There are no products listed under this category.
Secure your remote and hybrid workers, wherever they work.
The old network perimeter is gone. Your people, apps, and data are everywhere. Sophos Workspace Protection is one bundle that protects them: a hardened browser, zero-trust access to your apps, DNS-layer web protection, and email monitoring, all managed from Sophos Focus. It is a simpler, more affordable path to the same outcomes as a full SASE or SSE stack.
Protecting remote staff? Get a quote or call 1-833-283-7373.
Sophos ZTNA is now part of Workspace Protection
As of February 2026, Sophos ZTNA is no longer sold on its own. It is now one component of the Sophos Workspace Protection bundle, and existing ZTNA customers were automatically upgraded. You still get the same zero-trust access, now alongside a protected browser, DNS protection, and email monitoring.
Four protections in one bundle.
Tightly integrated and managed together, so a modern workspace is covered without stitching separate tools.
Sophos Protected Browser
A hardened, Chromium-based browser (or a lightweight extension) that acts as the central control point. It embeds zero-trust access, DNS filtering, and secure web gateway controls, and can restrict risky actions like copy, paste, or downloads. It also gives you visibility into shadow AI and IT.
Sophos ZTNA
Zero Trust Network Access gives each user access only to the specific apps they need, making private applications invisible to the internet. It runs agentless or with a thin agent, and works with Sophos Endpoint to check device health before granting access.
Sophos DNS Protection for Endpoints
An added layer of web protection across every app, port, and protocol on remote Windows devices, using DNS over HTTPS to block malicious and unwanted content with better privacy.
Sophos Email Monitoring System
An email overlay that deploys alongside Microsoft 365 or Google Workspace to monitor mail flow and add detection of phishing and other unwanted email, without changing your mail routing.
Why Workspace Protection.
Consistent protection for people who work on and off the network.
The simpler path to SASE outcomes
You get secure access, web protection, and data controls in one affordable bundle, without assembling a full SASE or SSE stack.
Device health drives access
Through Synchronized Security Heartbeat, access policies can factor in whether a device is healthy, extending zero trust to users everywhere.
Managed in Sophos Focus
All four components run from the same console as your firewall, endpoint, and MDR, so it is one place to set policy and watch alerts.
Term or monthly billing
Buy it on a term subscription or as a monthly MSP Flex plan, so it suits any size of organisation.
bundle, whole workspace
Tell us how many remote or hybrid users you need to cover and we will size Sophos Workspace Protection, quote it on a term or monthly plan, and reply in two to three business days.
Workspace Protection questions.
What is Sophos Workspace Protection?
It is a bundle that protects remote and hybrid workers, contractors, and guests. It combines the Sophos Protected Browser, Sophos ZTNA, Sophos DNS Protection for Endpoints, and the Sophos Email Monitoring System, all managed from Sophos Focus.
What happened to standalone Sophos ZTNA?
Sophos ZTNA is no longer sold on its own. As of late February 2026 it became one component of Sophos Workspace Protection, and existing ZTNA customers were automatically upgraded to the full bundle.
Do users have to install anything?
ZTNA can run agentless or with a thin agent. The Protected Browser is available as a full browser or a lightweight extension, so you can fit it to how your users work.
How does it decide who gets access?
ZTNA grants access per application, and it can check device health through Synchronized Security Heartbeat, so access depends on both the user and the state of their device.
How is it licensed?
On a term subscription or as a monthly MSP Flex plan, priced per user. Tell us your user count and we will quote the option that fits your budgeting.
Protect your people wherever they work.
Tell us how many remote or hybrid users you need to cover and we will size Sophos Workspace Protection, quote it, and reply in two to three business days. Browse below.

