Secureworks Taegis XDR

Secureworks Taegis XDR is a cloud-native, open extended detection and response platform that pulls telemetry from endpoints, networks, cloud, identity, email and business applications into one place for detection and investigation. It became part of Sophos's portfolio when Sophos acquired Secureworks in 2025.

Taegis collects data from its own endpoint agent and from a large ecosystem of third-party tools, normalizes it and applies behavioral analytics, machine learning and Counter Threat Unit intelligence to produce high-fidelity alerts. Investigators pivot through related users, hosts and events with the entity graph, run queries, build automated playbooks and take response actions such as isolating a host. AI-assisted summaries speed up triage, and a mobile app lets analysts review and act on alerts away from their desks.

Organizations use Taegis XDR to consolidate security operations, reduce alert noise, respond faster and get more value from the security products they already own, either with their own team or combined with Secureworks and Sophos managed services.