CyberIndexBeta

Product

Sophos Endpoint is an endpoint protection and EDR product for organizations of all sizes, providing anti-ransomware, behavioral threat detection and exploit prevention for Windows, macOS and Linux. Sophos Endpoint is a unified Endpoint Protection and EDR solution built to defeat AI attacks. Sophos Endpoint matches the attack velocity, automatically blocking exploits, ransomware, and attacker techniques by default with zero tuning, stopping threats launched by either humans or Agentic AI tools. Sophos Endpoint feeds real-time threat and health telemetry into Sophos Fusion, where Synchronized Security™ turns a detection at one control point into a coordinated response at the others. It runs on Linux, macOS, Windows and Windows Server.

Current Version
2026.3.0.2090
Market
EnterpriseSMB
Licence
Paid
Price
Quote
Record Created
2026-08-20
Last Updated
2026-10-24

Vendor

Sophos was founded in 1985 by Jan Hruska and Peter Lammer, two Oxford doctoral students, and is still headquartered in Abingdon, outside Oxford. It listed in London in 2015 and was taken private in 2020 by Thoma Bravo, and in 2025 it acquired Secureworks, adding that company's managed detection business to its own. It sells to organisations, largely through resellers, and its two halves are endpoint and network. Sophos Intercept X is the endpoint product, Sophos Firewall the appliance line, and Sophos Central the single console that manages both — the integration between them is much of what it sells. Sophos MDR is the managed detection and response service, now the company's fastest-growing line with more than 40,000 customers, and Sophos XDR, Sophos Email and Sophos Backup and Recovery for M365 sit alongside. Sophos Home is the consumer product, and the free version is the one most individuals will have met. SophosLabs publishes its own threat research, and the company's products appear regularly in the public test cycles this index draws on. Vendor page →

Website
sophos.com
Country
United Kingdom
Headquarters
Abingdon, United Kingdom
Year Established
1985
Customers
625K organisations
Users
100M users
Revenue
$1.0B (2023)

Platforms

Linuxnative
macOSnative
Windowsnative
Windows Servernative

Target Market

Enterprise secondarySMB secondary

Capabilities

Malware Detectionkeynative
Ransomware Protectionkeynative
Behavioral Detectionkeynative
Web Protectionkeynative
Email ProtectionNot known
Host FirewallNot known
Sandbox AnalysisNot known
Cloud-Assisted ScanningNot known
Heuristic Detectionnative
Device Controlnative
Vulnerability Shieldingnative
Central Management Consolenative

4 of 12 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 2026.3.0.2090Windows
  • 2026.3Linux
  • 2026.1.0.439macOS

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

At a glance — latest result per lab test

AV-Comparatives Business Security Test

Tested: Windows2026-07-15lab report ↗

AV-TEST Antivirus Test

Tested: macOSlab report ↗

SE Labs Enterprise Endpoint ProtectionAAA

2026-06-30lab report ↗

SE Labs Small Business Endpoint ProtectionAAA

2026-06-30lab report ↗

Each bar is one lab’s own figure on that lab’s own scale. Labs test different models at different times, so the figures are not combined into one score.

All results

AV-Comparatives Business Security TestAV-Comparatives Business Security Test — March–June 20262026-07-15
Protection Rate: 98.3%False Positives: 2
AV-Comparatives Business Security TestAV-Comparatives Business Security Test — August–November 20252025-12-15
Protection Rate: 98%False Positives: 5
AV-TEST Antivirus TestTest antivirus software for MacOS Tahoe - March 2026
Protection: 6Performance: 6Usability: 6
AV-TEST Antivirus TestTest antivirus software for MacOS Tahoe - June 2026
Protection: 6Performance: 6Usability: 6
AV-TEST Antivirus TestTest antivirus software for Windows 11 - June 2026
Protection: 6Performance: 5.5Usability: 6
AV-TEST Antivirus TestTest antivirus software for Windows 11 - August 2026
Protection: 6Performance: 5.5Usability: 6
SE Labs Enterprise Endpoint ProtectionEnterprise Endpoint Security 2026 Q2
AAAOverall 99Protection Accuracy: 98%Legitimate Accuracy: 100%Total Accuracy Rating: 99%
SE Labs Enterprise Endpoint ProtectionEnterprise Endpoint Security 2026 Q1
AAAOverall 99Protection Accuracy: 97%Legitimate Accuracy: 100%Total Accuracy Rating: 99%
SE Labs Small Business Endpoint ProtectionSMB Endpoint Security 2026 Q2
AAAOverall 99Protection Accuracy: 98%Legitimate Accuracy: 100%Total Accuracy Rating: 99%
SE Labs Small Business Endpoint ProtectionSMB Endpoint Security 2026 Q1
AAAOverall 99Protection Accuracy: 97%Legitimate Accuracy: 100%Total Accuracy Rating: 99%

Certifications

OESIS Framework SupportSupported1 activeSupported
OPSWAT Certified Security ApplicationGold1 activeGold

Change History

This record was created 2026-08-20. Everything below is what has changed since.

  • 2026-10-24New versionNew version: 2026.3.0.2090 (Windows)evidence
  • 2026-10-09Test result addedNew AV-Comparatives Business Security Test resultevidence
  • 2026-10-09Test result addedNew AV-Comparatives Business Security Test resultevidence
  • 2026-09-30Test result addedNew SE Labs Small Business Endpoint Protection result: AAAevidence
  • 2026-09-30Test result addedNew SE Labs Enterprise Endpoint Protection result: AAAevidence
  • 2026-09-30Test result addedNew SE Labs Enterprise Endpoint Protection result: AAAevidence
  • 2026-09-30Test result addedNew SE Labs Small Business Endpoint Protection result: AAAevidence
  • 2026-09-30Test result addedNew AV-TEST Antivirus Test resultevidence
  • 2026-09-28New versionNew version: 2026.2.2.1.0 (Windows)evidence
  • 2026-09-23New versionNew version: 2026.2.1.3.0 (Windows)evidence
  • 2026-09-23Capability addedCentral Management Console: built inevidence
  • 2026-09-23Capability addedVulnerability Shielding: built inevidence
  • 2026-09-23Capability addedHeuristic Detection: built inevidence
  • 2026-09-23Capability addedDevice Control: built inevidence
  • 2026-09-23Capability addedWeb Protection: built inevidence
  • 2026-09-23Capability addedRansomware Protection: built inevidence
  • 2026-09-23Platform addedRuns on Windows Serverevidence
  • 2026-09-22Product updatedListed in Enterprise Antimalwareevidence
  • 2026-09-22Product updatedListed in Small Business Antimalwareevidence
  • 2026-09-22Product updatedListed in Home Antimalwareevidence
  • 2026-09-20New versionNew version: 2026.2.1.3 (Windows)evidence
  • 2026-09-20New versionNew version: 2026.3 (Linux)evidence
  • 2026-09-19Platform addedRuns on Linuxevidence
  • 2026-09-19Platform addedRuns on Windowsevidence
  • 2026-09-19Product updatedNo longer sold to: Consumerevidence
  • 2026-09-19Product updatedAlso sold to: SMBevidence
  • 2026-09-19Pricing plan addedPrice: price on requestevidence
  • 2026-09-18Test result addedNew AV-TEST Antivirus Test resultevidence
  • 2026-09-17Test result addedNew AV-TEST Antivirus Test resultevidence
  • 2026-09-09New versionNew version: 2026.1.0.439 (macOS)evidence
  • 2026-08-26Test result addedNew AV-TEST Antivirus Test resultevidence
  • 2026-08-25Test result addedNew AV-TEST Antivirus Test resultevidence
  • 2026-08-20Certification addedCertified: OESIS Framework Support (Supported)evidence
  • 2026-08-20Capability addedBehavioral Detection: built inevidence
  • 2026-08-20Capability addedMalware Detection: built inevidence
  • 2026-08-20Pricing plan addedPrice: paidevidence
  • 2026-08-20Product updatedAlso sold to: Enterpriseevidence
  • 2026-08-20Product updatedAlso sold to: Consumerevidence
  • 2026-08-20New versionNew version: 2026.1.0.439evidence
  • 2026-08-20Platform addedRuns on macOSevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.