Gartner recently published a new magic quadrant for cyber physical systems. This was an important step in providing the industry with some (potentially) independent advice on the operational technology visibility and threat detection tooling that has been evolving for some years.

Who’s in the quadrant?

The initial assessment evaluated 17 vendors, and places them in the same quadrants that we’re all familiar with – from Gartner: Leaders, Visionaries, Challengers and Niche Players. The assessment hinges on two key areas: Completeness of Vision (how well a vendor anticipates and addresses market needs) and Ability to Execute (how effectively they deliver on that vision). Access to the full report requires a subscription to Gartner, but looking at announcements from vendors can provide some insight into the standings:

• Claroty came out on top, ranking highest for execution and vision. Their platform is built specifically for CPS, offering strong asset tracking, risk management, and threat detection.
• Microsoft also made the Leaders list with its Defender for IoT, focusing on securing OT devices and integrating CPS protection into broader cybersecurity strategies. They’ve uncovered over 300 vulnerabilities in OT apps just this year alone.
• Nozomi Networks secured a Leader spot thanks to its deep industrial expertise and strong OT security tools like Vantage and Guardian, which focus on continuous network monitoring.
• Armis earned recognition for its Centrix platform, which excels in real-time asset tracking and vulnerability management across IT, OT and IoT environments.
• Dragos also made the cut, praised for its ICS-focused Dragos Platform, which combines network visibility with specialised threat intelligence.

Other vendors, like TXOne Networks, were highlighted for their proactive security approach, though their exact ranking wasn’t shared. The mix of Leaders shows that CPS security requires a blend of strategies: endpoint security, network monitoring and active threat prevention.

Why This Magic Quadrant Matters Now

Gartner says that by 2027, 75% of CPS-heavy organisations will move to dedicated security platforms instead of patchwork solutions. Why? Because CPS security challenges are piling up fast:

• More devices, more risks – as CPS systems get more connected, cyber threats grow too. Hacks on OT devices can disrupt water supplies, hospitals and other critical services.
• Regulations are tightening – governments are stepping up security rules. Laws like the EU’s NIS2 Directive and U.S. CISA guidelines are forcing companies to take CPS security seriously.
• Old tech, no patches – many CPS devices, especially older ones, can’t be updated easily, leaving them vulnerable. Security platforms need smarter ways to protect them.
• Fixing, not just watching – companies don’t just want to spot risks, they want tools to fix them. By 2027, 45% of organisations will pick CPS platforms based on their ability to remediate threats, not just detect them.

What Sets CPS Protection Platforms Apart?

Unlike traditional SIEM systems or endpoint protection tools, CPS security platforms are built specifically for industrial environments. They understand how physical systems operate and are designed to keep them secure without disrupting operations. Here’s what sets them apart:

• Asset discovery & mapping – finds every device in the system (PLCs, IoT sensors etc) and tracks how they interact.
• Real-time threat detection – spots unusual activity, like unauthorised access or malware targeting industrial systems.
• Protection & mitigation – provides inline prevention, network segmentation and fixes that work within CPS constraints.

Looking Ahead: The Future of CPS Security

Gartner’s CPS Protection Platforms Magic Quadrant isn’t just a one-time thing. It’s the start of a bigger conversation about how we protect the systems that keep the world running. As CPS adoption grows with trends like Industry 4.0 and smart infrastructure, security needs to keep up.

• The market is evolving – today’s leaders are setting the pace, but new players could shake things up with fresh ideas.
• One-size doesn’t fit all – some vendors will specialise in niche areas, while others will push industry-wide innovation.
• IT security isn’t enough – CPS environments need purpose-built protection, not just OT security tacked onto IT frameworks.

Final Thoughts

The release of the 2025 Gartner Magic Quadrant for Cyber-Physical Systems Protection Platforms is more than a new analyst report. It really provides a point of reference for a market that hasn’t been assessed well, leaving it difficult to navigate the platforms out there. This Magic Quadrant will undoubtedly evolve, but as a point of reference, it is welcomed. Moving forward, this will be one source of authority that Anchoram Consulting may use in assessing and providing the detailed guidance to critical infrastructure and operational technology organisations.

For more information on how to better anticipate cyber incidents, watch for threats and withstand and recover from security breaches, contact Anchoram Consulting today!