CISO Tribune

Vendor comparison · 2 companies

Phosphorus Cybersecurity vs Waterfall Security Solutions

Phosphorus Cybersecurity sells security for xIoT cyber-physical devices that covers discovering, hardening, monitoring and remediating those devices, with automated controls and zero-touch deployment. Waterfall Security Solutions offers software-enabled hardware platforms. CISO Tribune files both under OT and ICS security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Phosphorus Cybersecurity
  • Waterfall Security Solutions
Phosphorus Cybersecurity vs Waterfall Security Solutions: Products, Customers and Funding Compared
Phosphorus CybersecurityPhosphorus Cybersecurity sells security for xIoT cyber-physical devices that covers discovering, hardening, monitoring and remediating those devices, with automated controls and zero-touch deployment.phosphorus.ioWaterfall Security SolutionsWaterfall Security Solutions offers software-enabled hardware platforms.waterfall-security.com
What it sells
  • xIoT asset discovery[1]Discovers and classifies connected xIoT devices across an organization's network.
  • xIoT vulnerability assessment[1]Assesses discovered xIoT devices for security vulnerabilities.
  • Global device network[1]A network resource used to support identification and assessment of connected devices.
  • Password management[1][2]Manages and rotates credentials used on xIoT devices to harden them against attack.
  • Firmware management[1]Manages firmware on xIoT devices to remediate known vulnerabilities.
  • Certificate management[1]Manages digital certificates used on xIoT devices as part of device hardening.
  • Unidirectional Gateways[1][6][7][8][9][11][12][13]Hardware that enforces one-way data flow.
  • HERA[3][5]Hardware-Enforced Remote Access for OT networks.
  • WF-500 DIN Rail[10]A Unidirectional Security Gateway in a compact design.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pages2007[2]
Ownership and funding
Owned by Dragos[1]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pagesNot stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Phosphorus Cybersecurity sells xIoT security to financial services organisations. Phosphorus Cybersecurity sells a unified xIoT security management platform to operators of OT, ICS and IIoT cyber-physical systems. Phosphorus Cybersecurity sells xIoT security for modern data centers. The devices Phosphorus Cybersecurity addresses are the Things of the enterprise xIoT environment.Not written yet
Last verified
November 4, 2026November 9, 2026

Where they overlap

  • Phosphorus Cybersecurity and Waterfall Security Solutions are both filed under OT and ICS security.

Where they differ, field by field

  • Phosphorus Cybersecurity's primary category is IoT and medical device security; Waterfall Security Solutions's is Unidirectional gateways and secure transfer.
  • Phosphorus Cybersecurity is also filed under Firmware and device supply chain security.
  • Phosphorus Cybersecurity lists xIoT asset discovery, xIoT vulnerability assessment, Global device network, Password management, Firmware management and 1 more. Waterfall Security Solutions lists Unidirectional Gateways, HERA and WF-500 DIN Rail.
  • Waterfall Security Solutions was founded in 2007.
  • Phosphorus Cybersecurity is owned by Dragos.

What it sells: Waterfall Security Solutions

What Unidirectional Gateways does[1][6][7][8][9][11][12][13]
A Unidirectional Gateway enforces one-way data flow in hardware, with no inbound attack path through it. Unidirectional Gateways replicate historians, databases, OPC servers and more to business networks.
What HERA does[3][5]
HERA, Hardware-Enforced Remote Access, provides the functionality of remote access. Hardware Enforced Remote Access enables remote management, updates, and troubleshooting for OT networks.

Questions about Phosphorus Cybersecurity and Waterfall Security Solutions

What do Phosphorus Cybersecurity and Waterfall Security Solutions sell?
Phosphorus Cybersecurity sells xIoT asset discovery, xIoT vulnerability assessment, Global device network, Password management, Firmware management and 1 more. Waterfall Security Solutions sells Unidirectional Gateways, HERA and WF-500 DIN Rail.
Are Phosphorus Cybersecurity and Waterfall Security Solutions in the same category?
They share OT and ICS security. Phosphorus Cybersecurity's primary category is IoT and medical device security and Waterfall Security Solutions's is Unidirectional gateways and secure transfer.
When were Phosphorus Cybersecurity and Waterfall Security Solutions founded?
Waterfall Security Solutions was founded in 2007.
Who owns Phosphorus Cybersecurity and Waterfall Security Solutions?
Phosphorus Cybersecurity is owned by Dragos.
Who are Phosphorus Cybersecurity and Waterfall Security Solutions sold to?
From its own pages, Phosphorus Cybersecurity sells xIoT security to financial services organisations.

About Phosphorus Cybersecurity

Phosphorus Cybersecurity sells security for xIoT cyber-physical devices that covers discovering, hardening, monitoring and remediating those devices, with automated controls and zero-touch deployment. Phosphorus Cybersecurity operates as Phosphorus, A Dragos Company. Phosphorus, a Dragos company, describes its product as an extended Security of Things platform designed to find, fix and monitor the often unmonitored Things of the enterprise xIoT environment. Phosphorus Cybersecurity is based in Nashville. Brian Contos is the chief security officer of Phosphorus Cybersecurity.[2][3]

Phosphorus refers to the broader Internet of Things as the xIoT. Phosphorus describes such devices as purpose built IoT, OT and network devices running network-connected firmware, where endpoint security controls cannot be installed. Phosphorus research has focused on devices and technologies used by businesses and government, such as printers, voice over IP phones and physical access systems. A study of IoT device security by Phosphorus Labs found that 68% of the devices have high-risk or critical vulnerabilities. Phosphorus states that attackers exploit unmanaged, high-risk devices as entry points into critical operations. Phosphorus states that about 70% of xIoT devices still use default manufacturer credentials. Phosphorus states that about 68% of xIoT devices run vulnerable or outdated firmware. Phosphorus states that about one-quarter of xIoT devices are end-of-life.[2][3][7][8]

Phosphorus discovers and profiles devices with contextual detail across a wide range of device attributes. Phosphorus identifies, classifies and prioritizes vulnerabilities across an xIoT estate. Phosphorus discovers and remotely disables devices prohibited under U.S.NDAA Section 889, including Huawei, Dahua, Hikvision, ZTE and Hytera devices and devices using their OEM firmware regardless of manufacturer.[2]

Phosphorus automatically remediates xIoT device vulnerabilities, including credentials, firmware, certificates and risky configurations. Phosphorus manages and renews certificates across diverse device sets.[2]

Phosphorus continuously monitors and manages xIoT devices and detects and responds to device drift. Phosphorus monitors xIoT estates to detect and alert on device drift and operational changes. Phosphorus provides centralized log collection and analytics for device-level security analysis, anomaly detection, triage and forensics.[2]

Phosphorus integrates with ServiceNow to provide an automated framework for visibility and control. Phosphorus integrates with password management solutions such as CyberArk for automated xIoT credential management. Phosphorus integrates with Axonius to provide a view of xIoT asset details. Phosphorus integrates with Microsoft Sentinel to provide device enrichments and security insights.[2]

Phosphorus Cybersecurity offers xIoT security for financial services. Phosphorus Cybersecurity secures IoT, OT and IoMT devices for healthcare security. Phosphorus Cybersecurity offers a unified xIoT security management platform for OT, ICS and IIoT cyber-physical systems. Phosphorus Cybersecurity offers end-to-end xIoT security for modern data centers.[2]

Phosphorus Cybersecurity powers the IoT Security Podcast, which covers securing the extended internet of things. Brian Contos and John Vecchi host the IoT Security Podcast.[2][5][6][9]

Phosphorus Cybersecurity on the record

Sources

Phosphorus Cybersecurity full record

  1. [1]phosphorus.ioPhosphorus Cybersecurity · phosphorus.io · undated page, accessed November 4, 2026 · Tier A
  2. [2]xIoT Cyber-Physical Security Platform | PhosphorusPhosphorus · undated page, accessed November 10, 2026 · Tier A
  3. [3]"Lax cybersecurity the norm on xIoT" - PhosphorusPhosphorus · published January 9, 2023 · Tier A
  4. [4]TheStreet: Downloading the Wrong Apps Could Get You Hacked - PhosphorusPhosphorus · published March 24, 2022 · Tier A
  5. [5]Solid but Challenging: CISA's FOCAL Plan - PhosphorusPhosphorus · published September 23, 2024 · Tier A
  6. [6]Why is IoT Security Important? - PhosphorusPhosphorus · published February 3, 2021 · Tier A
  7. [7]Service-Based Cybercrime Seeks Persistence in IoT - PhosphorusPhosphorus · published December 2, 2022 · Tier A
  8. [8]Putting OpenSSL in Context for xIoT Device Security - PhosphorusPhosphorus · published November 4, 2022 · Tier A
  9. [9]Uncovering the Hidden Security Threat of IoT with Jay Leek - PhosphorusPhosphorus · published April 4, 2023 · Tier A

Waterfall Security Solutions full record

  1. [1]waterfall-security.comWaterfall Security Solutions · waterfall-security.com · published July 6, 2026 · Tier A
  2. [2]CompanyWaterfall Security Solutions · waterfall-security.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Hardware-enforced OT Security | Waterfall Security SolutionsWaterfall Security Solutions · undated page, accessed October 30, 2026 · Tier A
  4. [4]OT Visibility Without the Trade-Off: Waterfall & Siemens Energy | Waterfall Security SolutionsWaterfall Security Solutions · undated page, accessed November 10, 2026 · Tier A
  5. [5]Cyber Security in the Government Sector | Waterfall SecurityWaterfall Security Solutions · undated page, accessed November 10, 2026 · Tier A
  6. [6]Cyber Security for Rail Industry | Waterfall SecurityWaterfall Security Solutions · undated page, accessed November 10, 2026 · Tier A
  7. [7]Cyber Security for Metals & Mining | Waterfall SecurityWaterfall Security Solutions · undated page, accessed November 10, 2026 · Tier A
  8. [8]Cyber Security in the Oil and Gas Industry | Waterfall SecurityWaterfall Security Solutions · undated page, accessed November 10, 2026 · Tier A
  9. [9]Cyber Security for Manufacturing | Waterfall SecurityWaterfall Security Solutions · undated page, accessed November 10, 2026 · Tier A
  10. [10]WF 500 DIN RAIL | Waterfall Security SolutionsWaterfall Security Solutions · undated page, accessed November 10, 2026 · Tier A
  11. [11]Cyber Security for Electric Power | Waterfall SecurityWaterfall Security Solutions · undated page, accessed November 10, 2026 · Tier A
  12. [12]Cyber Security for Water Treatment | Waterfall SecurityWaterfall Security Solutions · undated page, accessed November 10, 2026 · Tier A
  13. [13]Facilities Cyber Security Solutions | Waterfall SecurityWaterfall Security Solutions · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.