Sophos launches agentic AI tool to prioritise security spending

Sophos has launched Sophos CISO Advantage, an agentic AI-enabled service that links security operations to security strategy. It assesses an organisation’s environment, maps controls against frameworks including NIST CSF, CIS v8, Cyber Essentials Plus and NCSC CAF, and produces a prioritised, budget-aligned roadmap of what to fix first, what it costs and why it matters to the business.

The company said the offering is part of Sophos Fusion, so each assessment draws on live threat intelligence and insight from more than 625,000 Sophos-defended organisations rather than generic benchmarks. Sophos argues the gap it addresses is a shortage of security leadership: it cites an estimated 35,000 CISOs serving 359 million businesses worldwide, and its 2026 MSP Perspectives Report finding that 46% of customers now look to their MSP to act as their CISO.

Sophos said customers can run the programme in-house, start with an MSP partner and later bring it in-house, or take it as a continuous managed service through a partner. Rob Harrison, SVP of product management at Sophos, said the tool is built around the question boards are asking: whether the organisation is safer than it was last quarter, and whether that can be proved.