Sophos Endpoint 100

A firewall guards the perimeter, but it cannot see what a laptop does once it has left the office, and it cannot help a user who opens the wrong attachment. Endpoint 100 is the other half of that job: software on each machine that catches malware, blocks ransomware before it encrypts, and reports what it found.

It is licensed per user rather than per device, so a laptop and a desktop and a phone belong to the same licence, and the price is fixed for up to 100 users with no per-seat arithmetic as you grow. The feature set is the full Sophos endpoint agent — ransomware protection with CryptoGuard, exploit prevention, web control and AI-assisted threat detection — rather than a cut-down small-business edition.

If you already run a Sophos firewall, the two talk to each other through Sophos Central: an infected machine can be isolated at the firewall automatically, and management, alerts and reporting sit in the same console. If you run FortiGate instead, Endpoint 100 still works perfectly well on its own — it simply loses that automatic link between the two.