

Sophos NDR
By Sophos Ltd
Sophos is a British cybersecurity company renowned for its suite of security solutions designed to protect organizations against evolving cyber threats. Among its offerings, Sophos Network Detection and Response (NDR) stands out as a pivotal tool in identifying and mitigating suspicious network activities.
Sophos NDR enhances an organization's security posture by monitoring network traffic to detect abnormal behaviors that may indicate potential threats. It works in tandem with managed endpoints and firewalls to provide visibility into activities that might otherwise go unnoticed, such as those originating from unmanaged systems, IoT devices, rogue assets, insider threats, zero-day attacks, and unusual patterns deep within the network.
Founded in 1985 by Jan Hruska and Peter Lammer, Sophos began by producing antivirus and encryption products. Over the years, the company expanded its focus to include a broad range of cybersecurity solutions and embarked on international expansion. In 2010, a majority stake was sold to Apax Partners, and in 2015, Sophos went public on the London Stock Exchange. In March 2020, the company was acquired by the private equity firm Thoma Bravo for approximately $3.9 billion.
Sophos has undergone several funding rounds, raising a total of $4.61 million over six rounds, with its initial funding round on December 24, 1996. The acquisition by Thoma Bravo in 2020 valued the company at around $3.9 billion.
Sophos offers a diverse range of cybersecurity products and services, including endpoint protection, firewall solutions, email security, and cloud security. The NDR solution specifically provides critical visibility into network activity, utilizing five powerful real-time threat detection engines to identify anomalies and patterns in network traffic, thereby detecting security incidents before they escalate.
Sophos regularly updates its products to incorporate new features and improvements. For instance, the NDR Sensor v1.8.0-2352 release introduced enhanced asset identification and security detection capabilities. Additionally, Sophos Central introduced Central Firewall Reporting Advanced, allowing for customized, historical reports on network activity for Sophos XG Firewall.
Sophos emphasizes innovation, adaptability, and a commitment to defending organizations against cyber threats. The company fosters a culture of continuous improvement and collaboration, aiming to provide effective and user-friendly security solutions.
Sophos serves a global clientele, ranging from small businesses to large enterprises across various industries. The company maintains an active community through forums and support channels, facilitating knowledge sharing and collaboration among users and partners. For example, the Sophos Community provides announcements, discussions, and resources related to NDR and other products.