--- title: Sophos Endpoint Reviews meta_title: 'Sophos Endpoint Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 848 reviews by the users' company size, role or industry to find out how Sophos Endpoint works for a business like yours. aggregate_rating: rating_value: 4.6 review_count: 848 scale: '5' date_modified: '2026-11-04' parent_category: name: Endpoint Protection url: https://www.g2.com/categories/endpoint-protection ---

Sophos Endpoint Reviews & Product Details

Value at a Glance

Averages based on real user reviews.

Time to Implement

2 months

Sophos Endpoint Reviews FAQs

Generated using AI

Last updated: Nov 01, 2026

What is Sophos Endpoint, and what problem is it built to solve?

Sophos provides IT security and data protection for businesses. The company began with encryption and antivirus products in the 1980s.

What company sizes and industries is Sophos Endpoint the best fit for?

Sophos Endpoint shows a strong fit across mid-market, small-business, and enterprise organizations, with users represented in several industries. The most visible segments include:
  • Company size — Mid-market: Organizations with 51–1,000 employees are especially well represented.
  • Company size — Small business: Teams with 50 or fewer employees also appear frequently.
  • Company size — Enterprise: Organizations with more than 1,000 employees use it as well.
  • Industry — IT and security: Information technology, computer and network security, and software organizations are represented.
  • Industry — Manufacturing and automotive: These sectors are recurring areas of use.
  • Industry — Education and healthcare: Education and healthcare organizations also appear among its users.

How long does it take to implement Sophos Endpoint across a team?

Sophos Endpoint is most often reported as going live in less than a month, with some implementations completed in a day or less. Longer rollouts also occur, particularly over one to three months.
Time to go live Relative frequency
Less than 1 month Most common
Less than 1 day Also reported frequently
1–3 months Also reported
3–6 months Less common
6–12 months or more than 12 months Occasionally reported

What customer support options does Sophos Endpoint provide, and how do users find the overall support experience?

Support is available around the clock through a live representative, along with chat and a knowledge base. The experience can be helpful and knowledgeable, especially during setup or escalation, though users also describe slow responses and inconsistent help on complex issues.

What is the experience like for teams switching to Sophos Endpoint from another tool?

Moving to Sophos Endpoint from other endpoint protection and antivirus tools is often motivated by stronger threat detection, ransomware defenses, and easier centralized management. The change can also bring cloud-based administration and tighter coordination with Sophos firewalls and other security tools; users describe deployments as smooth in some environments, while advanced policies and initial configuration can take more work. Prior tools mentioned include Kaspersky, Symantec, ESET, Trend Micro, Microsoft Defender, and other endpoint or EDR products.

What tools and platforms does Sophos Endpoint integrate with, and how do these integrations help users get more value from the product?

Sophos Endpoint offers 44 integrations. Users describe connections across Sophos security products, identity and productivity platforms, and security monitoring tools:
  • Sophos security ecosystem: Sophos Firewall, Sophos Central, and Sophos Intercept X.
  • Identity and productivity: Active Directory and Microsoft 365.
  • Security monitoring and response: SIEM and XDR tools.
  • Other security and management tools: Zscaler, Jamf, and Lumu.
These connections can bring endpoint and firewall activity together, centralize administration, and support visibility across devices. Some users find that third-party SIEM connections need extra configuration or do not reliably forward logs.

What features or capabilities could make Sophos Endpoint even more useful?

Sophos Endpoint could be more useful with clearer reporting and less day-to-day friction for administrators. The recurring improvement areas include:
  • More flexible reporting: Add clearer, more customizable reports and dashboards with greater detail for investigations and larger environments.
  • Lower resource impact: Reduce CPU, memory, and disk usage during scans and updates, especially on older or lower-powered devices.
  • Simpler administration: Make advanced policies, settings, and exceptions easier to find and configure.
  • Stronger data-loss prevention: Expand DLP controls and make their configuration and enforcement more consistent.

How useful do Sophos Endpoint users find its AI features in everyday use?

Users find the AI-related capabilities useful for threat detection and investigation, though the day-to-day experience varies. They describe AI as helping surface suspicious activity and support threat hunting, while some say the AI tools are still immature or that they use them only occasionally.
  • Threat detection and prevention: AI and deep-learning detection are described as helping identify malware and suspicious behavior.
  • Investigation and threat hunting: Users describe using AI-related analysis to investigate alerts and examine threats.

Is Sophos Endpoint considered safe and secure for handling data?

Sophos Endpoint gives users confidence in protecting devices against malware, ransomware, and other attacks. They describe real-time detection, blocking or quarantining threats, and isolating affected devices as useful safeguards; some also value the additional context available for investigating incidents. False positives, unclear alerts, and limitations in data-loss prevention or event visibility remain considerations for teams that need detailed investigation and data controls.

Sophos Endpoint Reviews (848)

View 1 Video Reviews
Reviews

Sophos Endpoint Reviews (848)

View 1 Video Reviews
4.6
848 reviews

What do users say?

Generated using AI from real user reviews

Pros & Cons

Generated from real user reviews
View All Pros and Cons
Search reviews
Filter Reviews
Clear Results
G2 reviews are authentic and verified.
Verified User in Education Management
AE
Verified User in Education Management
Mid-Market (51-1000 emp.)
"Sophos EndPoint: Effective, Issue-Free Protection for Our Macs"
4.5/5
What do you like best about Sophos Endpoint?

We use Sophos EndPoint on our fleet of Mac's. It works very effectively and doesn't cause any issues. There was a time when it would perform a system scan and really slow a machine down. But that doesn't happen anymore. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

The only real downside is when we need to be able to turn it off to do some troubleshooting. It's possible, but requires a trip to the admin console to retrieve a code. That's certainly not the end of the world, and it does make the product very secure and prevents users from turning their protection off. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services
AI
Verified User in Information Technology and Services
Small-Business (50 or fewer emp.)
"Frusterating to administer or get support for and does block a lot of threats"
0/5
What do you like best about Sophos Endpoint?

It detected cross network encryption on a device running a software that was supposed to do so. Easy to allow that software but it was good to have it detect that level of threat Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

Management GUI, support, logging into manage its all terrible.

As you use the product it will time out as it should and bring you to a login screen - dont bother logging in there it wont work, of what feels like hundreds of possible places to login, everyone of them will tell you wrong credentials except one specific place and only it works. Their GUI is frusterating to navigate and manage devices, they move and hide options that used to be simple all the time. Thier support is horrible and continues to be as they keep changing what team/country supports it. The only thing thier support reliably is good at is following up after so many days/weeks have went by that ive given up on getting help and had to find another way. In those cases they will hound you non-stop. Also they quickly move old OS's into a high premium legacy support license which can add up to thousands of dollars fast Review collected by and hosted on G2.com.

Verified User
G
Verified User
Mid-Market (51-1000 emp.)
"Reliable Malware Protection with Powerful XDR Insights"
5/5
What do you like best about Sophos Endpoint?

I find Sophos Endpoint’s reporting useful for monitoring trends over time, and I appreciate that it doesn’t produce too many false positives. When an alert fires, operational staff know something is happening and needs attention. XDR is very useful: its data lake gives me access to historical events for retrospective reviews, and its response capability is useful across remote offices and saves on travel. The initial setup was very easy. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

When I’m responding to an incident, the free-text example in an event’s description can be misleading and draws my attention more than the actual event data, which I have to scroll to the bottom to see. It doesn’t affect the product’s value, but it’s something I need to be aware of. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services
AI
Verified User in Information Technology and Services
Small-Business (50 or fewer emp.)
Business partner of the seller or seller's competitor, not included in G2 scores.
"Lightweight Agent and Centralized Console: A Comfortable Experience with Sophos"
5/5
What do you like best about Sophos Endpoint?

Primarily, I find the agent very lightweight and easy to install. The Sophos console is centralized and comfortable to use. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

Regarding the implementation of Artificial Intelligence in the tool, I still don't perceive it as noticeable, neither in the console nor in the way of handling the technology. Review collected by and hosted on G2.com.

MS
Marco S.
IT Sys admin
Mid-Market (51-1000 emp.)
"Console and single portal: everything under control with ease"
4.5/5
What do you like best about Sophos Endpoint?

I appreciate the console and the ability to manage everything from a single portal, because it makes it easier to have everything under control in one place. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

The web filtering is a bit intricate, and to configure it correctly, some points need to be created. Review collected by and hosted on G2.com.

Abhishek S.
AS
Abhishek S.
Cyber Security Consultant
Mid-Market (51-1000 emp.)
"Great security tool with minimal hassle"
5/5
What do you like best about Sophos Endpoint?

Honestly, the best part is that it simply works without getting in the way. I barely notice it running, yet I still feel confident that my devices are protected. Setup was surprisingly easy, and the dashboard is clean, straightforward, and easy to understand. Threat detection runs automatically, so I don’t have to keep checking things manually. Overall, it gives me peace of mind without adding extra work to my day. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

To be honest, it sometimes flags software I’ve been using for years as suspicious, and I have to stop what I’m doing just to whitelist it. The notifications also seem to pop up at the worst possible times. Pricing-wise, I wish there were more affordable options for smaller teams. Still, these are minor frustrations overall—nothing significant enough to make me look elsewhere. Review collected by and hosted on G2.com.

GERMAN IVAN  C.
GC
GERMAN IVAN C.
Usuario
Mid-Market (51-1000 emp.)
"Efficient Protection, Easy to Manage"
4.5/5
What do you like best about Sophos Endpoint?

I really like the simplicity of using Sophos Endpoint and its console, which is easy to handle. I also appreciate how its policies are applied through the console, making it easier for me to protect the computers at my university. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

Basically, it's a bit heavy on devices with low RAM. Other than that, I think everything is quite good. Review collected by and hosted on G2.com.

Elias Alejandro A.
EA
Elias Alejandro A.
Coordinador de seguridad de sistemas
Mid-Market (51-1000 emp.)
"Effective risk mitigation in email, endpoints, and servers"
5/5
What do you like best about Sophos Endpoint?

The graphical interface is very intuitive and also has excellent integration with its other tools such as the FW and also with Office 365. The performance is excellent given that it is a SAAS tool. The price is excellent for the range of options it offers. The support is really efficient and fast, and likewise, the AI helps us with any investigations that may be conducted. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

The reporting window still has many improvements to implement, as the charts are limited and the reporting is not very customizable. In this section, AI would help a lot if they integrated it. Review collected by and hosted on G2.com.

Pramod s.
PS
Pramod s.
Cyber Security Expert
Mid-Market (51-1000 emp.)
"Easy Deployment and Great Dashboard, But Lacks Web Filtering and DLP"
5/5
What do you like best about Sophos Endpoint?

Sophos Endpoint is easy to deploy and use. It provides strong AI-powered threat detection and real-time protection against malware, ransomware, and zero-day attacks. Centralized cloud-based management through Sophos Central makes deployment, monitoring, and policy enforcement simple across all endpoints. The solution also offers excellent visibility into security events, with a dashboard that makes detection and monitoring clearer. I like the automated threat response and the seamless integration with other Sophos security products, which helps organizations improve security while reducing administrative effort. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

While Sophos Endpoint offers strong security capabilities, some advanced features can be complex to configure and may require additional training for administrators. System scans can occasionally impact endpoint performance, particularly on older devices. Troubleshooting certain security events may also require deeper technical expertise, and some organizations may find licensing and add-on features to be relatively expensive compared to other endpoint security solutions. Review collected by and hosted on G2.com.

Nicholas D.
ND
Nicholas D.
Cyber Security & Networking Regional Manager
Small-Business (50 or fewer emp.)
"Robust Multi-Layered Security with Excellent Integration, Minor Resource Usage Issues"
4.5/5
What do you like best about Sophos Endpoint?

What I like best about Sophos Endpoint is the deep integration and real-time coordination across devices through Synchronized Security. The endpoint doesn’t just detect threats it actively shares telemetry with the firewall, mobile, and email layers to automatically isolate compromised systems. The combination of behavioral analysis, anti-ransomware (CryptoGuard), and Exploit Mitigation gives a multi-layered defense that’s highly effective against both known and unknown threats. The built-in EDR/XDR features also provide excellent visibility for threat hunting and incident response Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

Occasional High Resource Utilization, Complex Policy Fine-Tuning for Advanced Environments Review collected by and hosted on G2.com.

Questions about Sophos Endpoint? Ask real users or explore answers from the community

Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights.

GU
Guest User
•
Last activity 11 months ago

Is Sophos Endpoint an antivirus?

0 Upvotes
3
Join the conversation
GU
Guest User
•
Last activity about 1 year ago

What is Sophos Intercept X: Next-Gen Endpoint used for?

0 Upvotes
1
Join the conversation

Pricing Insights

Averages based on real user reviews.

Time to Implement

2 months

Return on Investment

14 months

Average Discount

13%

Perceived Cost

$$$$$
Sophos Endpoint Comparisons
Sophos Endpoint Features
Compliance
Web Control
Application Control
System Isolation
Firewall
Endpoint Intelligence
Automated Remediation
Incident Reports
Behavioral Analysis
Threat Hunting
Real-Time Detection