{"id":92,"date":"2026-05-29T11:32:16","date_gmt":"2026-05-29T09:32:16","guid":{"rendered":"https:\/\/mspbusiness.com\/en\/it-news\/sophos-agentic-soc-cuts-threat-response-time-to-89-seconds\/"},"modified":"2026-10-24T22:24:18","modified_gmt":"2026-10-24T20:24:18","slug":"sophos-agentic-soc-cuts-threat-response-time-to-89-seconds","status":"publish","type":"post","link":"https:\/\/mspbusiness.com\/en\/press-releases\/sophos-agentic-soc-cuts-threat-response-time-to-89-seconds\/","title":{"rendered":"Sophos agentic SOC cuts threat response time to 89 seconds"},"content":{"rendered":"

Sophos has published the production results of a full year of agent-based operations within Sophos Managed Detection and Response (MDR). The platform now protects 40,000 customers worldwide and has grown by 39% year on year. The results show what an agentic Security Operations Center (SOC) looks like at scale.<\/strong><\/p>\n

The sheer volume of telemetry, the complexity of the modern technology stack and the structural imbalance between the demand for cybersecurity and the expertise available mean that traditional SOC structures are no longer able to manage everything. Attackers are deploying AI without procurement cycles or governance constraints. Sophos has redesigned its SOC structure so that AI handles the bulk of the volume and senior analysts can focus on situations where judgement is critical.<\/p>\n

Through Sophos Central, the industry’s first AI-native cybersecurity platform, endpoint, firewall, identity, SIEM, network, email, cloud, threat intelligence and MDR share a single unified context lake, integrated AI and one workflow. The platform supports more than 350 third-party integrations and offers a solution for Microsoft environments.<\/p>\n

Twelve months of production data<\/h3>\n

Production data from the past twelve months sets a new standard for managed security operations:<\/p>\n

– 89 seconds from case creation to a fully automated response. This metric measures how quickly the Sophos Central Defense System responds to cases that AI is permitted to handle on its own, resulting in faster responses and greater resilience against attacks that unfold at machine speed.
\n– 52% of MDR cases are handled end to end by AI, without human intervention, within boundaries that are continuously adjusted by analysts. This metric measures how much work AI carries out fully autonomously, not merely the prioritisation of alerts or the containment of threats.
\n– 40,000 customers operate under the agent-based model: every Sophos MDR customer benefits from the same agent-based operating model, regardless of size or market segment, with the intelligence becoming richer with every threat detected.<\/p>\n

Behind every Sophos MDR case is a Defense System that processes tens of millions of detections every day, suppresses noise, correlates signals and surfaces only what requires action.<\/p>\n

The new operating model for managed security<\/h3>\n

Within the agentic SOC, Sophos applies both a human-on-the-loop (HOTL) and a human-in-the-loop (HITL) model: human-on-the-loop for high-volume work with clearly defined processes where speed is essential, and human-in-the-loop for high-consequence decisions where context, business impact or new attacker behaviour require an analyst’s judgement before action is taken.<\/p>\n

AI now takes on the work that previously occupied the time of Tier 1 analysts and many Tier 2 analysts. Human analysts have moved on to higher-value work: threat hunting, investigations, advising customers and overseeing the autonomous systems themselves.<\/p>\n

According to the company, the 52% figure grabs the attention, but the remaining 48% is just as important. When AI removes most of the workload, analysts gain the room to focus on tasks that require their judgement: new attack patterns, high-consequence decisions and cases where context and business implications matter.<\/p>\n

Independent validation<\/h3>\n

Sophos is recognised as a market leader in MDR for the broader portfolio that underpins it:<\/p>\n

– G2 Summer 2026: number 1 in five categories. The G2 Summer 2026 reports name Sophos the best overall solution in endpoint security, EDR, XDR, MDR and firewalls, based entirely on verified customer reviews. It is the eighth consecutive quarter in which Sophos MDR has been named the overall market leader.
\n– 2026 Gartner\u00ae Peer Insights\u2122: Sophos has been named a 2026 Gartner\u00ae Peer Insights\u2122 Customers’ Choice in the Voice of the Customer for Managed Detection and Response. The company received a rating of 4.8 \/ 5.0 based on 290 reviews, making it the most reviewed vendor in the report.
\n– KuppingerCole Analysts Leadership Compass for Managed Detection and Response 2026: Sophos has been named Overall Leader and was recognised as a leader in four categories: overall leadership, product leadership, innovation leadership and market leadership.<\/p>\n

Expansion across the entire portfolio<\/h3>\n

Sophos is extending the agent-based operating model to the rest of its product portfolio through Sophos Central in 2026. The investments include the integration of XDR and Next-Gen SIEM capabilities into a unified context lake, the expansion of Secure AI capabilities for customers’ new generation of AI tools, and the launch of Sophos CISO Advantage in autumn 2026. The latter product will provide strategic security advice to organisations both with and without existing security leadership. All of these capabilities are built on the same agent-based foundation and the same Defense System that Sophos MDR has proven over the past year.<\/p>\n","protected":false},"excerpt":{"rendered":"

Sophos MDR reaches 40,000 customers and shows that its agentic SOC automatically neutralises threats in an average of 89 seconds.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"mspb_bron_id":1166041,"mspb_url_nl":"https:\/\/mspbusiness.com\/persberichten\/agentic-soc-van-sophos-verkort-reactietijd-op-bedreigingen-tot-89-seconden\/","mspb_url_de":"https:\/\/mspbusiness.com\/de\/pressemitteilungen\/agentic-soc-von-sophos-verkuerzt-die-reaktionszeit-auf-bedrohungen-auf-89-sekunden\/","mspb_url_en":"","mspb_beeld_url":"https:\/\/mspbusiness.com\/wp-content\/uploads\/2026\/05\/iStock-2259320363-aspect-ratio-800-450.jpg","mspb_beeld_klein":"https:\/\/mspbusiness.com\/wp-content\/uploads\/2026\/05\/iStock-2259320363-aspect-ratio-800-450-400x225.jpg","mspb_auteur":"Persberichten","mspb_beeld_alt":"","mspb_video":"","_yoast_wpseo_metadesc":"Sophos MDR reaches 40,000 customers and shows that its agentic SOC automatically neutralises threats in an average of 89 seconds.","footnotes":""},"categories":[11],"tags":[],"layout":[6],"class_list":["post-92","post","type-post","status-publish","format-standard","hentry","category-press-releases","layout-news"],"_links":{"self":[{"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/posts\/92","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/comments?post=92"}],"version-history":[{"count":1,"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/posts\/92\/revisions"}],"predecessor-version":[{"id":93,"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/posts\/92\/revisions\/93"}],"wp:attachment":[{"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/media?parent=92"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/categories?post=92"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/tags?post=92"},{"taxonomy":"layout","embeddable":true,"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/layout?post=92"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}