Sophos says OpenAI's Daybreak cuts threat-investigation time 96%, automates 52% of MDR cases
2026-10-09
OpenAI published a customer story on October 9, 2026 stating that cybersecurity firm Sophos uses OpenAI's Daybreak agent to cut cyber-threat investigation time by 96% and automate 52% of managed-detection-and-response (MDR) cases, while preserving human oversight.
Significance 3: A named enterprise customer with specific, large percentage figures is a notable adoption data point, held at 3 rather than 4 because it is OpenAI's own published customer story with no independent verification of the methodology behind the percentages.
Implications · machine-drafted, not owner judgment
A credible, named cybersecurity vendor reporting large, specific efficiency gains from an agentic security tool is a genuine counter-data-point to the persistent enterprise-AI-ROI-gap pattern this tracker has been accumulating — though as a vendor-published story without independent audit, it carries the same evidentiary weight as the Barclays Claude story already logged, not more.
- An independent or Sophos-authored account of the same deployment with methodology detail
- Whether other MDR/security vendors report comparable automation rates with Daybreak or competitors
Sources
- primary Sophos cuts threat investigation time by 96% with OpenAI Daybreak retrieved 2026-10-09