Sophos Central platform is a cloud-native application with high availability, hosted on public cloud platforms (AWS, Azure).

• Accounts are hosted in a chosen region, with data locked to that region.

• Replication across multiple data centers for seamless failover.

• Uses industry standard software libraries for security and stability.

Sophos Central architecture is designed to provide global services for identity and session management with scalable regional API and product services.

• Single web interface for easy management.

• Shared threat, health, and security information across all Sophos products.

Shared model where security is split between Sophos and public cloud providers.

• AWS and Azure are responsible for the physical cloud infrastructure.

• Sophos manages security within the cloud environment.

Auto-scaling virtual networks, segmented networks based on workloads, with auto-scaling groups and load balancers.

• Private subnets for services by default, with strict access controls.

• Maintenance access via a VPN tunnel within Sophos’ IT infrastructure.

Anti-malware and patching for machines is userless, locked down, and hardened, with regular patching and redeployment.

• Security monitoring and response: Continuous monitoring by Sophos' Global Security Operations Center, with forensic capabilities for incident response.

Integrity and availability, with data stored in triplicated database clusters with event-driven replication.

• Durability: Hourly snapshots of database storage volumes.

• Encryption: Volume-level and field-level encryption, with transport-level encryption for management communication.

Multi-factor authentication (MFA) is required for all account administrators, with multiple integrated options.

• Role-based administration: Pre-defined roles to restrict access and prevent unauthorized changes.

Data collection with detailed information on data collection and storage is available through Sophos privacy policies and security documentation.

Update integrity, all binary files are digitally signed, updates are delivered over HTTPS, and devices install only approved files.

• Customer benefits: Consolidation of protection, automated security responses, and efficient management reduce security incidents and administrative effort.

Powerful cloud reporting tools — get actionable insights in just a few clicks, to create and manage user-based dashboards with interactive widgets. Quickly and easily get instant benefits from extensive built-in reports.

• Interactive visualizations and widgets with customizable views and filters.

• Dashboard management: Drag-and-drop interface, with the ability to set a default landing page and manage widget access.

• Central Overview dashboard shows the most important information about alerts and your managed devices and users.

• Account Health Check dashboard shows whether you're making the best use of Sophos products.

Threat analysis center dashboard is available, depending on your licenses for individual products or features.

• Hunt and neutralize security threats.

• Quickly find indicators of compromise (IOCs) across your estate.

• Remotely access, investigate, and remediate devices.

• Perform guided threat hunting and response.