Sophos, Microsoft deepen cybersecurity collaboration

By Chinenye Anuforo

Sophos has announced the general availability of new integrations that bring its cyber threat intelligence platform, Sophos Intelix, into Microsoft Security Copilot and Microsoft 365 Copilot.

The announcement was made at the Microsoft Ignite Conference in San Francisco, marking a significant expansion of AI-enabled cybersecurity tools for organizations worldwide.

With these integrations, users of Microsoft Security Copilot and Microsoft 365 Copilot can now access real-time intelligence generated from Sophos’ global cybersecurity operations. Sophos processes more than 223 terabytes of telemetry daily, produces over 34 million detections and blocks more than 11 million threats every day. This data informs the Sophos Intelix platform, which will now be available at no cost within Microsoft’s AI-driven environments.

Sophos said the development aligns with its goal of making advanced cybersecurity accessible to organizations of all sizes. The integration with Microsoft Security Copilot allows security analysts to enrich alerts, investigate incidents and query threat intelligence using natural language. Microsoft Security Copilot already aggregates data from Microsoft Defender, Sentinel, Intune, Entra and Purview, and the addition of Sophos intelligence is expected to expand its investigative capabilities for Security Operations Center and IT teams.

Sophos Intelix will also integrate with Microsoft 365 Copilot, enabling IT administrators, risk managers and business users to check files, links and domains for malicious activity within applications such as Microsoft Teams and Copilot Chat. The company said this provides faster intelligence-driven decision-making within everyday productivity tools.

In addition, Sophos Intelix will connect with Microsoft’s emerging Agent 365 ecosystem, which is designed to manage AI agents using Microsoft Entra identity. According to Sophos, this will allow organizations to maintain observability, compliance and extended protection as they deploy AI agents across the Microsoft environment.

The company noted that the integrations come at a time when cybersecurity teams are overwhelmed by high alert volumes and rising attack speed. Research cited by Sophos showed that 96 percent of small and mid-sized businesses struggle to investigate alerts effectively, while the 2025 Sophos Active Adversary Report found that attackers can reach Active Directory in as little as 11 hours.

Sophos said exposing its intelligence directly within the Microsoft Copilot ecosystem will accelerate investigations, reduce response times and improve security outcomes for both small businesses and large enterprises. Executives from both companies described the collaboration as a major step in the evolution of human–AI cyber defense.