Sophos uses OpenAI Daybreak to shorten threat investigation time
Start here
Through the OpenAI Daybreak program, Sophos combines OpenAI models with its threat intelligence, response playbooks, and security expertise, reducing its MDR cases' average response time from about 38 minutes to about 89 seconds, and enabling 52% of MDR cases to be resolved end-to-end by AI. Its Sophos Fusion system aggregates trillions of events daily from over 500 third-party integrations, compressing them into about 1,000 to 2,000 cases handled by nine security operations centers, with investigation agents responsible for collecting context, detection results, IoCs, and threat intelligence.
Generated by AI from reports · Updated 4 days ago
Progress timeline
- OpenAISophos cuts threat investigation time by 96% with OpenAI Daybreak
Through the OpenAI Daybreak program, Sophos combines OpenAI models with its threat intelligence, response playbooks, and security expertise, reducing its average MDR case response time from about 38 minutes to about 89 seconds, and having 52% of MDR cases resolved end-to-end by AI. Its Sophos Fusion system aggregates trillions of events daily from more than 500 third-party integrations, compressing them into about 1,000 to 2,000 cases handled by nine security operations centers. Investigation agents collect context, detection results, IoCs, and threat intelligence, while the planning model executes a plan-execute-review loop. Sophos retains three customer control modes—Notify, Collaborate, Authorise—and potentially disruptive operations still require human oversight.
Related discussion
Attention trend
New sources per day
- Oct 9New1 sources (1 outlets,0 accounts)
- Oct 10New0 sources (0 outlets,0 accounts)
- Oct 11New0 sources (0 outlets,0 accounts)
- Oct 12New0 sources (0 outlets,0 accounts)
- Oct 13New0 sources (0 outlets,0 accounts)