With Sophos Fusion, things are changing… but mainly under the hood.
There is no new product or new license: it is primarily a rebranding of the Sophos Central console. It is intended to reflect the evolution of the underlying architecture, anchored around a unified data lake. Sophos talks about a “context lake” and, in doing so, promises agent orchestration capabilities.
Sophos Fusion also materializes, according to the UK-based vendor, the integration of Secureworks (acquired in early 2025). A project that has partly diverted its R&D away from the heart of its offering.
The Sophos MDR, XDR and Next-Gen SIEM offerings will be the first to roll over to the Fusion architecture, in August.
Sophos Central has carried that name since 2016. Sophos Cloud was the original brand.
Further reading:
A first “agent-based ransomware” spotted in cyberspace
Endpoint protection: gaps are emerging at the core of the offerings
The bug bounties, saturated by AI agents
Threat intelligence: automation fragments the market
