Intercept X is available for devices running on Windows and macOS. Intercept X is the industry’s most comprehensive endpoint protection and includes options for powerful endpoint detection and response (EDR) and extended detection and response (XDR).
Get details on system requirements and supported operating systems in the Windows and macOS articles.
| Features | Intercept X Advanced | Intercept X Advanced with XDR | Intercept X Advanced with MDR | Intercept X Advanced with MDR Complete |
|---|
| ATTACK SURFACE | ||||
| Web Security | ||||
| Download Reputation | ||||
| Web Control / Category-based URL Blocking | ||||
| Peripheral Control | ||||
| Application Control | ||||
| BEFORE IT RUNS ON DEVICE | ||||
| Deep Learning Malware Detection | ||||
| Anti-Malware File Scanning | ||||
| Live Protection | ||||
| Pre-execution Behavior Analysis (HIPS) | ||||
| Potentially Unwanted Application (PUA) Blocking | ||||
| Intrusion Prevention System | ||||
| STOP RUNNING THREAT | ||||
| Data Loss Prevention | ||||
| Runtime Behavior Analysis (HIPS) | ||||
| Antimalware Scan Interface (AMSI) | ||||
| Malicious Traffic Detection (MTD) | ||||
| Exploit Prevention | ||||
| Active Adversary Mitigations | ||||
| Ransomware File Protection (CryptoGuard) | ||||
| Disk and Boot Record Protection (WipeGuard) | ||||
| Man-in-the-Browser Protection (Safe Browsing) | ||||
| Enhanced Application Lockdown | ||||
| DETECT | ||||
| Live Discover (Cross Estate SQL Querying for Threat Hunting & IT Security Operations Hygiene) | ||||
| SQL Query Library (pre-written, fully customizable queries) Suspicious Events Detection and Prioritization | ||||
| Suspicious Events Detection and Prioritization | ||||
| Fast Access, On-disk Data Storage (up to 90 days) | ||||
| Cross-product Data Sources e.g. Firewall, Email (Sophos XDR) | ||||
| Cross-product Querying (Sophos XDR) | ||||
| Sophos Data Lake Cloud Storage | 30 days | 30 days | 30 days | |
| Scheduled Queries | ||||
| INVESTIGATE | ||||
| Threat Cases (Root Cause Analysis) | ||||
| Deep Learning Malware Analysis | ||||
| Advanced On-demand SophosLabs Threat Intelligence | ||||
| Forensic Data Export | ||||
| REMEDIATE | ||||
| Automated Malware Removal | ||||
| Synchronized Security Heartbeat | ||||
| Sophos Clean | ||||
| Live Response (remotely investigate and take action) | ||||
| On-demand Endpoint Isolation | ||||
| Single-click “Clean and Block” | ||||
| HUMAN-LED THREAT HUNTING AND RESPONSE | ||||
| 24/7 Lead-driven Threat Hunting | ||||
| Security Health Checks | ||||
| Data Retention | ||||
| Activity Reporting | ||||
| Adversarial Detections | ||||
| Threat Neutralization & Remediation | ||||
| Full-scale Incident Response: threats are fully eliminated (Requires full Sophos XDR agent (protection, detection and response) ) | ||||
| Root Cause Analysis: performed to prevent future recurrence | ||||
| Dedicated Incident Response Lead | ||||
| Proactive Security Posture Management | ||||
| Buy Intercept X | Buy Intercept X with XDR | Buy Intercept X with MTR | Buy Intercept X with MTR Adv | |