Description
Sophos Endpoint Security - 3 year subscription (1-9 user) - CIXA0U36AANCAA
Sophos Endpoint stops ransomware, malware and exploits on your laptops and desktops before they do damage, and rolls back files if ransomware starts encrypting them. This listing covers 1-9 users for 3 years, Sophos part number CIXA0U36AANCAA. It is managed from Sophos Fusion, the same cloud console as Sophos firewalls and email.
- Part numberCIXA0U36AANCAA
- Licensed perUser, 1-9 in this band
- Term3 years
- ProtectsWindows and macOS computers
- Managed fromSophos Fusion (cloud)
Who it is for
Office with no security staff
Recommended protection is switched on by default, so a 10 to 50 person firm gets strong protection without an in-house expert.
Worried about ransomware
CryptoGuard watches for files being encrypted and puts them back, and Adaptive Attack Protection tightens defenses during a live attack.
Insurance or compliance asks for it
Shows you run managed endpoint protection with web control, device control and data loss prevention, a common questionnaire item.
What is included
- Ransomware protection: CryptoGuard file protection and rollback, remote ransomware protection, master boot record protection.
- Prevention: deep learning AI malware prevention, behavioral analysis, anti-exploit (60+ mitigations), malicious traffic detection and Live Protection cloud lookups.
- Control what runs and leaves: web protection and web control, application control, peripheral (USB) control and data loss prevention.
- Adaptive defense: Adaptive Attack Protection and estate-wide critical attack warnings when an active attacker is detected.
- Automatic response: malware cleanup, process termination, root cause threat graphs, and device isolation through Sophos Firewall (Synchronized Security).
- Posture checks: account health check flags weak or drifting settings, with one-click fixes.
Sophos Endpoint, XDR or MDR?
All four include the same prevention. The difference is who investigates and responds when something gets past it.
| What you get | Sophos Endpoint | Sophos XDR | Sophos MDR | Sophos MDR Plus |
|---|---|---|---|---|
| Ransomware protection and file rollback (CryptoGuard) | Yes | Yes | Yes | Yes |
| Deep learning AI malware prevention and anti-exploit (60+ mitigations) | Yes | Yes | Yes | Yes |
| Adaptive Attack Protection when a hands-on attacker is detected | Yes | Yes | Yes | Yes |
| Web, application and peripheral control, data loss prevention | Yes | Yes | Yes | Yes |
| Tools to detect, investigate and respond to suspicious activity yourself | No | Yes | Yes | Yes |
| Cloud data retention for investigations | None | 90 days | 90 days | 90 days |
| Uses data from your firewall, email, Microsoft 365 and non-Sophos tools | No | Yes | Yes | Yes |
| 24/7 Sophos analysts watching and responding for you | No | No | Yes | Yes |
| Full incident response by Sophos, and Breach Protection Warranty | No | No | Separate | Included |
The practical test: if you have nobody who can look at an alert at night or on a weekend, Sophos Endpoint plus Sophos MDR gives you people who will.
Upgrade path
- Sophos Endpoint (this listing). Prevention, ransomware rollback and automatic cleanup.
- Sophos XDR. Adds tools to investigate and respond, 90 days of cloud data, and data from your firewall, email and Microsoft 365. Includes everything in Sophos Endpoint.
- Sophos MDR. Sophos analysts watch your devices 24/7 and contain attacks for you. MDR Plus adds full incident response and the Breach Protection Warranty.
Add-ons to consider: Sophos Workspace Protection (zero trust access, DNS protection and a protected browser for staff), Sophos ITDR and Sophos NDR, which need Sophos XDR or MDR. Growing past 1-9 users? The 10-24 user listing has the same protection at the next band.
All bands and terms
| Users | 1 year | 2 years | 3 years |
|---|---|---|---|
| 1-9 users | View | View | This listing |
| 10-24 users | View | View | View |
| 25-49 users | View | View | View |
| 50-99 users | View | View | View |
| 100 or more users | Ask Nuformat for a quote, priced to your exact count | ||
Frequently asked questions
Is Sophos Endpoint the same product as Intercept X?
Yes. Sophos Endpoint is the current name for what Sophos sold as Intercept X Advanced. The protection carries over, and Sophos now manages it from Sophos Fusion.
Does Sophos Endpoint include EDR or XDR?
No. Sophos Endpoint prevents and cleans up threats automatically, but the tools to hunt, investigate and respond yourself come with Sophos XDR, which includes everything in Sophos Endpoint.
What does this listing cover?
1-9 users for 3 years, Sophos part CIXA0U36AANCAA. Windows Server and Linux servers need server licenses, sold as Sophos Endpoint for Server.
Can I start without replacing my current antivirus first?
Yes. Tell us which antivirus you run today and Nuformat will plan the switch-over, so devices are never left unprotected while you move to Sophos Endpoint.
Can I pay monthly instead of for a full term?
Yes. Nuformat can bill Sophos Endpoint monthly as your managed service provider. Monthly rates can change, so a term subscription is the way to fix your price.
Get Sophos Endpoint quoted by Nuformat
Nuformat is a Sophos partner serving Canada and the United States. Tell us how many users and servers you have and what you run today, and we will confirm the right band and term, usually the same business day.
Request a quoteFeatures as listed in the Sophos Endpoint tech specs and product page on sophos.com, checked October 11, 2026. Pricing and availability confirmed by Nuformat at quotation. All Sophos Endpoint options · Sophos Firewall