Observed Signal · Oct 9, 2026 · Technical Release · Source: OpenAI Blog · Impact: 3/5 · Sentiment: Positive
Sophos Cuts Threat Response Time by 96% with OpenAI Daybreak
OpenAI's Daybreak program enables Sophos to significantly reduce threat investigation and response times using AI agents. By integrating OpenAI models with Sophos's threat intelligence and response playbooks, the average response time for cases using agents dropped from about 38 minutes to 89 seconds—a 96% reduction. Sophos now automates 52% of its Managed Detection and Response (MDR) cases end-to-end with AI, while maintaining human oversight through three operating modes: Notify, Collaborate, and Authorise. The initiative allows Sophos to scale compute rather than hiring additional cybersecurity staff, returning analysts' focus to complex threats. Key platforms include Sophos Fusion, which aggregates data from over 500 integrations. Sophos CTO John Peterson emphasizes the importance of agentic AI in staying ahead of attackers and advises other security leaders to prioritize security fundamentals.
Highlights a major enterprise adoption of generative AI for cybersecurity, demonstrating practical benefits of AI agents in a critical business function. Relevant to AdTech as it showcases AI-driven automation trends applicable across industries.
Track Sophos Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- Sophos reduced average threat response time from ~38 minutes to 89 seconds using OpenAI Daybreak agents.
- Sophos now automates 52% of MDR cases end-to-end with AI.
- Sophos Fusion integrates data from over 500 third-party sources.
- OpenAI's Daybreak program provides frontier AI models to security companies.
- Sophos protects over 625,000 organizations worldwide.
Connected Companies & Entities
2 Entities mapped“Sophos is one of the companies standing in their way, protecting more than 625,000 organisations across sectors and regions.”
“Through OpenAI Daybreak, Sophos is combining OpenAI models with its own threat intelligence, response playbooks and security expertise.”
Ontology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
OpenAI Daybreak speeds SentinelOne malware analysis from weeks to hours
OpenAI has announced Daybreak, a capability that enables SentinelOne to reverse engineer malware in about eight hours, down from four to six weeks. Gregor Stewart, Chief AI Officer at SentinelOne, says this allows researchers to investigate more threats and map the malware landscape, revealing connections between samples. The technology gives more team members access to expert-level cyber capabilities. SentinelOne plans to integrate OpenAI's cyber capabilities into code creation so developers can address security issues during development. The announcement highlights the growing role of AI in cybersecurity operations.
Block Uses OpenAI Daybreak for AI-Powered Security
Block, the company behind Square, Cash App, and Afterpay, is leveraging OpenAI's Daybreak model and the OpenAI Defense Factory to enhance its security operations. The AI-driven system automates vulnerability discovery, detection, and response, allowing Block's security team to handle tasks that previously took weeks in just hours. Key results include a 50% boost in triage throughput, a 50% increase in intelligence gathering, and significant time savings in investigations. The system also enables autonomous threat hunting and rapid patch generation, with a human-in-the-loop for validation. This case study highlights the practical application of advanced AI in enterprise security, demonstrating tangible efficiency gains and improved threat response capabilities.
Proofpoint Brings OpenAI GPT Cyber Models into Security Operations to Help Defenders Investigate Threats Faster
New Proofpoint SOC Analyst Agent combines Proofpoint security expertise with OpenAI Daybreak models to help analysts investigate threats, connect security signals and determine next steps through actionable findings
Receive all future signals for Sophos & competitors in your briefing
Never miss material M&A deals, leadership changes, account wins, or product rollouts. Polaris7 monitors 20,000+ primary sources 24/7, delivering verified telemetry directly into your executive briefing.