Sophos Secure Message
sophos.com
What it is
Sophos Secure Message is part of Sophos Email, a cloud service for protecting inboxes from phishing, business email compromise, spam, and email-delivered malware. Sophos Email uses AI and machine-learning models, natural-language processing, sender authentication, URL rewriting, and attachment sandboxing to detect threats. Post-delivery protection can retrieve messages later identified as malicious after they reach inboxes. Organizations can set Secure Message policies for selected users, groups, domains, and external recipients. Outbound policies support TLS, S/MIME, push encryption, and portal encryption. With portal encryption, recipients can read and reply to encrypted messages through a secure web portal without maintaining their own encryption infrastructure. Multi-rule data-protection and content-control policies can detect sensitive email data and encrypt it automatically. Sophos Email integrates with Microsoft 365 and Google Workspace and connects threat telemetry with Sophos MDR and XDR. Secure Message policies cannot be configured in Sophos Email Monitoring System mode. A free trial is available through an active Sophos Fusion account or the trial form. Pricing is on request, and there is no free plan.
Spec sheet
- Purpose
- Sophos Email protects inboxes against phishing, business email compromise, spam, and email-delivered malware.Read 8 Oct 2026 · sophos.com
- Trial
- Sophos offers a free trial, accessible through an active Sophos Fusion account or by submitting its trial form.Read 8 Oct 2026 · sophos.com
- Integrations
- Sophos Email integrates with Microsoft 365 and Google Workspace, and connects email threat telemetry with Sophos MDR and XDR.Read 8 Oct 2026 · sophos.com
- Support
- Sophos lists Email documentation, a community, and Techvids among its customer resources.Read 8 Oct 2026 · sophos.com
- Headquarters
- Oxford, United KingdomRead 23 Sep 2026 · sophos.com
- Founded
- 1985Read 4 Oct 2026 · sophos.com
- Admin access controls
- YesRead 20 Sep 2026 · docs.sophos.com
- Compatibility
- Sophos says the service is compatible with other email services when the customer controls the domain and DNS records.Read 8 Oct 2026 · sophos.com
- Data protection
- Multi-rule DLP and content-control policies can detect sensitive email data and automatically encrypt it.Read 8 Oct 2026 · sophos.com
- Encryption methods
- Outbound Secure Message policies support TLS, S/MIME, push encryption, and portal encryption.Read 8 Oct 2026 · docs.sophos.com
- Gmail integration
- NoRead 20 Sep 2026 · docs.sophos.com
- Limit
- Secure Message policies cannot be configured in Sophos Email Monitoring System mode.Read 8 Oct 2026 · docs.sophos.com
- Message expiry
- YesRead 20 Sep 2026 · docs.sophos.com
- Outlook integration
- YesRead 20 Sep 2026 · docs.sophos.com
- Post-delivery response
- Post-delivery protection can claw back messages later identified as malicious after they reach users’ inboxes.Read 8 Oct 2026 · sophos.com
- Recipient verification
- passwordRead 20 Sep 2026 · docs.sophos.com
- Secure Message policies
- Secure Message policies control how users access secure incoming emails and can apply to selected users, groups, domains, and external recipients.Read 8 Oct 2026 · docs.sophos.com
- Secure portal
- Portal Encryption lets recipients access and reply to encrypted messages through a secure web portal without their own encryption infrastructure.Read 8 Oct 2026 · sophos.com
- Threat detection
- Sophos Email uses AI and machine-learning models, natural-language processing, sender authentication, URL rewriting, and attachment sandboxing to detect email threats.Read 8 Oct 2026 · sophos.com
- Who it is for
- Sophos describes Email as enterprise-grade protection for organizations seeking email threat defense, data loss prevention, encryption, and user awareness features.Read 8 Oct 2026 · sophos.com
Plans and prices
Strong points and limits
Strong points
- Supports TLS, S/MIME, push, and portal encryption
- Can automatically encrypt detected sensitive email data
- Post-delivery protection can retrieve malicious messages
- Integrates with Microsoft 365 and Google Workspace
Limits
- No free plan
- Pricing is on request
- Secure Message policies are unavailable in Monitoring System mode
Who it suits
Sophos Email suits organizations seeking email threat defense, data loss prevention, encryption, and user-awareness features. It fits organizations using Microsoft 365 or Google Workspace, provided Secure Message policies are not needed in Monitoring System mode.
Verdict
Sophos Email combines threat detection with secure messaging and data-protection controls. Confirm that its deployment mode and pricing fit your organization before proceeding.
Where Specifiction places it
- Cloud Email Security#6 of 197.5
- Email Security Gateways#13 of 357.6
- Secure Email Gateway Software#7 of 187.5
- Email Anti-Spam Software#13 of 287.6
- Email Encryption Software#21 of 317.5
- File encryption tools#19 of 287.6