Sophos Reviews, Ratings & Features 2026 | Gartner Peer Insights

The SACBT market is characterized by vendor offerings that include one or more of the following capabilities:
1. Ready-to-use training and educational content.
2. Employee testing and knowledge checks.
3. Availability in multiple languages, natively or through subtitling or partial translation (in many cases, language support is diverse and localized).
4. Phishing and other social engineering attack simulations.
5. Platform and awareness analytics to help measure the efficacy of the awareness program.
Training modules are available as cloud-hosted SaaS applications or on-premises deployments via client-managed learning management systems (LMSs), and also support the Sharable Content Object Reference Model (SCORM) standard, enabling integration with corporate LMSs.

Active

Find the top Security Awareness Training Software with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Security Awareness Computer-Based Training

Sophos Phish Threat

Sophos

IT SECURITY & RISK MANAGEMENT ASSOCIATE

Solución avanzada de simulación de ataques de phishing y formación de concienciación sobre ciberseguridad, diseñada para fortalecer el factor: "firewall humano".

Advanced phishing attack simulation and cybersecurity awareness training solution, designed to strengthen the human firewall factor.

50M - 250M USD

<50M USD

500M - 1B USD

Gov't/PS/ED <5,000 Employees

250M - 500M USD

1B - 3B USD

3B - 10B USD

30B + USD

10B - 30B USD

Gov't/PS/ED 5,000 - 50,000 Employees

I must say I am a bit disappointed into this solution. Not because it is providing what you need, but the setup is very limited. You are only able to select the templates. Add the users and now you have to even verify to domain at first which wasn't the case beforehand. We had to create our own script to deploy whitelisting and configuration as it was not entirely provided by Sophos. Besides that when you finalize a campaign you must select a date that is 1 month later than the start date. And you cannot select which templates to send to which users. This is randomly done by Sophos itself. This forces you to make multiple campaigns if you want users to receive multiple emails to trick them into clicking on phishing links. 

Sophos Phish Threat has proven to be a great asset in our IT training toolbelt. The provided templates are convincing and well done. You can also tweak them or create your own in order to better fit your organization. The training modules are straightforward and range from quick 'tips' to detailed explanations.

PhishLabs

KnowBe4

Barracuda

Broadcom (Symantec)

Rapid7

Kaspersky

Mimecast

Other...

SANS Institute

Proofpoint (Wombat Security)

Cybrary

LevelBlue

Barracuda Networks (PhishLine)

Cofense

Proofpoint

KnowBe4 (The Security Awareness Company)

Infosec

SecureNinja

TitanHQ (Cyber Risk Aware)

PhishingBox

OpenText (Webroot)

Digital Defense

Global Learning Systems

KnowBe4 (MediaPRO)

Popcorn Training

Terranova Security

Bitdefender

WithSecure

Aujas

Sophos is a global provider of advanced cybersecurity solutions. Their main focus is the delivery of an extensive range of security technologies including Managed Detection and Response (MDR), incident response services, as well as endpoint, network, email, and cloud security systems. These products and services are designed to help organizations combat various cyber threats such as active adversaries, ransomware, phishing, and malware. The company offers fully-managed, turnkey security solutions, providing cybersecurity-as-a-service to organizations worldwide. Moreover, Sophos hosts a cloud-based management console, known as Sophos Central, and supports the Sophos X-Ops, a cross-domain threat intelligence unit. The unit enriches the Sophos Adaptive Cybersecurity Ecosystem by optimizing its centralized data lake with a powerful set of open APIs. Sophos' operations are globally distributed and the company's headquarters are in Oxford, U.K.

Cybersecurity as a Service.

Sophos is a worldwide leader and innovator of advanced cybersecurity solutions, including Managed Detection and Response (MDR) and incident response services and a broad portfolio of endpoint, network, email, and cloud security technologies that help organizations defeat cyberattacks. 

As one of the largest pure-play cybersecurity providers, Sophos defends more than 500,000 organizations and more than 100 million users globally from active adversaries, ransomware, phishing, malware, and more. 

Sophos‚Äô services and products connect through‚ÄØits‚ÄØcloud-based Sophos Central management console and are powered by‚ÄØSophos X-Ops, the company‚Äôs cross-domain threat intelligence unit. Sophos X-Ops intelligence optimizes the entire Sophos Adaptive Cybersecurity Ecosystem, which includes a centralized data lake that leverages a rich set of open APIs available to customers, partners, developers, and other cybersecurity and information technology vendors. 

Sophos provides cybersecurity-as-a-service to organizations needing fully-managed, turnkey security solutions. Customers can also manage their cybersecurity directly with Sophos‚Äô security operations platform or use a hybrid approach by supplementing their in-house teams with Sophos‚Äô services, including threat hunting and remediation. 

Sophos sells through reseller partners and managed service providers (MSPs) worldwide. 

Sophos is headquartered in Oxford, U.K. More information is available at www.sophos.com

Reviews

Ratings Overview

Overall experience with

Favorable Review

Straightforward and professional phish training fit for any organization

Critical Review

Sophos Phish Threat: Does their job, but unfortunately has major limitations...

Likes and dislikes about

likes

dislikes