Sophos on Tuesday launched Sophos Workspace Protection, a browser-centric security product aimed at securing hybrid and remote work while giving organizations greater visibility into the use of cloud applications and artificial intelligence tools.
The product expands Sophos’ portfolio beyond traditional endpoint and network security, offering a lower-cost alternative to complex Secure Access Service Edge (SASE) and Security Service Edge (SSE) architectures, which often require multiple cloud services and dedicated infrastructure.
Workspace Protection is built around the Sophos Protected Browser, powered by enterprise browser provider Island. The browser integrates security controls directly into the workspace where most work now occurs, allowing organizations to manage application access, data handling, and internet usage without routing traffic through centralized gateways.
Sophos said the product is managed through its Sophos Central platform and provides organization-wide visibility into unsanctioned software and AI tools, commonly referred to as Shadow IT and Shadow AI. Companies globally have struggled to govern the use of generative AI in the workplace as employees adopt such tools faster than corporate policies can be established.
“Security teams are increasingly impacted by complexity as hybrid work, SaaS adoption and AI tools expand the workspace,” said Mike Jude, research director at IDC, adding that the approach reflects a shift toward endpoint- and browser-based security models that reduce operational overhead.
Unlike traditional SASE deployments, which typically backhaul user traffic through cloud points of presence, Sophos Workspace Protection applies security controls directly on endpoints and within the browser. Sophos said this reduces cost and deployment complexity while maintaining control over applications and data.
The product includes several components that can be deployed together or individually, including the secure browser, Zero Trust Network Access (ZTNA) for private web applications, DNS protection to block malicious domains, and an email monitoring system for Google and Microsoft email services.
Chief Executive Joe Levy said existing SASE and SSE offerings often add layers of infrastructure without fully addressing visibility and governance challenges.
“By combining Island’s enterprise browser technology with Sophos’ security capabilities, we are helping organizations govern AI use and protect critical data with less complexity,” Levy said.
Island co-founder and CEO Mike Fey said the browser has become the primary control point for modern work, making it a logical focus for security and data protection.
Sophos did not disclose pricing details for Workspace Protection.