Sophos, a global leader of innovative security solutions for defeating cyberattacks on Thursday announced its new integrations that connected Sophos Intelix, its robust repository of cyber threat intelligence, with Microsoft Security Copilot and Microsoft 365 Copilot.
The Chief Scientific Research Officer, Sophos, Simon Reed, said in a statement that organisations could access Sophos threat intelligence within Microsoft’s AI-powered environments.
Reed said that Sophos interlix helped organisations strengthen their defenses and respond to threats more effectively.
He said that every day, Sophos processed more than 223 terabytes of telemetry in its Sophos Central platform, generating over 34 milliom detections and automatically blocking more than 11 million threats.
According to him, this global scale of customer insight continuously informs Sophos product and services, and fuels the intelligence within Sophos Intelix, now accessible for free to users of Microsoft Security Copilot and Microsoft 365 Copilot.
“This milestone underscores Sophos’ mission to empower every organisation with resilient, intelligent cybersecurity and to democratise cybersecurity for organisations of all sizes.
“The milestone also meets organisations wherever they are in their cybersecurity journey, within the Microsoft Copilot ecosystem.
“The Microsoft Copilot ecosystem is transforming how people interact with technology by bringing natural language interfaces into the core of its Copilot ecosystem,” Simon Reed said.
The Corporate Vice President, Microsoft Security, Vasu Jakkal, said that the future of SOC productivity was moving beyond the graphical user interfaces relied on since the 1980s, toward a new paradigm of human–Artificial Intelligence collaboration.
Jakkal said that AI assistants powered by expansive datasets, deep threat intelligence, and advanced systems are fundamentally reshaping how analysts work.
He said that by making Sophos threat intelligence available through both Microsoft Security Copilot and Microsoft 365 Copilot, it was giving defenders faster, more natural access to insights to help them respond to threats with speed, precision, and confidence.
“AI is the force multiplier for defenders, and when partners like Sophos bring their agentic innovation into the Microsoft Copilot ecosystem, the impact is exponential.
“Together, we are not just building tools, we are creating a new era of intelligent, collaborative cyber defence,” he said.
The vice-president said that Sophos Intelix provided advanced threat context and enrichment capabilities directly into Microsoft Security Copilot, Microsoft’s generative AI assistant for Security Operation Center (SOC) and IT teams.
He added that security copilot connected data across Microsoft Defender, Sentinel, Intune, Entra, and Purview.
Jakkal said it allowed analysts and expert users to query and investigate threats using natural language enriched with Sophos’ insights from protecting more than 600,000 organisations.
According to him, these teams are often protecting organisations 24 hrs, 365 days and require the latest intelligence at their fingertips at all times to protect their organisation.
Jakkal said that at the same time, attackers were accelerating: the Sophos Active Adversary Report 2025 found that data exfiltration begins in just three days on average.
He said with a median of only 2.7 hours between exfiltration and detection, and attackers can reach active directory in as little as 11hrs.
According to him, these findings underscore the urgent need for defenders to adopt faster, more effective ways of analysing and investigating alerts.
Jackal said that one could learn more about Sophos Intelix integrations for Microsoft Security Copilot, Microsoft 365 Copilot, Microsoft Copilot Studio for creators, and Microsoft Agent 365 by going to https://www.sophos.com/en-us/intelix/copilot.
Sophos is a cybersecurity leader defending 600,000 organisations globally with an AI-driven platform and expert-led services.
