Sophos says its Cybersecurity Defense System, Sophos Fusion, unifies security operations, endpoint, network, identity, email, and cloud security into a single platform for threat prevention, detection, investigation, and response
Sophos has announced Sophos Fusion, its AI-native cybersecurity defense system, built to deliver a coordinated response to AI-era threats.
According to Sophos, a cybersecurity defense system is a single, open platform that unifies security controls, services, data sources, and analysts. It supports both native and third-party tools to improve security operations and reduce complexity.
According to Sophos, the rise of AI has changed cybersecurity requirements, with attacks now spreading across organizations much faster than before. At the same time, many organizations continue to rely on dozens of disconnected security tools, increasing costs, operational complexity, and manual workloads. Sophos cites Gartner, which estimates that the typical enterprise uses more than 45 separate security products.
According to Sophos, a cybersecurity defense system is built around four key capabilities:
- One shared context lake, a unified data layer that brings together security data from multiple control points in real time.
- Synchronized Security, where a detection on one control point triggers coordinated action across the others at the same moment.
- AI-driven Automation with human governance, where the system investigates and responds inside boundaries analysts set and continuously calibrate.
- Compounding intelligence, where insights gained from detecting new threats help strengthen protection for all customers.
“As AI increases the speed, scale, and complexity of attacks, organizations need a modern connected, intelligent, and adaptive defense,” said Joe Levy, Chief Executive Officer, Sophos. “Sophos Fusion is built as a defense system optimized for Human-AI workflows. We bring the most complete solution to a new category, a timely advancement demanded by the AI era.”
Expansion of Sophos Fusion
Sophos said the following capabilities will be added to Sophos Fusion between August and October 2026:
- Sophos Next-Gen SIEM – Provides long-term data retention, compliance reporting, and security analytics on a unified platform. It is priced by the number of users and servers instead of data volume. Available August 15, 2026.
- Sophos AI Defense – Helps organizations monitor AI tools, detect shadow AI, enforce AI usage policies, and protect data accessed by AI applications. Early access in August 2026; general availability in October 2026.
- Sophos CISO Advantage – Offers continuous risk assessments, compliance mapping, control validation, and security guidance for organizations with or without a dedicated Chief Information Security Officer (CISO). Available from October 2026.
- Sophos MDR – Expands managed detection and response (MDR) with AI-assisted threat hunting and broader threat response across endpoints, firewalls, cloud, email, and identity environments. Available August 15, 2026.
- Sophos XDR – Built on Secureworks Taegis analytics, the updated XDR platform adds new threat detectors, enhanced analyst workflows, and built-in security orchestration and automation (SOAR). Available August 15, 2026
To learn more about Sophos Fusion, visit Sophos.com.
