Sophos Named a Leader in the IDC MarketScape™ for Worldwide Extended Detection and Response (XDR) Software 2025

Sophos, a global leader of innovative security solutions for defeating cyberattacks, today announced it has been named a Leader in the IDC MarketScape™: Worldwide Extended Detection and Response (XDR) Software 2025 Vendor Assessment (doc #US52997325, September 2025) report.

The IDC MarketScape for Extended Detection and Response cites Sophos’ protection capabilities as a strength, noting, “Sophos is viewed favorably in terms of the protections it offers. Key protection technologies included as standard features on the endpoint are host-based firewall and IDS/IPS, device control, DLP, antimalware scans, and encryption.”

The report also highlights Sophos’ proactive defense capabilities, stating, “Colloquially known as ‘Shields Up,’ Sophos’ Adaptive Attack Protection was introduced in 2023. Adaptive attack protection automatically enforces certain protections if there is evidence of a ‘hands-on-keyboard’ attack.”

"Sophos’ prevention-first strategy is designed to stop breaches before they happen, adapt defenses in real time, and strengthen detection and response when it matters most,” said Kyle Falkenhagen, SVP, Product Management, Sophos. “We believe being named a Leader in the IDC MarketScape for XDR is powerful recognition of our strategy to deliver intelligent, adaptive, and integrated cybersecurity. Sophos XDR empowers organizations to detect and respond to threats faster with AI-driven workflows, an extensive massive ecosystem of integrations, and a unified platform that scales from SMBs to enterprises. As we continue integrating Secureworks Taegis into our Sophos Central platform, we’re accelerating innovation and expanding our ability to help customers stay ahead of evolving threats with resilient, scalable security operations."

“While Sophos has been working on many of these technologies internally, the integration of the Taegis XDR platform adds heft to existing capabilities and jumpstarts engineering cycles to newer initiatives,” said Chris Kissel, IDC Research Vice President.

When highlighting when to consider Sophos, the report notes,

“Sophos has an international presence, and its ecosystem is designed to empower businesses of all sizes and all types. Cybersecurity novices, intermediate users, and experts will gain value from the Sophos XDR platform.”

Sophos Extended Detection and Response (XDR) provides organizations with powerful tools and intelligence to detect, investigate, and neutralize threats across the entire IT ecosystem. Delivered through an adaptive, AI-native, open platform, Sophos XDR helps security teams stay ahead of attackers while reducing operational complexity.

Key capabilities of Sophos XDR include:

• Prevention-First Approach: Sophos Endpoint is included and natively integrated with Sophos XDD. Sophos Endpoint stops advanced threats before they escalate, enabling organizations to focus investigations on critical priorities.

• AI-Accelerated Security Operations: Embedded AI tools deliver real-time insights, contextualize threat data, and provide natural language recommendations. The AI Assistant, developed in partnership with Sophos MDR frontline analysts, streamlines investigations with proven workflows.

• Identity Protection: Sophos XDR includes turnkey integrations with a range of identity technologies and is tightly integrated with the new Sophos Identity Threat Detection and Response (ITDR) solution, providing comprehensive visibility of identity-based threats, misconfigurations, and suspicious user behavior.

• Automated and Adaptive Defenses: Automated responses—from isolating endpoints to enforcing MFA and rolling back ransomware damage—activate during attacks to minimize impact and speed recovery.

• Ecosystem Flexibility: An extensive range of turnkey integrations enables Sophos XDR to fit seamlessly into diverse IT environments, enhancing existing investments without disruption.

• Open, Unified Platform: A single, extensible platform provides visibility across the entire attack surface, reduces noise from unactionable alerts, and unifies detection and response.

Following Sophos’ acquisition of Secureworks in February 2025, Sophos Endpoint is now natively integrated and automatically included with Taegis XDR and Taegis MDR subscriptions. This milestone delivers combined prevention, detection, and response in a single platform with lower licensing costs and simplified operations. This integration strengthens protection, accelerates threat mitigation, and ensures customers maximize ROI while maintaining flexibility.

Sophos Industry Validation

Sophos XDR isn’t just leading in innovation; it’s earning awards and accolades. From analysts to end users, Sophos recognition includes:

• Sophos is named a Gartner “Customers’ Choice” for XDR in the inaugural version of the report, “Customers’ Choice” for EPP for the fourth consecutive year, a “Customers’ Choice” for MDR for the second consecutive year.

• Sophos is named a G2 Leader in Endpoint Protection, XDR, EDR, MDR, and Firewall in its Fall 2025 Grid Reports.

• Sophos is named a Leader in the Gartner® Magic Quadrant™ for Endpoint Protection Platforms for the 16th consecutive report.

• Sophos is named a Leader in the 2025 Frost Radar™ for Managed Detection and Response.

• Sophos is the ONLY vendor named a “Customers’ Choice” in both EPP and XDR reports.

Read an excerpt of the IDC MarketScape™: Worldwide Extended Detection and Response (XDR) Software 2025.

Learn more about Sophos XDR.

About IDC MarketScape

IDC MarketScape vendor assessment model is designed to provide an overview of the competitive fitness of technology and service suppliers in a given market. The research utilizes a rigorous scoring methodology based on both qualitative and quantitative criteria that results in a single graphical illustration of each supplier’s position within a given market. IDC MarketScape provides a clear framework in which the product and service offerings, capabilities and strategies, and current and future market success factors of technology suppliers can be meaningfully compared. The framework also provides technology buyers with a 360-degree assessment of the strengths and weaknesses of current and prospective suppliers.