Intercept X Endpoint

Intercept X Endpoint is the endpoint protection product from Sophos. It combines several methods to stop a wide range of attacks, including ransomware and exploits.

It can be run by the customer's own team or paired with a managed detection and response service staffed by Sophos threat hunters. The Sophos website describes more than 12,000 companies using that managed service.

What Intercept X Endpoint offers

• Exploit prevention — blocks attack techniques without relying on signatures.
• Deep learning detection — identifies malware using trained models.
• Anti-ransomware — specific protection against ransomware behaviour.
• Root cause analysis — helps investigators see how an attack started.
• Managed detection and response — optional round-the-clock hunting, investigation and incident response.

Who it works with

Organisations of all sizes, either wanting a fully managed service or preferring to run security operations themselves.

Key facts

• Vendor: Sophos
• Management: Sophos Central, a cloud console with open APIs
• Integrations: SIEM, SOAR, ITSM, threat intelligence and RMM or PSA tools