Sophos

Export software inventory from Sophos Endpoint (Sophos Central) and upload it with the SIM template.

Sophos Endpoint collects device and application information through its endpoint agent and reports it to Sophos Central. The relevant data sources for SIM import are:

• Endpoints (Computers / Servers), Device name, operating system, and status.
• Installed Applications, Software name, version, and publisher detected on endpoints.
• Sophos Central REST API, Programmatic access to endpoint and application inventory data.

Note: Visibility of installed applications requires Endpoint Inventory to be enabled in Sophos Central.

• Access to Sophos Central Admin.
• Role with permission to view Endpoints and Inventory data.
• Endpoint agents actively reporting and in a healthy state.
• Permission to export inventory data (CSV).

• Sophos Central API credentials (Client ID and Client Secret).
• Access to the Sophos Central API endpoint (https://api.central.sophos.com).
• A PowerShell, curl, or Postman environment to execute REST API calls.
• (Recommended) Understanding of pagination and rate limits for large estates.

This method is suitable for manual or ad-hoc exports.

1. Log in to Sophos Central Admin.
2. Navigate to Devices → Computers.
3. Select one or more devices, then open View details → Software / Applications.
4. Use the Export option (where available) or switch to Reports → Inventory.
5. Ensure the following fields are included:

• Device Name
• Application Name
• Version
• Publisher

6. Export the report as CSV.
7. Save the file as Sophos_SIM_Export.csv.

Tip: For recurring exports, create a custom Inventory Report under Reports.

For automated or large-scale environments, use the Sophos Central APIs.

# Sophos Endpoint SIM Template Export Script
# Requires Sophos Central API credentials

$ClientId = "YOUR_CLIENT_ID"
$ClientSecret = "YOUR_CLIENT_SECRET"
$TenantId = "YOUR_TENANT_ID"
$ExportPath = "C:\Exports\Sophos_SIM_Export.csv"

# Get OAuth token
$TokenResponse = Invoke-RestMethod -Method Post `
  -Uri "https://id.sophos.com/api/v2/oauth2/token" `
  -Headers @{ "Content-Type" = "application/x-www-form-urlencoded" } `
  -Body "grant_type=client_credentials&client_id=$ClientId&client_secret=$ClientSecret"

$AccessToken = $TokenResponse.access_token

$Headers = @{
    "Authorization" = "Bearer $AccessToken"
    "X-Tenant-ID"   = $TenantId
    "Accept"        = "application/json"
}

# Get endpoints
$Endpoints = Invoke-RestMethod -Uri "https://api.central.sophos.com/endpoint/v1/endpoints?pageSize=100" `
    -Headers $Headers -Method Get

$ExportData = @()

foreach ($Endpoint in $Endpoints.items) {
    # Get installed applications per endpoint
    $Apps = Invoke-RestMethod -Uri "https://api.central.sophos.com/endpoint/v1/endpoints/$($Endpoint.id)/applications" `
        -Headers $Headers -Method Get

    foreach ($App in $Apps.items) {
        $ExportData += [PSCustomObject]@{
            "Device Name"        = $Endpoint.hostname
            "Software Name"      = $App.name
            "Software Version"   = $App.version
            "Software Publisher" = $App.publisher
        }
    }
}

# Export to CSV
$ExportData | Export-Csv -Path $ExportPath -NoTypeInformation -Encoding UTF8
Write-Host "Export complete: $ExportPath"

For large environments, loop through paginated results using the pageFromKey parameter returned by the API.

The CSV header row must be exactly Device Name,Software Name,Software Version,Software Publisher.

1. Open the Licenseware SIM Template.
2. Go to the Software Inventory tab.
3. Paste the CSV data into the template

Remove blank or extraneous rows before saving.

Then upload it on the SIM - Template data source. See SIM template.

Device Name,Software Name,Software Version,Software Publisher
LAPTOP-001,Google Chrome,129.0.6668.90,Google LLC
SERVER-02,Microsoft SQL Server 2022,16.0.432,Microsoft Corporation
LAPTOP-004,Slack,4.39.95,Slack Technologies
WS-015,Adobe Acrobat DC,24.002.20933,Adobe Inc.