It's 2am. Something's wrong. You're staring at a dashboard you don't fully understand, trying to figure out whether it's a misconfigured rule or an active breach. You need someone who knows Sophos inside-out, on the other end of the phone, right now.
The Incident Response Retainer is that pre-arranged line. A 12-month subscription under Sophos Managed Detection & Response that locks in a response capability before you need it, so you're not scrambling for a vendor at the worst possible moment.
This is the new-subscription SKU. If you're already on a retainer and this is your next cycle, grab the renewal SKU instead — same coverage, no re-onboarding.
You get the comfort of knowing the path from 'something's off' to 'it's contained' is already mapped, staffed, and ready when it fires
| brand | SOPHOS |
| product_type | Incident Response Retainer |
| subscription_length_months | 12 |
| subscription_type | New |
| category | Managed Detection & Response (MDR) |
| coverage | Incident response under Sophos MDR |