Sold by: Sophos
Deployed on AWS
Free Trial
AWS Free Tier
Sophos Cybersecurity as a Service combines world class products, tools, services, and expertise into one holistic solution.
4.7
Overview
Your cybersecurity. Our responsibility.
Every organization wants the best cyber defenses, but very few have all the skilled resources to deliver them. With Cybersecurity as a Service for AWS (https://soph.so/caas ) we deliver world-leading protection for you or with you. All Sophos product and services offerings can be tailored to the exact needs of your organization's security program. Our integrated cybersecurity products automatically stop 99.98% of threats before they can run, while our threat hunting and neutralization experts monitor your environment 24/7, shutting down even the most advanced attacks on your behalf. Learn more about our services integration with AWS here: https://soph.so/awsmtp .
Sophos cloud products include:
- Cloud Security Posture Management: Sophos Cloud Optix continuously scans cloud environments to identify assets, assess their security and compliance settings, and identify malicious activity that may lead to data breaches - enabling you to quickly remediate misconfigurations and respond to threats. It integrates with AWS GuardDuty and SecurityHub and provides agentless malware scanning for the S3 storage service. Learn more: https://soph.so/cloud_optix
- Cloud Workload Protection: Sophos agents protect Windows and Linux hosts running in the cloud against modern threats, including ransomware. Learn more: https://soph.so/cwp
- Cloud Edge Firewall: Sophos Firewalls provide network visibility, protection, and response across public, private, and hybrid cloud environments. With cloud native, virtual, and physical appliances, Sophos Firewalls protect networks of any kind. Learn more: https://soph.so/ngfw
- Endpoint Protection: Sophos Endpoint agents protect your users against everything from common malware to advanced fileless threats and ransomware. Learn more: https://soph.so/endpoint
- Managed Detection and Response Service: Sophos MDR is the world's most trusted MDR service. Analysts leverage telemetry from AWS together with your endpoint, firewall, network, email, and identity solutions to accelerate threat detection, investigation and response across your full environment. Learn more: https://soph.so/mdr
Designed with SMB organizations in mind, Cybersecurity as a Service provides:
- Affordable threat protection: enterprise-grade cybersecurity that's cost effective for small businesses. Learn more: https://soph.so/smb
- An instant Security Operations Center: Managed by you, by us, or together. Simple, one-time installation gets you up and running in minutes.
- World-class cybersecurity defenses: Technology that works with hybrid cloud environments. From endpoint and network security to email and cloud, we have you covered.
- An expert team of cybersecurity professionals: Available 24/7/365. Our AI, malware and security operations specialists work together to constantly improve protection and help customers respond to incidents and breaches.
- A free intuitive cloud-based security platform: Sophos Central allows you to manage all your defenses in one place for maximum efficiency and cross-estate coordination. Providing simple management and reporting, Sophos Central also includes Threat Analysis tools for customers that operate their own security operations teams. Learn more: https://soph.so/sophos-central
Sophos provides a wide range of security solutions to protect users, networks, and cloud environments. To view all products please visit our Sophos Central listing page - https://soph.so/sophos-central .
Looking for custom pricing options? Contact us publiccloudsales@sophos.com
Highlights
- 24/7 Managed Detection and Response across Sophos and 3rd party products. Sophos MDR provides the most comprehensive native security integrations on the market, bringing together signals from endpoint, workload, network, email, cloud and mobile solutions. Learn more: https://soph.so/mdr
- Cloud native and hybrid cloud cybersecurity products provide protection for customers migrating to and in the cloud. Learn more: https://soph.so/cns
- A free cloud based unified management platform that centralizes reporting and configuration for all Sophos products and cybersecurity tools. Sophos Central facilitates sharing of real time threats, health and security information between Sophos products and enables automatic response actions to contain and eradicate threats. Learn more: https://soph.so/sophos-central
Details
Sold by
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free according to the free trial terms set by the vendor.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Cloud Workload MDR | Managed Detection Response for server OS with XDR tools | $390.72 |
Cloud Optix Advanced | Agentless CSPM for AWS, K8s | $140.04 |
Cloud Edge Firewall | Firewall/IPS/Web/WAF/Sandbox: Price per Firewall includes all features | $3,424.00 |
Sophos MDR - Endpoint | Managed Detection Response for user workstations including XDR tools | $239.64 |
Dimensions summary
You buy each of the four options by unit, and you can mix them to match your environment. Two are managed detection and response services: one covers server operating systems, the other covers user workstations, both with XDR tools. Cloud Optix Advanced prices agentless posture management for AWS and Kubernetes per unit. Cloud Edge Firewall prices per firewall, with all firewall, IPS, web, WAF, and sandbox features bundled into that single unit price. You scale spend by adding units in each category independently, so cost tracks the servers, workstations, cloud accounts, and firewalls you protect.
Top-of-mind questions for buyers
The Cloud Workload MDR unit maps to a server operating system instance, covering hosts, virtual machines, and container workloads running Linux or Windows Server. The Sophos MDR - Endpoint unit maps to a user workstation. You count each protected server or workstation separately, then buy that many units.
One Cloud Edge Firewall unit covers a single firewall with all features bundled in. That includes firewall, intrusion prevention, web protection, web application firewall, and sandbox capabilities. You do not pay separately for these functions. Adding another firewall means buying another unit at the same per-firewall price.
Cloud Optix Advanced is agentless posture management priced per unit for AWS and Kubernetes environments. Because it needs no installed agent, coverage scales by adding units rather than deploying software to each host. You add units as your cloud accounts and Kubernetes environments grow, independent of the other three options.
www.sophos.com+2
Helpful?
Vendor refund policy
Please refer to the Sophos EULA for details on our refund policies.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Support
Vendor support
Sophos support portal for licensed customers with an existing SophosID: https://support.sophos.com Toll Free: 1-888-SOPHOS-9 (1-888-767-4679)International: 1-781-494-5800 To contact Support, please log into your Sophos Central Dashboard, click on HELP in the upper right corner, then click on CREATE SUPPORT TICKET. Or, visit https://www.sophos.com/en-us/support.aspx to go to the Sophos Community to find information and resolutions on common questions and issues.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Sophos
By Palo Alto Networks
By Juniper Networks
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Threat Detection and Response
Automatic threat detection and neutralization with 99.98% threat interception rate, supported by 24/7 managed detection and response service with threat hunting and neutralization experts
Cloud Security Posture Management
Continuous scanning of cloud environments to identify assets, assess security and compliance settings, detect malicious activity, and identify misconfigurations with agentless malware scanning for S3 storage and integration with AWS GuardDuty and SecurityHub
Unified Management Platform
Cloud-based centralized management platform enabling configuration and reporting across all security products, real-time threat information sharing between products, and automatic response actions for threat containment and eradication
Multi-Layer Endpoint and Workload Protection
Agent-based protection for Windows and Linux hosts against modern threats including ransomware, fileless attacks, and advanced malware across cloud and on-premises environments
Network and Firewall Security
Cloud-native, virtual, and physical firewall appliances providing network visibility, protection, and response capabilities across public, private, and hybrid cloud environments
Application Layer Visibility and Control
Complete application layer-7 visibility and control of traffic with next-generation firewall capabilities in AWS environments
AI/ML-Powered Threat Detection
AI/ML-powered inspection engine with researcher-grade signatures for detection of zero-day threats, exploits, malware, spyware, and command and control attacks
Dynamic Policy Management
Policy definitions that dynamically apply to cloud assets based on AWS tags, Application IDs, User IDs, geographies, or zones without manual intervention
Cloud-Native Integration
Seamless integration and scaling with AWS environment including Gateway Load Balancer, AWS Auto Scaling, and Transit VPC with AWS Transit Gateway support
Advanced Threat Prevention Service
Cloud-delivered Advanced Threat Prevention security service with market-leading threat coverage against known and zero-day threats while maintaining performance
Intrusion Detection and Prevention
Intrusion detection and prevention (IPS) capabilities to identify and block malicious network traffic and attacks.
Anti-Virus Protection
Cloud-based anti-virus capabilities that detect and block spyware, adware, viruses, keyloggers, and malware over POP3, HTTP, SMTP, and FTP protocols.
VPN and Encryption
IPsec and full mesh VPN termination services for secure connectivity across on-premises data centers, campuses, branches, and geographically dispersed VPCs.
Application Visibility and Control
AppSecure application visibility and control through L4-L7security services for advanced threat protection and application-level inspection.
Cloud Service Integration
Native integration with AWS services including Elastic Load Balancer, Auto-Scaling Groups, CloudWatch, Security Hub, Key Management Service, Gateway Load Balancer, and Elastic Network Adapter support.
Standard contract
No
No
No
Customer reviews
Everton P.
Full Coverage and Integrated Management, with Phone Support to Improve
Reviewed on Oct 23, 2026
Review provided by G2
What do you like best about the product?
For us, the entire coverage offered by Sophos MDR is important: from protection to incident response, including remediation and guidance to prevent new cases. Together with the Sophos Firewall, it protects our perimeter and our machine park, so our employees can work with safety and reliability. I also like the integration of Sophos products, which adds an important layer of protection. Agent updates have reduced the impact on station performance and increased protection. With the environment integrated into Sophos Central, our team can monitor the entire operation more easily, quickly, and efficiently.
What do you dislike about the product?
I had some difficulties when I needed phone support. The support was not native English, so I had to communicate via email, which added a few minutes to the response time. It would be better to be directed to support in our language or speak with a native English-speaking representative. I would also like to have the option of chat support.
What problems is the product solving and how is that benefiting you?
Together with the Sophos Firewall, Sophos MDR protects our perimeter and the entire machine park, allowing our employees to work with safety and reliability. It also promptly responds to incidents and supports us in mitigating their effects.
Kevin P.
Centralized and easy-to-manage security, with room for improvement
Reviewed on Oct 22, 2026
Review provided by G2
What do you like best about the product?
I find Sophos MDR very useful for infrastructure management, as it helps to keep the entire network and devices a bit more protected. I like that it's centralized: I can see the alarms for each device on the platform and don't have to check them one by one remotely. The initial setup was easy and not very complicated.
What do you dislike about the product?
I might improve the organization of the options. I would like to have a simplified view of the available options, because options I don't have access to keep appearing.
What problems is the product solving and how is that benefiting you?
Sophos MDR helps me keep the entire network and devices a bit more protected. I can see the alarms on a centralized platform, without having to manually check each device remotely.
Morgan T.
Sophos MDR: Easy to Use, Consistently Communicative, and Security-Focused
Reviewed on Oct 22, 2026
Review provided by G2
What do you like best about the product?
I really enjoy the easy-to-use interface and the consistent communication from their team. MDR has always had our back, and I genuinely appreciate the care and attention they put into keeping our environment secure.
What do you dislike about the product?
I don't have any issues or dislikes about Sophos.
What problems is the product solving and how is that benefiting you?
Endpoint protection across our environment. It benefits us by knowing that we have support 24/7 in case of an emergency.
Anonymous
Effective Detection and Rapid Response to Threats
Reviewed on Oct 22, 2026
Review provided by G2
What do you like best about the product?
I like the quick response of Sophos MDR. It helps me detect malicious activities, and if I suspect any, I can create a case for investigation. The initial setup was easy because we already had Sophos XDR.
What do you dislike about the product?
At the moment, I have no complaints about MDR.
What problems is the product solving and how is that benefiting you?
With Sophos MDR, I manage all endpoints and third-party integrations. It helps me detect malicious activities; if I suspect any, I can open a case for investigation. They also respond quickly.
Jessé L.
Continuous monitoring and specialized support that strengthen security with Sophos MDR
Reviewed on Oct 22, 2026
Review provided by G2
What do you like best about the product?
What I like most about Sophos MDR is the continuous monitoring of the environment, the ability to identify threats, and the specialized support in incident analysis and response. The centralization of alerts and visibility over potential risks facilitate security monitoring, reduce the operational burden on the IT team, and contribute to a more preventive posture in protecting corporate infrastructure.
What do you dislike about the product?
I believe the reports could be more detailed and customizable, making it easier for management to analyze incidents and identified threats. The visualization of alert history and actions taken by the response team could also be more intuitive. Additionally, greater transparency about response times and incident evolution would help the internal IT team monitor security.
What problems is the product solving and how is that benefiting you?
Sophos MDR helps us track threats and prioritize events that need investigation on the organization's servers and computers. The main benefit is providing more support to the IT team in analyzing and responding to alerts, allowing them to focus efforts on the most relevant occurrences and service continuity.