Sophos has launched Sophos Fusion, an AI-native cybersecurity defense system designed to deliver a coordinated response to AI-era threats. The system unites security operations, endpoint, network security, identity, email, and cloud into one defense system that prevents, detects, investigates, and responds at AI speed.
Sophos Fusion is an AI-native cybersecurity defense system that unites every control point across the enterprise into a single, open architecture .
The system features one shared context lake, Synchronized Security, agentic autonomy with human governance, and compounding intelligence .
Sophos Fusion is the evolution of Sophos Central, rebuilt on Secureworks Taegis analytics following the 2025 acquisition .
Sophos runs the world's largest agentic SOC with over 40,000 customers: 52% of cases resolved entirely by AI, with average automated response time of 89 seconds .
New capabilities include Next-Gen SIEM (Aug 15), AI Defense (Oct 2026), CISO Advantage (Oct 2026), and XDR rebuilt on Secureworks Taegis (Aug 15) .
The system supports over 500 third-party integrations, allowing existing tools to operate as part of the defense system alongside native Sophos protection .
Sophos, a global cybersecurity leader, today announced Sophos Fusion, the industry's most complete AI-native cybersecurity defense system, built to deliver a coordinated response to AI-era threats .
A cybersecurity defense system is an emerging category in the industry: a single, open architecture where every control point, every service, every data source, and every analyst operates as one, whether the control point is native or third-party. Every new source enhances the system, accelerating outcomes while reducing overhead .
The AI era has changed what modern defense requires. Attacks can now move across an organization's environment as a single coordinated operation, further compressing the time from first access to impact from days to hours. Most security and IT leaders are trying to meet that speed with a growing pile of disconnected tools. The typical enterprise runs more than 45 separate security products, which leaves teams with more spending, more dashboards, and more manual work while attackers move at machine speed .
A cybersecurity defense system addresses this market failure, defined by four characteristics :
One shared context lake, where every signal from every control point flows into a single data layer in real time.
Synchronized Security, where a detection on one control point triggers coordinated action across the others at the same moment.
Agentic autonomy with human governance, where the system investigates and responds inside boundaries analysts set and continuously calibrate.
Compounding intelligence, where every threat seen across the defended base makes every customer's defense stronger.
Sophos Fusion is the evolution of Sophos Central, the system that 625,000 organizations worldwide trust every day, now rebuilt on one open architecture incorporating Secureworks Taegis analytics, following the acquisition of the company in 2025 . It leverages agentic AI to connect and synchronize every control point across the whole environment. Sophos proves the system's efficacy and scalability in its own operation, running the world's largest agentic SOC with over 40,000 customers worldwide: 52 percent of cases are resolved entirely by AI, and the average time from alert to a fully automated response is 89 seconds .
Sophos is expanding Fusion with new capabilities reaching general availability from August through October 2026 :
Sophos Next-Gen SIEM (August 15, 2026): Provides long-term data retention, compliance reporting, and analytics on unified data, priced by users and servers rather than by data volume.
Sophos AI Defense (Early access August 2026, general availability October 2026): Secures AI adoption with visibility into AI tools, policy enforcement, and data protection.
Sophos CISO Advantage (October 2026): Delivers CISO-level guidance with continuous control validation, compliance mapping, peer benchmarking, and risk assessment, delivered through MSPs and MSSPs .
Sophos XDR, powered by Secureworks (August 15, 2026): Rebuilt on Secureworks Taegis analytics, adding thousands of detectors, a new analyst experience, and built-in SOAR automation .
"As AI increases the speed, scale, and complexity of attacks, organizations need a modern connected, intelligent, and adaptive defense," said Joe Levy, chief executive officer, Sophos. "Sophos Fusion is built as a defense system optimized for Human-AI workflows. We bring the most complete solution to a new category, a timely advancement demanded by the AI era" .
Sophos Fusion offers endpoint protection, EDR, XDR, next-gen SIEM, ITDR, MDR, network security, email, cloud, and advisory services as one defense system. It is open as well as native: Sophos builds the core control points natively, and more than 500 third-party integrations feed the same shared data layer, so an organization's existing endpoint, firewall, or identity tools operate as part of the system alongside Sophos defense and protection .
About Sophos
Sophos, a global cybersecurity leader, defends more than 625,000 organizations worldwide with Sophos Fusion, the industry's first and most complete AI-native cybersecurity defense system: a single, connected architecture where every control point operates as one. Powered by agentic AI and elite human expertise, Sophos detects, investigates, and neutralizes threats before they become business-disrupting events. Sophos is headquartered in Oxford, U.K. .