Ctrlk
ProductBook a demoOpen app
linkedinyoutube
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Dragos Platform

Connect Dragos Platform to Radiant Security to forward OT and ICS security alerts for AI triage.

Dragos Platform is an operational technology (OT) security platform that monitors industrial control system (ICS) environments for threats, vulnerabilities, and operational risk. Connecting Dragos Platform forwards OT and ICS security alerts to Radiant Security via the Dragos REST API. Radiant uses these alerts to apply AI triage to industrial threats, giving analysts a unified view across OT and IT environments.

Prerequisites

Radiant Security pulls alerts from Dragos Platform over the public internet. Allowlist the following Radiant Security egress IPs on your Dragos Platform endpoint or any upstream firewall:

  • 100.21.80.201

  • 52.11.97.167

  • 35.164.70.154

Create an API key in Dragos Platform

  1. Sign in to the Dragos Platform console.

  2. Navigate to Admin > Users.

  3. Under API Keys, click Add new API key.

  4. Enter a name for the key (e.g., RadiantSecurityDataConnector).

  5. Click Generate Key.

  6. Copy the ID and Secret values. You will enter these as Key ID and Key Secret in Radiant Security in the next section.

  7. Click OK.

The Secret value is shown only once and cannot be retrieved later. Store it securely before closing the dialog.

Add the data connector in Radiant Security

  1. Sign in to Radiant Security.

  2. From the navigation menu, select Settings > Data Connectors, then click + Add Connector.

  3. Search for and select Dragos Platform, then click Data Feeds.

  4. Under Select your data feeds, select Dragos Platform, then click Credentials.

  5. Under Credential Name, enter a descriptive name (e.g., Dragos - API).

  6. In the Base URL field, enter the URL you use to access the Dragos Platform console (e.g., https://companyName.platform.dragos.cloud).

  7. In the Key ID field, paste the ID you copied from Dragos Platform.

  8. In the Key Secret field, paste the Secret you copied from Dragos Platform.

  9. Click Add Connector.

  10. Click Done to save your changes.

Verify ingestion

After Dragos Platform begins forwarding, confirm alerts are reaching Radiant.

  1. In Radiant, navigate to Log Management.

  2. Filter by rs_connectorType:"dragos_platform".

  3. Confirm recent alerts appear.

Allow several minutes for alerts to be parsed, indexed, and available for search.

PreviousDarktrace NDRNextForcepoint

Last updated

Was this helpful?