security giants are acquiring capabilities that extend their platforms into OT-adjacent use cases: CyberArk's PAM capabilities matter for OT vendor access management; Splunk's SIEM and analytics capabilities matter for OT telemetry ingestion and correlation. The resulting competitive landscape is a mix of OT-specialist pure-plays and broad IT security platforms extending into the OT adjacency — a dynamic that creates both complexity and opportunity for buyers evaluating platforms.
Regulatory Compliance Timeline
The regulatory timeline through 2027 represents a sustained wave of compliance mandates that will keep OT security spending elevated well beyond the current budget cycle. The EU Cyber Resilience Act's 2027 deadline for connected industrial product manufacturers is particularly significant: it extends compliance requirements upstream into the OT supply chain, requiring that PLC manufacturers, DCS vendors, and industrial component suppliers demonstrate security-by-design in their products. This will drive procurement-side changes — asset owners requiring CRA compliance from OT vendors — that reshape the commercial relationships across the entire OT ecosystem.