Rubrik and Sophos have announced a strategic partnership to provide Sophos M365 Backup and Recovery Powered by Rubrik. This marks the first Managed Detection and Response (MDR)-optimized Microsoft 365 backup and recovery solution fully integrated into Sophos Central, Sophos’ security operations platform. Designed to support IT and cybersecurity teams, the new offering will provide a unified global platform to enhance cyber resilience against ransomware, account compromise, insider threats, and data loss in SharePoint, Exchange, OneDrive, and Teams.
“We are reshaping what it means to stay operational in a world shaped by constant digital disruption,” said Joe Levy, CEO, Sophos. “This is the future of cyber resilience: an intelligent, adaptive partnership that ensures organizations remain secure, responsive, and uninterrupted. By combining Sophos’ prevention-first approach with Rubrik’s unwavering recovery capabilities, we empower businesses to withstand attacks and maintain continuity, even under pressure.”
Sophos will offer a powerful new add-on solution for its more than 75,000 MDR and XDR customers—enabling fast, secure recovery of critical Microsoft 365 data in the event of accidental deletion or malicious compromise. This solution integrates Rubrik’s industry-leading SaaS-based protection directly into the trusted Sophos Central platform, giving organizations the flexibility to enhance their existing security operations with robust data recovery capabilities. The Sophos Central platform integrates over 350 different telemetry sources across endpoint, cloud, network, identity, email and business applications. The platform leverages deep learning, custom LLMs, and frontier models to detect and respond to threats across the entire attack surface, enhancing defense effectiveness.
“The reality of today’s threat landscape demands a holistic approach to cyber resilience,” said Bipul Sinha, CEO, Chairman, and Co-founder of Rubrik. “With AI-enabled attacks and sophisticated breaches on the rise, organizations need more than just prevention; they need the ability to recover rapidly and reliably. Our partnership with Sophos delivers this critical capability directly within a platform security teams already use and trust, raising the bar for Microsoft 365 resilience.”
The Evolving Threat Landscape
According to The State of Ransomware report by Sophos, nearly half of organizations impacted by ransomware chose to pay the ransom to recover their data. Despite this, only 54% of affected companies relied on backups for data restoration, highlighting a continued gap in effective cyber resilience practices.
Recent research highlights the urgent need for robust Microsoft 365 data protection: 60% of Microsoft 365 tenants have experienced account takeovers, a frequent launchpad for lateral movement within an organization, and 81% have encountered email compromise. When global admin credentials are compromised, attackers can manipulate retention settings and permanently delete critical business data. Existing tools were not designed for comprehensive, large-scale recovery, which requires speed, granularity, and reliability for rapid restoration.
Sophos MDR and XDR customers will benefit from:
- Secure, immutable backups: Rubrik will isolate Microsoft 365 backups with air-gapped storage, WORM locks, and customer-held encryption keys. Multifactor authentication and data lock prevent tampering—even with compromised credentials.
- Fast, flexible recovery: Customers will be able to restore Microsoft 365 emails, OneDrives, SharePoint sites, Teams channels, and more to original or alternate users, including inactive accounts.
- Automated protection: Rubrik will automatically discover Microsoft 365 users, sites, and mailboxes, applies Entra ID-based policies, and supports delegated admin – all integrated with Sophos Central to reduce manual effort.
- Unified experience: Microsoft 365 protection and security operations will be managed via Sophos Central with no extra tools.
Rubrik and Sophos’ shared commitment to helping organizations operate with confidence in the face of risk, will provide Sophos customers and partners with a powerful solution to recover with speed and precision when threats inevitably break through.
This offering will be available through Sophos’ channel partner network in the coming months.
