No more typing reviews! Try our Samantha, our new voice AI agent.

Sophos Cybersecurity as a Service vs WSO2 API Manager comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 16, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Sophos Cybersecurity as a S...
Average Rating
8.8
Number of Reviews
13
Ranking in other categories
AWS Marketplace (5th)
WSO2 API Manager
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
42
Ranking in other categories
API Management (11th)
 

Mindshare comparison

Sophos Cybersecurity as a Service and WSO2 API Manager aren’t in the same category and serve different purposes. Sophos Cybersecurity as a Service is designed for AWS Marketplace and holds a mindshare of 0.2%, up 0.1% compared to last year.
WSO2 API Manager, on the other hand, focuses on API Management, holds 3.3% mindshare, down 5.0% since last year.
AWS Marketplace Mindshare Distribution
ProductMindshare (%)
Sophos Cybersecurity as a Service0.2%
Stardog Enterprise Knowledge Graph Platform0.4%
Prior Labs TabPFN-2.50.3%
Other99.1%
AWS Marketplace
API Management Mindshare Distribution
ProductMindshare (%)
WSO2 API Manager3.3%
Microsoft Azure API Management11.9%
Amazon API Gateway9.0%
Other75.8%
API Management
 

Featured Reviews

SR
Director at a outsourcing company with 1,001-5,000 employees
Integrated defenses have enabled rapid ransomware prevention and streamlined incident response
Sophos Cybersecurity as a Service is a mature platform with strong endpoint protection, MDR, and integrated security capabilities. However, areas exist where it can continue to evolve. I see opportunities around AI-driven automation, cloud-native security, identity protection, third-party integrations, executive reporting, and proactive risk management. Sophos already provides a strong integrated security platform with MDR, XDR, endpoint protection, and firewall integration. The next evolution is to become even more predictive and autonomous. I would like to see deeper AI-driven response automation, enhanced cloud and identity threat detection, broader third-party integrations, executive-focused risk dashboards, automated compliance mapping, and continuous external attack surface management. These enhancements would not only improve security outcomes but also help CISOs better demonstrate cyber risk reduction and business value. To make it a ten, I would like to see cloud-native workload protection and identity security deeper compared with some specialized competitors. Some enterprises with highly customized SOCs may prefer broader native integration and automation available from platforms such as Microsoft, Palo Alto Networks, or CrowdStrike. Further enhancement in executive reporting and exposure management capabilities is also needed.
MM
Manager, Integration Technical Delivery at United Delta
Middleware integration has become smoother and manages API lifecycles and scopes effectively
Regarding WSO2 API Manager, I have no drawbacks or areas for improvement. However, regarding the Micro Integrator, I had some issues while developing complex services because it was mainly designed to be used for simple services, not complex ones. While using complex services, I encountered some issues. I communicated this with WSO2, and they released other products that solved everything related to my concern. These products were released before my concern was raised. When I explored them, they were pretty good, and I did not see the same issues I had experienced. WSO2 is enhancing themselves, and their products are fine. The previous concern was about the previous product, so it is resolved now since there are new products available. I would like WSO2 to improve quality or response time in support, or both.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I personally know hundreds of customers, and I can say they are very satisfied with Sophos Cybersecurity as a Service."
"Enhanced Threat Hunting and Forensics help my organization address cyberattacks."
"Since using Sophos Cybersecurity as a Service, I have seen measurable improvements such as faster incident response, fewer successful attacks, and significant efficiency gains for IT teams, with independent evaluations showing near-perfect detection rates and response times under two minutes, translating directly into saved hours and reduced risk."
"Sophos Cybersecurity as a Service has positively impacted my organization by simplifying cybersecurity operations while improving our ability to detect and respond to threats."
"Sophos Heartbeat and the Sophos AI-driven ransomware protection for Sophos Cybersecurity as a Service are significant benefits."
"Since the day we started using Sophos Cybersecurity as a Service MDR, there has not been a single incident."
"Overall, I find Sophos Cybersecurity as a Service to be very great and very fast."
"Sophos Cybersecurity as a Service offers very tight security and compliance; if anybody applies Sophos at their premises, the environment is completely secure and sound."
"A complete integration suite and a good platform."
"The solution is open source and easy to configure."
"It's a good product."
"Its open-source features are very good, especially for your production work."
"This solution is a little bit faster, easier to use, and has better integration than the other solutions I have experienced."
"This is a flexible and versatile API management solution that has the power to integrate with more than just API."
"The advice I have for any of the organizations or companies looking for an API manager is that they, first of all, verify the building block before selecting a product."
"I think the best part about WSO2 API Manager is that it's highly customizable because it's open-source."
 

Cons

"Unfortunately, Sophos Cybersecurity as a Service doesn't provide that kind of visibility into what software or tools are installed on a particular system."
"There are a few areas where Sophos Cybersecurity as a Service could be improved."
"Sophos Cybersecurity as a Service could be improved by adding features such as patch management and file encryption, as these are currently missing."
"In terms of improvement, Sophos testing after implementation is quite difficult."
"There are a lot of technical issues with the implementation of Sophos Cybersecurity as a Service, particularly because we are currently implementing the XG series, where Citrix is the endpoint, leading to a lot of confusion."
"The disadvantages of Sophos Cybersecurity as a Service include that the support, specifically after-sales support, needs to be improved."
"Sophos Cybersecurity as a Service is continuously consuming more resources, which leads to slower PC performance, so reducing resource consumption would be better for both Sophos products and our sales."
"The issue is that I am mentioning the need for more education because customers are using the solution, but I do not think they are maximizing the use or the functionalities of the solution."
"WSO2 API Manager can be improved a lot relating to usability"
"I wouldn't actually recommend this to anyone. Personally, I wouldn't recommend this solution at all."
"We had some problems with the reverse proxy not being able to invoke fully qualified domain names, so we have to build some custom scripts to solve this issue."
"Providing easy configuration for email and SMS notifications, layout and customization of admin and developer landing pages."
"I would improve the product documentation. There are some gaps, and it can be difficult to find the proper documentation for the product if you need to solve something."
"WSO2 API Manager should improve its marketplace subscription model and documentation in order to reach a higher level in the market."
"For fresh graduates and engineers, the setup process can be very difficult."
"Basically, mTLS is a certificate-based communication protocol that WSO2 API Manager doesn't support."
 

Pricing and Cost Advice

Information not available
"WSO2 API Manager is an open-source solution."
"We use the open-source version — the free version."
"It is costly, around ten thousand per year, per instance"
"It's not expensive, but it could be cheaper."
"I am using the free version."
"We have not opted for the paid version of WSO2 but we have implemented the free and open source WSO2 software to a great extent and it is working as per our expectation."
"The challenge is the increasing pricing, which has led some customers to consider alternatives, like using Spring Boot solutions instead. The rising costs, especially as cores and usage increase, have been a concern, prompting some to migrate to other products."
"For our projects, we found the pricing to be a little high."
report
Use our free recommendation engine to learn which AWS Marketplace solutions are best for your needs.
908,858 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
38%
Comms Service Provider
9%
Outsourcing Company
9%
Security Firm
7%
Financial Services Firm
20%
Comms Service Provider
8%
Manufacturing Company
6%
Computer Software Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business15
Large Enterprise3
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise7
Large Enterprise21
 

Questions from the Community

What needs improvement with Sophos Cybersecurity as a Service?
The R&D team is very good in doing their task and continuously conducting research. I cannot comment on what could be added in future updates of Sophos Cybersecurity as a Service that they need...
What is your primary use case for Sophos Cybersecurity as a Service?
I want to discuss the experience with Sophos Cybersecurity as a Service products. I have familiarity with the service in general, but I do not have specific experience with Sophos. Sophos Cybersecu...
What advice do you have for others considering Sophos Cybersecurity as a Service?
Most of our customers are very cautious about the data that they are keeping, so they prefer buying Sophos Cybersecurity as a Service directly from Sophos or third-party vendors to building their i...
What needs improvement with WSO2 API Manager?
Regarding WSO2 API Manager, I have no drawbacks or areas for improvement. However, regarding the Micro Integrator, I had some issues while developing complex services because it was mainly designed...
What is your primary use case for WSO2 API Manager?
My major use cases for WSO2 API Manager are mainly for system integration between multiple layers because we are working on the middleware layer between the systems.
What advice do you have for others considering WSO2 API Manager?
The thing that I hoped WSO2 had in their integration products, not WSO2 API Manager, was AI agents, and now they have this. I believe at this stage, they have the things that the market is going th...
 

Overview

 

Sample Customers

Information Not Available
1. eBay 2. StubHub 3. Cisco 4. Verizon 5. T-Mobile 6. Vodafone 7. Orange 8. BT Group 9. Telstra 10. Deutsche Telekom 11. Swisscom 12. AT&T 13. Sprint 14. Telefonica 15. O2 16. British Airways 17. Lufthansa 18. Emirates 19. Qatar Airways 20. Etihad Airways 21. Air France 22. KLM 23. American Express 24. Visa 25. Mastercard 26. PayPal 27. Western Union 28. Citibank 29. HSBC 30. Barclays 31. Santander 32. Goldman Sachs
Find out what your peers are saying about Dice, HailBytes, PeerSpot and others in AWS Marketplace. Updated: July 2026.
908,858 professionals have used our research since 2012.