Sophos Integrates OpenAI Daybreak Model to Cut Threat Investigation Time by 96%

On October 9, OpenAI disclosed that cybersecurity provider Sophos has integrated with its Daybreak project model. By deploying AI agents, Sophos reduced the average response time to security incidents from approximately 38 minutes to 89 seconds, cut investigation time by 96%, and achieved end-to-end automation for 52% of managed detection and response (MDR) cases.

Built on the Sophos Fusion security defense platform, this collaboration processes trillions of events daily from over 500 third-party integrations, filtering them down to 1,000–2,000 cases assigned to security operations centers (SOCs). Following integration with Daybreak, investigative agents are tasked with collecting indicators of compromise (IoCs) and threat intelligence. Planning models generate response recommendations via a "plan-execute-review" loop, while human oversight remains required for critical decisions and potentially disruptive actions.