Description
Sophos Workspace Protection, 50-99 users
Workspace Protection secures remote and hybrid workers, contractors and guests, and the apps and data they reach. It bundles four components into one per-user license: Protected Browser, ZTNA, DNS Protection for endpoints, and the Email Monitoring System. This listing covers the 50-99 user band.
Licensing counts your largest component, not your headcount. The per-user count is taken from the highest of Protected Browser, ZTNA or DNS Protection. Email Monitoring System is excluded. So 50 workers on the full bundle plus 100 needing DNS Protection is a 100 user order, not 50.
What is in the bundle
| Component | What it does |
|---|---|
| Sophos Protected Browser | Hardened Chromium browser with ZTNA, DNS protection and local data controls built in |
| Sophos ZTNA | Per-application access that keeps private applications invisible to the internet |
| Sophos DNS Protection for endpoints | Web protection across all apps, ports and protocols, with DNS over HTTPS |
| Sophos Email Monitoring System | Added visibility against advanced email threats, and not counted in licensing |
All four are managed from Sophos Fusion, and they are modular, so a user who only needs DNS Protection does not have to run the browser.
If you are coming from Sophos ZTNA
ZTNA is no longer sold on its own. Existing customers were upgraded automatically on February 28, 2026 and kept the added capabilities for the rest of their term at no extra cost. Standalone ZTNA term SKUs stopped being orderable in late April 2026. At renewal the quote becomes Workspace Protection, and the price can move up or down depending on your band and region, so it is worth quoting early rather than at the renewal date.
Where it fits
Organizations with staff working off the corporate network, contractors or guests needing access to internal applications, and anyone trying to get visibility over which SaaS and AI tools people are actually using. It works standalone or alongside Sophos Endpoint, with a combined bundle available if you want both on one line.
Frequently asked questions
What is included in Sophos Workspace Protection?
Four integrated components: Sophos Protected Browser and its extension, Sophos ZTNA, Sophos DNS Protection for endpoints, and the Sophos Email Monitoring System. All are managed from Sophos Fusion, and the components are modular so you deploy only what a given user needs.
How is it licensed?
Per user, counted on the highest user count across Protected Browser, ZTNA or DNS Protection. Email Monitoring System is not counted. If you want the full bundle for 50 workers but DNS Protection for 100, you need 100 licenses.
Is this what replaced Sophos ZTNA?
Yes. Sophos ZTNA is no longer sold standalone. Existing ZTNA customers were automatically upgraded on February 28, 2026, and standalone ZTNA term SKUs stopped being orderable in late April 2026. Renewals are quoted as Workspace Protection.
Do I need another Sophos product to buy it?
No. Workspace Protection works standalone or as an add-on to any other Sophos product. There is also a bundle with Sophos Endpoint that simplifies quoting if you want both.
Which band do I need?
Bands are based on user count, so pick the band covering your highest single component count rather than your headcount. Ask us if you are near a band boundary, because the per-user rate changes across bands.
Get this quoted by Nuformat
Nuformat is a Sophos partner serving Canada and the United States. Send us your user count across Protected Browser, ZTNA and DNS Protection, and we will confirm the band and quote it, usually in two to three business days.
Request a quoteBundle contents and licensing rules as published by Sophos. Pricing confirmed by Nuformat at the time of quotation.