LAS VEGAS, AWS re:Invent — November 30, 2021 —

Sophos, a global leader in next-generation cybersecurity, today unveiled advancements to Sophos Cloud Optix that automate and simplify the detection and response of security incidents across Amazon Web Services (AWS) infrastructure.

Powered by new machine learning models from SophosAI, the Sophos Cloud Optix cloud security posture management solution now continuously analyzes AWS CloudTrail to build a picture of individual user activity. It brings AWS CloudTrail events to life in a clear and detailed timeline view of user activities, high risk anomalies and security and compliance incidents across all AWS accounts with remediation guidance for security teams.

“Sorting through and making sense of potentially thousands of user activity events to identify suspicious activity used to be near impossible,” said Scott Barlow, Sophos vice president of global MSP and cloud alliances. “Sophos is transforming this resource intensive process, giving security teams the answers they need with the click of a button. Security teams can instantly pinpoint unusual activity – such as actions not previously taken by a user or actions being performed outside of normal business hours, for example – and focus their investigations on the most high-risk alerts with confidence.”

Accelerate with AWS, Secure with Sophos Cloud Optix

Sophos Cloud Optix provides unmatched visibility into risky blind spots. It secures AWS and other cloud workloads against advanced threats and cloud environment misconfigurations, and is easily managed in the cloud-based Sophos Central platform alongside Sophos’ entire portfolio of next-generation cybersecurity solutions and services.

Sophos Cloud Optix offers extensive AWS security service integrations – including integration with the new Amazon Inspector. Sophos Cloud Optix also integrates with AWS Security Hub, Amazon GuardDuty, AWS CloudTrail, Amazon Macie, AWS Systems Manager and Patch Manager, AWS Firewall Manager, AWS IAM Access Analyzer, Amazon Detective, and Amazon Elastic File System.

As an AWS Level 1 Managed Security Service Provider (MSSP) Competency program partner, Sophos’ unique threat protection, monitoring and response package fulfills a critical market need for managed security services, validated by AWS. Now available on AWS Marketplace, the package fuses automated protection and 24/7 managed threat response into a single, comprehensive offering. Designed specifically for AWS customers, the offering combines cloud security posture management; endpoint, cloud workload and network security; vulnerability scanning; inventory visibility; and compliance tracking. Organizations further benefit with a dedicated 24/7 Sophos Managed Threat Response security team that monitors AWS environments and responds to neutralize threats and in-progress attacks.

Sophos at AWS re:Invent

AWS re:Invent attendees are invited to attend a session, “AWS cybersecurity as a system,” to learn how workforce management software provider Celayix secures its AWS environments with Sophos to ensure maximum uptime, speed and efficiency. The session will take place on Wednesday, Dec. 1, at 4:45 pm PST at the Venetian Resort, meeting room Lando 4305.

Attendees can schedule a complimentary cloud security assessment, addressing their cloud security risks with prioritized actions to yield immediate and significant improvements at Sophos’ AWS re:Invent booth #263.

About Sophos

Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos meets organizations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response.

Sophos offers industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-gen SIEM. Together with expert advisory services, these capabilities help organizations proactively reduce risk and respond faster, with the visibility and scalability needed to stay ahead of evolving threats.

Sophos goes to market with a global partner ecosystem, including Managed Service Providers (MSPs), Managed Security Service Providers (MSSPs), resellers and distributors, marketplace integrations, and cyber risk partners, giving organizations the flexibility to choose trusted relationships when securing their business.  Sophos is headquartered in Oxford, U.K. More information is available at www.sophos.com.