Sophos launches workspace security tool as 85% of work shifts to browser

Cybersecurity firm Sophos has launched a new workspace security product aimed at protecting hybrid and remote workers, as the company said around 85 percent of the modern workday now takes place inside a web browser.

The product, called ‘Sophos Workspace Protection’, is designed to secure applications, users and data directly at the workspace level, reflecting a broader shift in how organisations operate as work becomes increasingly cloud-based and browser-driven.

Sophos said traditional approaches to securing hybrid work often rely on multiple cloud-delivered security platforms that are complex and costly to deploy, while still leaving gaps in visibility and control.

Instead, the new product centres on the Sophos Protected Browser, a Chromium-based enterprise browser powered by technology from Island, allowing security controls to be embedded directly into the environment where most work activity now occurs.

“With 85 percent of the modern workday happening in the browser, security has to move to where work actually takes place,” Sophos said in a statement.

Read also: New Rubrik–Sophos deal targets ransomware, data loss in M365

Managed through the Sophos Central platform, the solution provides organisations with visibility into application use, data handling and internet activity across corporate and remote environments, the company said.

The launch comes as businesses face growing risks from phishing, browser-based attacks and unauthorised use of cloud applications, often referred to as shadow IT.

Sophos said the product also helps organisations monitor and govern employee use of emerging technologies such as generative artificial intelligence, which are increasingly being adopted without formal policies in place.

Recent research cited by the company shows that more than half of employees worldwide now use AI tools at work, raising concerns about sensitive data being shared through unapproved platforms.

“Security teams are increasingly impacted by complexity as hybrid work, SaaS adoption and AI tools expand the workspace,” said Mike Jude, research director at IDC.

He said Sophos’ browser-centric approach reflected a shift toward simpler security models that reduce operational overhead.

Read also: Sophos reveals 62% surge in ransomware attacks in 1yr

Sophos Workspace Protection includes several components that can be deployed together or individually, including zero-trust network access (ZTNA) for private applications, cloud-based DNS protection to block malicious domains, and an email monitoring add-on for Google and Microsoft email services.

Joe Levy, chief executive of Sophos, said many existing security solutions add complexity without fully addressing modern workspace risks.

“By securing work directly in the browser and at the endpoint, organisations can better protect data, govern AI use and support hybrid work without adding another layer of infrastructure,” Levy said.

Sophos said customers and partners will gain access to the new workspace protection product starting in February 2026.