23 Jul Sophos launches AI-native cybersecurity defence system

Sophos has launched Sophos Fusion, an AI-native cybersecurity defence system designed to help organisations detect, investigate and respond to increasingly complex cyber threats through a connected security architecture.

The announcement was made on 15 July 2026 in Dubai, UAE, with Sophos describing Fusion as a new approach to cybersecurity defence that brings security operations, endpoint protection, network security, identity, email and cloud capabilities together within a single system.

Sophos said the platform has been developed in response to a threat landscape increasingly shaped by artificial intelligence, where attackers can coordinate activities across multiple parts of an organisation’s environment at greater speed.

“As AI increases the speed, scale, and complexity of attacks, organisations need a modern connected, intelligent and adaptive defence,” said Joe Levy, Chief Executive Officer, Sophos. “Sophos Fusion is built as a defence system optimised for Human-AI workflows. We bring the most complete solution to a new category, a timely advancement demanded by the AI era.”

Sophos Fusion is built around four core capabilities: a shared data layer that brings together security signals; coordinated action across security controls; AI-driven investigation and response with human oversight; and intelligence that improves as more threats are identified across the customer base.

The platform builds on Sophos Central, which the company said is used by 625,000 organisations worldwide, and incorporates Secureworks Taegis analytics following Sophos’ acquisition of Secureworks in 2025. New capabilities being added to Sophos Fusion include next-generation SIEM, AI security controls, enhanced managed detection and response (MDR), expanded extended detection and response (XDR), and CISO-level advisory services. These capabilities are scheduled for availability between August and October 2026.

Sophos said Fusion is designed to support both native Sophos technologies and third-party security tools, with more than 500 integrations feeding into its shared data layer.