Sophos cuts threat investigation time by 96% with OpenAI Daybreak

A cybersecurity company used OpenAI's Daybreak technology to build AI agents that investigate security threats automatically. The agents reduced the average time to respond to a security case from approximately 38 minutes to 89 seconds, and now handle 52% of cases end-to-end without human involvement. This matters because it allows the company to scale its threat response capabilities across more than 625,000 organizations without needing proportional growth in cybersecurity staff. Human analysts retain control through three operating modes that determine whether the company investigates only, collaborates with customers, or responds directly, with any actions the agents cannot handle passed to humans for judgment.