Protect your devices

Anti-malware & ransomware protection

Ransomware can take a small business offline in minutes. Stop malware before it runs, and if ransomware does start encrypting files, stop it and put them back.

Ask us about this
The risk

Ransomware is the attack most likely to stop a small business in its tracks: files encrypted, systems down, and a demand for payment to get them back.

Traditional antivirus only recognised threats it had seen before. Modern malware changes constantly, and attackers increasingly use legitimate tools that are already on the computer, so protection has to look at what software is doing, not just what it is.

What it does
  • Blocks known and never-before-seen malware before it runs, using deep learning rather than relying only on signatures
  • Spots ransomware encrypting files, stops it, and rolls the affected files back to how they were
  • More than 60 exploit mitigations, switched on by default, to stop attackers abusing flaws in everyday software
  • Blocks malicious websites, and lets you set rules for categories such as gambling or generative AI tools
  • Controls USB drives and other removable devices, and which applications are allowed to run
  • Automatically steps up protection on a device that is under active attack
  • Covers Windows, macOS and Linux, managed from one cloud console
Who it's for

Every business with laptops or desktops. It's the foundation the rest of your security builds on, and one of the ways to meet the malware protection requirement in Cyber Essentials.

How we supply it

Anti-malware protection is part of our four protection tiers, so you sign up for it through our application form rather than buying it as a separate licence. AV-only gives you the protection on its own; the higher tiers add investigation tools or a 24/7 team on top. We can install it across your devices for you at our standard day rate.

What's under the hood

Sophos Endpoint — the protection behind all four of our tiers, managed from Sophos Fusion alongside anything else you add from this catalogue. Its CryptoGuard anti-ransomware and file rollback are included at every tier.

Questions
Defender is a reasonable baseline, and plenty of businesses start there. What this adds is dedicated anti-ransomware with file rollback, exploit prevention and one console across Windows, Mac and Linux, with a straightforward path to EDR and 24/7 MDR on the same software.
It's designed to run in the background with little noticeable impact, and it replaces your existing antivirus rather than running alongside it. Very old or under-powered machines are the ones most likely to notice any security software.
Most of the time it deals with the threat automatically: blocks it, cleans up and records what happened. On AV-only the alerts are there for you to review; from MDR Essentials upwards, a 24/7 analyst team investigates them for you.
Yes. Moving between tiers is a live change to your account, with nothing to reinstall.

← Back to Protect your devices

Not sure what you need?

Tell us a little about your business and we'll recommend the controls that matter most for it — no obligation, and no jargon.

Talk to us → or see every security area →