Sophos Next-Gen SIEM overview

Sophos Next-Gen SIEM is a compliance-focused extension for Sophos XDR and Sophos MDR. It adds long-term data retention, expanded data ingestion, and audit-ready reporting to the same platform used for threat detection and response.

Organizations can retain, access, and report on security and compliance data without deploying a separate SIEM. They can ingest additional compliance-relevant telemetry, retain data for extended periods, and generate built-in compliance reports and dashboards from a centralized platform.

Sophos Next-Gen SIEM is designed for organizations that must meet regulatory, governance, or audit requirements. Sophos XDR remains the primary platform for threat detection, investigation, response, automation, and security operations. Sophos Next-Gen SIEM complements Sophos XDR by supporting compliance-focused use cases, including long-term retention, audit readiness, policy monitoring, and preservation of historical data required for reporting and regulatory obligations.

Expanded data ingestion and parsing

Sophos Next-Gen SIEM expands data ingestion support to include the ability to build custom integrations with the platform for data sources that are not currently optimized by Sophos. See Custom integrations.

You can then configure custom parsers to normalize logs from those data sources into Sophos XDR's standardized event schemas. This lets detectors, custom detection rules, and advanced search operate on the data. See Custom parsers overview.

Compliance reporting

The NG-SIEM dashboard has widgets for access control, network security, and audit events. To see the dashboard, go to Dashboards > Manage dashboards and click Find dashboards to add it to your list.

For details on dashboards, see Dashboards.

Data retention

Sophos Next-Gen SIEM includes 13 months of data retention by default.

Organizations that require longer retention periods can purchase add-ons that extend data retention to three, five, seven, or 10 years.

These retention options help you align data retention policies with industry regulations and internal governance requirements.