Sophos Workspace Protection

Sophos Workspace Protection: Securing the Future of Hybrid Work

Sophos has officially introduced Sophos Workspace Protection, a new security solution designed to simplify protection for remote and hybrid work environments.

Instead of relying on multiple complex cloud security layers, Sophos brings several core protections together into a single platform centered around a hardened enterprise browser.

The solution is built to secure:

• Remote and hybrid employees
• Contractors and third parties
• Guest users
• The applications and data they access

At the same time, Sophos also wants to help organizations better manage modern challenges like SaaS sprawl, shadow IT, and the growing adoption of generative AI tools.

Sophos Workspace Protection: A Browser-Centric Security Approach

At the core of the platform is the new Sophos Protected Browser, a hardened Chromium-based browser specifically designed for enterprise security.

Instead of treating the browser as a vulnerability, Sophos transforms it into a central security enforcement point.

The browser includes several integrated protections such as:

• Web filtering
• Application usage control
• Exploit prevention
• Integrated Zero-Trust access
• Rich SSH and RDP support

This allows organizations to apply consistent security policies whether users are working from home, traveling, or connected to the corporate office.

Integrated Sophos ZTNA

Sophos has also fully integrated its Zero-Trust Network Access (ZTNA) technology into Workspace Protection.

The platform supports both lightweight-agent and agentless deployments, making it easier to secure unmanaged devices or temporary external users.

Additional capabilities include:

• Device posture assessment
• Sophos Security Heartbeat integration
• Secure application access without traditional VPN complexity

This approach helps organizations simplify remote access while maintaining strong visibility and control.

DNS Protection for Remote Devices

Workspace Protection also includes Sophos DNS Protection for Endpoints, extending protection across all applications, ports, and protocols for remote Windows devices.

Using DNS over HTTPS, Sophos improves both visibility and threat prevention by blocking malicious connections before they reach the endpoint.

For organizations with distributed teams, this adds an extra layer of protection outside the traditional corporate network.

Sophos Email Monitoring System (EMS)

Another component included in the platform is the Sophos Email Monitoring System (EMS) for Microsoft 365 and Google Workspace environments.

Rather than replacing existing email security solutions, EMS acts as an additional monitoring layer capable of:

• Monitoring email traffic
• Detecting phishing attempts
• Identifying malicious messages
• Providing additional security insights

Sophos also confirmed that EMS does not count toward Workspace Protection licensing calculations.

What Can It Do for Your Organization?

Beyond securing remote users, Sophos Workspace Protection enables several high-demand use cases:

✔ Safe GenAI Adoption

Control and monitor access to generative AI platforms while preventing data leakage.

✔ SaaS Application Control

Govern application usage and restrict shadow IT without deploying heavy cloud proxies.

✔ Secure Contractor and Guest Access

Quickly onboard and offboard external users, even on unmanaged devices.

Licensing Explained

Sophos keeps the licensing model relatively straightforward with a per-user structure.

Licensing is based on the highest user count across:

• Sophos Protected Browser
• Sophos ZTNA
• Sophos DNS Protection

For example, if an organization deploys DNS Protection for 100 users but only enables the full Workspace Protection suite for 50 employees, licensing will still be calculated on 100 users.

Sophos EMS remains excluded from these calculations.

Purchase Options

Sophos Workspace Protection is available:

• As a standalone solution
• As an add-on to existing Sophos products
• Bundled with Sophos Endpoint
• Through term subscriptions
• Via MSP Flex starting March 10, 2026

Sophos also announced a 30% introductory discount for customers purchasing Workspace Protection together with Sophos Firewall licenses, depending on regional availability.

Transition for Existing ZTNA Customers

Current Sophos ZTNA customers will automatically transition to Sophos Workspace Protection on February 28, 2026.

According to Sophos, the migration process is designed to be seamless, allowing customers to access the expanded functionality without requiring major infrastructure changes.

Final Thoughts

With Workspace Protection, Sophos is clearly moving toward a more modern and simplified approach to securing hybrid work environments.

By combining browser security, Zero-Trust access, DNS protection, and email monitoring into a single platform, Sophos aims to reduce architectural complexity while maintaining strong security controls for remote users.

For organizations navigating hybrid work, SaaS sprawl, contractor access, and GenAI governance, this release offers a practical and financially accessible alternative to traditional cloud security stacks.

For more details please feel free to contact us via [email protected]