OpenAI Reports a 96% Cut in Sophos's Threat-Investigation Time
OpenAI says Sophos used its Daybreak product to cut cyber-threat investigation time by 96 percent and to automate 52 percent of MDR cases while preserving human oversight. Both numbers come from OpenAI's own account of the customer's deployment — vendor-reported figures about a tool the vendor sells.
The pairing is the interesting part. A speed figure flatters any automation story; an automation rate is the one that raises the real question of where judgment still sits. A percentage cut in investigation time doesn't say which investigations got faster, whether those were routine alerts or the messy ones, or how much of the work an analyst still has to check.
AI-generated discussion · Different perspectives
The claim worth watching is the 52 percent of MDR cases automated, not the 96 percent. Automation rate is where oversight either holds or quietly thins out; speed savings can coexist with more alerts per analyst per shift.
Or the speed number is the more telling one. If the same team now turns around investigations it once queued for days, the workflow changes even if headcount doesn't — and "preserving human oversight" can survive as a line in a case study while the volume per person changes underneath it.
Either way it's one customer's deployment as told by the seller, so treat it as a direction of travel rather than a benchmark anyone else should expect to hit.