SOC.OS

SOC.OS, founded in 2019 and based in Milton Keynes, England, developed an alert correlation and triage automation tool to tackle cybersecurity challenges such as alert fatigue and limited threat visibility. The company was acquired by Sophos in April 2022, and its technology has been integrated into Sophos managed detection and response (MDR) offerings. Although the original corporate entity was dissolved in July 2024, its operations continue under Sophos.

SOC.OS specialized in automated alert enrichment, correlation, and prioritization, which helps security teams streamline threat detection by reducing noise from multiple security tools. Its platform aimed to enhance incident response efficiency by contextualizing alerts and identifying genuine threats. Following the acquisition, its capabilities are expected to strengthen Sophos MDR services, which include 24/7 threat monitoring, endpoint protection, and network security solutions.