Suite of penetration testing and application security services is informed by Sophos X-Ops Threat Intelligence and delivered by world-class experts
 

OXFORD, U.K. — Octubre 1, 2025 —

Sophos, a global leader of innovative security solutions for defeating cyberattacks, today announced the launch of Sophos Advisory Services, a suite of security testing services designed to identify gaps in organizations’ security programs. These offerings – External Penetration Testing, Internal Penetration Testing, Wireless Network Penetration Testing, and Web Application Security Assessment – help fortify an organization’s defenses against cyberattacks and optimize their current security investments.

Regardless of an organization’s size or security maturity, assessing cybersecurity posture is critical to staying ahead of threat actors, demonstrating regulatory compliance, and building trust with customers, partners, and stakeholders. The Sophos State of Ransomware 2025 report highlights that the number one root cause for ransomware attacks is exploited vulnerabilities, and 65% of organizations reported a known or unknown security gap as a reason for being exposed to a ransomware attack.

“Adversaries are increasingly skilled at exploiting the smallest cracks in an organization’s security program. With Sophos Advisory Services, we give customers a proactive advantage - helping them find and fix weaknesses before attackers can exploit them. Backed by real-time insights from Sophos X-Ops threat intelligence, our experts enable organizations to strengthen resilience, meet compliance requirements, and build lasting trust with stakeholders,” Jake Dorval, Senior Director, Sophos Advisory Services.

The following services — informed with leading threat intelligence research and insights from Sophos X-Ops, along with findings from threat hunting and incident response engagements — are now available:

  • External Penetration Testing: Simulates an attacker trying to breach your perimeter from the outside.
  • Internal Penetration Testing: Simulates an insider threat or an attacker who has already breached the perimeter, focusing on systems, applications, and data within the internal network.
  • Wireless Network Penetration Testing: Assesses the security of an organization's Wi-Fi networks and infrastructure and evaluates their compliance with appropriate mandates.
  • Web Application Security Assessment: Tests an organization’s web applications for security vulnerabilities and design weaknesses.

Sophos Advisory Services are delivered by dedicated testers with vast cross-discipline security expertise spanning security research, threat intelligence, law enforcement, military and other backgrounds who joined Sophos through the recent acquisition of Secureworks. The team holds hundreds of security certifications, has earned top finishes in capture the flag competitions, and is supported by Sophos X-Ops security analysts, threat intelligence and research specialists. Sophos will release additional Advisory Services in the coming months.

Sophos Advisory Services are the latest addition to Sophos’ fast-growing security services portfolio that also includes Sophos Emergency Incident Response. Converging incident response expertise from Sophos and Secureworks in a single, hourly-billing offering, Sophos Emergency Incident Response provides rapid identification and neutralization of active threats and is available to any organization experiencing a live incident.

For more information, visit https://www.sophos.com/en-us/products/advisory-services 

Acerca de Sophos

Sophos es líder en ciberseguridad y protege a 600 000 organizaciones en todo el mundo con su plataforma basada en IA y servicios prestados por expertos. Sophos acompaña a las organizaciones, independientemente de su nivel de madurez en materia de seguridad, y crece con ellas para derrotar los ciberataques. Sus soluciones combinan el Machine Learning, la automatización y la información sobre amenazas en tiempo real con la experiencia humana de primera línea de Sophos X-Ops para ofrecer supervisión, detección y respuesta avanzadas 24/7 frente a amenazas.
Sophos ofrece detección y respuesta gestionadas (MDR) líder en el sector, junto con una completa cartera de tecnologías de ciberseguridad que incluye seguridad para endpoints, redes, correo electrónico y la nube, detección y respuesta ampliadas (XDR), detección y respuesta ante amenazas de identidad (ITDR) y SIEM next-gen. Junto con los servicios de asesoramiento de expertos, estas funcionalidades ayudan a las organizaciones a reducir el riesgo de forma proactiva y a responder con mayor rapidez, con la visibilidad y escalabilidad necesarias para adelantarse a las amenazas en evolución.
Sophos comercializa sus productos a través de un ecosistema global de Partners, que incluye proveedores de servicios gestionados (MSP), proveedores de servicios de seguridad gestionados (MSSP), Partners y distribuidores, integraciones para marketplaces y Partners especializados en ciberriesgos, lo que ofrece a las organizaciones la flexibilidad de elegir colaboraciones de confianza a la hora de proteger su negocio.  Sophos tiene su sede en Oxford, Reino Unido. Encontrará más información en es.sophos.com.