Sophos today announced that its industry-first vendor-agnostic Managed Detection and Response (MDR) service has grown its customer base by 33%. This is in the first six months since introducing the service’s ability to ingest and analyze telemetry from third-party security vendors. Already, Sophos MDR is processing more than 150 million alerts from nearly 30 other security providers.
Sophos has also added a new team of MDR experts in Germany to service the increasing demand in the German and European markets. This includes support the existing globally located MDR team that monitors and defends organizations 24/7/365. The service now protects more than 16,000 organizations worldwide and has been doubling in size year-over-year as the industry’s most widely used MDR offering.
Cyberattacks Are Moving Faster, Companies Are Turning To MDR To Keep Up
Cybercriminals are working faster and with fewer pauses. That shift is pushing companies to rethink how they defend themselves.
New analysis from Sophos shows that the time attackers spend inside networks before being detected. Dwell time has dropped sharply. The median is now 10 days, and just nine days for ransomware attacks. Attacks are also happening at all hours, no longer limited to nights or weekends. Company size or sector makes little difference.
This speed leaves defenders with less time to react. As a result, Managed Detection and Response [MDR] services are becoming a critical layer of cybersecurity. Especially as attackers use more complex and changing methods.
MDR providers combine technology with round-the-clock human expertise, helping organizations detect and stop threats that unfold in hours, not weeks. According to Sophos, demand for these services is rising as firms struggle with both growing cyber risk and a shortage of skilled security professionals.
Industry analysts agree. Research firm IDC says MDR adoption is accelerating as organizations look for practical ways to reduce risk without replacing all their existing security tools.
Sophos says its MDR service has seen rapid growth after adding the ability to analyze data from third-party security systems. It has given defenders a broader view of threats across different tools. The company reports processing large volumes of alerts from multiple vendors, helping teams respond faster and with more context.
As attacks become quicker and more relentless. Cybersecurity is shifting from tools alone to services that can act in real time. For many organizations, 24/7 managed defense is no longer optional it is becoming essential.
