shouldiuse.io

VERDICT

Should I use Sophos?

Skip to Content - sophos.com

Depends. Buy if you're an MSP or mid-market IT team wanting G2-top-rated endpoint, firewall, and MDR under one console. Skip if you're a solo user or small team that needs transparent pricing and responsive support.

Confidence

Medium. Based on ~50 public sources; many review snippets were truncated, so rating shown as 4+.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

Free / Premium paid

Sophos Home

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Intercept X / EndpointQuote only
MDR / XDRQuote only
XGS FirewallHardware + subscription

Best for

  • MSPs managing many client tenants
  • Mid-market IT teams (100–1,000 seats)
  • Companies wanting MDR without building a SOC
  • Estates needing endpoint + firewall in one console

Not for

  • Solo users — business tiers are overkill; use free AV
  • Small teams wanting self-serve, transparent pricing
  • Buyers who need fast, reliable vendor support
  • Anyone unwilling to buy through an MSP

Gotchas - check before you buy

high

MSPs on Reddit report confusing MDR quotes mixing per-user and per-server pricing

high

Support quality is the recurring complaint on Trustpilot and r/sophos

medium

Firewall has had pre-auth SQL injection and firmware RCE bugs; patch fast

medium

Thoma Bravo-owned and reportedly refinancing debt; expect pricing and bundling pressure

Pros and cons

Pros

  • Endpoint, firewall, MDR and XDR all ranked #1 overall in G2's Fall 2025 report
  • MDR is the #1 rated MDR service by G2 peer reviews
  • 2,646 G2 reviews averaging 4+
  • Cloud-managed products praised for performance
  • MDR Plus includes a Breach Protection Warranty

Cons

  • No published pricing; nearly everything is quote-based
  • Trustpilot reviewers call the company 'serious trash'
  • Reddit threads cite terrible customer service
  • 173 public CVEs including firewall firmware RCE
  • Sophos itself has suffered data breaches

Sources & method

Analyzed 9/27/2026 - 12 sources - Mature vendor with strong threat research, but 173 catalogued CVEs, firewall RCE, and its own data breaches.

official x1review x6security x3news x2
  • CVE-2025-7382 — Sophos Firewall firmware RCE, Remote code execution in firewall firmware.
  • Sophos Endpoint local privilege escalation, Multiple vulnerabilities resolved via July 2025 advisory (SA-20250717).
  • CVE-2020-12271 — XG Firewall pre-auth SQL injection, Pre-auth SQL injection in Sophos XG Firewall, analyzed by Rapid7.
  • Sophos suffered its own data breach, A small subset of customers was affected, per CISOmag.

Key stats

  • Value for money: 3/5

    Rating

  • Free / Premium paid

    Starting price

  • 12

    Sources

  • Analyzed

  • Value for money: 3/5. Quote-only pricing; MSPs report confusing quotes
  • Ease of use: 4/5. Cloud-managed console praised in reviews
  • Feature depth: 5/5. Endpoint, firewall, XDR, MDR, managed risk all in-house
  • Support quality: 2/5. Loudest complaint across Trustpilot and Reddit
  • Security posture: 3/5. Strong research; 173 CVEs and self-breaches
  • 4+/5 G2 seller rating 2,646 reviews
  • 1985 Founded UK-based, PE-owned
  • Yes Free tier Sophos Home; business is quote-only
  • 173 Public CVEs catalogued by OpenCVE

Pricing

Sophos Home

Free / Premium paid

  • Personal device antivirus
  • Cloud-managed; Premium adds extras

Intercept X / Endpoint

Quote only

  • Per-user licensing
  • Sold via partners and MSPs

MDR / XDR

Quote only

  • 24/7 managed detection
  • Per-user plus per-server pricing

XGS Firewall

Hardware + subscription

  • Appliance plus licensing
  • Site offers 'simple pricing' selector

Security

Mature vendor with strong threat research, but 173 catalogued CVEs, firewall RCE, and its own data breaches.

  • CVE-2025-7382 — Sophos Firewall firmware RCERemote code execution in firewall firmware.⁷
  • Sophos Endpoint local privilege escalationMultiple vulnerabilities resolved via July 2025 advisory (SA-20250717).
  • CVE-2020-12271 — XG Firewall pre-auth SQL injectionPre-auth SQL injection in Sophos XG Firewall, analyzed by Rapid7.⁸
  • Sophos suffered its own data breachA small subset of customers was affected, per CISOmag.⁹

What users say

Detection and centralized management earn praise, while support quality and opaque pricing are the loudest complaints.

“Serious trash.”
Trustpilot reviewer
“Am I just being a little too paranoid? Or is Sophos just that ...”
Reddit, r/sysadmin
“Excellent malware protec...”
Reddit, r/antivirus

Alternatives

Compare Sophos with each alternative.

  • Microsoft Defender for Business

    Bundled with Microsoft 365; simplest option for small teams

  • Bitdefender

    Strong AV with transparent consumer and SMB pricing

    Sophos vs Bitdefender

  • Cynet

    All-in-one platform with published pricing; lean-team friendly

  • CrowdStrike Falcon

    Premium EDR for teams prioritizing detection over cost

Companies that use it

  • Advance2000
  • F5
Full analysis

Based on ~50 public sources; many review snippets were truncated, so rating shown as 4+.

Top-rated security stack for mid-market and MSPs; quote-only pricing, shaky support — overkill for solo users.

Methodology

Based on ~50 public sources; many review snippets were truncated, so rating shown as 4+.

Sources

  1. Sophos Products — 2,646 G2 reviewsg2.com
    review
  2. PCMag: Sophos Home Premium Reviewpcmag.com
    review
  3. Trustpilot reviews of sophos.comtrustpilot.com
    review
  4. Reddit: Considering move to Sophosreddit.com
    review
  5. Reddit r/msp: Sophos MDR pricing quotereddit.com
    review
  6. OpenCVE: Sophos CVEs (173)app.opencve.io
    security
  7. CVE-2025-7382 Sophos Firewall RCEsentinelone.com
    security
  8. Rapid7: Sophos XG pre-auth SQL injectionrapid7.com
    security
  9. CISOmag: Sophos data breachcisomag.com
    news
  10. eSecurityPlanet: Sophos XGS reviewesecurityplanet.com
    review
  11. AV-Comparatives: Sophos vendor page (founded 1985)av-comparatives.org
    official
  12. Octus: Thoma Bravo-backed Sophos debt refinancingoctus.com
    news

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.