Sophos has launched Sophos Fusion, which it describes as the industry’s most complete AI-native cybersecurity defense system, built to deliver a coordinated response to threats that increasingly move at machine speed.

Sophos frames the launch around an emerging category it calls a cybersecurity defense system: a single, open architecture where every control point, service, data source and analyst operates as one, whether native to Sophos or third-party. The company says the typical enterprise now runs more than 45 separate security products, citing Gartner research, leaving security teams with more dashboards and manual work even as attackers move faster.

Built on Sophos Central and Secureworks Taegis

Fusion is positioned as the evolution of Sophos Central, the system Sophos says 625,000 organisations worldwide use daily, now rebuilt on one open architecture incorporating Secureworks Taegis analytics following Sophos’ acquisition of Secureworks in 2025. The system uses agentic AI to connect and synchronise control points across an environment, with more than 500 third-party integrations feeding into the same shared data layer.

Sophos said it runs what it describes as the world’s largest agentic security operations centre (SOC), with more than 40,000 customers worldwide. The company said 52 per cent of cases are resolved entirely by AI, with an average time of 89 seconds from alert to fully automated response.

“As AI increases the speed, scale, and complexity of attacks, organisations need a modern connected, intelligent, and adaptive defense,” said Joe Levy, chief executive officer, Sophos. “Sophos Fusion is built as a defense system optimised for Human-AI workflows. We bring the most complete solution to a new category, a timely advancement demanded by the AI era.”

A security operations market set to double by 2029

Fusion combines endpoint protection, endpoint detection and response (EDR), extended detection and response (XDR), next-gen SIEM, identity threat detection and response (ITDR), managed detection and response (MDR), network security, email, cloud and advisory services into one system.

“Futurum Group’s market forecast projects Security Operations — the segment where AI-native orchestration and adaptive defense systems compete — will double from $18B to $37B by 2029, growing faster than any other cybersecurity category,” said Fernando Montenegro, vice president and practice lead, cybersecurity and resilience, The Futurum Group. “This is where the next generation of cyber defense will be won.”

“Simply adding more tools onto the stack won’t provide the intelligent cyber defense fabric that organizations need to mitigate AI-orchestrated attacks. Organizations need an intelligent overlay that connects the different elements of their cybersecurity toolset to proactively and reactively respond to risks and threats at machine speeds.”

Neil MacDonald, distinguished analyst at Gartner, made the comment in reference to a broader shift toward autonomous cyber defense architectures.

Phased rollout through October

Sophos is expanding Fusion with several capabilities reaching general availability between August and October 2026. Sophos Next-Gen SIEM, Sophos MDR’s expanded threat hunting and Sophos XDR (powered by Secureworks Taegis analytics) are set for general availability on 15 August 2026. Sophos AI Defense, aimed at giving organisations visibility and policy control over AI tools including shadow AI, reaches early access in August and general availability in October. Sophos CISO Advantage, offering CISO-level guidance through Sophos’ managed service provider network, becomes available from October.

Sophos said the system is designed to give its network of managed service providers, resellers and technology partners a single platform to operate rather than a set of disconnected point products, with intelligence compounding across every environment the company defends.