Description
Sophos Managed Risk - 1-9 users - 1-year subscription
Sophos Managed Risk is a vulnerability and attack surface management service run for you by a Sophos team using Tenable technology. It finds what you expose to the internet, tells you when a critical vulnerability appears, and ranks what to fix first. This listing covers 1-9 users and servers for 1 year, Sophos part number MRASMU12AANCAA.
- Part numberMRASMU12AANCAA
- Licensed perUsers and servers, 1-9
- Term1 year
- Delivered bySophos team, Tenable technology
- Pairs withSophos MDR
Who it is for
Servers or services on the internet
Web, email or VPN servers, web apps and APIs that face the internet are where attackers look first.
No time to run a scanner
Sophos experts run the scanning and tell you what matters, instead of handing you a report of thousands of findings.
Insurer asks about vulnerability management
Shows a managed, ongoing program for finding and fixing internet-facing weaknesses.
What is included
- External attack surface discovery: maps and classifies internet-facing assets such as web and email servers, web applications and public APIs.
- Continuous monitoring with a proactive alert when a new critical vulnerability affects your internet-facing assets.
- Risk-based prioritization with real-time alerts for high-risk and zero-day issues, and tailored guidance on how to fix them.
- Scheduled meetings with Sophos experts, and questions raised through Sophos Fusion.
- Shared intelligence with Sophos MDR: the two teams share information on zero-days and exposures to check if you were hit.
Good to know: Sophos lists Managed Risk as an add-on for Sophos MDR customers. If you do not run Sophos MDR yet, ask us and we will quote the pair.
Where it fits
- Sophos MDR. 24/7 detection and response. Managed Risk is offered alongside it.
- Sophos Managed Risk (this listing). Finds and ranks internet-facing weaknesses before attackers use them.
- Penetration testing. A point-in-time test of how far an attacker could get, for audits and insurers.
Choose the band by the number of users and servers you protect with Sophos, the same way as your MDR license.
All bands and terms
| Users and servers | 1 year | 3 years |
|---|---|---|
| 1-9 users and servers | This listing | View |
| 10-24 users and servers | View | View |
| 25-49 users and servers | View | View |
| 50-99 users and servers | View | View |
| 100 or more | Ask Nuformat for a quote, priced to your exact count | |
Frequently asked questions
Is Sophos Managed Risk a scanner I run myself?
No. A Sophos team runs it using Tenable technology, reviews the findings and tells you what to fix first.
What does Sophos Managed Risk look at?
Your internet-facing assets: web and email servers, web applications, VPN and remote access services, and public API endpoints.
Do I need Sophos MDR?
Sophos offers Managed Risk as an extended service with Sophos MDR, and the two teams share findings. Ask us if you do not run Sophos MDR.
What does this listing cover?
1-9 users and servers for 1 year, Sophos part MRASMU12AANCAA.
Can I pay monthly instead of for a full term?
Yes. Nuformat can bill Sophos Managed Risk monthly as your managed service provider. Monthly rates can change, so a term subscription is the way to fix your price.
Get Sophos Managed Risk quoted by Nuformat
Nuformat is a Sophos partner serving Canada and the United States. Tell us how many users and servers you have and what you expose to the internet, and we will confirm the band and term.
Request a quoteService as described in the Sophos Managed Risk launch announcement on sophos.com and the Sophos Endpoint tech specs, checked October 11, 2026. Pricing and availability confirmed by Nuformat at quotation. All Sophos Managed Risk options