Sophos cuts threat investigation time by 96% with OpenAI Daybreak
OpenAI has introduced 'Daybreak', a specialized tool integrated into Sophos Managed Detection and Response (MDR) workflows. This integration enables the automation of 52% of MDR cases and reduces threat investigation timelines by 96%.
Verified State Diff
Impact & Verification Analysis
Enterprise cybersecurity teams, Managed Detection and Response (MDR) providers, and security operations center (SOC) analysts.
It demonstrates the practical, high-impact application of LLMs in reducing 'mean time to respond' (MTTR) in critical infrastructure, setting a benchmark for AI-driven security automation.
Full Fact Overview
The announcement marks the formal introduction of 'Daybreak', an OpenAI-powered solution tailored for cybersecurity operations. By leveraging this model, Sophos has transitioned from manual, human-led threat analysis to an automated pipeline that handles over half of its MDR caseload. The system is designed to maintain human-in-the-loop oversight, ensuring that while the investigation speed is accelerated, final remediation decisions remain under human control. This represents a shift in how large language models are applied to high-stakes security telemetry, moving beyond general-purpose chat interfaces to domain-specific automated incident response.