--- title: Sophos Endpoint Reviews meta\_title: 'Sophos Endpoint Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 837 reviews by the users' company size, role or industry to find out how Sophos Endpoint works for a business like yours. aggregate\_rating: rating\_value: 4.7 review\_count: 837 scale: '5' date\_modified: '2026-08-11' parent\_category: name: Endpoint Protection url: https://www.g2.com/categories/endpoint-protection --- # Sophos Endpoint Reviews & Product Details Visit Website Sophos Endpoint is the world’s most comprehensive endpoint protection solution. Built to stop the widest range of attacks, Sophos Endpoint has been proven to prevent even the most advanced ransomware and malware by leveraging a unique combination of next-generation techniques. This includes the ability to detect never-before-seen malware with deep learning, stop ransomware with Sophos anti-ransomware technology, and deny attacker tools with signatureless exploit prevention. Sophos Endpoint also includes root cause analysis to provide insight into threats, and instant malware removal to ensure no attack remnants remain. * * * Product Website Sophos Endpoint Seller [Sophos](https://www.g2.com/sellers/sophos) Discussions [Sophos Endpoint Community](https://www.g2.com/products/sophos-endpoint/discuss) Solution Type All-in-One Overview by Maxim Weinstein (Technologist. Educator. Dessert hound.) Show More ## Value at a Glance Averages based on real user reviews. ### Time to Implement 2 months [ View More Pricing Information ](https://www.g2.com/products/sophos-endpoint/pricing) ## Sophos Endpoint Integrations (46) What do users say about integrations? Verified by Sophos Endpoint [ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") ActiveDirectory Domain Controller for Windows 2016 ](https://www.g2.com/products/activedirectory-domain-controller-for-windows-2016/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Agentforce Sales (formerly Salesforce Sales Cloud) ](https://www.g2.com/products/agentforce-sales-formerly-salesforce-sales-cloud/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Arctic Wolf ](https://www.g2.com/products/arctic-wolf/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Atera ](https://www.g2.com/products/atera/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Azure Active Directory Domain Services ](https://www.g2.com/products/azure-active-directory-domain-services/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Azure Monitor ](https://www.g2.com/products/azure-monitor/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Check Point SASE ](https://www.g2.com/products/check-point-sase/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Cisco Meraki ](https://www.g2.com/products/cisco-meraki/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Cisco Meraki MX ](https://www.g2.com/products/cisco-meraki-mx/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Cisco Umbrella ](https://www.g2.com/products/cisco-umbrella/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") CrowdStrike Falcon Endpoint Protection Platform ](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") CYREBRO ](https://www.g2.com/products/cyrebro/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Darktrace/Detect ](https://www.g2.com/products/darktrace-detect/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Elasticsearch ](https://www.g2.com/products/elastic-elasticsearch/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Exabeam New-Scale Platform ](https://www.g2.com/products/exabeam-new-scale-platform/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Fedora ](https://www.g2.com/products/fedora/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") FortiAnalyzer ](https://www.g2.com/products/fortianalyzer/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") FortiGate SD-WAN ](https://www.g2.com/products/fortigate-sd-wan/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Google Workspace ](https://www.g2.com/products/google-workspace/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") IBM QRadar SIEM ](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") LogRhythm SIEM ](https://www.g2.com/products/exabeam-logrhythm-siem/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") ManageEngine Endpoint Central ](https://www.g2.com/products/manageengine-endpoint-central/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Microsoft 365 ](https://www.g2.com/products/microsoft365/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Microsoft Defender for Endpoint ](https://www.g2.com/products/microsoft-defender-for-endpoint/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Microsoft Defender for Office 365 ](https://www.g2.com/products/microsoft-microsoft-defender-for-office-365/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Microsoft Exchange ](https://www.g2.com/products/microsoft-microsoft-exchange/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Microsoft Outlook ](https://www.g2.com/products/microsoft-outlook/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Microsoft Teams ](https://www.g2.com/products/microsoft-teams/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Mimecast Advanced Email Security ](https://www.g2.com/products/mimecast-advanced-email-security/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Palo Alto Networks Panorama ](https://www.g2.com/products/palo-alto-networks-panorama/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Rapid7 Managed Detection and Response Services ](https://www.g2.com/products/rapid7-managed-detection-and-response-services/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Rapid7 Next-Gen SIEM ](https://www.g2.com/products/rapid7-next-gen-siem/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") SapphireIMS ](https://www.g2.com/products/sapphireims/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Sentinel ](https://www.g2.com/products/yudu-sentinel/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") SonicWall Next Generation Firewall ](https://www.g2.com/products/sonicwall-next-generation-firewall/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Sophos Central ](https://www.g2.com/products/sophos-central-2022-06-17/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Sophos Firewall ](https://www.g2.com/products/sophos-firewall/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Sophos Intercept X ](https://www.g2.com/products/sophos-sophos-intercept-x/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Sophos MDR ](https://www.g2.com/products/sophos-mdr/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Sophos United Threat Management ](https://www.g2.com/products/sophos-united-threat-management/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Splunk Enterprise Security ](https://www.g2.com/products/splunk-enterprise-security/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") UTMStack ](https://www.g2.com/products/utmstack/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Veeam Data Platform ](https://www.g2.com/products/veeam-data-platform/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Wazuh ](https://www.g2.com/products/wazuh/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Windows 11 ](https://www.g2.com/products/windows-11/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Windows Server ](https://www.g2.com/products/tidal-media-inc-windows-server/reviews) Show More AJ Aayushi J. BDE Mid-Market (51-1000 emp.) 8/10/2026 Business partner of the seller or seller's competitor, not included in G2 scores. "Reliable, Set-and-Forget Protection with a Clean Sophos Central Dashboard" 4.5/5 What do you like best about Sophos Endpoint? As both an end-user on my daily work machine and an administrator managing a mid-sized deployment, what stands out most about Sophos Endpoint (Intercept X) is its reliable "set-it-and forget-it" nature. From an administrator's perspective, the Sophos Central cloud dashboard is clean, unified, and remarkably straightforward to navigate. Pushing out agent packages, grouping devices, and enforcing baseline security olicies across Windows and macOS endpoints takes very little time. Features like CryptoGuard and deep-learning threat detection operate proactively in the background without constantly flooding end-users with annoying false-positive pop-ups. As a regular user, I appreciate taht the software doesn't cripple system performance during daily tasks. The tamper protection feature also provides great peace of mind organization-wide, ensuring that settings cannot be accidentally or maliciously disabled by local users. Review collected by and hosted on G2.com. What do you dislike about Sophos Endpoint? No security suite is entirely without flaws. From an admin standpoint, the nested menus within Sophos Central can occasionally feel a bit convoluted when you are hunting for very specific, granular configuration overrides. Review collected by and hosted on G2.com. What problems is Sophos Endpoint solving and how is that benefiting you? Sophos Endpoint directly resolves the escalating frequency of zero-day exploits, evasive malware, and rapid-fire ransomware attacks by replacing outdated signature methods with predictive deep-learning AL and real-time behavioral monitoring. For an administrator and end-user alike, it eliminates the chronic blind spots and operational friction caused by distributed or remote workforces through a single, unified cloud management console. By automating complex threat triage, immediate process isolation, and automated file rollbacks via Crypto Guard, the platform successfully slashes alert fatigue and manual investigation overhead. this translates to immense practical benefits, including maximized business continuity, guaranteed data integrity for sensitive client and financial operations, and freed-up administrative bandwidth to focus on proactive infrastructure hardening rather than constant emergency firefighting. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite ![Prateek T.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Prateek T.") PT Prateek T. Trainee Security Engineer Information Technology and Services Small-Business (50 or fewer emp.) 7/25/2026 "Top-Tier Endpoint Protection with Powerful Automation and Root Cause Analysis." 5/5 What do you like best about Sophos Endpoint? From an operational standpoint, the biggest win with Sophos Endpoint is how much work Sophos Central Handles automatically without requiring constant manual intervention. Ransomware & Anti-Exploit Defense : The behavioral engines (CryptoGuard and exploits mitigation) are genuinely strong. It catches fileless threats , malicious PowerShell Scripts, and unauthorized process injection at execution time rather than relying solely on legacy signature updates. Root Cause Analysis (RCA) Graphs: When threat or suspicious file gets flagged, the threat graphs shows precisely where the vector originated , which child processes were spawned , what registry key were touched. It cuts incident triage time down from hours to minutes. Automated Device Isolation : If an endpoint exhibits malicious behavior , Sophos isolates the machine from the local network while maintaining a management tunnel back to Sophos central. This gives as breathing room to remediate without risking lateral movement across our subnets or VPN . Centralized Policy Management : Pushing global policies , web filtering , and USB control across remote and on premise endpoints is straightforward once you structure your device groups properly. Review collected by and hosted on G2.com. What do you dislike about Sophos Endpoint? While protection is top tier there are few practical trade offs every admin should keep in mind : Resource Usage during Deep Scans & Compiles : Even with recent agent optimization ,heavy disk or CPU activity can still occur during full background scans. If you have developers constantly compiling code or engineers running heavy CAD/3D software, you will need to spend time configuring fine-grained application exclusions to prevent occasional slowdowns. Granular Policy Navigation : Sophos Central is clean, but finding deep configuration toggles-like specific AMSI exemptions or subtle server policy overrides can sometimes feel buried under multiple sub minus. False Positive on Custom Scripts: Of your internal team uses custom PowerShell deployment scripts or custom PowerShell deployment scripts or unassigned internal executables HitmanPro/behavioral monitoring may occasionally flag them as dynamic shellcode until you create explicit SHA-256 or folder exclusions. Review collected by and hosted on G2.com. What problems is Sophos Endpoint solving and how is that benefiting you? Sophos solved three critical problems for us : Remote Device Visibility : Machines stay updated and policy compliant whether employees are on the corporate network or working remotely from home. Remote Alert Fatigue: Automated remediation handles the majority of low-level web blocks and suspicious script kills automatically , so our team isn't chasing benign alerts all day. Streamlined Incident Analysis: The threat visualizer gives us clear audit trails for internal security reporting and cyber insurance compliance without needing a full time dedicated SOC analysts team. Advice to others considering Sophos Endpoint Spend time setting up your Base Policies and Exclusion rules during the pilot phase rather than deploying out of box settings to your entire fleet at once .Start with a test group identify any custom application conflicts early and refine your exclusions before pushing the agent site wide Review collected by and hosted on G2.com. Show More 8/1/2026 Current UserValidated ReviewerIncentivizedSource: G2 invite ![Dheeraj S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Dheeraj S.") DS Dheeraj S. Trainee Security Engineer Information Services Mid-Market (51-1000 emp.) 7/21/2026 "Powerful Ransomware Rollback and Effortless Centralized Cloud Management" 5/5 What do you like best about Sophos Endpoint? Crypto Guard Anti Ransomware the ransomware rollback feature is the strongest dealing point in real world scenario where executable behavior trigger a threat alert Crypto guard halts the process and automatically restores encrypted files from cache without needing to restore full disk backups. Centralized Cloud Management Sophos central Managing endpoint policies deployment and alerts across multiple workstations and servers from a single dashboard is straightforward Global policy updates push out quickly without needing complex on premises server infrastructure. Root cause analysis when a threat or suspicious process is detected the incident graph gives clear visibility into how the payload entered email attachment vs browser download what registry keys were modify and which child processes were spawned this saves a lot of time during post incident analysis. Low Maintenance Day-to-day Agent updates and background definitions handle themselves reliably in the background requiring minimal manual intervention once baseline policies are set up. Review collected by and hosted on G2.com. What do you dislike about Sophos Endpoint? Learning curves for new users the admin dashboard has a lot of features so finding specific deep setting can take a little time get familiar with Occasional false alerts Rarely, it might block a new custom script or tool but you can easily whitelist it in a few clicks. Review collected by and hosted on G2.com. What problems is Sophos Endpoint solving and how is that benefiting you? Protecting remote workstations: Sophos Central keeps off network devices updated and policy -compliant anywhere with an internet connection. Ransomware & Zero-Day Defense: provides a strong safety net against file-encryption malware that standard antivirus misses. Faster incident Response Automated process killing and clear root-cause graphs significantly reduce the time spent investigating alerts. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite AA Anup A. Network Security Engineer Information Services Mid-Market (51-1000 emp.) 6/13/2026 "Excellent fleet visibility through Sophos Central, but watch the initial policy exceptions"" 5/5 What do you like best about Sophos Endpoint? From an administrative side the automatic ransomware remediation via Crypto Guard is the absolute beast feature. We had an incident where a remote user ran an obfuscated script from a phishing email Sophos Flagged the rapid files encryption killed the malicious process immediately, isolated the machine from the network and rolled back the handful of targeted PDFs to their original state before the user even realized what happened I didn't have to restore from our cloud backups at all. I also appreciate how stable the agent updates are in previous companies, pushing out updates for other EDR platforms would routinely trigger Blue Screen of Death (BSODs) or break legacy business software. Sopho handles minor agent updates smoothly in the background the built-in Live Discover tool is also a huge plus for running custom SQL queries across our entire fleet when checking for specific CVE vulnerabilities or active IOCs. it provides complete visibility of threat. Review collected by and hosted on G2.com. What do you dislike about Sophos Endpoint? while the protection is great the resource consumption on local endpoints can be high. If you have developers constantly compiling code, or users running heavy CAD applications, the deep-learning file scanning and behavioral monitoring can cause noticeable CPU spikes. We’ve had people complaining that their IDEs freeze up during builds. Another annoyance is cleaning up leftover registry keys when a previous antivirus deployment didn’t uninstall properly. If a machine has a broken legacy AV entry somewhere, the Sophos installer will just error out rather than overriding it. Review collected by and hosted on G2.com. What problems is Sophos Endpoint solving and how is that benefiting you? Sophos Endpoint Solves our primary headache of securing a highly distributed, remote-frist workspace without crushing our helpdesk with alerts. Before we moved our endpoint security over to this setup we were drowning in false positive from a different over-sensitive EDR vendor. Now, the automated isolation and self-remediation do a lot of the heavy lifting when a threat pops up the device cuts off its own network communication except to the management console preventing lateral movement across our vpn this gives our small security team breathing room to investigate root cause analysis maps without racing against the clock to manually disconnect an employee's machine. Review collected by and hosted on G2.com. Show More 6/15/2026 Current UserValidated ReviewerIncentivizedSource: G2 invite AB Ansh B. Associate Security Engineer Capital Markets Small-Business (50 or fewer emp.) 6/13/2026 Business partner of the seller or seller's competitor, not included in G2 scores. "Powerful endpoint protection that rewards the effort you put in" 5/5 What do you like best about Sophos Endpoint? What I like best about Sophos Endpoint is how everything ties together under Sophos Central. As someone who manages endpoint security day-to-day, having threat detection, XDR, device encryption and policy management all in one place genuinely saves time. You're not jumping between tools trying to piece together what happened on a device it's all there. The threat detection is also something I've come to trust. The deep learning and behavioral analysis components feel mature it's caught real threat that weren't signature based, which is exactly what you need in today's environment. CryptoGuard in particular gives good peace of mind against ransomware scenarios. And from an admin perspective, policy management and host grouping is straightforward once you get the hang of it pushing configs to specific groups, setting up exclusions, managing alerts it all flows reasonably well once you're past the initial setup. Review collected by and hosted on G2.com. What do you dislike about Sophos Endpoint? A few things stand out as friction points, performance Impact on older or lower spec machines is noticeable end users do complain during scans or after agent updates, and it's something you have to proactively manage rather than ignore. Linux Support feels like an afterthought compared to windows. Deployment is more manual, some features just aren't available, and the documentation doesn't always reflect real world scenarios you run into on the ground. The Sophos Central UI, while powerful can be overwhelming especially for someone new to the platform. Finding specific settings or understand where a particular policy lives takes time. There's a learning curve that isn't immediately obvious when you start. And TAC support can be inconsistent, For common issues you'll answer quickly, but when you hit something complex, ticket resolution can drag longer than you'd want especially if it's customer impacting. None of these are dealbreakers, but they're real enough to mention honestly. Review collected by and hosted on G2.com. What problems is Sophos Endpoint solving and how is that benefiting you? At it's core, Sophos Endpoint is solving the problem of visibility and control across endpoints and that's something that matters every single day in this role. Before having a unified endpoint solution, tracking down threats, understanding device health, and enforcing security policies across a mixed environment was fragmented and reactive. Sophos brings it together detection, response, encryption, and management under one platform, which means when something happens, you're not scrambling across tools to figure out what's going on. The XDR integration has been particularly valuable. Being able to correlate endpoint telemetry and actually investigate suspicious activity without needing a separate SIEM query or jumping to another console saves real time during incident response. From a compliance and encryption standpoint, having BitLocker management tied into Sophos Central means device encryption status is visible and enforceable without needing a separate tool that's a genuine operational win. And honestly, the biggest benefit is just confidence, knowing that deep learning and behavioral detection is running int he background catching things that signature based tools would miss means you can focus on higher level security work instead of constantly firefighting basic threats. It's not perfect but it genuinely reduces the noise and gives the team a stronger security posture day to day. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite ![Shibu K.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shibu K.") SK Shibu K. Security Engineer Information Technology and Services Mid-Market (51-1000 emp.) 6/11/2026 Business partner of the seller or seller's competitor, not included in G2 scores. "Sophos Endpoint Has Been a Reliable Security for Both Our Organization and Clients" 5/5 What do you like best about Sophos Endpoint? The features I use most frequently is the centralized Sophos Central dashboard. It provides a clear view of all protected devices, active alerts, threat detections, policy status, and system health in one place. This significantly improves day to day management. I also like the anti-ransomware protection and behavioral threat detection capabilities. In several situations, Sophos Endpoint detected suspicious activity before it became a large issue, which helped prevent potential downtime. The user interface is clean and easy to navigate even when managing a large number of endpoints. Common administrative tasks such as policy management, device isolation, software updates, and threat investigation can be completed quickly without requiring extensive training. Another valuable feature is the detailed alerting and reporting. The information provided in security events helps us understand what happened, which device was affected, and what action was automatically taken. This reduced investigation time and helps our team respond faster. From a support perspective, deployment is straightforward and onboarding new systems is simple. Integration with other Sophos security products also helps create a more unified security environment. Overall, Sophos Endpoint has improved operational efficiency while providing strong endpoint protection. Review collected by and hosted on G2.com. What do you dislike about Sophos Endpoint? Overall, my experience with Sophos Endpoint has been very positive and I have not encountered any major issues that affected our daily operations. If I had to mention an area for improvement, some advanced security settings and policy options can take time for new administrators to fully understand during the initial learning phase. However, once familiar with the platform, day to day management becomes very straightforward. In large environments, some reports could provide additional customization options for organizations that require highly specific compliance or audit reporting. That said, the existing reporting capabilities are already sufficient for most of our operational and security requirements. Apart from these minor points, the platform has been stable, reliable, and effective. Regular features updates, strong threat protection, centralized management, and good visibility into endpoint activity make it a solution that I would confidently recommend to organizations looking for endpoint security. Review collected by and hosted on G2.com. What problems is Sophos Endpoint solving and how is that benefiting you? We use Sophos Endpoint across our organization for around 100-200 users and also support multiple client environments that use the same solution. Before implementing Sophos Endpoint, managing endpoint security across different devices and users required more manual effort and visibility was limited. Sophos Endpoint helps us protect laptops and desktops from malware, ransomware, malicious websites, phishing attacks, and potentially unwanted applications. One of the biggest benefits is that everything can be managed from a single cloud dashboard, which makes daily administration much easier. As part of my role, I regularly monitor endpoint health, review security alerts, check device status, manage policies, and investigate detected threats. The real time threat detection and automated response capabilities help reduce security incidents and save significant troubleshooting time for our team. The reporting and visibility features are also very useful. We can quickly identify non-compliant devices, review security events, and generate reports when required by management or clients. This improves our overall security posture and reduces operational effort. For our clients, Sophos Endpoint gives them confidence that their systems are protected while allowing us to provide proactive support and faster issue resolution whenever security events occur. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite AP Akshay P. Technical Engineer Mid-Market (51-1000 emp.) 11/17/2025 "Effortless Security with Powerful, Reliable Features" 5/5 What do you like best about Sophos Endpoint? 1) My favorite thing about Sophos Endpoint is how simple it is to use and maintain on a daily basis. It was easy to set up and implement, and there were no issues integrating it with our current tools. 2) Additionally, it has a robust feature set that allows it to be adaptable to various security requirements. It is one of the tools I rely on the most because of its consistent, dependable performance, which I use often. 3) All things considered, it achieves an excellent balance between simplicity of use, strong capabilities, and straightforward integration. 4) The Sophos Central console pulls everything together, so getting things up, keeping an eye on threats, and managing policies feels straightforward. It runs smoothly without slowing things down and its detection is sharp. Review collected by and hosted on G2.com. What do you dislike about Sophos Endpoint? Nothing as much as Sophos Endpoint is ease to use Review collected by and hosted on G2.com. What problems is Sophos Endpoint solving and how is that benefiting you? By employing advanced threat detection, behavioral analysis, and exploit prevention, Sophos Endpoint assists in resolving significant security issues like malware, ransomware, phishing, and unauthorized access. Through a centralized dashboard that streamlines monitoring, policy enforcement, and incident response, it also resolves visibility and management issues. Stronger defense against attacks, a lower chance of breaches, less manual IT work, quicker threat response, and an enhanced overall security posture are the results, all while maintaining endpoint functionality and constant protection. 1.) Sophos endpoint packs a serious punch when it comes to threat protection. 2.) It uses AI to spot threats, leans on behavioural analytics and can even roll back damage from ransomware attacks. Review collected by and hosted on G2.com. Show More 6/3/2026 Current UserValidated ReviewerIncentivizedSource: Seller invite ![Verified User in Information Technology and Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Technology and Services") AI Verified User in Information Technology and Services Small-Business (50 or fewer emp.) 7/22/2026 "Frusterating to administer or get support for and does block a lot of threats" 0/5 What do you like best about Sophos Endpoint? It detected cross network encryption on a device running a software that was supposed to do so. Easy to allow that software but it was good to have it detect that level of threat Review collected by and hosted on G2.com. What do you dislike about Sophos Endpoint? Management GUI, support, logging into manage its all terrible. As you use the product it will time out as it should and bring you to a login screen - dont bother logging in there it wont work, of what feels like hundreds of possible places to login, everyone of them will tell you wrong credentials except one specific place and only it works. Their GUI is frusterating to navigate and manage devices, they move and hide options that used to be simple all the time. Thier support is horrible and continues to be as they keep changing what team/country supports it. The only thing thier support reliably is good at is following up after so many days/weeks have went by that ive given up on getting help and had to find another way. In those cases they will hound you non-stop. Also they quickly move old OS's into a high premium legacy support license which can add up to thousands of dollars fast Review collected by and hosted on G2.com. What problems is Sophos Endpoint solving and how is that benefiting you? AV protection for systems of various tiers, some clients require additional features such as the XDR and some lower down to the base AV. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Thank You page ![Abhishek S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Abhishek S.") AS Abhishek S. Cyber Security Consultant Mid-Market (51-1000 emp.) 11/5/2025 "Great security tool with minimal hassle" 5/5 What do you like best about Sophos Endpoint? Honestly, the best part is that it simply works without getting in the way. I barely notice it running, yet I still feel confident that my devices are protected. Setup was surprisingly easy, and the dashboard is clean, straightforward, and easy to understand. Threat detection runs automatically, so I don’t have to keep checking things manually. Overall, it gives me peace of mind without adding extra work to my day. Review collected by and hosted on G2.com. What do you dislike about Sophos Endpoint? To be honest, it sometimes flags software I’ve been using for years as suspicious, and I have to stop what I’m doing just to whitelist it. The notifications also seem to pop up at the worst possible times. Pricing-wise, I wish there were more affordable options for smaller teams. Still, these are minor frustrations overall—nothing significant enough to make me look elsewhere. Review collected by and hosted on G2.com. What problems is Sophos Endpoint solving and how is that benefiting you? Before we started using Sophos Endpoint, we were always worried about malware and ransomware attacks hitting our devices. Now that worry is mostly gone. It handles threats automatically, so our team can focus on work instead of constantly thinking about security. It’s also helped us stay on top of all our devices from one place, which saves a lot of time. Overall, it’s made our day-to-day much less stressful, because we know everything is being monitored and protected in the background. Review collected by and hosted on G2.com. Show More 6/9/2026 Validated ReviewerIncentivizedSource: Seller invite ![Elias Alejandro A.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Elias Alejandro A.") EA Elias Alejandro A. Coordinador de seguridad de sistemas Mid-Market (51-1000 emp.) 6/12/2026 "Effective risk mitigation in email, endpoints, and servers" 5/5 What do you like best about Sophos Endpoint? The graphical interface is very intuitive and also has excellent integration with its other tools such as the FW and also with Office 365. The performance is excellent given that it is a SAAS tool. The price is excellent for the range of options it offers. The support is really efficient and fast, and likewise, the AI helps us with any investigations that may be conducted. Review collected by and hosted on G2.com. What do you dislike about Sophos Endpoint? The reporting window still has many improvements to implement, as the charts are limited and the reporting is not very customizable. In this section, AI would help a lot if they integrated it. Review collected by and hosted on G2.com. What problems is Sophos Endpoint solving and how is that benefiting you? Risk mitigation, antimalware protection, and email protection. Review collected by and hosted on G2.com. Show More 6/16/2026 Current UserValidated ReviewerSource: Thank You pageAI Translated ## Questions about Sophos Endpoint? Ask real users or explore answers from the community Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights. [ Ask about Sophos Endpoint ](https://www.g2.com/products/sophos-endpoint/discussions/new) GU Guest User • Last activity 12 months ago What is Sophos Intercept X: Next-Gen Endpoint used for? 0 Upvotes 1 [ Join the conversation ](https://www.g2.com/discussions/what-is-sophos-intercept-x-next-gen-endpoint-used-for) GU Guest User • Last activity 8 months ago Is Sophos Endpoint an antivirus? 0 Upvotes 3 [ Join the conversation ](https://www.g2.com/discussions/is-sophos-endpoint-an-antivirus) [ View all Discussions ](https://www.g2.com/products/sophos-endpoint/discuss) ## Pricing Insights Averages based on real user reviews. ### Time to Implement 2 months ### Return on Investment 14 months ### Average Discount 13% ### Perceived Cost $$$$$ [ View More Pricing Information ](https://www.g2.com/products/sophos-endpoint/pricing) ## How much does Sophos Endpoint cost? Data powered by [BetterCloud](https://www.bettercloud.com). Estimated Price ### $$k - $$k Per Year Based on data from 8 purchases. Get Price Estimate Sophos Endpoint Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_0da398b6bec445230418055cb5eab676/kaspersky-next-optimum.png "Product Avatar Image") Kaspersky Next Optimum 4.3/5(208) [ Compare Now ](https://www.g2.com/compare/kaspersky-next-optimum-vs-sophos-endpoint) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_0e024459b5d040095046ec567e486ac8/trendai-vision-one-endpoint-security.jpg "Product Avatar Image") TrendAI Vision One - Endpoint Security 4.3/5(115) [ Compare Now ](https://www.g2.com/compare/sophos-endpoint-vs-trendai-vision-one-endpoint-security) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_b131325a2ba16e8f1fb6e08fd0c0372e/symantec-end-user-endpoint-security.jpg "Product Avatar Image") Symantec End-user Endpoint... 4.4/5(553) [ Compare Now ](https://www.g2.com/compare/sophos-endpoint-vs-symantec-end-user-endpoint-security) ##### ##### Sophos Endpoint Features Administration Compliance Web Control Application Control Functionality System Isolation Firewall Endpoint Intelligence Analysis Automated Remediation Incident Reports Behavioral Analysis Detection & Response Threat Hunting Real-Time Detection [ View More Features ](https://www.g2.com/products/sophos-endpoint/features) ## Top-Rated Alternatives [ ![ESET PROTECT](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "ESET PROTECT") ESET PROTECT 4.6/5(1,003) ](https://www.g2.com/products/eset-protect/reviews) [ ![CrowdStrike Falcon Endpoint Protection Platform](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "CrowdStrike Falcon Endpoint Protection Platform") CrowdStrike Falcon Endpoint Protection Platform 4.6/5(441) ](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) [ ![Check Point Endpoint Security](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Check Point Endpoint Security") Check Point Endpoint Security 4.5/5(285) ](https://www.g2.com/products/check-point-endpoint-security/reviews) [ View All Alternatives ](https://www.g2.com/products/sophos-endpoint/competitors/alternatives) ##### Categories on G2 [Endpoint Protection Platforms](https://www.g2.com/categories/endpoint-protection-platforms)[Endpoint Detection & Response (EDR)](https://www.g2.com/categories/endpoint-detection-response-edr)[Antivirus](https://www.g2.com/categories/antivirus) [Endpoint Protection Platforms](https://www.g2.com/categories/endpoint-protection-platforms)[Endpoint Detection & Response (EDR)](https://www.g2.com/categories/endpoint-detection-response-edr)[Antivirus](https://www.g2.com/categories/antivirus)[Extended Detection and Response (XDR) Platforms](https://www.g2.com/categories/extended-detection-and-response-xdr-platforms) [Show MoreShow Less](javascript:void(0);) ##### Explore More [Top-rated platforms for secure document creation](https://www.g2.com/discussions/what-are-the-top-rated-platforms-for-secure-document-creation)[What are the best data de-identification tools for IT services companies removing customer PII before sharing test datasets with development partners?](https://www.g2.com/discussions/what-are-the-best-data-de-identification-tools-for-it-services-companies-removing-customer-pii-before-sharing-test-datasets-with-development-partners)[Which content analytics software is easiest to use?](https://www.g2.com/discussions/which-content-analytics-software-is-the-easiest-to-use) [best ecommerce fraud protection software](https://www.g2.com/discussions/best-e-commerce-fraud-protection-software-in-2025)[What's the top AI sales app for increasing leads](https://www.g2.com/discussions/what-s-the-top-ai-sales-app-for-increasing-leads)[Pros and Cons Details](https://www.g2.com/products/sophos-endpoint/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)