Sophos announces bringing OpenAI frontier models to managed service providers (MSPs) through Sophos Fusion, its AI-native cybersecurity defense system. The company says the goal is to help partners deliver frontier-AI-driven security as one connected defense system and to build recurring services on top of it.
According to Sophos, the OpenAI partnership is aimed at MSPs, not just at Sophos’ own internal security workflows. Partners will be able to use the capability inside Sophos Fusion, which already connects endpoint, network, email, cloud, identity and security operations in one system. Sophos also wants partners to build recurring services around it.
“Frontier AI only protects organizations at scale when you have the architecture to operationalize it and the reach to deliver it,” said John Peterson, chief technology officer, Sophos. “Sophos Fusion will give OpenAI models a defense system to work inside: connected control points, shared context, and human accountability. Our channel gives them reach through a global network of more than 25,000 partners, including over 7,000 MSPs. For those partners, it opens a new class of AI security services to build a business on. That is how frontier AI reaches the organizations that need it most.”
Sophos had already announced, on June 22, that it had joined the OpenAI Daybreak Cyber Partner Program. Sophos said it was applying OpenAI’s frontier cyber capabilities inside its products & services for more than 625,000 organizations.
[ALSO READ: Only 5% of Organizations Fully Trust Cybersecurity Vendors, Sophos Report Finds ]
MSPs are the focus
Sophos’s partner ecosystem includes more than 25,000 partners, among them over 7,000 MSPs. Those MSPs already understand customer environments and operate the workflows organizations rely on, which makes them the intended route for packaging frontier AI into security services.
Sophos is positioning OpenAI capabilities inside a partner-delivered system, where MSPs can build services on top of the platform rather than wire together separate tools.
Sophos Fusion matters here
Sophos Fusion is the platform layer that makes the partnership usable. Sophos described Fusion as a single open architecture in which every control point operates as one, whether native to Sophos or a third-party integration. Sophos says the system uses a shared context lake, synchronized security, agentic autonomy with human governance, and compounding intelligence from every threat it sees.
Fusion includes more than 500 third-party integrations, and its MDR operation resolves 52% of cases entirely by AI, with an average time from alert to fully automated response of 89 seconds. These figures are Sophos’ own.
What OpenAI is doing
OpenAI’s Daybreak program is the framework behind the partnership. According to OpenAI, Daybreak is meant to bring trusted, AI-powered cyber defense to more organizations through partners’ products, services and expertise.
The first use cases are around detection, investigation and response. MSPs will be able to use frontier AI inside Sophos Fusion to improve security services for customers. Sophos also points to Sophos AI Defense, which it says will give organizations visibility into how AI and shadow AI are used across their environment.
“Many of our clients are adopting AI at rapid speed, and they’re asking us how to stay secure while they do it,” said Alex Ryals, CISO & SVP at MicroAge, a Sophos partner based in Phoenix, AZ, USA. “Seeing a leader in security and a leader in AI commit to working together on exactly that challenge means we can offer a strong answer for our clients, and new services to grow on.”
[ALSO READ: Sophos Launches Identity Threat Detection and Response (ITDR) System to Combat Rising Credential-Based Attacks ]
Sophos is trying to turn frontier AI into a channel product. If the plan works, MSPs will be able to package AI-assisted detection, investigation and response into recurring services without building the model layer themselves.
