Sophos has introduced Sophos Fusion, describing it as the industry’s first and most complete AI-native cybersecurity defense system designed to help organizations respond to increasingly sophisticated cyber threats powered by artificial intelligence.
The new platform combines security operations, endpoint protection, network security, identity, email, cloud security, and advisory services into a single defense system that aims to prevent, detect, investigate, and respond to attacks through a unified architecture.
According to Sophos, the cybersecurity industry is shifting toward defense systems that connect security controls, services, data sources, and analysts into one coordinated platform, regardless of whether technologies are developed by Sophos or third-party vendors.
The company said the growing use of AI has accelerated cyberattacks, allowing threat actors to move through an organization’s environment in hours instead of days, while many enterprises continue relying on dozens of disconnected security products.
Sophos said a cybersecurity defense system addresses that challenge through four core components:
- A shared context lake that collects real-time signals from every security control point.
- Synchronized Security™, allowing detections in one area to automatically trigger responses across other security layers.
- Agentic AI operating within analyst-defined boundaries and human oversight.
- Compounding intelligence that strengthens customer defenses using threat data gathered across the broader Sophos customer base.
Sophos Fusion builds on Sophos Central, which the company said is used by more than 625,000 organizations worldwide, and incorporates Secureworks Taegis analytics following Sophos’ acquisition of Secureworks in 2025.
The company said the platform also supports more than 500 third-party integrations, enabling organizations to connect existing endpoint, firewall, and identity security products into the same environment alongside Sophos technologies.
Sophos said it validates the platform through its own security operations center, which supports more than 40,000 customers worldwide.
According to the company, 52 percent of security cases are resolved entirely by AI, while the average time from an alert to a fully automated response is 89 seconds.
Sophos also said its endpoint protection is designed to block broad categories of attacks based on malicious behaviors, including memory abuse, data encryption, data exfiltration, and techniques used by both human and AI-driven attackers.
“As AI increases the speed, scale, and complexity of attacks, organizations need a modern connected, intelligent, and adaptive defense,” said Joe Levy, chief executive officer, Sophos. “Sophos Fusion is built as a defense system optimized for Human-AI workflows. We bring the most complete solution to a new category, a timely advancement demanded by the AI era.”
Industry analysts also pointed to growing demand for AI-driven security operations.
“Futurum Group’s market forecast projects Security Operations — the segment where AI-native orchestration and adaptive defense systems compete — will double from $18B to $37B by 2029, growing faster than any other cybersecurity category,” said Fernando Montenegro, vice president & practice lead, cybersecurity & resilience, The Futurum Group. “This is where the next generation of cyber defense will be won.”
According to Gartner distinguished analyst Neil MacDonald, “Simply adding more tools onto the stack won’t provide the intelligent cyber defense fabric that organizations need to mitigate AI-orchestrated attacks like the one Anthropic recently identified. Organizations need an intelligent overlay that connects the different elements of their cybersecurity toolset to proactively and reactively respond to risks and threats at machine speeds.”
Sophos also announced several new Fusion capabilities scheduled to become generally available between August and October 2026.
These include:
- Sophos Next-Gen SIEM, offering long-term data retention, compliance reporting, and analytics with pricing based on users and servers rather than data volume, generally available Aug. 15, 2026.
- Sophos AI Defense, designed to provide visibility into AI tools, including shadow AI, enforce AI usage policies, and protect accessible data, with early access in August 2026 and general availability in October 2026.
- Sophos CISO Advantage, providing organizations with continuous control validation, compliance mapping, peer benchmarking, and risk assessment alongside expert guidance, beginning October 2026.
- Expanded Sophos MDR with continuous AI-enabled threat hunting and broader response capabilities across endpoint, firewall, cloud, email, and identity, generally available Aug. 15, 2026.
- Sophos XDR powered by Secureworks, rebuilt using Secureworks Taegis analytics with additional detectors, a new analyst experience, and built-in SOAR automation, generally available Aug. 15, 2026.
The company said Sophos Fusion is also designed to support managed service providers, managed security service providers, resellers, distributors, and technology partners by allowing them to manage a unified defense system instead of multiple standalone security products while expanding recurring service opportunities.
Leave a Reply