Sophos Reduces Threat Investigation Time by 96 Percent with OpenAI Daybreak Integration
Thanks to artificial intelligence integration, Sophos investigates cybersecurity incidents in an average of 89 seconds while automating half of the cases.
Sophos has reduced the average incident investigation and response time from 38 minutes to 89 seconds by integrating OpenAI Daybreak technology into its cybersecurity operations.
The Era of Artificial Intelligence in Cybersecurity
While the competition between defenders and attackers in cybersecurity continues unabated, advanced artificial intelligence models enable threats to be detected faster. Sophos utilizes these technologies in its operations to protect more than 625,000 organizations worldwide.
Integration Process with OpenAI Daybreak
Through the OpenAI Daybreak program, the company combines artificial intelligence models with its own threat intelligence, response playbooks, and security expertise. This system aims to ease the workload of analysts and expand the reach of expertise.
Sophos Fusion and Data Processing
At the center of these efforts is the Sophos Fusion system, which collects data from over three hundred third-party integrations. Trillions of events are filtered daily and reduced to one to two thousand cases for security operations centers to investigate.
Automated Investigation of Incidents
Agents developed with Daybreak gather case contexts, indicators, and threat intelligence to create planning cycles. This allows investigation plans to be completed quickly and prepares recommended response summaries for analysts.
Major Improvement in Durations and Automation
The average incident investigation time, which previously took 38 minutes, dropped to 89 seconds thanks to the new agents. Approximately half of Managed Detection and Response cases are now handled automatically by these developed artificial intelligence agents.
Human Oversight and Future Goals
Control is provided to customers through three different modes: Notification, Collaboration, and Authorization. Human oversight continues to be kept at the center for potentially critical and destructive actions.