--- title: Sophos Endpoint Reviews meta_title: 'Sophos Endpoint Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 848 reviews by the users' company size, role or industry to find out how Sophos Endpoint works for a business like yours. aggregate_rating: rating_value: 4.6 review_count: 848 scale: '5' date_modified: '2026-11-04' parent_category: name: Endpoint Protection url: https://www.g2.com/categories/endpoint-protection ---

Sophos Endpoint Reviews & Product Details

Value at a Glance

Averages based on real user reviews.

Time to Implement

2 months

Sophos Endpoint Reviews FAQs

Generated using AI

Last updated: Nov 01, 2026

What is Sophos Endpoint, and what problem is it built to solve?

Sophos provides IT security and data protection for businesses. The company began with encryption and antivirus products in the 1980s.

What company sizes and industries is Sophos Endpoint the best fit for?

Sophos Endpoint shows a strong fit across mid-market, small-business, and enterprise organizations, with users represented in several industries. The most visible segments include:
  • Company size — Mid-market: Organizations with 51–1,000 employees are especially well represented.
  • Company size — Small business: Teams with 50 or fewer employees also appear frequently.
  • Company size — Enterprise: Organizations with more than 1,000 employees use it as well.
  • Industry — IT and security: Information technology, computer and network security, and software organizations are represented.
  • Industry — Manufacturing and automotive: These sectors are recurring areas of use.
  • Industry — Education and healthcare: Education and healthcare organizations also appear among its users.

How long does it take to implement Sophos Endpoint across a team?

Sophos Endpoint is most often reported as going live in less than a month, with some implementations completed in a day or less. Longer rollouts also occur, particularly over one to three months.
Time to go live Relative frequency
Less than 1 month Most common
Less than 1 day Also reported frequently
1–3 months Also reported
3–6 months Less common
6–12 months or more than 12 months Occasionally reported

What customer support options does Sophos Endpoint provide, and how do users find the overall support experience?

Support is available around the clock through a live representative, along with chat and a knowledge base. The experience can be helpful and knowledgeable, especially during setup or escalation, though users also describe slow responses and inconsistent help on complex issues.

What is the experience like for teams switching to Sophos Endpoint from another tool?

Moving to Sophos Endpoint from other endpoint protection and antivirus tools is often motivated by stronger threat detection, ransomware defenses, and easier centralized management. The change can also bring cloud-based administration and tighter coordination with Sophos firewalls and other security tools; users describe deployments as smooth in some environments, while advanced policies and initial configuration can take more work. Prior tools mentioned include Kaspersky, Symantec, ESET, Trend Micro, Microsoft Defender, and other endpoint or EDR products.

What tools and platforms does Sophos Endpoint integrate with, and how do these integrations help users get more value from the product?

Sophos Endpoint offers 44 integrations. Users describe connections across Sophos security products, identity and productivity platforms, and security monitoring tools:
  • Sophos security ecosystem: Sophos Firewall, Sophos Central, and Sophos Intercept X.
  • Identity and productivity: Active Directory and Microsoft 365.
  • Security monitoring and response: SIEM and XDR tools.
  • Other security and management tools: Zscaler, Jamf, and Lumu.
These connections can bring endpoint and firewall activity together, centralize administration, and support visibility across devices. Some users find that third-party SIEM connections need extra configuration or do not reliably forward logs.

What features or capabilities could make Sophos Endpoint even more useful?

Sophos Endpoint could be more useful with clearer reporting and less day-to-day friction for administrators. The recurring improvement areas include:
  • More flexible reporting: Add clearer, more customizable reports and dashboards with greater detail for investigations and larger environments.
  • Lower resource impact: Reduce CPU, memory, and disk usage during scans and updates, especially on older or lower-powered devices.
  • Simpler administration: Make advanced policies, settings, and exceptions easier to find and configure.
  • Stronger data-loss prevention: Expand DLP controls and make their configuration and enforcement more consistent.

How useful do Sophos Endpoint users find its AI features in everyday use?

Users find the AI-related capabilities useful for threat detection and investigation, though the day-to-day experience varies. They describe AI as helping surface suspicious activity and support threat hunting, while some say the AI tools are still immature or that they use them only occasionally.
  • Threat detection and prevention: AI and deep-learning detection are described as helping identify malware and suspicious behavior.
  • Investigation and threat hunting: Users describe using AI-related analysis to investigate alerts and examine threats.

Is Sophos Endpoint considered safe and secure for handling data?

Sophos Endpoint gives users confidence in protecting devices against malware, ransomware, and other attacks. They describe real-time detection, blocking or quarantining threats, and isolating affected devices as useful safeguards; some also value the additional context available for investigating incidents. False positives, unclear alerts, and limitations in data-loss prevention or event visibility remain considerations for teams that need detailed investigation and data controls.

Sophos Endpoint Reviews (848)

View 1 Video Reviews
Reviews

Sophos Endpoint Reviews (848)

View 1 Video Reviews
4.6
848 reviews

What do users say?

Generated using AI from real user reviews

Pros & Cons

Generated from real user reviews
View All Pros and Cons
Search reviews
Filter Reviews
Clear Results
G2 reviews are authentic and verified.
Roberto M.
RM
Roberto M.
"Effortless Setup, Comprehensive Protection with Minor Performance Hiccups"
4.5/5
What do you like best about Sophos Endpoint?

I appreciate the easy installation process of Sophos Endpoint on our assets, which is efficient and does not require individual machine operations, allowing for a quick deployment. The dashboard feature is invaluable as it provides a comprehensive and effective overview of the health status across the company, which is crucial for monitoring and managing our IT infrastructure. I also commend the managed detection and response (MDR) service offered by Sophos, which compensates for the lack of an internal SOC with deep competence by outsourcing this service and providing external resources that are able to react around the clock, ensuring security needs are continuously met. Moreover, the initial setup process was seamless and fast, facilitated by our partner, with no issues encountered, enhancing the overall ease of transition to this solution. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

I find that Sophos Endpoint uses too much memory on some the machines it is installed on. This occasionally leads to PCs reacting slower, which can be inconvenient. Review collected by and hosted on G2.com.

Verified User in Manufacturing
AM
Verified User in Manufacturing
Mid-Market (51-1000 emp.)
"Sophos Endpoint: Effortless, Comprehensive Security in One Powerful Platform"
5/5
What do you like best about Sophos Endpoint?

We have been using Sophos Endpoint for some time now, and it has made a noticeable difference in our security posture. The most impressive aspect is its user-friendly interface, which makes managing policies across numerous endpoints simple and efficient. The platform is packed with features, offering comprehensive protection that includes malware defense, web filtering, and device control, all within a single solution. This all-in-one approach eliminates the need to manage several different tools, which saves us time and reduces overall complexity. In summary, Sophos Endpoint has truly transformed the way our IT team operates. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

We have been using Sophos Endpoint, and up to now, we have not encountered any problems. The platform is reliable, thorough, and straightforward to manage, making it an excellent match for our needs. At this point, there is honestly nothing we dislike about it—it performs just as we expect and provides outstanding protection. Review collected by and hosted on G2.com.

XJ
Xavier J.
"Low Memory Usage and Intuitive GUI Make Sophos Endpoint a Winner"
5/5
What do you like best about Sophos Endpoint?

I really appreciate Sophos Endpoint for its remarkable efficiency without heavy memory usage. This lightweight nature ensures smooth operation while I'm browsing the internet and sending emails, which is crucial for maintaining productivity. The graphical user interface is incredibly user-friendly, making navigation straightforward and reducing the learning curve for new users. Additionally, the pricing of Sophos Endpoint is very appealing, offering a cost-effective solution without sacrificing quality. The ease of initial setup deserves a perfect score of 10 out of 10, which is often an overlooked benefit when managing enterprise-grade solutions. I am highly satisfied with its performance and security measures that reassure me everything remains safe during routine online activities. The likelihood of recommending Sophos Endpoint to a friend or colleague is a definite 10, indicating my strong endorsement of its overall performance and value. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

I find it challenging to get informed about what Sophos Endpoint actually does, which can be frustrating. A more robust system for informing users about its functions, such as a website login to help see in real-time what's happening, would be highly beneficial. Review collected by and hosted on G2.com.

DB
Derek B.
"Efficient Protection And Easy Setup - A Complete Solution"
4.5/5
What do you like best about Sophos Endpoint?

I appreciate the distributed package installation through Sophos Endpoint's device management system, as it simplifies a lengthy installation process into just a few simple clicks. This feature enhances operational efficiency significantly by reducing the time and complexity typically associated with software installations on workplace devices. Additionally, I find the initial setup of Sophos Endpoint to be very easy, which contributes to a positive user experience right from the start. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

I find the removal process of Sophos Endpoint from devices to be occasionally frustrating. The uninstaller works only about 75% of the time, and for other instances, I am required to manually remove install files and configurations. This issue is particularly noticeable on macOS, where remnants of files are left behind. I need to manually run certain commands, such as 'sudo rm -r /Library/LaunchDaemons/com.sophos*', to completely remove the software or to prepare the device for donation or resale. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services
AI
Verified User in Information Technology and Services
Mid-Market (51-1000 emp.)
"Unmatched Ransomware Protection and Insightful Threat Analysis"
5/5
What do you like best about Sophos Endpoint?

CryptoGuard Rollback: The automated ransomware rollback is excellent. It’s the best safety net for when users inevitably click things they shouldn't.

Visual Root Cause Analysis: The threat graphs are genuinely good. Seeing exactly which process spawned the malware makes cleanup much faster.

Tamper Protection: It is incredibly difficult for users (or attackers) to disable the agent, even if they think they have admin rights. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

There is a steep learning curve because the product has so many features. It takes a while for new junior staff to learn all the different modules available in the console Review collected by and hosted on G2.com.

KB
Kyle B.
ServiceDesk Analyst / IT Infra
Information Technology and Services
Mid-Market (51-1000 emp.)
"Aggressive Protection with Easy Setup"
5/5
What do you like best about Sophos Endpoint?

I really appreciate Sophos Endpoint for its aggressive detection capabilities. It's incredibly efficient at detecting even the smallest changes in files, which gives me peace of mind knowing that any suspicious or malicious files are quickly identified and quarantined. I also like how seamlessly Sophos Endpoint pairs with ZScaler, especially with regards to web protection. The way Sophos Endpoint steps in to prevent running or downloading vulnerable or malicious software files is impressive. Additionally, I found the initial setup of Sophos Endpoint to be pretty easy and efficient. Overall, these aspects make Sophos Endpoint a highly reliable and effective tool for endpoint protection, which is why I rate it a perfect 10 out of 10 for recommendation. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

Sometimes there are false positive detections, limited policies that can be done, as well as when the license is maxed out, it won't install Sophos Endpoint to new machines. Review collected by and hosted on G2.com.

Avi S.
AS
Avi S.
Cybersecurity Engineer
Computer & Network Security
"Effortless Security Integration with Intuitive Interface"
5/5
What do you like best about Sophos Endpoint?

I appreciate Sophos Endpoint for its security capabilities which cover my entire organization effectively. I am impressed with the easy-to-understand user interface, which simplifies training for my team. The simplicity extends to integration and management, making my tasks straightforward. I love the single dashboard feature that consolidates all solutions, letting me access everything I need clearly and efficiently. The fact that its environment is simple compared to other vendors is crucial for me, as it allows me to focus on the essentials without unnecessary complexity. Sophos Endpoint’s ease of use is highlighted in its setup, which feels as straightforward as plug and play. Overall, these features combined seamlessly to meet my requirements and have led me to rely on the complete Sophos ecosystem. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

Nothing Review collected by and hosted on G2.com.

RV
Ritvik V.
IT Engineer
Mid-Market (51-1000 emp.)
"Highly Effective Threat Protection, Slight Slowdowns"
5/5
What do you like best about Sophos Endpoint?

I really appreciate Sophos Endpoint for its ability to prevent our devices from threats, effectively blocking attacks before they can reach us. This security feature gives me confidence in the protection of our systems. A key aspect that I find extremely beneficial is the management through a single console, which simplifies oversight and enhances usability. Furthermore, its integration capabilities are outstanding; it easily integrates with Sophos Firewall and is conveniently managed through Sophos Central, which streamlines operations. The seamless integration with other products was a significant factor for our team in choosing to switch to Sophos Endpoint, as it provides better threat detection and fits well within our existing infrastructure. Despite some initial challenges with understanding advanced policies and configurations, the straightforward installation process of the initial setup made it moderately easy to get started. Additionally, my high level of satisfaction with Sophos Endpoint is reflected in my willingness to rate it a 10 out of 10 for recommendations. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

Sometimes, while scanning Sophos Endpoint slows down the devices. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services
AI
Verified User in Information Technology and Services
Small-Business (50 or fewer emp.)
"Outstanding product which delivers best in class protection for our endpoints"
5/5
What do you like best about Sophos Endpoint?

The Sophos Endpoint is a very easy to use, and effective endpoint protection solution. The solution offers cloud management eliminating the need to deploy a local management server. The solution integrated with other Sophos products via Sophos Central and features like Synchronized security and Adaptive Threat protection when clubbed with a Sophos firewall really stand out delivering unmatched protection for our endpoints. Implementation and policy management are easy to use via a clean interface in Sophos Central. Sophos support has also been outstanding in providing solutions to any issues we have faced. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

Earlier we used to face issues related to slowdown of computers after installation of endpoint agents on our devices. Now that issue also seems to have been resolved. We are currently very satisfied with the product. Review collected by and hosted on G2.com.

PD
Patrick D.
Director, Corporate Technology
Mid-Market (51-1000 emp.)
"Effortless Deployment, Resource-Friendly Antivirus"
4/5
What do you like best about Sophos Endpoint?

I love how Sophos Endpoint offers easy deployment through Group Policy Object (GPO), which streamlines the installation process across multiple workstations effortlessly. This feature makes the initial setup hassle-free and exceptionally manageable without any significant challenges. Furthermore, Sophos Endpoint is incredibly light on OS resources, ensuring that once installed, it does not demand much from the computer's resources, promoting efficient and smooth operation. This careful design means that its impact on system performance is minimal, allowing other applications to run smoothly without interference. Overall, these features enhance the product’s usability and efficiency, providing solid endpoint protection without compromising system functionality. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

I dislike that Sophos Endpoint can bring an OS/Server down when performing scans. Review collected by and hosted on G2.com.

Questions about Sophos Endpoint? Ask real users or explore answers from the community

Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights.

GU
Guest User
•
Last activity 11 months ago

Is Sophos Endpoint an antivirus?

0 Upvotes
3
Join the conversation
GU
Guest User
•
Last activity about 1 year ago

What is Sophos Intercept X: Next-Gen Endpoint used for?

0 Upvotes
1
Join the conversation

Pricing Insights

Averages based on real user reviews.

Time to Implement

2 months

Return on Investment

14 months

Average Discount

13%

Perceived Cost

$$$$$
Sophos Endpoint Comparisons
Sophos Endpoint Features
Compliance
Web Control
Application Control
System Isolation
Firewall
Endpoint Intelligence
Automated Remediation
Incident Reports
Behavioral Analysis
Threat Hunting
Real-Time Detection