Skip to content


Managed Detection and Response (Sophos MDR) is a fully-managed, 24/7 threat hunting, detection, and remediation service.

Managing MDR

In the MDR section in Sophos Central, you can do as follows:

  • Set or edit your MDR preferences (your authorized contacts and level of service).
  • Monitor MDR threat detections and investigations.
  • Get reports on MDR activity.

MDR not set up yet?

If you haven't set up Sophos MDR yet, see MDR setup guide.

This guide tells you how to set up the MDR service, whether you're a new customer or a customer already using Sophos Central.

MDR settings

You can choose how we respond to threats and who we contact. You enter these settings when you set up Sophos MDR.

You can change these settings at any time. For help, see MDR settings.

Dealing with threats

If you have MDR Complete, you can contact the MDR Ops team at any time to review activity on your estate, or to get advice.

You might also find these resources useful:

Find advice on dealing with ransomware and how to best protect yourself in Deal with ransomware.

Find help and advice on dealing with common malware attacks in Active Incident Remediation.