Sophos
British security vendor whose Sophos Central offers rule-based endpoint DLP and a separate e-mail Data Control policy
Quick Overview
| Company | Sophos Limited |
|---|---|
| Category | Data Loss Prevention Software |
| Headquarters | Abingdon, United Kingdom |
| Founded | Not stated |
| EU Presence | Yes - United Kingdom (Sophos Limited for customers outside the US, Canada and Latin America) |
| Data Location | Sophos Central, see vendor |
| Open Source | No |
| GDPR Compliant | Yes |
| Self-Hosting | No |
| Main Features | Content rules, file rules, regional templates, custom policies, confirm and block notifications, Sophos Email Data Control policy |
| Pricing | See website |
| Best For | Teams already managing endpoints and e-mail in Sophos Central |
| Replaces | Forcepoint DLP, Symantec DLP |
Detailed Review
Sophos treats DLP as a policy inside its management console rather than a separate product. The endpoint policy monitors and restricts transfers of files that contain sensitive data, and e-mail is handled by a different policy.
The end user terms name Sophos Limited as the contracting party for customers outside the US, Canada and Latin America, and its registered office is in Abingdon, UK.
Rules and templates
A rule has conditions and actions. Content rules check the whole file for protected data and file rules check only the file name or type. Templates give predefined rules by region, and custom policies can combine existing and new rules.
User messages
Two notifications can be customised, a confirmation prompt asking the user to approve a transfer and a block message, each up to 100 characters.
E-mail separately
The documentation points to Data Control policies in Sophos Email, described as preventing data being taken out of the organisation. Email deployment is through Sophos Mailflow for Microsoft 365 domains or Sophos Gateway for other systems.
Limitations to Consider
The documentation states the endpoint DLP policy is available for Windows devices only, so Mac and Linux endpoints are not covered.
Content rules scan the whole file and rules run in sequence, so scan time grows with file size and rule count. The docs do not list which destinations are monitored. Customers in the US, Canada and Latin America contract with Sophos Technology Limited instead. No DLP price or licence tier is published. Dedicated suites such as Safetica go further on classification.
Who Should Use Sophos
Organisations with Windows fleets that already use Sophos Central and want basic rule-based DLP without a new vendor.
Pros and Cons
Pros
- DLP inside the console you already use
- Content and file rule types
- Regional templates for fast start
- Custom confirm and block messages
- UK contracting entity for most customers
Cons
- Windows only
- Rule evaluation affects transfer speed
- Monitored destinations not documented
- No published licence or price for DLP
Alternatives to Sophos
Other European data loss prevention software worth comparing before you decide:
Safetica
Czech Republic · Data loss prevention and insider risk in one console
Acronis
Switzerland · Behaviour-based DLP added to a backup and security platform
Darktrace
United Kingdom · Label-free outbound email DLP that reads sending context
Matrix42
Germany · Endpoint Data Protection with device control and encryption
See all European data loss prevention software or compare them directly against Forcepoint DLP on our alternatives page.
Frequently Asked Questions
The documentation says the Data Loss Prevention policy is available for Windows devices only.
Through Data Control policies in Sophos Email, which is separate from the endpoint DLP policy.
The end user terms name Sophos Limited for customers outside the US, Canada and Latin America, and Sophos Technology Limited for those regions.