Sophos Fusion: The New AI-Native Cybersecurity Defense System - What Customers Need to Know Now

Eschborn, July 16, 2026 - Sophos is consolidating its security portfolio under the new name Sophos Fusion and positioning the platform as an AI-Native Cybersecurity Defense System. The previous central management platform, Sophos Central, will thus be gradually transitioned into Sophos Fusion.

The launch brings numerous changes to the Sophos portfolio. These include Sophos Next-Gen SIEM, enhancements to Sophos MDR and Sophos XDR, the free integration of the Sophos Email Monitoring System, new solutions such as Sophos AI Defense and Sophos CISO Advantage, as well as adjustments to product names, licensing, and data retention. Many of these changes are scheduled to take effect starting in August 2026 or will be rolled out later in the year.

The platform Firewalls24.de has summarized the announced changes in a detailed technical article and evaluated them from the perspectives of customers and partners.

Sophos Central Becomes Sophos Fusion

The most visible part of the announcement is the renaming of Sophos Central to Sophos Fusion. In the future, the platform is intended to serve as a unified data hub for endpoint, firewall, identity, network, email, cloud, XDR, and MDR. Telemetry from the various control points will be consolidated, analyzed, and used for detection, response, and compliance. According to Sophos, the company operates the world's largest agent-based SOC, where 52 percent of cases are handled entirely by AI and resolved within an average of 89 seconds.

For existing customers and partners, the rebranding does not initially require any immediate action. As things stand, the new name will appear in the console gradually, and existing workflows are expected to continue unchanged.

"Sophos Fusion is more than just a new name for Sophos Central. What's crucial is that Sophos is positioning its platform more strongly as an integrated defense system, thereby bringing endpoints, MDR, XDR, SIEM, identity, email, network, and the cloud even closer together. In the future, it will be more important for customers to view these components not in isolation, but as a cohesive security architecture," says Roman Jacobi, Managing Director of Aphos Gesellschaft fuer IT-Sicherheit mbH.

Next-Gen SIEM Complements XDR and MDR

One of the key new features is Sophos Next-Gen SIEM. The solution is designed to serve as an integrated data layer for Sophos XDR and Sophos MDR and to address requirements that go beyond traditional threat detection. These include log retention for up to ten years, compliance reporting, policy monitoring, and integration with any data source. The pricing model is user- and server-based and is therefore independent of data volume.

From the perspective of Firewalls24.de, Sophos is thus addressing a previous gap in its portfolio. Customers with audit obligations, regulatory requirements, or longer retention periods have often had to plan for supplemental SIEM solutions in the past. With Sophos Next-Gen SIEM, a more tightly integrated option is now available within the Sophos ecosystem.

"Sophos XDR is consistently designed for threat detection and response. Next-Gen SIEM complements exactly what XDR deliberately does not cover: arbitrary telemetry, long-term log retention, and compliance reporting. For many customers with audit obligations or existing SIEM requirements, this can become a key component," says Roman Jacobi.

Changes to MDR, XDR, and Data Sources

There are also extensive changes to Sophos MDR and Sophos XDR. The previous MDR service tiers are being renamed: MDR Essentials becomes Sophos MDR, and MDR Complete becomes Sophos MDR Plus. For existing customers, the scope of services will remain unchanged. Additionally, the Sophos Email Monitoring System will be integrated into Sophos MDR, Sophos MDR Plus, and Sophos XDR at no extra charge.

Sophos XDR will now be positioned as "Sophos XDR Powered by Secureworks" and expanded to include technology from the Secureworks acquisition. This is particularly evident in the expansion of integrations. The number of pre-built connections is increasing from just over 60 to more than 350; system-wide, more than 500 integrations are available, supplemented by custom integrations and custom parsers for additional data sources.

New Solutions for AI Security and Executive Leadership

Two additional solutions are being introduced: Sophos AI Defense and Sophos CISO Advantage.

Sophos AI Defense is designed to help organizations make the use of AI tools--including shadow AI--visible and controllable. The solution will initially launch in Early Access and is expected to be available as an add-on for Sophos EDR, Sophos XDR, and Sophos MDR.

Sophos CISO Advantage is aimed at the strategic level. The solution is designed to help executives and security leaders assess cyber risks, compliance requirements, and areas for action in a more structured way. As things stand, the launch is scheduled for October 2026.

What This Means for Sophos Customers in the DACH Region

For existing customers, many of these changes do not initially require immediate action. The new features will be particularly relevant for ongoing or planned projects related to MDR, XDR, SIEM, compliance, data retention, and managed security. Organizations with audit obligations or regulatory requirements should incorporate Sophos Next-Gen SIEM into their architecture planning at an early stage.

"We're pleased that we'll be able to position Sophos's protection solutions more strongly in the future, even in areas where a SIEM requirement previously stood in the way. Many customers value Sophos but, for compliance reasons, had to rely on separate SIEM solutions. With Next-Gen SIEM, we're creating a more seamless solution that bridges detection, response, and audit requirements," says Sebastian Geide, CSO of Aphos Gesellschaft fuer IT-Sicherheit mbH.

In-Depth Technical Article

Firewalls24.de provides a detailed summary of the announced changes--including the timeline, pricing and licensing details, as well as information for existing and new customers--in the accompanying technical article.

Sophos Fusion: Sophos Central wird zum AI-Native Cybersecurity Defense System | Firewalls24.de

NOTE:
Aphos Gesellschaft fuer IT-Sicherheit mbH notes that official Sophos communications remain binding. Firewalls24.de evaluates the available information from a customer and partner perspective and updates relevant product and technical pages accordingly.

Aphos Gesellschaft fuer IT-Sicherheit mbH
Mergenthalerallee 73-75
Eschborn 65760
Germany

https://aphos.de/

Herr Lennart Wyrwa
061965820160

marketing@aphos.de

Aphos Gesellschaft fuer IT-Sicherheit mbH is a specialized IT security service provider focused on tailored cybersecurity solutions for businesses, government agencies, and public institutions. As a fully technically accredited Sophos Platinum Partner, as well as a partner of CrowdStrike and Fortinet, the company offers first-class consulting, comprehensive support, and a broad portfolio of IT security solutions.

Through Firewalls24.de, the online store for Sophos IT security solutions, Aphos GmbH enables quick and easy procurement of Sophos firewalls, switches, access points, and Sophos Central licenses.

Thanks to its combination of technical expertise, personalized consulting, and competitive pricing, Aphos is the ideal partner for companies of all sizes that prioritize the highest security standards.

This release was published on openPR.