Sophos enhances Cloud Optix to simplify detection and response of AWS security incidents
Sophos has unveiled advancements to Sophos Cloud Optix that automate and simplify the detection and response of security incidents across Amazon Web Services infrastructure.
Powered by new machine learning models from SophosAI, the Sophos Cloud Optix cloud security posture management solution now continuously analyses AWS CloudTrail to build a picture of individual user activity. It brings AWS CloudTrail events to life in a clear and detailed timeline view of user activities, high risk anomalies and security and compliance incidents across all AWS accounts with remediation guidance for security teams.
"Sorting through and making sense of potentially thousands of user activity events to identify suspicious activity used to be near impossible," says Scott Barlow, Sophos vice president of global MSP and cloud alliances.
"Sophos is transforming this resource intensive process, giving security teams the answers they need with the click of a button," he says.
"Security teams can instantly pinpoint unusual activity such as actions not previously taken by a user or actions being performed outside of normal business hours, for example and focus their investigations on the most high-risk alerts with confidence."
Accelerate with AWS, Secure with Sophos Cloud Optix
Sophos Cloud Optix provides unmatched visibility into risky blind spots. It secures AWS and other cloud workloads against advanced threats and cloud environment misconfigurations, and is easily managed in the cloud-based Sophos Central platform alongside Sophos entire portfolio of next-generation cybersecurity solutions and services.
Sophos Cloud Optix offers extensive AWS security service integrations including integration with the new Amazon Inspector. Sophos Cloud Optix also integrates with AWS Security Hub, Amazon GuardDuty, AWS CloudTrail, Amazon Macie, AWS Systems Manager and Patch Manager, AWS Firewall Manager, AWS IAM Access Analyzer, Amazon Detective, and Amazon Elastic File System.
As an AWS Level 1 Managed Security Service Provider Competency program partner, Sophos unique threat protection, monitoring and response package fulfils a critical market need for managed security services, validated by AWS. Now available on AWS Marketplace, the package fuses automated protection and 24/7 managed threat response into a single, comprehensive offering.
Designed specifically for AWS customers, the offering combines cloud security posture management; endpoint, cloud workload and network security; vulnerability scanning; inventory visibility; and compliance tracking. Organisations further benefit with a dedicated 24/7 Sophos Managed Threat Response security team that monitors AWS environments and responds to neutralise threats and in-progress attacks.
Sophos is a specialist in next-generation cybersecurity, protecting more than 500,000 organisations and millions of consumers in more than 150 countries from advanced cyberthreats. Powered by threat intelligence, AI and machine learning from SophosLabs and SophosAI, Sophos delivers a broad portfolio of advanced products and services to secure users, networks and endpoints against ransomware, malware, exploits, phishing and the wide range of other cyberattacks.
