Investigate security alerts with agents that plan, execute and summarize every case
Sophos, which protects more than 625,000 organizations, uses agents built on OpenAI Daybreak inside its MDR (managed detection and response) service. An investigation agent gathers customer context, detections, indicators of compromise and threat intelligence; a planning model runs a plan–execute–review loop and delivers a summary with recommended response actions for an analyst to review. Potentially destructive actions still require human oversight. We wrote the prompt below, since the source doesn't share the one used.