shouldiuse.io

Categories

VERDICT

Sophos Review

Depends

Should I use Sophos?

Skip to Content - sophos.com

· 2 weeks ago

Buy if you're an MSP or mid-market IT team wanting G2-top-rated endpoint, firewall, and MDR under one console. Skip if you're a solo user or small team that needs transparent pricing and responsive support.

Confidence

Medium. Based on ~50 public sources; many review snippets were truncated, so rating shown as 4+.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

Free / Premium paid

Sophos Home

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Intercept X / EndpointQuote only
MDR / XDRQuote only
XGS FirewallHardware + subscription

Best for

  • MSPs managing many client tenants
  • Mid-market IT teams (100–1,000 seats)
  • Companies wanting MDR without building a SOC
  • Estates needing endpoint + firewall in one console

Not for

  • Solo users — business tiers are overkill; use free AV
  • Small teams wanting self-serve, transparent pricing
  • Buyers who need fast, reliable vendor support
  • Anyone unwilling to buy through an MSP

Gotchas - check before you buy

high

MSPs on Reddit report confusing MDR quotes mixing per-user and per-server pricing

high

Support quality is the recurring complaint on Trustpilot and r/sophos

medium

Firewall has had pre-auth SQL injection and firmware RCE bugs; patch fast

medium

Thoma Bravo-owned and reportedly refinancing debt; expect pricing and bundling pressure

Pros and cons

Pros

  • Endpoint, firewall, MDR and XDR all ranked #1 overall in G2's Fall 2025 report
  • MDR is the #1 rated MDR service by G2 peer reviews
  • 2,646 G2 reviews averaging 4+
  • Cloud-managed products praised for performance
  • MDR Plus includes a Breach Protection Warranty

Cons

  • No published pricing; nearly everything is quote-based
  • Trustpilot reviewers call the company 'serious trash'
  • Reddit threads cite terrible customer service
  • 173 public CVEs including firewall firmware RCE
  • Sophos itself has suffered data breaches

Sources & method

- 12 sources - Mature vendor with strong threat research, but 173 catalogued CVEs, firewall RCE, and its own data breaches.

official x1review x6security x3news x2
  • CVE-2025-7382 — Sophos Firewall firmware RCE, Remote code execution in firewall firmware.
  • Sophos Endpoint local privilege escalation, Multiple vulnerabilities resolved via July 2025 advisory (SA-20250717).
  • CVE-2020-12271 — XG Firewall pre-auth SQL injection, Pre-auth SQL injection in Sophos XG Firewall, analyzed by Rapid7.
  • Sophos suffered its own data breach, A small subset of customers was affected, per CISOmag.

Key stats

  • Value for money: 3/5

    Rating

  • Free / Premium paid

    Starting price

  • 12

    Sources

  • Analyzed

  • Value for money: 3/5. Quote-only pricing; MSPs report confusing quotes
  • Ease of use: 4/5. Cloud-managed console praised in reviews
  • Feature depth: 5/5. Endpoint, firewall, XDR, MDR, managed risk all in-house
  • Support quality: 2/5. Loudest complaint across Trustpilot and Reddit
  • Security posture: 3/5. Strong research; 173 CVEs and self-breaches
  • 4+/5 G2 seller rating 2,646 reviews
  • 1985 Founded UK-based, PE-owned
  • Yes Free tier Sophos Home; business is quote-only
  • 173 Public CVEs catalogued by OpenCVE

Pricing

Sophos Home

Free / Premium paid

  • Personal device antivirus
  • Cloud-managed; Premium adds extras

Intercept X / Endpoint

Quote only

  • Per-user licensing
  • Sold via partners and MSPs

MDR / XDR

Quote only

  • 24/7 managed detection
  • Per-user plus per-server pricing

XGS Firewall

Hardware + subscription

  • Appliance plus licensing
  • Site offers 'simple pricing' selector

Security

Mature vendor with strong threat research, but 173 catalogued CVEs, firewall RCE, and its own data breaches.

  • CVE-2025-7382 — Sophos Firewall firmware RCERemote code execution in firewall firmware.⁷
  • Sophos Endpoint local privilege escalationMultiple vulnerabilities resolved via July 2025 advisory (SA-20250717).
  • CVE-2020-12271 — XG Firewall pre-auth SQL injectionPre-auth SQL injection in Sophos XG Firewall, analyzed by Rapid7.⁸
  • Sophos suffered its own data breachA small subset of customers was affected, per CISOmag.⁹

What users say

Detection and centralized management earn praise, while support quality and opaque pricing are the loudest complaints.

“Serious trash.”
Trustpilot reviewer
“Am I just being a little too paranoid? Or is Sophos just that ...”
Reddit, r/sysadmin
“Excellent malware protec...”
Reddit, r/antivirus

Alternatives

Compare Sophos with each alternative.

  • Microsoft Defender for Business

    Bundled with Microsoft 365; simplest option for small teams

  • Bitdefender

    Strong AV with transparent consumer and SMB pricing

    Sophos vs Bitdefender

  • Cynet

    All-in-one platform with published pricing; lean-team friendly

  • CrowdStrike Falcon

    Premium EDR for teams prioritizing detection over cost

Companies that use it

  • Advance2000
  • F5
Full analysis

Based on ~50 public sources; many review snippets were truncated, so rating shown as 4+.

Top-rated security stack for mid-market and MSPs; quote-only pricing, shaky support — overkill for solo users.

Methodology

Based on ~50 public sources; many review snippets were truncated, so rating shown as 4+.

Read how a report is made.

Sources

  1. Sophos Products — 2,646 G2 reviewsg2.com
    review
  2. PCMag: Sophos Home Premium Reviewpcmag.com
    review
  3. Trustpilot reviews of sophos.comtrustpilot.com
    review
  4. Reddit: Considering move to Sophosreddit.com
    review
  5. Reddit r/msp: Sophos MDR pricing quotereddit.com
    review
  6. OpenCVE: Sophos CVEs (173)app.opencve.io
    security
  7. CVE-2025-7382 Sophos Firewall RCEsentinelone.com
    security
  8. Rapid7: Sophos XG pre-auth SQL injectionrapid7.com
    security
  9. CISOmag: Sophos data breachcisomag.com
    news
  10. eSecurityPlanet: Sophos XGS reviewesecurityplanet.com
    review
  11. AV-Comparatives: Sophos vendor page (founded 1985)av-comparatives.org
    official
  12. Octus: Thoma Bravo-backed Sophos debt refinancingoctus.com
    news

Add this review to your site

This check for Sophos says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends Sophos Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.