Rubrik and Sophos have announced a strategic partnership to provide Sophos M365 Backup and Recovery Powered by Rubrik, marking the first Managed Detection and Response (MDR)-optimized Microsoft 365 backup and recovery solution fully integrated into Sophos Central, Sophos’ security operations platform.

Designed to support IT and cybersecurity teams, the new offering will provide a unified global platform to enhance cyber resilience against ransomware, account compromise, insider threats, and data loss in SharePoint, Exchange, OneDrive, and Teams.

“We are reshaping what it means to stay operational in a world shaped by constant digital disruption,” said Joe Levy, CEO, Sophos. “This is the future of cyber resilience: an intelligent, adaptive partnership that ensures organizations remain secure, responsive, and uninterrupted. By combining Sophos’ prevention-first approach with Rubrik’s unwavering recovery capabilities, we empower businesses to withstand attacks and maintain continuity, even under pressure.”

Sophos will offer a powerful new add-on solution for its more than 75,000 MDR and XDR customers—enabling fast, secure recovery of critical Microsoft 365 data in the event of accidental deletion or malicious compromise. This solution integrates Rubrik’s industry-leading SaaS-based protection directly into the trusted Sophos Central platform, giving organizations the flexibility to enhance their existing security operations with robust data recovery capabilities. The Sophos Central platform integrates over 350 different telemetry sources across endpoint, cloud, network, identity, email, and business applications. The platform leverages deep learning, custom LLMs, and frontier models to detect and respond to threats across the entire attack surface, enhancing defense effectiveness.

“The reality of today’s threat landscape demands a holistic approach to cyber resilience,” said Bipul Sinha, CEO, Chairman, and Co-founder of Rubrik. “With AI-enabled attacks and sophisticated breaches on the rise, organizations need more than just prevention; they need the ability to recover rapidly and reliably. Our partnership with Sophos delivers this critical capability directly within a platform security teams already use and trust, raising the bar for Microsoft 365 resilience.”

According to The State of Ransomware report by Sophos, nearly half of organizations impacted by ransomware chose to pay the ransom to recover their data. Despite this, only 54% of affected companies relied on backups for data restoration, highlighting a continued gap in effective cyber resilience practices.

Recent research highlights the urgent need for robust Microsoft 365 data protection: 60% of Microsoft 365 tenants have experienced account takeovers, a frequent launchpad for lateral movement within an organization, and 81% have encountered email compromise. When global admin credentials are compromised, attackers can manipulate retention settings and permanently delete critical business data. Existing tools were not designed for comprehensive, large-scale recovery, which requires speed, granularity, and reliability for rapid restoration.

Rubrik and Sophos’ shared commitment to helping organizations operate with confidence in the face of risk will provide Sophos customers and partners with a powerful solution to recover with speed and precision when threats inevitably break through.