Sophos achieves 96% reduction in threat investigation time using OpenAI daybreak

Sophos has significantly improved its threat investigation process by integrating OpenAI Daybreak, reducing average response time for cases using AI agents from 38 minutes to 89 seconds. The cybersecurity firm, which protects over 625,000 organizations globally, leverages OpenAI’s frontier intelligence alongside its own threat intelligence and security expertise. John Peterson, Sophos’ Chief Technology Officer, emphasized that the goal is to scale Sophos’ domain knowledge to support all customers. Sophos Fusion, its AI-native cyber defense system, combines data from over 500 third-party integrations with its own products, generating trillions of events daily. Daybreak agents now handle case investigations, creating plans, executing steps, and recommending responses. About half of Sophos’ MDR cases are now automated. Peterson highlighted the importance of maintaining human oversight for critical decisions, ensuring that only trusted actions are carried out by agents. The initiative enables Sophos to resolve 52% of MDR cases end-to-end with AI, enhancing customer experience and allowing analysts to focus on complex threats. Peterson urged security leaders to prioritize fundamentals like patching, endpoint protection, and network segmentation, as vulnerabilities are being exploited at unprecedented scales.