Sophos has announced new integrations that bring its Intelix threat intelligence into Microsoft Security Copilot and Microsoft 365 Copilot, giving organizations real-time access to advanced security insights. The collaboration aims to strengthen cyber resilience for businesses of all sizes and accelerate threat detection and response.
MALAYSIA, 25 NOVEMBER 2025 – Sophos, a global leader in cybersecurity solutions, has officially launched new integrations that connect its Sophos Intelix threat intelligence platform with Microsoft Security Copilot and Microsoft 365 Copilot. Unveiled at Microsoft Ignite in San Francisco, the partnership gives organizations immediate access to Sophos threat insights directly within Microsoft’s AI-powered environments, enabling faster and more effective responses to cyber threats.
Sophos processes more than 223 terabytes of telemetry daily through Sophos Central, generating over 34 million detections and blocking more than 11 million threats. This immense dataset, now accessible for free to users of Microsoft Security Copilot and Microsoft 365 Copilot, strengthens defenses across enterprises, mid-market organizations, and small businesses.
The integration supports Sophos’ mission to democratize cybersecurity by making advanced intelligence available to organizations at any stage of their security maturity, especially those relying on Microsoft’s growing Copilot ecosystem.
Within Microsoft Security Copilot, Sophos Intelix enhances analysts’ capabilities by enriching alerts with deep context, enabling quick triage, and supporting investigation of files, URLs, and IP addresses. Users can also leverage sandbox detonation, dynamic analysis, and global threat prevalence data from Sophos X-Ops.
Meanwhile, embedding Sophos Intelix into Microsoft 365 Copilot expands access to threat intelligence for everyday business users. Employees, IT teams, and risk managers can query Sophos data in natural language through Microsoft Teams or Copilot Chat, helping them verify suspicious links, files, and domains without leaving their daily workflow. This integration strengthens security awareness and decision-making across entire organizations.
Sophos is also integrating its intelligence into Microsoft Agent 365, an expanding framework for AI agents managed through Entra-based identity and compliance tools. This enables organizations to incorporate Sophos threat intelligence into their AI agent portfolios with full governance and observability.
The push for deeper AI-driven security comes at a crucial time. According to Sophos’ Addressing the Cybersecurity Skills Shortage in SMBs report, 96 percent of small and mid-sized businesses struggle to investigate suspicious alerts, while 75 percent face challenges in quickly remediating threats. Attackers are also accelerating, with the Sophos Active Adversary Report 2025 revealing that data exfiltration often starts within just three days of compromise.
By integrating Sophos Intelix into Microsoft’s Copilot platforms, defenders gain rapid access to advanced threat intelligence that helps reduce response times and improve overall security outcomes. The collaboration reinforces a new era of human-AI cybersecurity teamwork, enhancing how analysts detect, investigate, and remediate threats.
