Sophos MDR: Stronger offering, bigger opportunities, faster sales

Products•Managed Detection and Response (MDR)•Sophos ITDR•Sophos XDR

Sophos MDR continues to raise the bar and our latest enhancements make it easier than ever to win new deals, retain customers and grow your recurring revenue.

01 Oct 2025 Par

Sophos is an established and trusted leader in security operations and more than 75,000 organizations use the Sophos managed detection and response (MDR) service or Sophos extended detection and response (XDR) tools to defend their organization from advanced, human-led threats that cybersecurity tools alone cannot stop.

Today, we are excited to announce major updates to our market-leading security operations solutions that enable you to to further extend your customers’ defenses while delivering new growth opportunities and even stronger market differentiation.

 

Introducing Sophos ITDR

Identity is the cybersecurity frontline. From logging-in to a tool or device, to gaining access to files, the identity of the user is at the center of today’s IT and cybersecurity controls. Adversaries increasingly try to impersonate legitimate users to trick their way into organizations and access sensitive or valuable data in order carry out their attacks.

To elevate organizations’ defenses against identity-based threats, we are pleased to introduce Sophos Identity Threat Detection and Response (ITDR), a powerful new add-on for Sophos MDR and Sophos XDR.

Sophos ITDR enables analysts to:

  • Quickly identify and prioritize security gaps and misconfigurations to reduce cyber risk.
  • Automatically detect and respond to sophisticated identity-based threats.
  • See abnormal activity and exposed credentials with dark web monitoring.
  • When used in conjunction with Sophos MDR, our security analysts investigate and respond to identity threats on the customer’s behalf.

Sophos ITDR will be Generally Available for Term licenses on October 21, 2025 and via MSP Flex on November 1, 2025.  Use Sophos ITDR to expand your footprint with existing Sophos MDR and Sophos XDR customers while elevating their defenses against identity attacks, and generate new opportunities with organizations seeking to lower their identity risk.

Learn more about Sophos ITDR and download new assets today (Partner Portal login required).

 

Integrations: Automatically included with Sophos MDR and Sophos XDR

Data is the foundation of security operations. Integrations allow the Sophos Central platform to ingest threat data from customers’ IT and cybersecurity solutions so we can detect attacks early, and enable analysts to take response actions to block them. The more data we have, the quicker we can detect suspicious activities, and the faster analysts can detect and respond to attacks.

To accelerate threat detection and response, all integrations will be included automatically and at no additional charge with new and existing Sophos MDR and Sophos XDR subscriptions. It’s now easier for defenders to leverage all available telemetry to detect and block malicious activities – while also increasing customers’ return on their existing security investments.

This change will be effective from November 1, 2025 for Term licenses, and from late January 2026 for MSP Flex, and will apply to both new and existing customers. At these points Sophos will retire integration pack licenses from our portfolio – speeding up the quote and order process.

Download the latest Sophos MDR and Sophos XDR resources today (Partner Portal login required).

 

Sophos AI Assistant: Even more powerful  

Sophos is a global leader in AI for cybersecurity and we’ve been pushing the boundaries of AI to accelerate security outcomes for approaching a decade. The Sophos AI Assistant – available to all Sophos XDR customers and included with Sophos MDR to support partners who co-manage the service – distills expertise from the team behind Sophos MDR into an intelligent assistant.

We have recently released a number of enhancements to the Sophos AI assistant that enable analysts to accelerate threat triage and investigation, provide additional guided workflows, and support real-time threat hunting:

  • New Security Analyst and Threat Hunter assistants
  • Contextual workflows based on analyst roles
  • Smart prompt starters and in-workflow assistance

Plus, to make it easier for users to quickly access the AI Assistant, it’s also moved to a new “AI” menu in the Sophos Central console.

Watch the video to learn more about the Sophos AI Assistant, and be sure to include this powerful differentiator in your Sophos XDR conversations.

 

Sophos: Your proven, trusted partner for security operations

With Sophos, you can up-level your customers’ security operations with confidence. More organizations use Sophos than any other cybersecurity provider for security operations and Sophos is widely recognized as a leader by customers, analysts and testing houses alike. Recent recognitions include:

  • Frost & Sullivan: A Leader in the 2025 Frost Radar for Managed Detection and Response.
  • Gartner Peer Insights: A 2025 “Customers’ Choice” for Extended Detection and Response and Endpoint Protection Platforms, and a 2024 “Customers’ Choice” for Managed Detection and Response.
  • G2: The only vendor named a Leader across the G2 Overall Grid® Reports for Extended Detection and Response (XDR), Managed Detection and Response (MDR), Endpoint Detection and Response (EDR), and Endpoint Protection Suites.
  • MITRE: A strong performer in the 2024 MITRE ATT&CK Evaluations.

 

That’s not all …

Today, we are also announcing a powerful refresh of the Sophos endpoint portfolio and a continued expansion of our security services market leadership, providing you with even more ways to expand your business – and your customers’ defenses.

Highlights include the new Sophos Advisory Services, new endpoint offerings for SMB organizations and those operating legacy platforms, a new EDR license tier, endpoint agent performance enhancements, and more!

Be sure to review the Partner FAQs on the Partner Portal (login required) covering the most common questions about the new and improved endpoint and security operations portfolio.

To learn more about these powerful new offerings and how they can help you deliver unmatched value to your customers, join us for an exclusive partner launch webinar on the Sophos Academy.

Launch Webinar
Announcing the Newly Expanded Security Operations Portfolio
📅 October 15, 2025
Register now

À propos de l’auteur

Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response.

Sophos offers industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with the visibility and scalability needed to stay ahead of evolving threats.

Sophos goes to market with a global partner ecosystem, including Managed Service Providers (MSPs), Managed Security Service Providers (MSSPs), resellers and distributors, marketplace integrations, and cyber risk partners, giving organizations the flexibility to choose trusted relationships when securing their business. Sophos is headquartered in Oxford, U.K. More information is available at www.sophos.com.