Intercept X is available for devices running on Windows and macOS. Intercept X is the industry’s most comprehensive endpoint protection and includes options for powerful endpoint detection and response (EDR) and extended detection and response (XDR).

Get details on system requirements and supported operating systems in the Windows and macOS articles.

Features Intercept X Advanced Intercept X Advanced with XDR Intercept X Advanced with MDR Intercept X Advanced with MDR Complete
ATTACK SURFACE
Web Security
Download Reputation
Web Control / Category-based URL Blocking
Peripheral Control
Application Control
BEFORE IT RUNS ON DEVICE
Deep Learning Malware Detection
Anti-Malware File Scanning
Live Protection
Pre-execution Behavior Analysis (HIPS)
Potentially Unwanted Application (PUA) Blocking
Intrusion Prevention System
STOP RUNNING THREAT
Data Loss Prevention
Runtime Behavior Analysis (HIPS)
Antimalware Scan Interface (AMSI)
Malicious Traffic Detection (MTD)
Exploit Prevention
Active Adversary Mitigations
Ransomware File Protection (CryptoGuard)
Disk and Boot Record Protection (WipeGuard)
Man-in-the-Browser Protection (Safe Browsing)
Enhanced Application Lockdown  
DETECT
Live Discover (Cross Estate SQL Querying for Threat Hunting & IT Security Operations Hygiene)
SQL Query Library (pre-written, fully customizable queries) Suspicious Events Detection and Prioritization
Suspicious Events Detection and Prioritization
Fast Access, On-disk Data Storage (up to 90 days)
Cross-product Data Sources e.g. Firewall, Email (Sophos XDR)
Cross-product Querying (Sophos XDR)
Sophos Data Lake Cloud Storage 30 days 30 days 30 days
Scheduled Queries
INVESTIGATE
Threat Cases (Root Cause Analysis)
Deep Learning Malware Analysis
Advanced On-demand SophosLabs Threat Intelligence
Forensic Data Export
REMEDIATE
Automated Malware Removal
Synchronized Security Heartbeat
Sophos Clean
Live Response (remotely investigate and take action)
On-demand Endpoint Isolation
Single-click “Clean and Block”
HUMAN-LED THREAT HUNTING AND RESPONSE
24/7 Lead-driven Threat Hunting
Security Health Checks
Data Retention
Activity Reporting
Adversarial Detections
Threat Neutralization & Remediation
Full-scale Incident Response: threats are fully eliminated (Requires full Sophos XDR agent (protection, detection and response) )
Root Cause Analysis: performed to prevent future recurrence
Dedicated Incident Response Lead
Proactive Security Posture Management
Buy Intercept X Buy Intercept X with XDR Buy Intercept X with MTR Buy Intercept X with MTR Adv