How Sophos Uses OpenAI Agents to Accelerate MDR Operations

Sophos CTO John Peterson discusses how OpenAI models and in-house agents help automate parts of managed detection and response (MDR) investigations. He describes the workflow, its reported effect on response times, and how the Daybreak program supports further security work.

- Sophos’s cybersecurity and MDR operations
- Agent workflow: customer and threat context, planning, execution, and monitoring
- Reported response-time change and Daybreak’s role in exploring product vulnerabilities and agent design

For cybersecurity and security operations professionals, this offers an overview of Sophos’s approach and a concrete example of applying AI to investigation workflows. Viewers can use it as a starting point for considering where automation might fit in their own security operations; it does not provide implementation instructions or a broad survey of AI security tools.