PAGES
← all tools
◆ Data Security & DLP

Sophos Central Device Encryption

Version 1.4.43 commercial

Sophos Central Device Encryption manages and enforces full-disk encryption on Windows (BitLockerBitLockerA full-disk encryption feature built into Windows, maintained by Microsoft, that protects data at rest by encrypting entire volumes; cyber tools use it to audit encryption status or recover keys from managed endpoints.) and macOS (FileVaultFileVaultApple's full-disk encryption feature built into macOS, using XTS-AES-128 to encrypt the startup volume so that data is unreadable without the user's credentials.) devices from a centralized cloud console.

Summary

Sophos Central Device Encryption is a commercial data-security solution that manages and enforces full-disk encryption on Windows using BitLocker and macOS using FileVault from a centralized cloud console. The solution is run through its central platform and is intended for security teams needing device protection management. Its documentation positions it alongside endpoint management platforms, and the product has seen 25 releases in the tracking period.

Sophos Central Device Encryption manages and enforces full-disk encryption on Windows (BitLocker) and macOS (FileVault) devices from a centralized cloud console.

How Sophos Central Device Encryption helps

Which of our laptops would be exposed if one went missing tomorrow?

shows encryption status for every enrolled Windows and macOS device from one console, so unencrypted or non-compliant machines are visible before they become an incident

Can a locked-out employee get back into their laptop without walking a technician through the disk?

stores the BitLocker and FileVault recovery keys centrally, so an administrator can retrieve the key for a specific device and hand it to the user

Are our Macs actually protected the same way our Windows fleet is?

enforces FileVault on macOS and BitLocker on Windows through the same policy set, so both platforms are held to one encryption standard instead of two separate ones

Is encryption actually turned on, or just configured to turn on?

reports the enforcement state per device from the console, distinguishing machines where the policy applied from those still pending or failed

Who can pull a disk recovery key, and would we know if they did?

centralizes key storage and retrieval in the cloud console tied to the security team's access, rather than leaving keys on local machines or with individual users

Languages

Not documented

Release-note detail over time

See how much detail Sophos Central Device Encryption puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Website history

sophos.com, every change

Sophos's home page and 1 more page as they looked each month from September 2021 to October 2026: 12 renders, 3 changes of tagline or palette. Step through them, play them, or put any two months side by side.

Website history is included with Researcher and Business.

See plans →

Releases

1 entry

  1. April 20181

    1 entry

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    browse all tools → score card for your toolchain →