Work Here?
Sophos
Work Here?
Subscription-based cybersecurity for endpoints, networks, MDR
Sophos
Work Here?
Subscription-based cybersecurity for endpoints, networks, MDR
Overview
Sophos provides cybersecurity solutions for businesses, covering endpoint, network, and mobile security, with a cloud-based management console called Sophos Central. Its products protect devices, networks, and mobile endpoints, and include Managed Detection and Response (MDR) where experts monitor and respond to threats. The company differentiates itself by offering an integrated, single-vendor security stack—covering endpoint, network, and mobile protection—managed from one platform. Its goal is to help organizations prevent digital threats while simplifying security operations.
About Sophos
Industries
Enterprise Software
Cybersecurity
Company Size
5,001-10,000
Company Stage
Acquired
Total Funding
$4.7B
Headquarters
Abingdon, United Kingdom
Founded
1985
Get referred to Sophos
Find people who can refer or advise you
Simplify's Take
What believers are saying
- South Africa entity launched mid-2026 accelerates local hiring and partner growth across sub-Saharan Africa.
- Rubrik integration since June 2026 delivers air-gapped Microsoft 365 backups, enabling rapid ransomware recovery in Sophos Central.
- ALSO Group's CEE expansion into 8 countries enables resellers to bundle MDR and cloud security via ALSO Cloud Marketplace.
What critics are saying
- Microsoft Defender’s native Azure AD integration and bundled M365 pricing will erode 68% of SMB endpoint sales in 6–12 months.
- CrowdStrike’s superior SMB pricing and XDR platform will drive 45–55% mid-market endpoint migration to Intercept in 9–12 months.
- Rubrik’s air-gapped architecture faces 25–35% compromise risk in 12–18 months, threatening Sophos’ cyber-resilience credibility and triggering mass churn.
What makes Sophos unique
- Sophos leads with Synchronized Security, unifying endpoint, firewall, and cloud in a single AI-native platform.
- Its channel-first GTM targets mid-market and SME buyers with enterprise-grade protection and operational simplicity.
- As the world's most widely used MDR service since 2025, Sophos offers 24/7 human-led detection unmatched by peers.
Help us improve and share your feedback! Did you find this helpful?
Funding
Total Funding
$4.7B
Above
Industry Average
Funded Over
6 Rounds
Benefits
Health Insurance
Disability Insurance
Remote Work Options
Wellness Program
Mental Health Support
Growth & Insights and Company News
6 month growth
↑ 15%1 year growth
↑ 15%2 year growth
↑ 15%What is Firewall as a Service (FWaaS)? * July 3, 2026 Firewall as a Service (FWaaS) is a subscription model where you get a fully managed business firewall for a monthly fee instead of buying the hardware and licences upfront. The provider supplies the appliance, includes the security subscription, and manages it for you, all rolled into one recurring cost. It is the same firewall doing the same job at your network edge. What changes is that you rent and outsource it rather than buy and run it yourself. Key facts. * Firewall as a Service replaces the upfront purchase of a firewall with a monthly subscription that bundles hardware, security licensing, and management. * There are two models: cloud-delivered FWaaS, where firewall functions run in the cloud, and managed-appliance FWaaS, where a physical firewall on site is delivered as a service. * Sophos launched Sophos Firewall Hardware as a Service for partners on 1 July 2026, delivering XGS Series appliances on monthly billing. * A managed-appliance FWaaS fee typically covers the appliance, shipping, the security subscription, and ongoing management by the provider. * FWaaS is charged as an operating expense, which most Australian SMEs find easier to approve than a capital hardware purchase. What does Firewall as a Service actually mean? Firewall as a Service means paying for firewall protection as an ongoing service rather than as a product you buy once. In the traditional model you purchase an appliance, buy a multi-year security licence to go with it, and either manage it in-house or pay someone to. FWaaS collapses those three separate things into a single monthly fee. You still have a firewall protecting your network. You just stop owning the box and stop managing it yourself. Think of it the same way you already think about most of your software. You do not buy a perpetual licence for your email platform and run the servers yourself anymore. You pay monthly and someone else keeps it running. FWaaS applies that logic to the one piece of network hardware most SMEs still buy the old way. What are the two types of FWaaS? Firewall as a Service comes in two forms, and the difference matters when you are choosing. Cloud-delivered FWaaS runs the firewall function in the provider's cloud, and your traffic is routed through it before reaching the internet. It suits businesses that are fully cloud-native, have no real office network to protect, and want security applied to users wherever they are. Managed-appliance FWaaS keeps a real firewall on your premises, handling your internet connections and local network, but you get it on a subscription instead of buying it. This is the model most Australian SMEs actually need, because they still have an office, still have on-site systems, and still need SD-WAN and local traffic inspection. It is the model 4iT delivers, using the Sophos Firewall platform. How is FWaaS different from a managed firewall? A managed firewall means someone else looks after a firewall you own; FWaaS means you do not own it at all. The distinction sounds small but it changes the money. With a traditional managed firewall you still paid the upfront capital cost for the appliance, and the management was an added service on top. With FWaaS the hardware cost is folded into the monthly fee, so there is no capital purchase, and the appliance refresh at end of life is part of the deal rather than a fresh quote in three to five years. In its experience supporting Sydney SMEs, that upfront capital number is the thing that stalls firewall projects. The business agrees the ageing appliance needs replacing, then the quote for the new hardware lands and the decision goes into the too-hard basket. Removing the upfront cost removes the stall. Who is Firewall as a Service for? FWaaS suits SMEs that want current firewall protection without tying up capital, and it is a particularly clean fit when an existing appliance is ageing or out of support. If your firewall is three or more years old, no longer getting firmware updates, or struggling under the load of encrypted traffic inspection, a service model lets you refresh it without a capital project. It also suits businesses that prefer predictable monthly IT costs over lumpy one-off purchases. It is not for everyone. If you have the capital, intend to keep the same appliance for its full life, and already manage it well, buying outright can be cheaper over five years. FWaaS trades a little long-run cost for no upfront outlay, guaranteed management, and a refresh you never budget for separately. For most of the SMEs 4IT Support Pty Ltd talk to, that is a trade worth making. Frequently asked questions. What is Firewall as a Service in simple terms? It is renting a fully managed business firewall for a monthly fee instead of buying one. The fee covers the appliance, the security subscription, and the provider managing it, so there is no upfront hardware cost and nothing for you to run yourself. Is FWaaS the same as a cloud firewall? Not always. Cloud-delivered FWaaS runs the firewall in the provider's cloud, while managed-appliance FWaaS keeps a physical firewall on your site delivered on a subscription. Most SMEs with an office network want the managed-appliance model, which is what 4iT provides. Does FWaaS include the security subscription? Yes. On the Sophos platform 4IT Support Pty Ltd use, the monthly fee includes the Xstream Protection subscription, which covers intrusion prevention, web and application filtering, encrypted traffic inspection, SD-WAN, and a zero trust access gateway. The licence does not have to be bought or renewed separately. Can I move my current firewall to a service model? Usually yes. If your appliance is ageing or out of support, moving to FWaaS is a clean way to refresh it without a capital outlay. The provider sizes the replacement to your actual traffic and phases the changeover so there is no gap in protection. If you are weighing up whether a service model makes sense for your firewall, 4IT Support Pty Ltd is happy to talk it through and size the right appliance for your network. Call 4iT on 1800 367 448 or take a look at how 4IT Support Pty Ltd deliver Firewall as a Service. Brett Muscio is the Director of 4iT Support Pty Ltd, a managed services provider based in Castle Hill, NSW. He works with SME clients across Sydney, Melbourne, and Brisbane on networking and infrastructure, including business firewalls, SD-WAN, secure remote access, and managed Wi-Fi, with on-site support across the Sydney metro area and remote delivery nationally. Connect on LinkedIn.
Sophos and Rubrik make Microsoft 365 Backup and Recovery, Powered by Rubrik Cyber Resilience, available to Sophos customers worldwide. Sophos | Published 4 June 2026 New offering connects threat detection and data recovery in a single platform, enabling organisations to detect, respond, and restore faster Sophos, a global cybersecurity leader, and Rubrik (NYSE: RBRK), the Security and AI Operations company, today announced the general availability of Sophos Backup and Recovery Powered by Rubrik Cyber Resilience. The offering enables Sophos' customers to rapidly recover Microsoft 365 data following ransomware, account compromise, insider threats, or accidental deletion, all managed within Sophos Central, the defense system they already use to run their security operations. Today's announcement follows the companies' strategic partnership announced in August 2025, bringing integrated Microsoft 365 backup and recovery capabilities into production for thousands of organisations worldwide. Microsoft 365 is the operational backbone of modern business, running email, identity, and collaboration for hundreds of millions of users worldwide. That scale also makes it a prime target, with attackers exploiting compromised identities to access data, move laterally, and disrupt operations, often before detection. With Sophos Backup and Recovery Powered by Rubrik Cyber Resilience now generally available, organisations can move beyond fragmented workflows and manage both threat response and data recovery within a single platform. By bringing recovery into the same platform used for threat detection and response, organisations can quickly understand what was affected and restore clean, trusted data without leaving Sophos Central. "Staying operational in a world of constant digital disruption requires confidence in your ability to quickly recover," said Tom Foucha, VP product management, Sophos. "By bringing recovery directly into the same platform where security teams detect and respond to threats, we're making cyber resilience practical. This gives organisations a faster, more direct way to withstand attacks and keep their business running." Available as an add-on for Sophos customers, the solution integrates Rubrik's SaaS-based Microsoft 365 protection into Sophos Central, covering Exchange Online, OneDrive, SharePoint, and Teams. Security teams gain a unified experience across threat response and data recovery, eliminating the need for separate tools while strengthening resilience with air-gapped, immutable backups and fast, granular recovery at scale. Key capabilities include: * Secure, immutable backups: Microsoft 365 backups are isolated with air-gapped architecture, WORM-locked immutability, and customer-controlled encryption, ensuring attackers cannot tamper with protected data - even with compromised credentials. * Fast, flexible recovery: Security teams can search and restore emails, files, mailboxes, OneDrive accounts, SharePoint sites, and Teams data - either granularly or at scale - to original or alternate users, including inactive accounts. * Automated protection: The platform automatically discovers new users, sites, and workloads, applying policy-driven protection via Entra ID-based controls to reduce manual effort and ensure continuous coverage. * Unified operations in Sophos Central: Backup and recovery are managed alongside detection and response in a single console, giving teams a complete view of both threats and recovery actions. "For organisations, where Microsoft 365 anchors everything from email to collaboration to critical file storage, its resilience isn't optional," said Mallika Swaminathan, product management lead at Rubrik. "Effective cyber resilience means ensuring recovery is reliable and rapid when organisations need it most. By embedding recovery into Sophos Central, we're simplifying how organisations protect and restore their Microsoft 365 data in critical moments." Sophos defends more than 600,000 customers worldwide. Sophos Central integrates more than 350 telemetry sources across endpoint, cloud, network, identity, email, and business applications, giving the Rubrik integration immediate access to rich security context that helps teams recover more quickly and with greater precision. Sophos Backup and Recovery Powered by Rubrik Cyber Resilience is available now. Customers can contact their Sophos partner or sales representative to activate the offering.
Sophos named a 2026 gartner(r) peer insights(tm) Customers' Choice for Managed Detection and Response. Third consecutive time being named a Customers' Choice for MDR This marks its second Gartner Peer Insights Customers' Choice distinction of 2026, coming off the heels of Sophos' fifth consecutive Customers' Choice for Endpoint Protection Platforms in January 2026. Since Gartner began generating Voice of the Customer (VoC) reports for the MDR category, Sophos has been recognized as a Customers' Choice vendor in every iteration of the report. This recognition is based directly on customer feedback, and Sophos Group is truly thankful to its customers for taking the time to share their experiences. In the 2026 VoC report for MDR, Sophos has an overall rating of 4.8 / 5.0 based on 290 reviews, making Sophos the most-reviewed vendor in the report. To go with this, customers rated Sophos with a 95% Willingness to Recommend score. Sophos Group believe these results reflect Sophos' mission to deliver superior cybersecurity outcomes for its customers through powerful, comprehensive end - to - end solutions. Recognition driven by real customer experiences. Gartner Peer Insights is a free peer review and ratings platform designed for enterprise software and services decision makers. Sophos Group feel being named a Customers' Choice reflects both high overall ratings and strong willingness to recommend, consistently validating Sophos' commitment to customer success. Sophos Group is incredibly grateful to its customers worldwide for their continued trust and feedback, which directly contribute to shaping and improving Sophos' solutions. Here are some examples of what customers had to say about Sophos MDR: "Our overall experience with Sophos MDR has been very positive. The team monitors our infrastructure 24x7 and alerts us to any malicious activity. This service is not only helping us to stay protected but also reducing the burden on our internal team." - Cloud Support Engineer in the Software Industry, $3B-$10B. Review Link "Sophos MDR has dramatically reduced our cyber risk by cutting incident response times from days to hours. The 24x7x365 monitoring and remediation service has proven its worth multiple times, identifying and stopping active attacks before any damage can be done." - IT Manager in the Manufacturing Industry, $50M-$250M. Review Link "The Sophos MDR service is an exceptionally great product altogether. It is extremely suitable in these tough times of cybersecurity issues which are growing and getting more and more complex." - IT Manager in the IT Services Industry, $500M-$1B. Review Link "We have been using Sophos MDR to protect our organization's endpoints and servers and it has been a game changer. Their team is constantly monitoring, quickly identifying issues and fixing them. They make my job easier." - Manager of IT Services in the Government Industry, Gov't/PS/ED <5,000 Employees. Review Link Disclaimer: Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose. GARTNER and PEER INSIGHTS are trademarks of Gartner, Inc. and/or its affiliates. Gartner, Gartner Peer Insights 'Voice of the Customer': Managed Detection and Response, Peer Contributors, 31 March 2026
Chris Bell, Senior Vice President of Global Channel, Alliances and Corporate Development, at Sophos, to Lead Next Evolution of Global Channel Strategy. * Accueil * Business News Sophos Names Chris Bell as Senior Vice President of Global Channel, Alliances and Corporate Development to Lead Next Evolution of Global Channel Strategy. Industry Veteran to Spearhead Channel Leadership, Focused on Empowering Partners and Driving Business Growth Sophos, a global leader of innovative security solutions for defeating cyberattacks, announced it has named Chris Bell as senior vice president of global channel, alliances and corporate development, where he will lead the evolution of Sophos' global channel strategy. This key appointment reinforces Sophos' channel-first commitment to deliver a world-class partner experience. Bell joined Sophos following its acquisition of Secureworks, where he served as chief strategy officer, responsible for long-term vision, strategic partnerships, corporate development and strategy. Building on his career of more than two decades working in the technology industry, including nearly a decade in cybersecurity and channel; Bell's leadership will focus on developing and executing a channel strategy that prioritizes expanding reach, empowering partners and driving growth. Key priorities for Bell at Sophos will include: - Enhancing Sophos Partner Experience to make it seamless for partners to do business with Sophos at high velocity, while streamlining operations. - Continued Innovation for Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs) with Sophos' industry-leading cybersecurity platform, enabling superior cybersecurity outcomes for customers, enhancing operational efficiency for security analysts, and boosting profitability for partners. - Fueling Partner Growth with service delivery competencies, expanded partner enablement programs including persona-based training and fast-track training to expand partners cybersecurity expertise. - Increasing Sophos' Market Reach by leveraging the unified portfolio of Sophos and Secureworks to deliver best-in-class security technologies and services, empowering partners to enhance cybersecurity and strengthen the security posture of organizations, from commercial to enterprise. - Expanding Routes to Market by bolstering Sophos' presence across technology alliances, marketplaces and the cyber insurance ecosystem. Sophos will also continue to maintain its focus across resellers, service providers, and OEM channels. "Partners need adaptable strategies that prioritize flexibility to stay ahead of the increasingly complex threat landscape," said Bell. "Unifying Sophos' and Secureworks' portfolios presents a unique opportunity to accelerate a future-ready channel program that arms partners with the technology, services, insights, and enablement needed to protect customers and fuel long-term growth." A core piece of Sophos' channel strategy is to better equip partners in addressing the evolving security challenges faced by businesses of all sizes. By aligning more closely with partner needs and prioritizing an open ecosystem, Sophos aims to create a stronger partner network that supports customers from strategy to technology and deployment. "Evolving our channel business to consistently deliver excellent customer outcomes is at the core of our partner go-to-market approach," said Torjus Gylstorff, chief revenue officer at Sophos. "We are thrilled to have Chris' strategic vision and deep channel and cybersecurity expertise to shape Sophos' channel strategy and build programs to empower partners to scale their security business." Sophos consistently expands its service delivery capabilities and is recognized for its leadership in implementing partner feedback into its products and enablement offerings. Following the acquisition of Secureworks, Sophos is the leading pure-play cybersecurity vendor of managed detection and response services, protecting more than 28,000 global customers. Sophos also strives to streamline partner operations through initiatives like Sophos Partner Care, a 24x7 team dedicated to providing quoting, licensing and general partner account support, and Sophos Customer Success, a single point of contact for maximizing customer onboarding, retention and growth throughout the post-sales experience. Sophos Channel Recognition Sophos has been recognized as a Champion in the Canalys Global Cybersecurity Leadership Matrix 2025, underscoring its excellence in channel management and market performance. Additionally, Sophos received a 5-Star Award in the 2025 CRN Partner Program Guide and has been a recipient of the 5-Star Award for the past 12 years. The CRN Partner Program Guide is a key resource that helps solution providers identify vendor programs aligned with their business goals and committed to delivering high partner value. About Sophos Sophos is a global leader and innovator of advanced security solutions for defeating cyberattacks. The company acquired Secureworks in February 2025, bringing together two pioneers that have redefined the cybersecurity industry with their innovative, native AI-optimized services, technologies and products. Sophos is now the largest pure-play Managed Detection and Response (MDR) provider, supporting more than 28,000 organizations. In addition to MDR and other services, Sophos' complete portfolio includes industry-leading endpoint, network, email, and cloud security that interoperate and adapt to defend through the Sophos Central platform. Secureworks provides the innovative, market-leading Taegis XDR/MDR, identity threat detection and response (ITDR), next-gen SIEM capabilities, managed risk, and a comprehensive set of advisory services. Sophos sells all these solutions through reseller partners, Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs) worldwide, defending more than 600,000 organizations worldwide from phishing, ransomware, data theft, other every day and state-sponsored cybercrimes. The solutions are powered by historical and real-time threat intelligence from Sophos X-Ops and the newly added Counter Threat Unit (CTU). Sophos is headquartered in Oxford, U.K. More information is available at www.sophos.com. Articles similaires. Business News 19 March 2026 Cobalt, the pioneer of penetration testing as a service (PTaaS) and a leading provider of (...) Business News 19 March 2026 Former CISA CIO Bob Costello Joins Merlin Group, a network of affiliates that invests in, (...) Business News 11 March 2026 Worldstream, a Dutch cloud infrastructure provider operating its own European data centres and (...) Your podcast here. New, you can have your Podcast here. Contact Globalsecuritymag for more information ask: Valentin Jangwa
Cohesity has launched next-generation malware scanning powered by Sophos, integrated natively into its Cohesity Data Cloud platform. The feature enables organisations to detect malware in backup data that bypasses primary defences and validate clean recoveries after cyberattacks. The Sophos-powered engine uses signature-based detection, heuristic analysis and file emulation to inspect backups during routine operations, before restoration and after threat indicators are detected. It identifies zero-day, polymorphic and fileless threats that evade traditional signature-based tools. The scanning capability is included with Cohesity Data Cloud Enterprise Edition and does not require a separate Sophos licence. Sophos X-Ops draws on threat intelligence from tens of millions of endpoints and hundreds of thousands of firewalls globally, using AI-powered classification to detect emerging malware families.
Sophos is Hiring for 68 Jobs on Simplify!
Find jobs on Simplify and start your career today
About Sophos
Industries
Enterprise Software
Cybersecurity
Company Size
5,001-10,000
Company Stage
Acquired
Total Funding
$4.7B
Headquarters
Abingdon, United Kingdom
Founded
1985
Sophos is Hiring for 68 Jobs on Simplify!
Find jobs on Simplify and start your career today