Sophos enhances cyber intelligence with Microsoft Copilot integrations

Sophos launches new integrations with Microsoft Copilot, offering robust threat intelligence across AI-powered environments.

  • Thursday, 20th November 2025 Posted 4 months ago in by Aaron Sandhu

Sophos has unveiled new integrations connecting its cyber threat intelligence repository, Sophos Intelix, with Microsoft Security Copilot and Microsoft 365 Copilot. Announced at the Microsoft Ignite Conference in San Francisco, these integrations provide organisations, regardless of size, with real-time Sophos threat intelligence access within Microsoft's AI-powered environments, enabling them to bolster defences and react to threats more capably.

Daily, Sophos manages over 223 terabytes of telemetry through its Sophos Central platform, resulting in over 34 million detections and the automatic blocking of over 11 million threats. This vast scope of customer insight consistently informs and enhances Sophos products and services, powering Sophos Intelix, now freely available to Microsoft Security Copilot and Microsoft 365 Copilot users.

This development aligns with Sophos' mission to empower organisations with robust and intelligent cybersecurity solutions, extending their reach within the Microsoft Copilot ecosystem. The integration enables:

  • Security Analysts: Sophos Intelix enriches alerts and streamlines incident responses with capabilities like sandbox detonation and dynamic analysis.
  • IT Teams: Using natural language, users can conduct threat investigations with direct access to Sophos X-Ops insights.

Sophos Intelix is also slated for availability in Microsoft's new Security Store, expanding its utility for third-party agents, MCP services, and APIs.

Furthermore, Sophos Intelix integrates seamlessly with Microsoft 365 Copilot, facilitating accessible, comprehensive threat intelligence within popular productivity tools like Teams and Chat.

  • Users can query threat intelligence and verify the safety of links, files, or domains within their workflows using natural language commands.
  • This aids in enhancing cyber awareness and decision-making capabilities across everyday technology.

Sophos Intelix integration within Microsoft 365 Copilot aims to democratise access to advanced cybersecurity insights, empowering users with the level of intelligence typically reserved for sophisticated Security Operation Centres (SOCs).

Additionally, Sophos Intelix connects with Microsoft's Copilot and agent ecosystem, extending its intelligence capabilities throughout the Microsoft 365 environment. Microsoft Agent 365 serves as the control plane for AI agents, enabling organisations to incorporate Sophos Intelix into their agent portfolio with comprehensive visibility and compliance.

These integrations collectively reinforce Sophos' pledge to provide advanced intelligence, ensuring organisations can navigate cybersecurity challenges efficiently within the Microsoft agent ecosystem.

In the era of AI-driven security, Sophos addresses the skills gap afflicting many cybersecurity teams, particularly small and mid-sized businesses. While AI transforms industries globally, cybersecurity teams strive to overcome the increasing alert volumes amidst resource constraints.

Sophos Intelix in the Microsoft Copilot universe provides universally accessible threat intelligence, helping reduce response times and improve security experiences, ensuring organisations are equipped to face modern cyber threats effectively.

Huntress extends ITDR solution to Google Workspace

Posted 1 day ago by Sophie Milburn
Huntress expands its Managed ITDR coverage to Google Workspace, providing organisations with enhanced detection and response for identity-based...
Fluke Corporation introduces AI-driven enhancements to eMaint CMMS/EAM, aimed at streamlining maintenance operations and improving efficiency on the...
Heimdal appoints Elovade to enhance cybersecurity accessibility in the Nordics, offering streamlined channel support.
Ignition Technology collaborates with Exclusive Networks to expand its cybersecurity distribution services into the North American market.
Sectigo reveals multi-tenant partner platform, aiming for seamless, automated certificate management for channel partners.

F5 and NVIDIA expand collaboration on AI infrastructure

Posted 2 days ago by Sophie Milburn
F5 and NVIDIA join forces to enhance AI infrastructures by enhancing token throughput, reducing latency, and enabling secure multi-tenant platforms.

CybaVerse rebrands to strengthen cyber operations

Posted 2 days ago by Sophie Milburn
CybaVerse pivots from consultancy-led defence to platform-driven operations with its rebrand, emphasising control over cyber security.

AI and Cybersecurity: the future of phishing defence

Posted 3 days ago by Sophie Milburn
2025 marked a turning point in cybersecurity, as AI transformed both phishing techniques and the tools used to combat them, ushering in a more...