Helping Small Businesses and Global Enterprises Strengthen Defenses with Agentic AI and Sophos Intelix Intelligence to Microsoft Security Copilot and Microsoft 365 Copilot 

OXFORD, U.K. — 11月 18, 2025 —

Sophos, a global leader of innovative security solutions for defeating cyberattacks, today announced the general availability of new integrations that connect Sophos Intelix, its robust repository of cyber threat intelligence, with Microsoft Security Copilot and Microsoft 365 Copilot. Introduced at the Microsoft Ignite Conference in San Francisco, organizations of all sizes gain real-time access to Sophos threat intelligence within Microsoft’s AI-powered environments, helping them strengthen defenses and respond to threats more effectively.

Every day, Sophos processes more than 223 terabytes of telemetry in its Sophos Central platform, generating over 34 million detections and automatically blocking more than 11 million threats. This global scale of customer insight continuously informs Sophos product and services and fuels the intelligence within Sophos Intelix, now accessible for free to users of Microsoft Security Copilot and Microsoft 365 Copilot.

This milestone underscores Sophos’ mission to empower every organization with resilient, intelligent cybersecurity and to democratize cybersecurity for organizations of all sizes, meeting them wherever they are in their cybersecurity journey, within the Microsoft Copilot ecosystem.

Sophos Intelix for Microsoft Security Copilot

Sophos Intelix provides advanced threat context and enrichment capabilities directly into Microsoft Security Copilot, Microsoft’s generative AI assistant for Security Operation Center (SOC) and IT teams. Security Copilot connects data across Microsoft Defender, Sentinel, Intune, Entra, and Purview, allowing analysts and expert users to query and investigate threats using natural language enriched with Sophos’ insights from protecting more than 600,000 organizations. These teams are often protecting organizations 24/7/365 and require the latest intelligence at their fingertips at all times to protect their organization.

Through this integration, security analysts and IT teams can:

  • Enrich alerts and triage incidents faster using Sophos Intelix intelligence and services including sandbox detonation and dynamic analysis.
  • Investigate indicators of compromise (IOCs) with file, URL, and IP reputation lookups.
  • Access global insights and prevalence data from Sophos X-Ops directly within Security Copilot.

Sophos Intelix will also be available in Microsoft’s new Security Store for third-party agents, MCP services, and APIs.

Sophos Intelix for Microsoft 365 Copilot

Sophos Intelix also integrates with Microsoft 365 Copilot, making comprehensive threat intelligence available and accessible for the masses within everyday Microsoft productivity tools such asTeams and Microsoft 365 Copilot Chat.

With Sophos Intelligence in Microsoft 365, IT administrators, risk managers, and business users can:

  • Query Sophos threat intelligence in natural language directly within Microsoft 365 Copilot Chat and Microsoft Teams.
  • Check whether links, files, or domains are associated with known malicious activity.
  • Strengthen cyber awareness and decision-making abilities within productivity tools they’re using daily.

By embedding these capabilities into Microsoft 365 Copilot, Sophos helps organizations of all sizes make faster, better-informed security decisions without leaving their workflow. This integration doubles down on Sophos’ vision to democratize access to advanced cybersecurity insights, giving Microsoft 365 Copilot users the same level of intelligence leveraged by sophisticated SOC teams.

Microsoft Agent 365 Capabilities for Sophos Intelix

Sophos Intelix will also integrate with Microsoft’s growing Copilot and agent ecosystem, extending Sophos intelligence across the Microsoft365 ecosystem. Powered by Entra-based identity management, this integration enables organizations to bring Sophos Intelix into their agent portfolio with full observability and compliance.

Microsoft Agent 365 serves as the control plane for AI agents, allowing organizations to extend their existing infrastructure, applications, and protections to agents, while using familiar capabilities that have been adapted to agent needs.

Together, these integrations further strengthen Sophos’ commitment to delivering advanced intelligence wherever organizations operate within the Microsoft agent ecosystem.

Meeting the Growing Demands of Defenders

AI is transforming industries worldwide, and cybersecurity is no exception. Security teams are flooded with alerts yet often lack the resources to keep pace, with small and mid-sized businesses most affected. In the Sophos Addressing the Cybersecurity Skills Shortage in SMBs report, 96 percent of respondents reported difficulties investigating suspicious alerts and 75 percent struggled to remediate incidents quickly.

At the same time, attackers are accelerating: the Sophos Active Adversary Report 2025 found that data exfiltration begins in just three days on average, with a median of only 2.7 hours between exfiltration and detection, and attackers can reach Active Directory in as little as 11 hours. These findings underscore the urgent need for defenders to adopt faster, more effective ways of analyzing and investigating alerts. 

Powered by Deep Intelligence

By exposing Sophos Intelix within the Microsoft Copilot ecosystem, Sophos makes threat intelligence universally accessible, helping organizations accelerate analysis, reduce response time, and improve security outcomes.

“The Microsoft Copilot ecosystem is transforming how people interact with technology by bringing natural language interfaces into the core of its Copilot ecosystem,” said Simon Reed, Chief Scientific Research Officer, Sophos. “The future of SOC productivity is moving beyond the graphical user interfaces we’ve relied on since the 1980s, toward a new paradigm of human–AI collaboration. AI assistants powered by expansive datasets, deep threat intelligence, and advanced systems are fundamentally reshaping how analysts work. By making Sophos threat intelligence available through both Microsoft Security Copilot and Microsoft 365 Copilot, we’re giving defenders faster, more natural access to insights that help them respond to threats with speed, precision, and confidence.”

“AI is the force multiplier for defenders, and when partners like Sophos bring their agentic innovation into the Microsoft Copilot ecosystem, the impact is exponential. Together, we’re not just building tools—we’re creating a new era of intelligent, collaborative cyber defense,” said Vasu Jakkal, Corporate Vice President, Microsoft Security.

To learn more about Sophos Intelix integrations for Microsoft Security Copilot,Microsoft 365 Copilot, Microsoft Copilot Studio for creators, and Microsoft Agent 365, go to https://www.sophos.com/en-us/intelix/copilot. 

ソフォスについて

ソフォスは、サイバーセキュリティ業界のリーダー企業として、AI を駆使したプラットフォームや精鋭スタッフによるサービスを世界中の 600,000社以上のお客様にご利用いただいています。セキュリティの成熟度にかかわらず、あらゆるお客様のご要望にお応えし、サイバー攻撃を撃退すべくお客様とともに成長を続けています。機械学習や、自動化、リアルタイムの脅威インテリジェンスに、Sophos X-Ops の最前線スタッフから得た専門知識を組み合わせて、高度な脅威監視、検出、対応を 24時間 365日体制で行っています。
ソフォスは、業界最先端の MDR (managed detection and response) を提供しているのに加えて、エンドポイントをはじめ、ネットワーク、メール、クラウドセキュリティ、XDR (extended detection and response)、ITDR (identity threat detection and response)、次世代の SIEM まで、サイバーセキュリティテクノロジーのあらゆるラインナップを取り揃えています。さらに、専門家によるアドバイザリーサービスも提供しており、組織はこれらを組み合わせて利用することで、リスクをあらかじめ減らし、迅速な対応をとれるようになるだけでなく、進化し続ける脅威の一歩先をいくために必要な可視性および拡張性を確保することが可能となります。
ソフォスは、グローバルに広がるパートナーエコシステムを通じて市場展開しており、お客様は、MSP (Managed Service Provider)、MSSP (Managed Security Service Provider) や、リセラー、ディストリビューターのほか、マーケットプレイスにおける統合、ソフォスのサイバーリスクパートナーまで、信頼できる関係性を自由にお選びいただけます。  ソフォス本社は英国のオックスフォードにあります。詳細については www.sophos.com をご覧ください。