Sophos has expanded its Managed Risk capabilities with the introduction of Internal Attack Surface Management (IASM).

The update from the British cybersecurity firm sees Sophos Managed Risk offer both internal and external visibility, leveraging tech from exposure management firm Tenable.

Factored into the IASM tool, the Tenable scanning solution provides unauthenticated internal scanning in search of open ports, exposed services, and network-level misconfigurations.

As it behaves like a server, this kind of scanning can assess a system from an attacker’s-eye view without the need for credentials.

The Sophos offering also sees bolstered automation, with regular automated scanning and AI-powered prioritization of network vulnerabilities as they come.

While AI can be buzzword, there can be a potential benefit here for MSPs managing numerous network devices, with intuitive notices replacing the more laborious, laggard nature of scheduled audits and giant raw scan reports.

The Sophos update also ties in with the increasing platformization of network security, with AI part of this synergy, as noted by SDxCentral last year.

The IASM offering for Sophos Managed Risk is available as of Monday for new and existing Sophos Managed risk customers. The latter are advised to deploy Tenable Nessus scanners and schedule automated scans in their Sophos Central console.

Sophos reports there will be no changes to licenses or pricing.