Skip to content

Sophos for developers

Build with Sophos Fusion

One API surface for endpoint, email, firewall, and XDR. Automate your security operations, integrate your stack, and ship workflows that respond at machine speed.

Get started How our APIs work

Start here

  • Get started Your first API call in minutes

    Create a service principal, request an access token, and make your first API call.

    Getting started

  • Concepts How our APIs work

    Authentication, regions, pagination, rate limits, and errors — the behavior every API shares.

    How our APIs work

  • API reference Every operation, documented

    Operation-level documentation with request and response samples for every endpoint.

    All APIs

Endpoint Alerts SIEM Email Firewall Cases Detections Live Discover

What's new

New endpoints, fields, and fixes land regularly. Follow What's New or subscribe to its RSS feed to stay current.