--- title: Sophos Endpoint Reviews meta_title: 'Sophos Endpoint Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 848 reviews by the users' company size, role or industry to find out how Sophos Endpoint works for a business like yours. aggregate_rating: rating_value: 4.6 review_count: 848 scale: '5' date_modified: '2026-11-04' parent_category: name: Endpoint Protection url: https://www.g2.com/categories/endpoint-protection ---

Sophos Endpoint Reviews & Product Details

Value at a Glance

Averages based on real user reviews.

Time to Implement

2 months

Sophos Endpoint Reviews FAQs

Generated using AI

Last updated: Nov 01, 2026

What is Sophos Endpoint, and what problem is it built to solve?

Sophos provides IT security and data protection for businesses. The company began with encryption and antivirus products in the 1980s.

What company sizes and industries is Sophos Endpoint the best fit for?

Sophos Endpoint shows a strong fit across mid-market, small-business, and enterprise organizations, with users represented in several industries. The most visible segments include:
  • Company size — Mid-market: Organizations with 51–1,000 employees are especially well represented.
  • Company size — Small business: Teams with 50 or fewer employees also appear frequently.
  • Company size — Enterprise: Organizations with more than 1,000 employees use it as well.
  • Industry — IT and security: Information technology, computer and network security, and software organizations are represented.
  • Industry — Manufacturing and automotive: These sectors are recurring areas of use.
  • Industry — Education and healthcare: Education and healthcare organizations also appear among its users.

How long does it take to implement Sophos Endpoint across a team?

Sophos Endpoint is most often reported as going live in less than a month, with some implementations completed in a day or less. Longer rollouts also occur, particularly over one to three months.
Time to go live Relative frequency
Less than 1 month Most common
Less than 1 day Also reported frequently
1–3 months Also reported
3–6 months Less common
6–12 months or more than 12 months Occasionally reported

What customer support options does Sophos Endpoint provide, and how do users find the overall support experience?

Support is available around the clock through a live representative, along with chat and a knowledge base. The experience can be helpful and knowledgeable, especially during setup or escalation, though users also describe slow responses and inconsistent help on complex issues.

What is the experience like for teams switching to Sophos Endpoint from another tool?

Moving to Sophos Endpoint from other endpoint protection and antivirus tools is often motivated by stronger threat detection, ransomware defenses, and easier centralized management. The change can also bring cloud-based administration and tighter coordination with Sophos firewalls and other security tools; users describe deployments as smooth in some environments, while advanced policies and initial configuration can take more work. Prior tools mentioned include Kaspersky, Symantec, ESET, Trend Micro, Microsoft Defender, and other endpoint or EDR products.

What tools and platforms does Sophos Endpoint integrate with, and how do these integrations help users get more value from the product?

Sophos Endpoint offers 44 integrations. Users describe connections across Sophos security products, identity and productivity platforms, and security monitoring tools:
  • Sophos security ecosystem: Sophos Firewall, Sophos Central, and Sophos Intercept X.
  • Identity and productivity: Active Directory and Microsoft 365.
  • Security monitoring and response: SIEM and XDR tools.
  • Other security and management tools: Zscaler, Jamf, and Lumu.
These connections can bring endpoint and firewall activity together, centralize administration, and support visibility across devices. Some users find that third-party SIEM connections need extra configuration or do not reliably forward logs.

What features or capabilities could make Sophos Endpoint even more useful?

Sophos Endpoint could be more useful with clearer reporting and less day-to-day friction for administrators. The recurring improvement areas include:
  • More flexible reporting: Add clearer, more customizable reports and dashboards with greater detail for investigations and larger environments.
  • Lower resource impact: Reduce CPU, memory, and disk usage during scans and updates, especially on older or lower-powered devices.
  • Simpler administration: Make advanced policies, settings, and exceptions easier to find and configure.
  • Stronger data-loss prevention: Expand DLP controls and make their configuration and enforcement more consistent.

How useful do Sophos Endpoint users find its AI features in everyday use?

Users find the AI-related capabilities useful for threat detection and investigation, though the day-to-day experience varies. They describe AI as helping surface suspicious activity and support threat hunting, while some say the AI tools are still immature or that they use them only occasionally.
  • Threat detection and prevention: AI and deep-learning detection are described as helping identify malware and suspicious behavior.
  • Investigation and threat hunting: Users describe using AI-related analysis to investigate alerts and examine threats.

Is Sophos Endpoint considered safe and secure for handling data?

Sophos Endpoint gives users confidence in protecting devices against malware, ransomware, and other attacks. They describe real-time detection, blocking or quarantining threats, and isolating affected devices as useful safeguards; some also value the additional context available for investigating incidents. False positives, unclear alerts, and limitations in data-loss prevention or event visibility remain considerations for teams that need detailed investigation and data controls.

Sophos Endpoint Reviews (848)

View 1 Video Reviews
Reviews

Sophos Endpoint Reviews (848)

View 1 Video Reviews
4.6
848 reviews

What do users say?

Generated using AI from real user reviews

Pros & Cons

Generated from real user reviews
View All Pros and Cons
Search reviews
Filter Reviews
Clear Results
G2 reviews are authentic and verified.
Verified User in Hospital & Health Care
AH
Verified User in Hospital & Health Care
Mid-Market (51-1000 emp.)
"Light on memory and effective for virus prevention"
4/5
What do you like best about Sophos Endpoint?

A program that doesn't consume much memory on the PC and is quite effective for virus prevention. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

The costs could be an issue, and sometimes the scan takes longer than usual. Review collected by and hosted on G2.com.

Lokesh K.
LK
Lokesh K.
System engineer
Mid-Market (51-1000 emp.)
Business partner of the seller or seller's competitor, not included in G2 scores.
"Easy to Manage, Strong Protection, and Quiet Performance"
5/5
What do you like best about Sophos Endpoint?

Sophos Endpoint is easy to manage, provides strong protection, and runs quietly without impacting system performance. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

The pricing can be a bit high, and sometimes the setup and configuration can feel slightly complex for new users. Review collected by and hosted on G2.com.

kamaljeet d.
KD
kamaljeet d.
SME
Mid-Market (51-1000 emp.)
"Unbeatable Threat Detection Powered by AI and Deep Learning"
5/5
What do you like best about Sophos Endpoint?

It excels at blocking ransomware, exploits, zero-day attacks and other advanced threats by combining deep learning and AI with behavioral analysis and real-time intelligence. Reviews and independent tests frequently praise its fast, accurate detection, low false positives, and consistently high marks in evaluations. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

Some users report high CPU and RAM consumption, particularly during scans, updates, telemetry uploads, or when running alongside certain applications (e.g., Office or OneDrive) or on older, lower-spec hardware. This increased resource use can cause slowdowns, noticeable lag, and performance spikes that negatively affect productivity. Review collected by and hosted on G2.com.

Evren Kürşat .
E
Evren Kürşat .
Director of IT & Cyber Security Departments | Cloud & Infrastructure • Cybersecurity • IT Strategy
Mid-Market (51-1000 emp.)
"Strong endpoint protection with easy centralized management and reliable threat prevention."
4.5/5
What do you like best about Sophos Endpoint?

Sophos Endpoint is its strong protection against malware and ransomware while remaining easy to manage. The centralized console provides good visibility across all endpoints, and its integration with other Sophos security products helps simplify overall security management. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

Sophos Endpoint is that some advanced policy settings and troubleshooting processes can be complex. Additionally, certain scans and updates may occasionally impact endpoint performance, especially on older devices. Review collected by and hosted on G2.com.

HK
Harsh K.
Technical Consultant
Small-Business (50 or fewer emp.)
"Robust Protection, Easy Management but DLP Needs Improvement"
4/5
What do you like best about Sophos Endpoint?

I like how easy it is to manage everything with Sophos Endpoint from a single console while still getting strong, enterprise-level protection. The application control and anti-ransomware features are especially useful. They give us confidence that unwanted apps and threats are blocked before they can cause issues. It’s also great at providing clear visibility into what’s happening on each device, without overwhelming us with noise. Sophos Endpoint also strikes a good balance between powerful security and day-to-day usability. The initial setup was extremely easy since it's a cloud-based solution, just add your users via Active Directory, and you are good to go for Threat Protection. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

One area that could be improved is the DLP (Data Loss Prevention) policy, it feels a bit limited and not as flexible as expected for more advanced use cases. It works for basic controls, but fine-tuning policies and getting more granular visibility can be challenging at times. The DLP policy feels inconsistent, it works sometimes but not always as expected, especially in more specific or advanced scenarios. It would be better with more reliability, clearer controls, and improved consistency in enforcement. Review collected by and hosted on G2.com.

YT
yew peng t.
Manager IT
Mid-Market (51-1000 emp.)
"Real-Time Protection, but Misses Some Threats and Can Lead to Resets"
2.5/5
What do you like best about Sophos Endpoint?

Previously, it was on my device, and it provided real-time protection by blocking malicious files. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

Sometimes it didn’t block the threat, and the device got infected due to the user’s actions, so we had to factory reset the device. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services
AI
Verified User in Information Technology and Services
Mid-Market (51-1000 emp.)
"Economical and Easy to Manage, But Occasional False Alerts"
3.5/5
What do you like best about Sophos Endpoint?

It is very economical and easier for management Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

Multiple times it has created false alert and also stop monitoring the end point Review collected by and hosted on G2.com.

HV
Himanshu V.
Technical Engineer (Cloud, AI)
Information Technology and Services
Mid-Market (51-1000 emp.)
"Advanced Threat Protection and Seamless Dashboard Make Security Effortless"
5/5
What do you like best about Sophos Endpoint?

I really like the advanced threat protection and how it uses AI and deep Learning to catch new malware. The ransomware rollback feature is a lifesaver, and the root cause analysis makes investigations easier. the dashboard is clean and simple, and having everything in one place saves time. it is easy to deploy. and easy to integrate. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

Support can be slow in complex cases, and initial setup may feel overwhelming for beginners, it can slow down older devices due to high resource usage during scans, pricing isn't very clear you need to go through partners for quotes Review collected by and hosted on G2.com.

PS
priyank S.
IT Administrator
Mid-Market (51-1000 emp.)
"Comprehensive Protection with Advanced EDR Features"
5/5
What do you like best about Sophos Endpoint?

Sophos’ Intercept X engine is widely regarded as one of the most robust solutions available. It leverages deep learning for malware detection and offers highly effective anti-ransomware and anti-exploit features. Administrators are able to manage endpoints, servers, firewalls, mobile devices, and more through a single, unified console. The user interface is straightforward and intuitive, making navigation simple. Additionally, Sophos endpoint agents generally operate efficiently, even on older hardware, which is an advantage over some traditional antivirus products. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

In larger organizations, this kind of load can affect regular productivity, such as causing slow file access or delays when working with large files like spreadsheets or presentations, especially during scans or threat-hunting activities. Additionally, some legitimate applications or harmless files may be incorrectly flagged as threats (false positives), requiring IT staff or users to manually review or whitelist them. Review collected by and hosted on G2.com.

Ryan O.
RO
Ryan O.
Tech Strategist
Mid-Market (51-1000 emp.)
"Easy-to-Use Console with Seamless Mac and PC Integration"
4.5/5
What do you like best about Sophos Endpoint?

I like how easy the console is to use, and how well it integrates with Mac and PC computers. Review collected by and hosted on G2.com.

What do you dislike about Sophos Endpoint?

Sometimes the endpoint program installation fails, and I have to repeat the process a few times before it finally goes through. Review collected by and hosted on G2.com.

Questions about Sophos Endpoint? Ask real users or explore answers from the community

Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights.

GU
Guest User
•
Last activity 11 months ago

Is Sophos Endpoint an antivirus?

0 Upvotes
3
Join the conversation
GU
Guest User
•
Last activity about 1 year ago

What is Sophos Intercept X: Next-Gen Endpoint used for?

0 Upvotes
1
Join the conversation

Pricing Insights

Averages based on real user reviews.

Time to Implement

2 months

Return on Investment

14 months

Average Discount

13%

Perceived Cost

$$$$$
Sophos Endpoint Comparisons
Sophos Endpoint Features
Compliance
Web Control
Application Control
System Isolation
Firewall
Endpoint Intelligence
Automated Remediation
Incident Reports
Behavioral Analysis
Threat Hunting
Real-Time Detection