Sophos cuts threat investigation time by 96% with OpenAI Daybreak
96% faster threat investigation. Sophos deployed OpenAI Daybreak to automate over half its MDR cases — here's what the real numbers show.

Why it matters
Sophos operationalized OpenAI's Daybreak agent in MDR workflows, cutting investigation time by 96% and automating 52% of cases while maintaining human review. This is a concrete agent deployment in cybersecurity, not a pilot — the metric and automation rate matter for practitioners evaluating agent viability in security operations.
The key facts
7 to knowInvestigation time reduction: 96%
Cases automated: 52%
Product: OpenAI Daybreak (agent)
Use case: Managed Detection and Response (MDR)
Published: October 9, 2026
Human oversight preserved (mentioned but detail not provided)
Source: OpenAI official index — likely a case study, not independent verification
Go to the source
OpenAI Blogopenai.com
Publisher excerpt: Discover how Sophos uses OpenAI’s Daybreak to cut cyber-threat investigation time by 96% and automate 52% of MDR cases while preserving human oversight.