Skip to content

File integrity of Sophos updates

We guarantee the integrity of our software updates.

Here's how we ensure that no-one's tampered with the files.

We digitally sign all binary files we publish.

Each of your devices does as follows:

  • Downloads files over a secure HTTPS session.
  • Fetches a manifest (signed by us) that lists what the device needs to install. It'll install only files that are on the list.
  • Installs only files that are signed by us.

So your devices can't install any files that we haven't approved.