Companies Using Sophos

Sophos Usage Statistics

Sophos reads 39,536 domains on our June 2026 rollup, 45,827 in July and 46,240 in August. Three points cannot carry a growth rate, and this movement is coverage rather than adoption. The crawled domain set turns over every month, with dead domains dropping out and newly discovered ones coming in, and detection widens at the same time: the total number of domains seen carrying the Sophos signal moved from 39,547 to 46,606 across those three months. Read the three points as three sightings of a population we can see progressively more of, not as a trend in sales. A second caution belongs here, specific to this technology. The signal is a DNS record rather than something on a page, and a verification TXT record is written once and left alone, so a domain enters this series when we first resolve its DNS and then rarely leaves. Movement in the line is us finding domains, not customers signing contracts. The August figure, 46,240, is the one quoted at the top of this page.

Which Countries Use Sophos the Most?

Which countries use Sophos the most? The United States holds 12,627 of the 41,454 companies we could place, 30.46%, and second place is the row worth stopping on: Germany on 7,493, 18.08%, more than double the United Kingdom on 3,408, 8.22%. Then Australia 2,408 (5.81%), Canada 2,080 (5.02%), Switzerland 1,440 (3.47%), Italy 1,270 (3.06%), France 1,178 (2.84%), Spain 1,096 (2.64%), the Netherlands 949 (2.29%), India 591 (1.43%), Austria 553 (1.33%), Brazil 423 (1.02%), New Zealand 413 (1.00%) and Belgium 390 (0.94%). Sophos is headquartered in Abingdon, Oxfordshire, and its home market is third here. Germany, Switzerland and Austria together are 9,486 companies, 22.88% of the 41,454, against 8.22% for the United Kingdom. That is not an accident of one table. Four rows in the technology stack below agree with it from a completely different direction: TYPO3 CMS on 3.58% of the 47,391 live domains, IONOS on 3.65%, ALL-INKL on 1.13% and Borlabs Cookie on 3.02% are all German-market products. Company records and detected technology are separate measurements that could disagree, and here they do not. Country is the headquarters on the company record, not where the mail server sits.

Sophos Market Share Among Email Security

What is Sophos's market share? Sophos holds 6.43% of Email Security and ranks 7th of 12 in that category, on 46,240 domains. The rows above it are Microsoft Defender on 268,449 domains and 37.34%, Jellyfish on 96,512 (13.42%), Mimecast on 69,123 (9.61%), MailChannels on 65,764 (9.15%) and Barracuda on 64,320 (8.95%). Two of those rows are wrong, and they are wrong in our own records rather than in someone else's. The Microsoft Defender entry matches an MX record pointing at ppe-hosted.com, a domain whose nameservers belong to Proofpoint, so those 268,449 detections are Proofpoint Essentials filed under a Microsoft label. The Jellyfish entry matches MX jellyfish.systems, a shared mail host rather than a security product, so that row counts tenants of a hosting arrangement. Until both are corrected, treat this column as an ordering of detections rather than as market share, and treat 6.43% as a position in that ordering. One further caveat applies to the whole category: it is a mail-routing taxonomy, so a vendor sold as endpoint and firewall protection with email attached is measured on the email part only.

Sophos Customers by Company Size & Age

What size companies use Sophos? This is the table that defines the page. 11,723 of the 40,173 companies with a size band, 29.18%, employ 11 to 50 people, 11,522 (28.68%) employ 10 or fewer and 9,149 (22.77%) employ 51 to 200. Add those three bands and 32,394 companies, 80.64%, sit under 200 employees. The upper half of the table is thin by comparison: 201-500 holds 4,021 (10.01%), 501-1,000 holds 1,803 (4.49%), 1,001-5,000 holds 1,613 (4.02%), 5,001-10,000 holds 199 (0.50%) and 10,001+ holds 143 (0.36%). Everything above a thousand employees is 1,955 companies, 4.87%. Now set that against the named table below, which opens with Hilton, L'Oréal, Qualcomm and Kotak Mahindra. That list is ordered by LinkedIn following, so it shows the top of the base and not its centre, and reading it as evidence of an enterprise product gets the shape of this data backwards. Sophos is a small-business product sold at volume, largely through partners and managed service providers, which is also why IT Services and IT Consulting leads the industry table.

What Industries Use Sophos the Most?

IT Services and IT Consulting leads at 6.88% of the 38,034 companies with a recorded industry, 2,617 companies, followed by Construction at 2,199 (5.78%) and Financial Services at 1,280 (3.37%). Then Hospitals and Health Care 1,106 (2.91%), Real Estate 1,029 (2.71%), Machinery Manufacturing 808 (2.12%), Retail 740 (1.95%), Software Development 723 (1.90%), Government Administration 655 (1.72%) and Law Practice 654 (1.72%). The number to read is not the order but the ceiling. The top label reaches only 6.88%, and the ten labels shown together account for under a third of the base, so adoption is horizontal: nothing about Sophos is industry-specific and the distribution behaves like a sample of companies that have a domain with mail on it. IT Services leading is the one row that is not horizontal, and it is the channel showing through rather than a vertical. Managed service providers run Sophos in their own tenancy and deploy it for their clients, which puts provider and client into this data under different names.

Companies using Sophos do not cluster into a single buyer the way they do on a regulated or vertical product, so the useful reading here is what the middle rows say about company size rather than about sector. Construction at 2,199 companies, 5.78% of the 38,034 with an industry, is the row that shows it. Construction firms are numerous, small, spread across sites and inclined to buy IT as a package from a local provider, and they do not appear near the top of enterprise security profiles. Real Estate at 1,029 (2.71%), Machinery Manufacturing at 808 (2.12%), Retail at 740 (1.95%) and Law Practice at 654 (1.72%) describe the same buyer: a business under two hundred staff, with a domain, and a compliance or insurance reason to be able to say its email is filtered. IT Services and IT Consulting at 2,617, 6.88%, sits on top of all of them because it contains the seller as well as the buyer. Managed service providers are the route into a base that is 80.64% under 200 employees, and a provider that standardises on Sophos verifies its own domain and then verifies its clients' domains, so the channel appears in this data twice. The regulated block that dominates many security profiles is present but small: Hospitals and Health Care 1,106 (2.91%), Financial Services 1,280 (3.37%) and Government Administration 655 (1.72%) come to 3,041 companies, 8.00% of the 38,034. One record caveat before reading any row too closely: industry sits on the company record rather than on the domain, so a holding company and its operating subsidiary can be filed under different sectors while sharing one verified domain.

Sophos Alternatives & Competitors

This table lists the five largest technologies in the same taxonomy bucket, and two of them are mislabelled in our own records. Microsoft Defender at 268,449 domains and 37.34% matches an MX record pointing at ppe-hosted.com; resolve that domain's nameservers and they belong to Proofpoint, so the row is Proofpoint Essentials wearing a Microsoft label. Jellyfish at 96,512 (13.42%) matches MX jellyfish.systems, a shared mail host, so that row counts tenants of one hosting arrangement rather than buyers of a security product. Mimecast on 69,123 (9.61%), MailChannels on 65,764 (9.15%) and Barracuda on 64,320 (8.95%) sit between those two and Sophos. Sophos ranks 7th of 12 on 6.43%, and until the two defective rows are corrected the share column should be read as an ordering of detections rather than as a market share. Its 6.43% is also computed against a denominator that contains both bad rows, so the figure is understated by construction.

There is no switching table on this page, and that is a decision rather than a gap. 601 domains have stopped showing Sophos since we began tracking in March 2026. We measured every candidate destination against its own base rate among the 47,391 live Sophos domains, and nothing survived. Hornetsecurity is on 15 of the 601 dropped domains, 2.50%, against a 1.36% base rate. Microsoft Defender is on 13, 2.16%, against 1.46%. Mimecast is on 13, 2.16%, against a base rate of 2.48%, and Barracuda on 8, 1.33%, against 1.82%: both of the largest peers are less common on the domains that dropped Sophos than on the domains that kept it, which is the opposite of what a migration looks like. The two candidates that do clear their base rate clear it on 15 and 13 domains. And the dropped signal is a verification record, which cannot measure a departure in the first place. We publish nothing here rather than dress up noise as a trend.

Technology	Domains	Market Share
Microsoft Defender	268,449	37.34%
Jellyfish	96,512	13.42%
Mimecast	69,123	9.61%
MailChannels	65,764	9.15%
Barracuda	64,320	8.95%

Tech Stack of Sophos-Powered Websites

Every percentage in this table divides by the 47,391 domains our live crawl currently answers for Sophos, a different base from the 46,240 in the August rollup at the top of the page. No row here is a share of the headline count.

Content management comes first and it reads like a small-business population. WordPress is on 23,552 domains, 49.70%, with TYPO3 CMS at 1,696 (3.58%), Wix at 1,456 (3.07%), Squarespace at 1,143 (2.41%), Drupal at 1,022 (2.16%), Webflow at 1,004 (2.12%) and Joomla at 737 (1.56%). Half the base on WordPress, with Wix and Squarespace present at all, is not the profile of an enterprise web estate.

Hosting says the same thing and adds a country. GoDaddy is on 8,062 (17.01%), WP Engine on 2,441 (5.15%), IONOS on 1,731 (3.65%), Plesk on 808 (1.70%), OVHcloud on 685 (1.45%), Kinsta on 638 (1.35%) and ALL-INKL on 537 (1.13%). IONOS and ALL-INKL are German hosts, TYPO3 CMS above is a German content management system, and Borlabs Cookie below is a German WordPress consent plugin. Four rows, from four vendors in three product categories, all pointing at the 18.08% Germany share in the country table.

The group headed Verified SaaS Accounts on the Same Domains is the like-for-like comparison on this page, because every row in it is detected the way Sophos is, as a verification record written into DNS. Atlassian is on 3,088 (6.52%), Zoom on 1,172 (2.47%), DocuSign on 1,092 (2.30%), Webex on 804 (1.70%), Miro on 460 (0.97%), Smartsheet on 422 (0.89%) and LogMeIn on 393 (0.83%). Same mechanism, same persistence, same inability to expire, and the highest of them reaches 6.52% of the 47,391. That fits a population which buys security before it buys collaboration software.

Consent and privacy is a second read on company size, and it arrives without touching a company record. CookieYes is on 2,405 (5.07%), Cookie Control on 2,318 (4.89%), Cookiebot on 2,145 (4.53%), Complianz on 1,705 (3.60%), Borlabs Cookie on 1,430 (3.02%), Usercentrics on 975 (2.06%) and OneTrust on 715 (1.51%). OneTrust finishes last in that group. It is the enterprise consent platform, and on an enterprise base it heads this group comfortably; here it sits behind three WordPress plugins. CookieYes and Complianz are WordPress plugins, Borlabs Cookie is a WordPress plugin sold in German, and the ordering of this group is a company-size finding reached without reading a single company record.

Content Management

WordPress

23,552 (49.7%)

TYPO3 CMS

1,696 (3.58%)

Wix

1,456 (3.07%)

Squarespace

1,143 (2.41%)

Drupal

1,022 (2.16%)

Webflow

1,004 (2.12%)

Joomla

737 (1.56%)

Web Hosting

GoDaddy

8,062 (17.01%)

WP Engine

2,441 (5.15%)

IONOS

1,731 (3.65%)

Plesk

808 (1.7%)

OVHcloud

685 (1.45%)

Kinsta

638 (1.35%)

ALL-INKL

537 (1.13%)

Verified SaaS Accounts on the Same Domains

Atlassian

3,088 (6.52%)

Zoom

1,172 (2.47%)

DocuSign

1,092 (2.3%)

Webex

804 (1.7%)

Miro

460 (0.97%)

Smartsheet

422 (0.89%)

LogMeIn

393 (0.83%)

Consent & Privacy

CookieYes

2,405 (5.07%)

Cookie Control

2,318 (4.89%)

Cookiebot

2,145 (4.53%)

Complianz

1,705 (3.6%)

Borlabs Cookie

1,430 (3.02%)

Usercentrics

975 (2.06%)

OneTrust

715 (1.51%)

Expert Analysis: Sophos Growth Trends & Key Signals for Sales Teams in 2026

David ThomsonCTO, TechnologyChecker

Frequently Asked Questions