Powerful refresh of the Sophos endpoint security portfolio

ProductsSophos EDRSophos Endpoint

New growth opportunities, stronger market positioning, accelerated sales.

Over 300,000 organizations worldwide trust Sophos Endpoint to protect their business from advanced threats targeting their computers and servers. As a leading provider, we know it’s essential for you to deliver the strongest protection to your customers, with speed and confidence.

That’s why, today, we’re unveiling a powerful refresh of our endpoint security portfolio that expands your sales opportunities, strengthens your position in the market, and accelerates your sales.

 

Easier to quote and sell to smaller organizations

New: Sophos Endpoint 100
In September, we announced the introduction of Sophos Endpoint 100, a new license option designed to accelerate new SMB customer acquisition growth. Sophos partners can now offer the full power of Sophos Endpoint in a highly competitive, fixed-price subscription designed exclusively for organizations with up to 100 employees. That means fewer hurdles, faster deal cycles, and more predictable margins — all while delivering award-winning protection your customers can trust.

Learn more about Sophos Endpoint 100

 

Expanded sales opportunities

New: Sophos EDR license tier
Sophos has delivered powerful detection and response capabilities for endpoints and servers via the Sophos XDR license. Now, to open fresh sales opportunities with new and existing customers, we’re introducing a new “Sophos EDR” license tier. Sophos EDR combines the unmatched defenses of Sophos Endpoint with intuitive, AI-accelerated detection and response capabilities in a single package. Protect your customers from advanced ransomware and evasive threats with Sophos’ best-in-class unified endpoint protection, detection, and response solution.

The new Sophos EDR license tier will be available to sell from November 1, 2025, for term license subscriptions, and from late January 2026 for MSP Flex.

Learn more about Sophos Endpoint and Sophos EDR and download new marketing assets in advance of our public launch on October 21, 2025 (Partner Portal login required).

 

New: Sophos Endpoint for Legacy Platforms
Legacy operating systems that have reached end-of-support by the platform vendor often lack the security features and updates present in newer systems, making them targets for exploitation by adversaries. However, organizations within industries such as manufacturing and healthcare often need to run endpoints with these outdated operating systems for specialized systems, including machinery and medical devices.

To help you win more business and elevate the defenses of your customers running older operating systems, we’ve introduced Sophos Endpoint for Legacy Platforms — a new add-on providing comprehensive security for a range of Windows and Linux endpoint and server platforms that extend beyond their standard end-of-support dates.

Learn more about Sophos Endpoint for Legacy Platforms

 

Stronger market positioning

Endpoint agent performance enhancements
Sophos’ technology is rooted in our unique prevention-first approach that reduces breaches, adapts defenses in response to an attack, and improves detection and response outcomes. Sophos consistently strives to strike the optimal balance between performance and protection. The latest version of the Sophos Endpoint agent for Windows includes major performance enhancements with a memory footprint that’s 40% lighter, delivering an improved experience. With this release, you can talk with confidence about our superior endpoint protection solution that’s tough on threats — and easy on performance.

Learn more about Sophos Endpoint performance enhancements

 

“Sophos Intercept X” is now “Sophos Endpoint”

To make it easier for you to find, quote, and sell the right solutions for your customers, we’re simplifying our product names by removing “Intercept X” from our endpoint portfolio branding and marketing assets. You’ll also notice these changes in the latest price list, for example:

  • “Central Intercept X Advanced” is now “Sophos Endpoint – User”
  • “Central Intercept X Advanced for Server” is now “Sophos Endpoint – Server”

This change affects all Sophos Endpoint and Sophos XDR licenses, across both User and Server subscriptions.

Check out the latest price list (Partner Portal login required)

 

Sophos Intercept X Essentials – End of Sale

To ensure all customers have the strongest protection, we are announcing the end of sale of our older Sophos Intercept X Essentials licenses, as they do not include our full endpoint defense capabilities. Going forward, Sophos Endpoint (previously called “Intercept X Advanced”) is our baseline endpoint security solution.

  • Term licenses
    • The last order date for new licenses (CIXE and SVRCIXE) is November 1, 2025.
    • The last order date for renewing existing licenses is January 7, 2026. After this date, existing Sophos Intercept X Essentials customers will continue to be protected but will need to upgrade to Sophos Endpoint (CIXA and SVRCIXA) at renewal.
  • MSP Flex licenses
    • Customers can continue to use Sophos Intercept X Essentials until late January 2026.
    • Sophos Intercept X Essentials subscriptions (CIXE-MSP and SVRCIXE-MSP) will then be upgraded automatically to Sophos Endpoint subscriptions (CIXA-MSP and SVRCLOUDADV-MSP).
    • Monthly billings will reflect the new subscriptions from February 2026

 

Endpoint security portfolio refresh: At a glance

We’re excited about this major update to our market-leading endpoint security line-up. Check out the new and updated collateral on the Sophos partner portal today.

 

There’s more…

The good news doesn’t stop with our Endpoint portfolio. Today, Sophos is also announcing a major update to our MDR offering and further expansion of our security services market leadership, giving you even more ways to expand your business – and your customers defenses. Highlights include a brand-new Identity Threat Detection and Response (ITDR) solution, a new range of Advisory Services, the inclusion of integration packs with Sophos XDR and Sophos MDR, and more!

Be sure to review the Partner FAQs on the Partner Portal (login required) covering the most common questions about the new and improved endpoint and security operations portfolio.

To learn more about these powerful new offerings and how they can help you deliver unmatched value to your customers, join us for an exclusive partner launch webinar on the Sophos Academy.

Launch Webinar
Announcing the Newly Expanded Security Operations Portfolio

📅 October 15, 2025
Register now