Sophos: Agents Cut Threat Investigation Time by 96%

Sophos, a cybersecurity company, joined Daybreak, a partner program from OpenAI, the ChatGPT maker, and added AI agents built on its models to its security monitoring service. Average threat investigation time dropped from 38 minutes to about 89 seconds, a 96% cut. Now 52% of cases in its MDR service, for detection and response, are closed start to finish by agents alone, with no human involved. Sophos says it protects more than 625,000 organizations worldwide.

This kind of handover works only with narrow access scoped to one task and logs agents cannot erase. The 96% figure covers the routine part of the investigation; harder cases still go to a human.