Sophos and Rubrik have launched a Microsoft 365 backup and recovery product for Sophos customers worldwide, available through the Sophos Central platform.
Called Sophos Backup and Recovery Powered by Rubrik Cyber Resilience, the service is designed to help organisations restore Microsoft 365 data after ransomware attacks, account compromise, insider incidents and accidental deletion. It covers Exchange Online, OneDrive, SharePoint and Teams.
The launch turns a previously announced partnership into a live product. Available as an add-on, the service is managed within the same console many customers already use for security operations.
By placing backup and recovery tools inside Sophos Central, the companies are combining threat response and data restoration in one system. This is intended to reduce the need for separate products when security teams investigate incidents and recover data.
Product scope
The service includes immutable backups, air-gapped storage and customer-controlled encryption. Users can search for and restore emails, files, mailboxes, OneDrive accounts, SharePoint sites and Teams data, either at the individual item level or at broader scale.
It also includes automated discovery of new users, sites and workloads, with policy-based protection tied to Entra ID controls. Sophos said this should help security teams maintain coverage as Microsoft 365 estates change over time.
Sophos serves more than 600,000 customers worldwide. Sophos Central also integrates more than 350 telemetry sources across endpoint, cloud, network, identity, email and business applications, giving the Rubrik integration access to security context during recovery work.
Microsoft 365 has become a central business system for email, identity and collaboration, making resilience in that environment a growing focus for cybersecurity suppliers. Backup and recovery for software-as-a-service platforms has drawn increased attention as companies seek to limit disruption after attacks or user errors.
Tom Foucha, VP of Product Management at Sophos, said the product is intended to make recovery part of frontline security operations rather than a separate administrative process.
"Staying operational in a world of constant digital disruption requires confidence in your ability to quickly recover," Foucha said.
"By bringing recovery directly into the same platform where security teams detect and respond to threats, we're making cyber resilience practical. This gives organizations a faster, more direct way to withstand attacks and keep their business running."
Rubrik positioned the product around the importance of Microsoft 365 as a business platform and the risks tied to more frequent attacks on identities and business data.
"In today's digital landscape, Microsoft 365 is a critical business platform for communication, collaboration and data storage. As cyber threats continue to evolve, cyber resilience is no longer optional-it is a business necessity," said Ashish Gupta, Managing Director, India and Head of Engineering at Rubrik.
"As ransomware attacks become more frequent and sophisticated, organizations must ensure rapid recovery and uninterrupted access to their critical data. By embedding recovery into Sophos Central, organizations can significantly strengthen their cyber resilience strategy, simplifying the protection, management and recovery of Microsoft 365 data."
The launch broadens Sophos's data protection offering within its existing platform while extending Rubrik's reach through Sophos's customer base and channel relationships. The service is now available to Sophos customers worldwide.