Sophos Cuts Threat Response Time to 89 Seconds with AI-Driven SOC — Sophos Limited

Event summary

Sophos' agentic SOC reduced threat response time to 89 seconds, with 52% of MDR cases closed end-to-end by AI.
The company now defends 40,000 customers worldwide, with 39% year-over-year growth.
Sophos Central integrates endpoint, firewall, identity, SIEM, network, email, cloud, threat intelligence, XDR, and MDR into a unified context lake.
Sophos achieved top rankings in G2 Summer 2026 reports across five categories and was named a 2026 Gartner Peer Insights Customers' Choice for MDR.

The big picture

Sophos' agentic SOC represents a strategic shift in managed security operations, addressing the structural imbalance between cybersecurity demand and available expertise. By leveraging AI to handle high-volume, well-bounded work, Sophos enables human analysts to focus on high-stakes decisions and novel attack patterns. This model is particularly relevant as adversaries increasingly adopt AI, moving at speeds that traditional SOC structures struggle to match. The company's leadership in industry rankings underscores the market validation of its approach.

What we're watching

AI Scalability: Whether Sophos can sustain the 89-second response time and 52% AI case closure rate as customer base and threat complexity grow.
Market Differentiation: How Sophos' agentic SOC model will position it against competitors in the increasingly AI-driven cybersecurity landscape.
Integration Expansion: The pace at which Sophos extends the agentic model across its entire portfolio, particularly with the upcoming launch of Sophos CISO Advantage.