Sold by: Sophos
Deployed on AWS
Free Trial
Vendor Insights
AWS Free Tier
Protection against ransomware, advanced threats, and more across endpoints, cloud workloads, servers, mobile devices, networks, and email. Extend on premise security and build secure and scalable cloud transformations with a complete cybersecurity platform for all Sophos next-gen technologies.
4.3
Overview
Sophos provides powerful and effective cybersecurity, designed to be accessible and manageable for any organization - from schools, hospitals, local government, healthcare, and businesses of every shape and size. Available through the Sophos Central platform, a single pane of glass, born in the cloud, natively synchronizing the management of an entire ecosystem of adaptive security defenses. Start with Sophos Firewall, and next-gen endpoint or workload protection and grow. Sophos Endpoint: Security for endpoints, servers, and EC2. Combining malware protection, XDR, MDR, and more. Firewall: Protect networks from advanced threats and maintain web-app availability. https://soph.so/xg-firewall-payg Cloud Optix: Visualize cloud resources, monitor compliance, and analyze configurations to optimize security. https://soph.so/cloud-optix Mobile: Secure UEM solution to protect and manage mobile devices. Email: Stop spam, phishing, and data loss. Phish Threat: Security awareness training with phishing simulations. Encryption: Full disk encryption for Windows and macOS. -- Managed Services -- Managed Detection & Response: 24/7 threat hunting, detection, and response. https://soph.so/MTR Rapid Response: Incident response service during an attack. https://soph.so/rapid-response Looking for custom pricing options? Contact us publiccloudsales@sophos.com
Highlights
- Easy to deploy, manage, and highly effective at stopping cyberattacks. Sophos products and services provide cloud security best practices and compliance, threat detection and response, network security, host and endpoint security in a single console.
- Block ransomware: Endpoint and Server anti-ransomware technology detects malicious encryption processes and shuts them down before they spread. Any files encrypted are rolled back to a safe state automatically.
- Sophos synchronized security allows organizations to link endpoints, cloud workloads, and firewall to relay health status, immediately isolate compromised devices or workloads, and respond to threats on your network automatically.
Details
Sold by
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Skip the manual risk assessment. Get verified and regularly updated security info on this product with Vendor Insights.
Security credentials achieved
(1)
AWS Security Specialization
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free according to the free trial terms set by the vendor.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Sophos EDR | Malware/Ransomware/Exploits/Viruses | $69.96 |
Sophos XDR | Sophos EDR features plus Extended Detection and Response tools | $136.60 |
Sophos MDR | Central MDR Complete including XDR | $239.64 |
Sophos EDR - Server | EDR features/Server Lockdown/Cloud Optix standard: for Server OS | $153.56 |
Sophos XDR - Server | EDR Server features plus Extended Detection and Response tools | $222.66 |
Sophos MDR - Server | Central MDR Complete Server includes EDR and XDR | $390.72 |
Mobile Advanced | Secure Unified Endpoint Management for Windows 10, macOS, iOS, Android | $93.48 |
Cloud Optix Advanced | Cloud Native App Protection for AWS, Azure, GCP, K8s | $140.04 |
Sophos Email Advanced | Sophos Email Security | $66.96 |
Sophos Phish Threat | Sophos Phish Threat, Phishing Simulation and Training: Per user | $37.80 |
Vendor refund policy
Please refer to the Sophos EULA for details on our refund policies.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Sophos support portal for licensed customers with an existing SophosID: https://support.sophos.com Toll Free: 1-888-SOPHOS-9 (1-888-767-4679)International: 1-781-494-5800 To contact Support, please log into your Sophos Central Dashboard, click on HELP in the upper right corner, then click on CREATE SUPPORT TICKET. Or, visit https://www.sophos.com/en-us/support.aspx to go to the Sophos Community to find information and resolutions on common questions and issues.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
Top
10
In Media & Entertainment, Healthcare & Life Sciences
Top
10
In Network Infrastructure
Top
50
In Migration
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Unified Management Console
Single pane of glass management platform for coordinating security across endpoints, servers, cloud workloads, firewalls, mobile devices, email, and network infrastructure.
Ransomware Protection
Anti-ransomware technology that detects malicious encryption processes, terminates them before propagation, and automatically rolls back encrypted files to a safe state.
Synchronized Threat Response
Cross-platform security synchronization that links endpoints, cloud workloads, and firewalls to relay health status, automatically isolate compromised devices or workloads, and execute coordinated threat response.
Extended Detection and Response
XDR and MDR capabilities combined with malware protection for comprehensive threat detection, hunting, and response across the security ecosystem.
Multi-Layer Security Coverage
Integrated protection spanning endpoint security, server protection, EC2 workloads, network firewall, mobile device management, email security, and full disk encryption for Windows and macOS.
Application Layer Visibility and Control
Complete application layer-7 visibility and control of traffic with next-generation firewall capabilities in AWS environments
AI/ML-Powered Threat Detection
AI/ML-powered inspection engine with researcher-grade signatures for detection of zero-day threats, exploits, malware, spyware, and command and control attacks
Dynamic Policy Management
Policy definitions that dynamically apply to cloud assets based on AWS tags, Application IDs, User IDs, geographies, or zones without manual intervention
Cloud Infrastructure Integration
Seamless integration with Gateway Load Balancer, AWS Auto Scaling, and Transit VPC with AWS Transit Gateway for protection across dynamic and large-scale deployments
Advanced Threat Prevention Service
Cloud-delivered Advanced Threat Prevention security service with market-leading threat coverage against known and zero-day threats while maintaining performance
Next Generation Firewall Architecture
High-performance firewall solution with core firewall, VPN, NAT, and advanced L4-L7 security services including application security, IPS, and anti-virus capabilities.
Anti-Virus and Malware Protection
Cloud-based anti-virus protection that detects and blocks spyware, adware, viruses, keyloggers, and other malware over POP3, HTTP, SMTP, and FTP protocols.
Intrusion Detection and Prevention
Intrusion detection and prevention (IPS) system integrated with application visibility and control through AppSecure for threat detection and workload protection.
VPN and Secure Connectivity
IPsec and full mesh VPN termination services enabling secure connectivity from on-premises data centers, campuses, and branches to AWS cloud across geographically dispersed VPCs.
AWS Cloud Service Integration
Native integration with AWS services including Elastic Load Balancer, Auto-Scaling Groups, CloudWatch, Security Hub, Key Management Service, Elastic Network Adapter support, and Gateway Load Balancer with L3 gateway and L4 load balancer capabilities.
Standard contract
No
No
No
Customer reviews
Aniket G.
Easy-to-Use Portal, Reliable Endpoint Protection, and Responsive Support
Reviewed on Apr 14, 2026
Review provided by G2
What do you like best about the product?
The portal is easy to use, and each module is explained with clear, specific details. Integration with the endpoints is straightforward and accessible whenever needed.
Sophos installed on each endpoint receives updates at regular intervals, and the same status is visible in the admin console as well. Overall, the performance has been consistently reliable and never disappoints.
The pricing has gone down, which is a positive change, and it now meets all the expectations we had.
The vendor NetNxt, which we collaborate with for Sophos, has been helpful and responsive, and they answer whenever we need support.
I haven’t used the AI feature in the console yet, so I don’t have much to say about it.
The protection it gives for the endpoints is magnificent along with the tune able policies as per our needs.
Sophos installed on each endpoint receives updates at regular intervals, and the same status is visible in the admin console as well. Overall, the performance has been consistently reliable and never disappoints.
The pricing has gone down, which is a positive change, and it now meets all the expectations we had.
The vendor NetNxt, which we collaborate with for Sophos, has been helpful and responsive, and they answer whenever we need support.
I haven’t used the AI feature in the console yet, so I don’t have much to say about it.
The protection it gives for the endpoints is magnificent along with the tune able policies as per our needs.
What do you dislike about the product?
Few time there is a lag between the policy which are pushed to the endpoints and have to wait a long time to get it reflected.
IF this could be Improved that would be a great help.
IF this could be Improved that would be a great help.
What problems is the product solving and how is that benefiting you?
In our organization, it protects around 250+ endpoints from all kinds of malware and other threats and keeps the org data safe.
Rafael L.
Unified, Cloud-Based Security Management with Real-Time Visibility
Reviewed on Apr 09, 2026
Review provided by G2
What do you like best about the product?
What I like most about Sophos Central is its unified management platform, which gives me full visibility and control across all security layers from a single console. It streamlines day-to-day operations by bringing firewall, endpoint, MDR, and email protection together in one place. The real-time alerts, synchronized security, and detailed reporting also make a noticeable difference in incident response and threat detection. On top of that, the cloud-based management makes it easy to deploy, manage policies, and troubleshoot remotely, which saves time and improves overall efficiency.
What do you dislike about the product?
Some advanced configurations require switching to the local firewall, and reporting/customization options could be improved. There can also be occasional sync delays between devices and Sophos Central.
What problems is the product solving and how is that benefiting you?
Sophos Central helps cut through the complexity of managing multiple security solutions by offering a single, unified platform for visibility and control. Rather than juggling separate tools for the firewall, endpoints, email, and threat detection, everything is centralized in one place, which reduces operational overhead and makes day-to-day management simpler. For me, this translates into faster incident response, better threat correlation through synchronized security, and quicker deployment of policies across the organization. Overall, it strengthens our security posture while saving time on routine operations and troubleshooting.
Saurabh S.
Centralized Dashboard with Real-Time Visibility and Effortless Policy Management
Reviewed on Feb 18, 2026
Review provided by G2
What do you like best about the product?
One of the best aspects is the single dashboard view, where I can monitor firewall, endpoint, and user security status in real time. I frequently use the Alerts & Events section to quickly identify critical threats and take immediate action.
The Device Management panel is very helpful for checking endpoint health, applying policies, and isolating compromised systems remotely. I also rely on the Threat Analysis Center to investigate malware detections and review root cause analysis.
The policy management feature allows me to modify web control, application control, and threat protection policies easily without logging into multiple systems. Additionally, the reporting section helps me generate scheduled reports for management and customers.
Overall, the centralized control, real-time visibility, easy policy deployment, and detailed reporting are the features I use the most, and they significantly reduce administrative workload.
The Device Management panel is very helpful for checking endpoint health, applying policies, and isolating compromised systems remotely. I also rely on the Threat Analysis Center to investigate malware detections and review root cause analysis.
The policy management feature allows me to modify web control, application control, and threat protection policies easily without logging into multiple systems. Additionally, the reporting section helps me generate scheduled reports for management and customers.
Overall, the centralized control, real-time visibility, easy policy deployment, and detailed reporting are the features I use the most, and they significantly reduce administrative workload.
What do you dislike about the product?
All good, full fill my all requirements.
What problems is the product solving and how is that benefiting you?
1. Unified Dashboard
2. Faster Threat Detection & Response
3. Better Reporting & Compliance
2. Faster Threat Detection & Response
3. Better Reporting & Compliance
Ashutosh Jha
Centralized security management has simplified real-time protection and unified policy control
Reviewed on Jan 08, 2026
Review provided by PeerSpot
What is our primary use case?
As I am from a service-based company, my main use case for Sophos Central is that I am taking care of all of our security needs.
I use Sophos Central to block any website or application. For example, if I want to block WhatsApp, I simply call that specific application through Sophos Central.
I can manage Sophos firewall from Sophos Central, along with managing ZTNA , encryption, mobile MDM , and Sophos MDM .
What is most valuable?
The best feature of Sophos Central is that I can use all of the solutions from Sophos in a single pane of glass, which means I can manage all the services of Sophos from one console.
Having everything in one console makes my work easier because if I want to make a change on the firewall, I can simply go to the firewall management and make the changes. If I want to change anything related to Sophos wireless, I can directly change it from Sophos firewall without needing to access multiple consoles.
Sophos Central has positively impacted my organization because it allows us to utilize Sophos products in a single pane of glass, and with its synchronized security, it helps to protect our environment more effectively by isolating infected devices from the internet.
What needs improvement?
I think Sophos Central could be improved by offering an on-premises option because some users prefer to keep their data locally rather than in the cloud.
I think if there were a new licensing model for Linux endpoints, it would be very helpful for us.
For how long have I used the solution?
I have been working in my current field for the last two years.
What do I think about the stability of the solution?
Sophos Central is stable.
What do I think about the scalability of the solution?
Sophos Central's scalability is excellent because I can add any licenses at any time without needing to create a new console. For example, if I have 100 endpoints and need 20 more licenses, I can simply purchase them and continue to use them within the same console.
How are customer service and support?
The customer support for Sophos Central is very good. If I call support at any time, they will assign a new engineer according to SLA immediately or within one to three hours.
Which solution did I use previously and why did I switch?
I previously used Trend Micro before switching to Sophos Central because Trend Micro did not integrate with the console like Sophos Central does.
How was the initial setup?
The experience with pricing, setup cost, and licensing for Sophos Central has been very good. Additionally, there is no license required for Linux EDR machines, and if Sophos were to add Linux EDR licensing, it would be very helpful for my organization and others.
What about the implementation team?
The data is already stored in Sophos cloud, specifically in Sophos database.
What was our ROI?
I have not seen a return on investment yet.
Which other solutions did I evaluate?
I evaluated CrowdStrike as well, but I found that CrowdStrike does not provide the same level of protection with site management and application control as Sophos Central does.
What other advice do I have?
I would advise others to use Sophos Central because of its performance and customer support. It works in real-time, making it beneficial for many organizations. I can add that we can manage Sophos firewall from Sophos Central, along with managing ZTNA , encryption, mobile MDM, and Sophos MDM. My review rating for Sophos Central is 10.
Ihsan T.
All-in-One Monitoring with Robust Notifications and Easy Usability
Reviewed on Jan 07, 2026
Review provided by G2
What do you like best about the product?
- Ease of use
- All-in-one view for most tasks and monitoring
- Robust notification services.
- Good coverage and very good triage performance.
- Ease of integration.
- All-in-one view for most tasks and monitoring
- Robust notification services.
- Good coverage and very good triage performance.
- Ease of integration.
What do you dislike about the product?
- Many FP findings.
- A bit difficult to complete some trivial tasks.
- Performance issues with development devices.
- A bit difficult to complete some trivial tasks.
- Performance issues with development devices.
What problems is the product solving and how is that benefiting you?
Sophos is an excellent XDR and cloud security solution, especially suited for organizations seeking an all-in-one platform with a minimal learning curve.