In short: Sophos Endpoint 100 is a fixed-price Sophos Endpoint offer designed for organisations with up to 100 users. It brings the same Sophos Endpoint (Intercept X) protection that larger organisations use, including ransomware defences, to computers and servers, with one fixed recommended price for user and server licences. It suits many small firms leaving Intercept X Essentials.
What is Sophos Endpoint 100?
Sophos Endpoint 100 is a licence option Sophos announced in September 2025, ahead of its late-2025 endpoint changes, and aimed squarely at small businesses. It is designed for organisations with up to 100 users (Sophos also describes this as up to 100 employees), covers both endpoints and servers, and has a single fixed recommended price for user and server licences, so there are no volume bands or promotions to work through.
Sophos describes it as bringing the same Sophos Endpoint capabilities that larger organisations use, including its ransomware defences, to smaller ones. In practice that means the Intercept X prevention covered on our home page: deep learning malware prevention, exploit prevention, CryptoGuard anti-ransomware with file rollback and Adaptive Attack Protection, all managed in Sophos Fusion (formerly Sophos Central).
Who Endpoint 100 is for
Endpoint 100 is designed for organisations that:
- have up to 100 users, plus the servers that support them
- want strong, automatic protection without choosing between editions
- want a predictable, fixed recommended price for user and server licences
- are coming off Intercept X Essentials, which is no longer sold, or off a free or consumer antivirus product
- need to show they have malware protection in place for Cyber Essentials or an insurer
Typical examples are professional practices, schools, charities, small manufacturers and retailers with a handful of servers. If you expect to grow past 100 users during the subscription, talk to us first, because the standard per-user licences may be a better fit. We confirm the current eligibility rules with Sophos before quoting.
Endpoint 100 vs standard Sophos Endpoint licences
| Sophos Endpoint 100 | Sophos Endpoint – User and – Server | |
|---|---|---|
| Who it is for | Organisations with up to 100 users | Organisations of any size |
| Price model | One fixed recommended price for user and server licences | Quoted on quantity, term and tier |
| Protection | Sophos Endpoint (Intercept X) protection for computers and servers | Sophos Endpoint, with the option of EDR, XDR or MDR tiers |
| Best for | Small organisations wanting simplicity | Growing or larger estates, or anyone needing EDR, XDR or MDR |
The key decision is whether you need more than prevention. Endpoint 100 is about protection. If you want your own team to investigate alerts, look at Sophos EDR; if you want Sophos's analysts to watch your estate 24/7, look at Sophos MDR. Our Sophos Endpoint editions comparison shows what each tier adds.
Moving to Endpoint 100
Most moves are straightforward because Endpoint 100 uses the same Sophos agent as other Sophos Endpoint licences:
- Count users and servers. Check you are within 100 users, and list every server, physical or virtual, plus Macs and laptops that are rarely in the office.
- Check operating systems. Windows 7, Windows 8.1, 32-bit Windows 10 and Windows Server 2012 machines are legacy platforms for Sophos; see Sophos Endpoint for Legacy Platforms and plan an upgrade.
- Switch at renewal. Existing Sophos customers can usually move at their renewal date, managing the new licence in the same Sophos Fusion account.
- Remove other antivirus. If you are coming from another product, we remove it and deploy Sophos device by device.
- Review policies. Make sure tamper protection, web control and ransomware settings are on, and run the Account Health Check in Sophos Fusion.
Making the most of a small Sophos estate
A small business rarely has a full-time security person, so the protection needs to look after itself. A few things we always recommend alongside Endpoint 100:
- set up alert emails to a monitored mailbox, so a Critical Attack Warning is seen quickly
- enable MFA on the Sophos Fusion admin accounts and on Microsoft 365, for example with Cisco Duo
- keep a tested, off-site backup; prevention is not a substitute for cloud backup
- train staff to spot phishing, for example with Sophos Phish Threat or our security awareness training
We can also manage the Sophos tenant for you, watching alerts and applying updates, if you would rather not do it in-house.
Pricing and quotes
Sophos sets a fixed recommended price for Endpoint 100 user and server licences, but we do not publish prices on this site. Contact us with your user and server numbers and we will send a written quote, alongside a per-user Sophos Endpoint quote if that might work out better for you.
How Forever Systems supplies and supports Sophos
We supply and support the Sophos portfolio for UK organisations, from a single Sophos Endpoint (Intercept X) licence to a fully managed Sophos estate across endpoint, server, firewall, email, network and managed detection and response.
- Scoping and licensing: the right products, tiers and add-ons for your users, servers and risk, and a clear view of how the old Intercept X names map to today's Sophos Endpoint, EDR, XDR and MDR
- Deployment and migration from other endpoint, firewall or email products, or from older Sophos products and on-premises consoles
- Policy tuning so protection is strong without blocking legitimate work
- Ongoing support: alerts, health checks, updates, renewals and licence true-ups in Sophos Central (now becoming Sophos Fusion)
Forever Systems Ltd is an independent IT and cyber security provider. We also supply alternatives such as Cisco Secure Endpoint and Check Point Harmony Endpoint, so our advice is impartial.
Want a Sophos quote, trial or renewal review?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Who can buy Sophos Endpoint 100?
Sophos designed Endpoint 100 for organisations with up to 100 users (or employees). It covers both computers and servers. Larger organisations use the standard Sophos Endpoint – User and Sophos Endpoint – Server licences.
Does Sophos Endpoint 100 cover servers?
Yes. Sophos describes Endpoint 100 as a fixed-price offer for both endpoints and servers, with one fixed recommended price for user licences and one for server licences.
Does Sophos Endpoint 100 include EDR or MDR?
Endpoint 100 is built around Sophos Endpoint protection. If you need investigation tools or a 24/7 managed service, Sophos EDR, Sophos XDR and Sophos MDR are separate tiers we can quote alongside it.
Is Sophos Endpoint 100 the replacement for Intercept X Essentials?
Sophos's stated route for Essentials customers is Sophos Endpoint at renewal. For organisations with up to 100 users, Endpoint 100 is often the simplest way to make that move, so we usually quote both.