SOPHOS

sophos.com

SOPHOS declares 35 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and Microsoft. No published changes since we first read it on Sep 21, 2026. 5 tracked vendors name SOPHOS as a subprocessor, including Rackspace, Intralinks and Naviam.

Subprocessors CSV of SOPHOS's subprocessors · Atom feed of SOPHOS's subprocessors DORA draft CSV of SOPHOS's subprocessors as declared by SOPHOS what's this? · 

35 third parties.

NamePurposeLocationListed since
Ada Support Inc. Technical support and chat bot services.USA; Canada
Aiven Ltd. [Apache Kafka] Cloud infrastructure servicesAWS Regions
Akamai Technologies Inc Content Delivery Network and edge proxy for Sophos software downloads, UI assets, and APIsUSA
Amazon Web Services, Inc Data centre services, cloud infrastructure services, Generative AI and identity access.USA; UK; Ireland; Germany; Canada; Australia; Japan; India; Brazil; UAE; Switzerland
Atlassian Corporation Limited Internal requests and project trackingGermany; Ireland
Benjamin Mosse Consulting Pty Ltd Location: Australia; Location: United States
Blue Ocean Contact Centres Inc. Technical support helpdesk.Canada
Box Inc Secure storage of forensic data and incident-related filesGermany / Ireland, France, Canada, Japan, USA, UK, Australia.
Cleverbridge GmbH Payment support servicesUSA; Germany
Constella Intelligence, Inc. To detect and alert on compromised credentials and identity threats across the surface, deep, and dark web.USA; Germany; Ireland
Echoworx Corporation Email encryption servicesCanada
Fenix24, Inc Location: United States
Forvis Mazars Group Location: United Kingdom; Location: United States
Fullstory, Inc Session replay, product analytics, and digital experience insights.USA; Germany
Genesys Telecommunications Laboratories, Inc. Cloud Based contact centre system, technical support and call routing.Ireland
Google LLC Data centre services, cloud infrastructure services, analytics toolsUSA
Google Cloud EMEA Limited Cloud infrastructure services, analytics toolsUSA
GRCS INC. Location: India; Location: Japan
Hoodwink Consulting LLC Location: United States
Invictus Incident Response B.V. Location: The Netherlands
Island Technology Inc Enterprise browser and secure access platformUSA, UK, Germany, Canada and Australia
Logz.io Storage of log files, observabilityGermany
Microsoft Corporation Data centre services, cloud infrastructure services and Generative AIGermany; Netherlands; United States; Sweden
Raintank Inc, d/b/a Grafana Labs Operational dashboard (metrics) servicesUSA; Ireland; UK
Reversing Labs Threat intelligence and file analysis.Croatia
Rubrik, Inc. Backup and recovery for Microsoft 365Microsoft Azure Regions selected by customer
Rule 56 Location: United States
Salesforce Inc. Customer relationship management services, metrics and technical support servicesUSA
Sendmarc Inc DMARC email authentication and domain protectionNetherlands
SendSafely Inc (B2B) Technical support helpdesk and filesharing systemIreland; Germany; USA
Sentry (d/b/a Functional Software, Inc.) Error reporting and analysisUSA
SIE Co.,Ltd Location: Japan; Location: United States
Sierra Technologies Inc Conversational AI chat bot for customer supportUSA
Tenable, Inc. Vulnerability Management ServicesUSA; Ireland; Germany; Canada; Australia; Japan; India; Brazil
Zendesk, Inc Technical support helpdeskUSA

Web TechnologiesCSV of SOPHOS's web technologies · Atom feed of SOPHOS's web technologies

SOPHOS's homepage made 221 requests to 32 domains, 18 services controlled by another company, and 2 domains not identified.

Analytics (5): Fullstory, Clay, LinkedIn, Cloudflare, Delivr.aiAdvertising (4): Google Cloud, Microsoft, Sovrn, Reddit, Inc.Live chat (1): Qualified.com, Inc.Cookie compliance (1): OneTrustOther (5): RUM: Akamai; reviewed as RUM: New Relic; reviewed as CMS: Contentstack; usually detected as Issue trackers: Sentry; reviewed as Recruitment & staffing: XINGUnclassified (2): no technology detected from them: Oracle, Report URI Ltd

18 third parties by category: Analytics 5Advertising 4Live chat 1Cookie compliance 1Other 5Unclassified 2

Third parties 18 · 158 requests
Contentstack contentstack.io 23% of the page's requests 50
Qualified.com, Inc. Qualified 17% of the page's requests 38
Google Cloudsubprocessor DoubleClick Floodlight Google Analytics Google Tag Manager 10% of the page's requests 21
OneTrust OneTrust 5% of the page's requests 11
Fullstorysubprocessor FullStory 3% of the page's requests 6
Microsoftsubprocessor Microsoft Advertising 2% of the page's requests 5
Sovrn Sovrn 2% of the page's requests 5
Clay Clay Web Intent 2% of the page's requests 4
Akamaisubprocessor Akamai mPulse 1% of the page's requests 3
LinkedIn Linkedin Insight Tag 1% of the page's requests 3
New Relic newrelic.com <1% of the page's requests 2
Oracle eloqua.com, en25.com <1% of the page's requests 2
Reddit, Inc. Reddit Ads <1% of the page's requests 2
XING xing.com, xingcdn.com <1% of the page's requests 2
Cloudflare Cloudflare Browser Insights <1% of the page's requests 1
Delivr.ai Delivr.ai <1% of the page's requests 1
Report URI Ltd report-uri.com <1% of the page's requests 1
Sentrysubprocessor sentry.io <1% of the page's requests 1
Unknown 2 · 3 requests

dpmsrv.comsitelytics.tech

First party 1 · 60 requests
SOPHOS Akamai Akamai Bot Manager Boomerang Cloudflare Contentstack Eloqua GSAP HSTS HTTP/3 Microsoft Clarity New Relic Next.js 16.4.2 Next.js App Router Open Graph Priority Hints React Sentry Turbopack Webpack 27% of the page's requests 60

9 tracked companies loaded by the homepage are not in SOPHOS's subprocessor list. A website can use a service without it processing customer data.

Subprocessor of (5)CSV of the companies listing SOPHOS · Atom feed of the companies listing SOPHOS

5 companies
  • Intralinks intralinks.com
  • Naviam naviam.io anti-malware software
  • Netenrich netenrich.com Email security services
  • Rackspace rackspace.com Products & Services – Security
  • Tractian tractian.com Endpoint - XDR | Security Options - MDR; Security

Security recordCSV of SOPHOS's security record · Atom feed of SOPHOS's security record

What public security catalogs list for SOPHOS, in their words.

Known exploited vulnerabilities

7 vulnerabilities in SOPHOS's software that CISA lists as exploited in the wild.

CVEProductVulnerabilityListed
CVE-2020-15069XG FirewallSophos XG Firewall Buffer Overflow Vulnerability
CVE-2020-29574CyberoamOSCyberoamOS (CROS) SQL Injection Vulnerability used by ransomware
CVE-2023-1671Web ApplianceSophos Web Appliance Command Injection Vulnerability
CVE-2022-3236FirewallSophos Firewall Code Injection Vulnerability
CVE-2022-1040FirewallSophos Firewall Authentication Bypass Vulnerability
CVE-2020-25223SG UTMSophos SG UTM Remote Code Execution Vulnerability
CVE-2020-12271SFOSSophos SFOS SQL Injection Vulnerability used by ransomware

Source: CISA Known Exploited Vulnerabilities catalog (evidence)

Incidents reported by SOPHOS's subprocessorsCSV of incidents reported by vendors SOPHOS lists · Atom feed of incidents reported by vendors SOPHOS lists

80 reported incidents in the last 30 days, by 11 of the vendors SOPHOS lists as subprocessors.

A subprocessor list names a company, not the service an incident touched. This does not show that SOPHOS was involved.

DateCompanyIncidentImpactLasted
GrafanaDegraded performance for Grafana Cloud Metrics in prod-us-central-7 major1 h 35 min
GrafanaElevated query errors for Grafana Cloud Metrics in prod-us-east-3 minor4 h 13 min
SentryUS issues feed throwing intermittent errors minor51 min
SentryAccount emails not being delivered major42 min
SentryEU region replay ingestion latency minor48 min
GrafanaCloud Logs writes - Elevated latency and error rates in prod-eu-central-0 no impact stated17 min
GrafanaMimir query unexpected response with status code 500 minor8 h 31 min
TenableTenable Cloud Security: Customers Site Access Issues (USGov1) critical5 h 54 min
GrafanaSynthetic Monitoring — Jakarta Public Probe Degradation no impact stated1 min
AivenAPI requests failing/timing out no impact stated16 h 40 min
TenableTenable Vulnerability Management: Scan Processing Delays minor42 h 36 min
Ada SupportComplete ada outage critical4 h 42 min
Logz.ioData Ingestions Delays For Some Customers - Degraded Performance - us-east-1 minor1 h
SentryIngestion delays across all data minor1 h 10 min
FullstoryDelays in syncing to S3 data warehouses (EU1) minor8 h 46 min
CleverbridgePlatform availability issue major9 h 13 min
TenableTenable Vulnerability Management: Delay in Findings major2 days
Box[Minor] Issue with Box AI minor3 h 18 min
GrafanaGitHub returning 403 for all Git Sync repositories minor1 h 57 min
Fullstory[Resolved] Delayed Session Data Availability (NA1 & EU1 Data Centers) no impact stated—
GrafanaOctober usage report visualization issue minor3 days
AkamaiProperty Manager Property Activation Errors no impact stated—
SentryDelays in spans and transactions processing major1 h 45 min
SentrySentry.io dashboard and API is down critical1 h 32 min
GrafanaIncreased query latency for Logs in GCP US Central (prod-us-central-0) minor1 h 30 min

And 55 more. All of them: CSV · Who is around them.

ChangesCSV of SOPHOS's changes · Atom feed of SOPHOS's changes

See the list as we read it on any date: Time machine

None since tracking began.

Rating badge for SOPHOS's site

SOPHOS transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/sophos"><img src="https://thirdpartyindex.com/badge/sophos.svg" alt="SOPHOS transparency rating on Third Party Index" height="20"></a>
[![SOPHOS transparency rating on Third Party Index](https://thirdpartyindex.com/badge/sophos.svg)](https://thirdpartyindex.com/vendors/sophos)