
Security testing
Penetration testing engagements
While we aim to identify and prevent security bugs in our software development pipeline, no system is perfect. That’s why we also run regular security assessments on our products. These assessments are typically performed in a white box scenario with access to architecture details and source code. Our approach results in more efficient and effective testing when compared to a black box scenario where little information about the product is provided.
For our recent assessments, we have started collecting and publishing letters of attestation. For the older assessments, we are happy to share details upon request. We aim to collect letters for subsequent/future tests as they are completed.
Assessment letters of attestation
| Solution | Product | Date of Last Test | Vendor | Letter of Attestation |
|---|---|---|---|---|
| Endpoint | Intercept X | October 2024 | MWR CyberSec | LoA - MWR - Endpoint |
| XDR | February 2024 | MDSec | LoA - MDSec - MDR - XDR - SOC.OS | |
| Sophos Mobile Control | August 2024 | MWR CyberSec | LoA-MWR-SMC | |
| Network | Firewall | November 2024 | MWR CyberSec | LoA – MWR – Firewall LoA – MWR – Sophos Connect Client |
| SG UTM | July 2022 | Nettitude | LoA - Nettitude - SG UTM | |
| SD-RED Remote Ethernet Devices | November 2021 | MDSec | Contact Us | |
| ZTNA | October 2023 | MWR CyberSec | LoA - MWR - Firewall/ZTNA | |
| Switch | January 2024 | Sophos Red Team | Contact Us | |
| DNS Protection | January 2024 | MWR CyberSec | LoA - MWR - DNS Protection | |
| Security Operations | MDR | February 2025 | MDSec | LoA - MDSec - MDR |
| XDR | February 2024 | MDSec | LoA - MDSec - MDR - XDR - SOC.OS | |
| Refactr | February 2022 | Sophos Red Team | Contact Us | |
| SOC.OS | February 2024 | MDSec | LoA - MDSec - MDR - XDR - SOC.OSLoA - MDSec - MDR - XDR - SOC.OS | |
| Factory | February 2024 | MDSec | LoA - MDSec - Sophos Factory | |
| Messaging | Central Email | August 2024 | Sophos Red Team | Contact Us |
| Cloud | Sophos Central | January 2025 | MDSec | LoA - MDSec - Central |
| Cloud Optix | January 2024 | MDSec | LoA - MDSec - Optix | |
| ZTNA | February 2025 | Pen Test Partners | LoA – PTP - ZTNA | |
| Firewall | October 2023 | MWR CyberSec | LoA - MWR - Firewall/ZTNA | |
| Home Security | Sophos Home | August 2022 | Sophos Red Team | Contact Us |
| Taegis | Taegis VDR | July 2025 | MWR CyberSec | LoA – MWR – Taegis VDR |
| Other | SophosLabs (including Intelix) | November 2024 | Sophos Red Team | Contact Us |
