Sophos is launching Sophos Fusion, an AI-native cybersecurity defense system that unifies endpoint, firewall, email, cloud, identity, and security operations under a single architecture. It is the next evolution of Sophos Central. All existing customers are already part of it, without having to do anything themselves.
With Sophos Fusion, the company aims to move away from the idea that separate tools provide better security when used together. Instead, all signals from every control point converge in real time into a single shared data layer, which Sophos calls a “unified context lake.” Detection at one point thus triggers a coordinated response at another: a suspicious email raises alertness across the board, and a compromised identity locks down access.
The rebranding is happening gradually. Over the coming months, the Sophos Central interface will transition step by step to Sophos Fusion. Customers and partners do not need to take any action.
Agentic SOC with humans at the helm
At the heart of it all is the agentic approach. The system can independently detect, investigate, and respond, within limits set and adjusted by Sophos’s MDR analysts. According to Sophos, the company operates “the world’s largest agentic SOC” based on this approach. Fifty-two percent of cases are handled entirely by AI, without human intervention. The average time from alert to fully automated response is 89 seconds.
This intelligence is built up across more than 625,000 organizations that Sophos protects. This means a new customer doesn’t start from scratch. And while Sophos primarily focuses on its own products, the system remains open, with over 500 integrations with third-party tools, including Microsoft, CrowdStrike, and Palo Alto Networks.
Sophos Fusion is now available and will be expanded in the coming months. Starting in mid-August, improvements to the MDR service will follow, along with an expansion of Sophos XDR to include Secureworks Taegis analytics and a new Next-Gen SIEM. This SIEM is priced per user and server rather than per data volume, a move by Sophos to remove the incentive to limit telemetry.
In October, Sophos AI Defense and Sophos CISO Advantage will be added. The former provides visibility and control over every AI tool in the environment, including shadow AI. CISO Advantage brings CISO-level advice to organizations with or without a CISO.
Tip: Cohesity integrates Sophos malware scanning into Data Cloud