A New Approach to Hybrid Work Security
Traditional methods of securing hybrid work often involve deploying multiple cloud-based SASE (Secure Access Service Edge) and SSE (Security Service Edge) tools. While these models can be effective, they typically require significant infrastructure, specialized expertise, and ongoing operational overhead. Even then, organizations can still face gaps in visibility and control—especially as work increasingly happens outside the corporate network.
Sophos Workspace Protection aims to address those challenges by securing the workspace itself, reducing the need to backhaul traffic through centralized systems. The result is a solution that is easier to deploy and manage, while still delivering the protections organizations need to safeguard users, applications, and data wherever work takes place.
Built Around the Browser—Where Modern Work Happens
At the center of the new offering is the Sophos Protected Browser, powered by Island and integrated into the Sophos Central platform. With an estimated 85% of modern work occurring within web browsers, Sophos developed the Protected Browser to meet security needs directly at the workspace level.
The browser provides:
- Visibility and control over application use
- Data protection and policy enforcement
- Integrated access controls for both corporate and remote environments
By embedding security into a familiar user experience, Sophos Workspace Protection aims to protect users without disrupting productivity.
Managing Shadow IT and the Rise of AI
As generative AI and other emerging technologies become embedded in everyday workflows, organizations are struggling to understand how these tools are being used and what data is being shared. Recent research indicates that more than half of employees now use AI tools at work—often before formal policies or controls are in place—creating new risks around Shadow IT and Shadow AI.
Sophos Workspace Protection provides organizations with the visibility needed to identify risky behavior and enforce policies governing AI usage across hybrid teams.
What’s Included in Sophos Workspace Protection
The solution is delivered as a flexible set of integrated components that can be deployed together or individually:
- Sophos Protected Browser: A secure Chromium-based enterprise browser offering web filtering, application control, data protection, and integrated ZTNA for private app access. It also supports SSH and RDP for remote administration.
- Sophos ZTNA: Provides secure, posture-based access to private applications, ensuring only authorized users and compliant devices can connect.
- Sophos DNS Protection: A cloud-delivered DNS security service for Windows endpoints, blocking malicious or unwanted domains.
- Email Monitoring System: An add-on for Google or Microsoft email services that enhances phishing detection and blocks malicious messages.
Together, these components help organizations secure hybrid work environments and better manage the use of new technologies.
Leadership Perspective
“Security teams are increasingly impacted by complexity, especially as hybrid work, SaaS adoption, and AI tools continue to expand the workspace,” said Mike Jude, Research Director at IDC. He described Sophos Workspace Protection as a “pragmatic shift,” delivering core SASE and SSE outcomes through a simpler, browser-centric approach.
Sophos CEO Joe Levy emphasized the need for stronger governance in modern work environments, noting that many existing solutions add complexity without fully closing visibility gaps. Island CEO Mike Fey added that the browser-based approach helps organizations safely embrace AI while maintaining security and productivity.
Key Benefits for Organizations
Sophos Workspace Protection is designed to help organizations:
- Secure distributed and hybrid workers
- Govern AI and emerging tool usage
- Support secure access for contractors and partners
- Strengthen defenses against phishing and browser-based attacks
Sophos Workspace Protection will be available to customers and partners starting in February 2026.