Sophos cuts cyber threat investigation time by 96% with OpenAI Daybreak
Cybersecurity firm Sophos has reduced its cyber threat investigation time by 96% using OpenAI's security model, Daybreak. Concurrently, over half of all security cases are now being automated.
What happened?
Cybersecurity company Sophos has integrated OpenAI’s specialised security model, Daybreak, into its Managed Detection and Response (MDR) services. The implementation has cut average cyber threat investigation time by 96%. Furthermore, Sophos is now able to automate 52% of its MDR cases without compromising human oversight.
Key facts
| Minskning av utredningstid | 96% |
|---|---|
| Automatisering av MDR-fall | 52% |
| AI-modell | OpenAI Daybreak |
Why it matters
Security teams are facing increasing volumes of alerts and more complex cyberattacks. By automating more than half of all cases and drastically reducing investigation times, resources are freed up for in-depth analysis of sophisticated threats. Models like Daybreak demonstrate how generative AI is shifting from general-purpose chatbots to specialised domain tools for cybersecurity.
Who is affected?
The initiative primarily affects security analysts, IT departments, and businesses that use Sophos MDR services for cyber protection. Developers and security firms building on the OpenAI ecosystem gain access to tools that streamline routine threat management.
Impact on the EU
OpenAI's cybersecurity models are made available to companies and security partners in the EU under existing data protection regulations such as GDPR. Models like Daybreak are also distributed via cloud platforms such as Amazon Bedrock and Cloudflare, which facilitates compliance with European security requirements.
What else you should know
In addition to Sophos, companies such as Cloudflare and Elastic have announced integrations with OpenAI’s Daybreak network. Models such as GPT-5.6 Cyber are used for vulnerability analysis, incident management, and code review within authorised environments.
Quick answers about this story
Vad har hänt?
När hände det?
Varför spelar det roll?
Påverkar det EU?
The link opens in a new window and leads to the publisher's own site.
Källan har spårats automatiskt från utgivaren via Aheadlines signalkedja.
AI-verktyg i artikeln
Topics
Get similar news straight to your inbox
The reader's room
Send in a question or an addition. The newsroom reads everything before it's published and replies when relevant. No AI-generated text – just people.
Sign in to submit a comment or question.
Read the article through your role
- Decide whether this affects strategy over 6–12 months or is just noise.
- Discuss with leadership: do we own the right question or does ownership need to move?
- Ask: what risk are we taking by NOT acting on this this quarter?
Generated angle — not editorial analysis of "Sophos cuts cyber threat investigation time by 96% with Open"