Sophos introduces Fusion, an AI-powered security platform designed to unify threat detection, response, and cybersecurity operations across enterprise environments.
Sophos has launched Sophos Fusion, an AI-native cybersecurity defense system designed to help organizations respond faster to increasingly coordinated cyberattacks in the AI era.
The new platform brings together security controls, threat intelligence, automation, and human expertise through a unified architecture that enables synchronized defense across endpoints, networks, cloud environments, email, and identity systems.
Sophos said modern cyber threats are becoming faster and more complex, with attackers using AI to automate and coordinate attacks. The company noted that many organizations struggle with fragmented security environments, often managing dozens of disconnected cybersecurity tools.
AI-driven security with unified threat response
Sophos Fusion introduces a cybersecurity defense model built around four key capabilities:
- Shared context lake – combines security signals from multiple sources into a unified data layer.
- Synchronized Security™ – enables coordinated actions across security controls when threats are detected.
- Agentic AI with human oversight – allows AI systems to investigate and respond within analyst-defined boundaries.
- Compounding intelligence – improves protection by learning from threats detected across the Sophos ecosystem.
Built on the evolution of Sophos Central, which is used by more than 625,000 organizations globally, Sophos Fusion incorporates Secureworks Taegis analytics following Sophos’ acquisition of Secureworks in 2025.
The company said its AI-powered security operations center already resolves 52% of cases entirely through AI, with an average automated response time of 89 seconds.
Expanded cybersecurity capabilities
Sophos Fusion integrates multiple security technologies, including endpoint protection, endpoint detection and response (EDR), extended detection and response (XDR), next-generation SIEM, identity security, managed detection and response (MDR), network security, email protection, and cloud security.
The platform also supports more than 500 third-party integrations, allowing existing security tools from other vendors to operate within the same shared security framework.
New capabilities rolling out in 2026 include:
- Sophos Next-Gen SIEM – provides security analytics, compliance reporting, and long-term data retention using unified security data.
- Sophos AI Defense – helps organizations monitor and secure AI applications, including shadow AI usage.
- Sophos CISO Advantage – provides AI-powered security guidance, risk assessment, and compliance support.
- Expanded Sophos MDR – adds AI-enabled threat hunting and broader automated response capabilities.
- Enhanced Sophos XDR – integrates Secureworks Taegis analytics for improved detection and response.
AI reshapes cybersecurity strategy
Sophos said the launch reflects a shift from managing individual security tools toward building connected cybersecurity defense systems capable of operating at machine speed.
“As AI increases the speed, scale, and complexity of attacks, organizations need a modern connected, intelligent, and adaptive defense,” said Joe Levy, Chief Executive Officer of Sophos.
With AI-driven threats expected to continue growing, Sophos Fusion aims to help enterprises strengthen cyber resilience through automated protection, integrated security operations, and human-AI collaboration.
