{"api_version":"provider-public/1.0.0","provider":{"id":"provider:cato-networks","slug":"cato-networks","display_name":"Cato Networks Ltd. (trading and profile display name: Cato Networks)","provider_types":["technology_vendor"],"primary_geographies":[]},"revision":{"id":"revision:0b8c3f42d28c71efefe6ed68","dataset_version":"sha256-0f697fc7fc4690bb","editorial_revision":"unreviewed-import","reviewed_at":"2026-09-01T20:15:00.082Z"},"editorial":{"overview":"Cato Networks is frequently scored by us at Netify as being one of the easiest platforms to actually use, and they’re often considered a more integrated offering than most of the competition, which is primarily down to building their SASE solution from the ground up rather than bolting security onto an existing networking product, or the other way round. If you’re looking to collapse a fragmented maze of legacy firewalls, MPLS circuits, and point-product security tools into a single, cloud-native operational plane, Cato is one of the more compelling single-vendor SASE offerings on the market, though its middle-mile-centric architecture and fairly opaque licensing model mean it requires careful commercial scoping before you commit to anything, and that’s worth planning for early rather than discovering halfway through procurement.","page_title":"Cato Networks Ltd. (trading and profile display name: Cato Networks) SD-WAN and SASE profile","meta_description":"Cato Network  i  frequently  cored by u  at Netify a  being one of the ea ie t platform  to actually u e, and they’re often con idered a more integrated of"},"products":[{"id":"product:869c155c9b50e1ca043a4663","name":"Cato Browser Extension","category":"Clientless/browser-based access","delivery_relationship":"native","target_buyer":"Unmanaged devices, contractors","delivery_model":"Clientless","status":"current","evidence_source_ids":["evidence:cato-networks:10"]},{"id":"product:68cdde476e80bf933de4ff60","name":"Cato Client","category":"Remote-user agent","delivery_relationship":"native","target_buyer":"Remote/mobile users","delivery_model":"Client-based","status":"current","evidence_source_ids":["evidence:cato-networks:9"]},{"id":"product:f9644118e8f4fa2367fa65d2","name":"Cato DEM","category":"Digital experience monitoring","delivery_relationship":"native","target_buyer":"IT operations teams","delivery_model":"Cloud-delivered, add-on licence","status":"current","evidence_source_ids":["evidence:cato-networks:16"]},{"id":"product:65d2defe0b3b921afa21451f","name":"Cato EPP/EDR","category":"Endpoint protection","delivery_relationship":"partner","target_buyer":"All Cato Client users","delivery_model":"Client-based","status":"current","evidence_source_ids":["evidence:cato-networks:11"]},{"id":"product:e36682a79cde91523aa8a0da","name":"Cato SASE Cloud Platform","category":"Converged SASE","delivery_relationship":"native","target_buyer":"Mid-market/enterprise/multinational","delivery_model":"Cloud-delivered","status":"current","evidence_source_ids":["evidence:cato-networks:9"]},{"id":"product:9be6e0bdf060ed559fdf012d","name":"Cato SSE 360","category":"SSE stack (SWG, CASB, ZTNA, DLP, RBI, FWaaS)","delivery_relationship":"native","target_buyer":"Enterprise security teams","delivery_model":"Cloud-delivered","status":"current","evidence_source_ids":["evidence:cato-networks:38"]},{"id":"product:d45d8cd95c266b2ddb032488","name":"Cato Socket","category":"SD-WAN edge appliance","delivery_relationship":"native","target_buyer":"Branch/site","delivery_model":"On-prem appliance + cloud-managed","status":"current","evidence_source_ids":["evidence:cato-networks:9"]},{"id":"product:3c41fdd7a3464b63a6a4fde5","name":"Cato XDR / Managed XDR","category":"Extended detection and response","delivery_relationship":"native","target_buyer":"SOC teams / lean IT teams","delivery_model":"Cloud + optional managed service","status":"current","evidence_source_ids":["evidence:cato-networks:15"]},{"id":"product:e31feed7e858c2c75d35406c","name":"Cato vSocket","category":"Virtual SD-WAN edge","delivery_relationship":"native","target_buyer":"Cloud datacentre","delivery_model":"Virtual edge","status":"current","evidence_source_ids":["evidence:cato-networks:38"]},{"id":"product:0fb5fd6f1fabaeea871629f3","name":"Managed SASE / Managed Services","category":"Co-managed / fully managed operations","delivery_relationship":"partner","target_buyer":"Lean IT teams, MSP end customers","delivery_model":"Co-managed / fully managed","status":"current","evidence_source_ids":["evidence:cato-networks:28"]}],"capabilities":[{"id":"capability:cda885415862e3daf16bc08c","capability_code":"ai_assistant_copilot","label":"AI assistant/copilot","category":"ai_automation","support_state":"unknown","qualification":"Marketing language ('AI-native', 'AI-powered SASE') is broad - Netify should ask Cato to name the specific assistant product, if any, rather than accept 'AI-powered' at face value per the blueprint's own instruction (Section 4.6).","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:40"]},{"id":"capability:c9ce9d1eeb8f1df3b63a00f4","capability_code":"ai_data_protection_controls","label":"AI data protection controls","category":"ai_automation","support_state":"requires_confirmation","qualification":"Same as above","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:40"]},{"id":"capability:9c5e4e6659f71ae6a9b1a7fb","capability_code":"anomaly_detection","label":"Anomaly detection","category":"ai_automation","support_state":"requires_confirmation","qualification":"Depth of the ML methodology is not disclosed","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:e884e045de2ae7ea498233b6","capability_code":"automated_policy_recommendation","label":"Automated policy recommendation","category":"ai_automation","support_state":"unknown","qualification":"Not confirmed","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:a6533dc032a1ac1a5db9e0d3","capability_code":"automated_remediation","label":"Automated remediation","category":"ai_automation","support_state":"requires_confirmation","qualification":"Full auto-remediation (without human action) not confirmed","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:39"]},{"id":"capability:9a967661770f69b702607ade","capability_code":"capacity_path_optimisation","label":"Capacity/path optimisation","category":"ai_automation","support_state":"requires_confirmation","qualification":"None identified","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:5"]},{"id":"capability:f4f1ed039b6d640cad18323b","capability_code":"configuration_generation","label":"Configuration generation","category":"ai_automation","support_state":"unknown","qualification":"Not confirmed","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:84f50e2a1e4b805ff68aec77","capability_code":"digital_experience_diagnostics","label":"Digital experience diagnostics","category":"ai_automation","support_state":"requires_confirmation","qualification":"Requires DEM licence","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:16"]},{"id":"capability:b0fb0fa628dfb2e71076bdf8","capability_code":"generative_ai_application_controls","label":"Generative AI application controls","category":"ai_automation","support_state":"requires_confirmation","qualification":"Depth/accuracy of AI-traffic classification not independently tested","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:13","evidence:cato-networks:40"]},{"id":"capability:fa5282ccc3a8dcc3b366e587","capability_code":"natural_language_querying","label":"Natural-language querying","category":"ai_automation","support_state":"unknown","qualification":"Not confirmed","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:64f2f1c871b997eb5b1ba572","capability_code":"report_summarisation","label":"Report summarisation","category":"ai_automation","support_state":"unknown","qualification":"Not confirmed","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:7c2424a19909489db5265972","capability_code":"root_cause_analysis","label":"Root-cause analysis","category":"ai_automation","support_state":"requires_confirmation","qualification":"Depends on DEM/XDR licenses being active","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:328cf049129603c3a59ad6c5","capability_code":"threat_detection_classification","label":"Threat detection/classification","category":"ai_automation","support_state":"requires_confirmation","qualification":"Training claims ('trillions of events') are vendor-stated and not independently audited","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:8b16f70278fde25de8bbaf0f","capability_code":"user_entity_behaviour_analytics","label":"User/entity behaviour analytics","category":"ai_automation","support_state":"requires_confirmation","qualification":"Not confirmed","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:9d431fc498ae40d5b0ee484c","capability_code":"cap_5g_lte_support","label":"5G/LTE support","category":"architecture","support_state":"unknown","qualification":"Unknown","confidence":"low","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:27e4a2a4da6fe170cec4470e","capability_code":"application_identification","label":"Application identification","category":"architecture","support_state":"supported","qualification":"Native, described as part of the converged single-pass engine with AI/ML for unclassified application identification.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:37"]},{"id":"capability:9479e98b82cd9ce43f8efe7e","capability_code":"branch_lan_wlan_integration","label":"Branch LAN/WLAN integration","category":"architecture","support_state":"partially_supported","qualification":"Partial - Experience Monitoring integration exists for Cisco Meraki LAN/Wi-Fi troubleshooting via the Integration Hub, implying native LAN/WLAN is not built-in and relies on third-party gear plus Cato visibility.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:19"]},{"id":"capability:447a9fb77a589b4b4498f8a3","capability_code":"brownfield_migration_support","label":"Brownfield migration support","category":"architecture","support_state":"supported","qualification":"Native - MPLS coexistence, gradual deployment referenced in multiple case studies (SAP HEC migration, jewelry retailer, Ulta Beauty phased rollout).","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:26"]},{"id":"capability:dedd59c2b295c12f282b03fd","capability_code":"dynamic_path_selection","label":"Dynamic path selection","category":"architecture","support_state":"supported","qualification":"Native, continuously monitors real-time path performance (availability, latency, packet loss, jitter) and selects optimum route across the backbone, including indirect paths via other PoPs.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:5"]},{"id":"capability:d55e273932f0e78c5d8ebff2","capability_code":"edge_form_factors","label":"Edge form factors","category":"architecture","support_state":"unknown","qualification":"Multiple physical Socket hardware models (sized by site throughput) plus Cato vSocket for cloud/virtual deployment.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:36"]},{"id":"capability:3876e1f62bafdc1207452359","capability_code":"forward_error_correction_packet_duplication","label":"Forward error correction / packet duplication","category":"architecture","support_state":"requires_confirmation","qualification":"Native - packet duplication for packet loss mitigation, confirmed directly in Cato's own documentation: TCP packets duplicated across active links, UDP packets duplicated across active or standby links.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:44","evidence:cato-networks:45","evidence:cato-networks:46"]},{"id":"capability:99e99c1543a5a2d83476d7b2","capability_code":"high_availability","label":"High availability","category":"architecture","support_state":"partner_delivered","qualification":"Backbone SLA cited at 99.999% uptime across multiple (including partner-sourced) references.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:30:1","evidence:cato-networks:30:2"]},{"id":"capability:983a0d32ea14bc657bad7631","capability_code":"leo_satellite_support","label":"LEO satellite support","category":"architecture","support_state":"unknown","qualification":"Unknown","confidence":"low","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:831df98cf99007a2de7d6de2","capability_code":"local_internet_breakout","label":"Local internet breakout","category":"architecture","support_state":"supported","qualification":"Native, configurable per site/rule.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:9"]},{"id":"capability:14b4d5bda6b10d404ff86c82","capability_code":"qos_and_traffic_engineering","label":"QoS and traffic engineering","category":"architecture","support_state":"requires_confirmation","qualification":"Native - Network Rules let admins assign a bandwidth-priority QoS tier to business-critical traffic, alongside acceleration/optimisation and transport-path settings, confirmed directly in Cato's admin documentation.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:46"]},{"id":"capability:862547e93399004ff9ef5dee","capability_code":"segmentation_vrf_capability","label":"Segmentation / VRF capability","category":"architecture","support_state":"unknown","qualification":"Unknown","confidence":"low","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:4b57cf5efce423ecb02ca034","capability_code":"supported_wan_underlays","label":"Supported WAN underlays","category":"architecture","support_state":"unknown","qualification":"MPLS, broadband/internet, and mixed underlay; Socket can route site-to-site over MPLS and internet to support gradual migration.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:9"]},{"id":"capability:c3f3b3ec640eda4b8c8901a7","capability_code":"virtual_cloud_edge_support","label":"Virtual/cloud edge support","category":"architecture","support_state":"supported","qualification":"Cato vSocket available on AWS, Azure, GCP and VMware.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:38"]},{"id":"capability:229ca4d0b94535f3dc2ab090","capability_code":"zero_touch_provisioning","label":"Zero-touch provisioning","category":"architecture","support_state":"supported","qualification":"Native - described in multiple retail case studies as enabling near-zero-touch store rollout.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:24"]},{"id":"capability:5bd40603b227f2ce33494fb5","capability_code":"application_aware_routing","label":"Application-aware routing","category":"core_capabilities","support_state":"supported","qualification":"None identified","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:5"]},{"id":"capability:5b62eb4c3d6c8c9408a92be9","capability_code":"casb_api","label":"CASB - API","category":"core_capabilities","support_state":"unknown","qualification":"Not confirmed as a distinct API-mode capability in sources reviewed","confidence":"low","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:d4108648ea751ca11e46bb86","capability_code":"casb_inline","label":"CASB - inline","category":"core_capabilities","support_state":"supported","qualification":"Inline vs API-mode split not clearly documented in public sources","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:13"]},{"id":"capability:cff3db5424da3688a006793e","capability_code":"cloud_firewall_cloud_network_security","label":"Cloud firewall / cloud network security","category":"core_capabilities","support_state":"supported","qualification":"None identified","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:9"]},{"id":"capability:e35800edcea7d92956ebc0d9","capability_code":"dns_security","label":"DNS security","category":"core_capabilities","support_state":"requires_confirmation","qualification":"None identified","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:0e166236ebcf1f385b874d1b","capability_code":"data_loss_prevention","label":"Data loss prevention","category":"core_capabilities","support_state":"supported","qualification":"Whether DLP is bundled in the base SASE tier or requires an add-on licence is not confirmed - flagged for vendor question","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:13"]},{"id":"capability:c3f2e38a2470f3c4fe4d1707","capability_code":"digital_experience_monitoring","label":"Digital experience monitoring","category":"core_capabilities","support_state":"supported","qualification":"Requires DEM licence beyond base SASE platform","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:16"]},{"id":"capability:f9ab3d79b8f5bed77f083f33","capability_code":"firewall_as_a_service","label":"Firewall as a Service","category":"core_capabilities","support_state":"supported","qualification":"None identified","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:15"]},{"id":"capability:43588592e2cece5ae2ed415b","capability_code":"multi_cloud_networking","label":"Multi-cloud networking","category":"core_capabilities","support_state":"supported","qualification":"None identified","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:9"]},{"id":"capability:4ba0c685603cfb01a69cfb91","capability_code":"sd_wan","label":"SD-WAN","category":"core_capabilities","support_state":"supported","qualification":"Requires Socket hardware or vSocket for full SD-WAN function; browser/clientless routes bypass SD-WAN path selection","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:9"]},{"id":"capability:9b73a76d363f587f32c6387b","capability_code":"saas_security_posture","label":"SaaS security posture","category":"core_capabilities","support_state":"unknown","qualification":"No dedicated SSPM-style capability found in sources reviewed; CASB covers SaaS visibility but a distinct posture-management feature was not confirmed","confidence":"low","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:67712164d7b7bedefaaffabf","capability_code":"secure_web_gateway","label":"Secure web gateway","category":"core_capabilities","support_state":"supported","qualification":"Not independently itemised outside the SSE 360 bundle in sources reviewed","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:10"]},{"id":"capability:00e370c43f31fe30fdd09953","capability_code":"threat_intelligence","label":"Threat intelligence","category":"core_capabilities","support_state":"supported","qualification":"None identified","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:15"]},{"id":"capability:ceb1108b80d6200e75d52b9e","capability_code":"wan_optimisation","label":"WAN optimisation","category":"core_capabilities","support_state":"supported","qualification":"None identified","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:44","evidence:cato-networks:45"]},{"id":"capability:3c5471dc76b53128a8c81226","capability_code":"ztna","label":"ZTNA","category":"core_capabilities","support_state":"supported","qualification":"None identified in sources reviewed","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:10"]},{"id":"capability:00b0c91dfcc430a870662a6a","capability_code":"clientless_access","label":"Clientless access","category":"remote_access","support_state":"supported","qualification":"None identified","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:10"]},{"id":"capability:90f96f3d2e720ab89d63ccc9","capability_code":"contractors_third_parties","label":"Contractors/third parties","category":"remote_access","support_state":"supported","qualification":"Positioned as the route for users who can't install a client","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:10"]},{"id":"capability:db4192683efc2f88b475bd51","capability_code":"managed_laptops","label":"Managed laptops","category":"remote_access","support_state":"supported","qualification":"None identified","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:9"]},{"id":"capability:75b31fb31b318a4ed4d3b2c5","capability_code":"mobile_devices","label":"Mobile devices","category":"remote_access","support_state":"supported","qualification":"None identified","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:9"]},{"id":"capability:a0b3ee9f64020554c7a5dd08","capability_code":"privileged_access","label":"Privileged access","category":"remote_access","support_state":"unknown","qualification":"Not confirmed","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:4429807764472cdbb4cc2c20","capability_code":"remote_browser_isolation","label":"Remote browser isolation","category":"remote_access","support_state":"supported","qualification":"All-or-nothing platform dependency (see Table 3)","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:13"]},{"id":"capability:e5c6f58cf56cd62aea0f116b","capability_code":"remote_browser_isolation","label":"Remote browser isolation","category":"remote_access","support_state":"supported","qualification":"All-or-nothing platform dependency - RBI cannot be bought without the wider Cato SASE platform","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:12"]},{"id":"capability:7ce7dc52f1b12996ddf4228b","capability_code":"unmanaged_byod_devices","label":"Unmanaged/BYOD devices","category":"remote_access","support_state":"supported","qualification":"Depth of BYOD-specific policy control not confirmed","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:10"]},{"id":"capability:6b26a9597036fd571f343420","capability_code":"vdi_environments","label":"VDI environments","category":"remote_access","support_state":"unknown","qualification":"Not confirmed","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:cf717c7743f646f0b13cc855","capability_code":"application_performance","label":"Application performance","category":"reporting_analytics","support_state":"supported","qualification":"Requires DEM licence","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:16"]},{"id":"capability:ffecfe3da3a3df0c8d39260a","capability_code":"compliance_reporting","label":"Compliance reporting","category":"reporting_analytics","support_state":"unknown","qualification":"Not confirmed","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:30554c20f8e8954c582abfcd","capability_code":"custom_reports","label":"Custom reports","category":"reporting_analytics","support_state":"unknown","qualification":"Not confirmed","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:4198748838ec1f01de7e7eea","capability_code":"dlp_events","label":"DLP events","category":"reporting_analytics","support_state":"requires_confirmation","qualification":"Not confirmed","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:6ca18c6d66a76195547d8cd5","capability_code":"executive_dashboard","label":"Executive dashboard","category":"reporting_analytics","support_state":"requires_confirmation","qualification":"Not confirmed","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:1e83f37fd17141dca83e0344","capability_code":"network_health","label":"Network health","category":"reporting_analytics","support_state":"supported","qualification":"Requires DEM licence","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:16"]},{"id":"capability:a2da5be54620c67118b2323f","capability_code":"raw_log_access","label":"Raw log access","category":"reporting_analytics","support_state":"requires_confirmation","qualification":"Not confirmed","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:22"]},{"id":"capability:05fe92237ed04bcb67601c33","capability_code":"remote_user_experience","label":"Remote-user experience","category":"reporting_analytics","support_state":"supported","qualification":"Requires DEM licence","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:16"]},{"id":"capability:937d67eab44c5d8e3eeb0d4f","capability_code":"sla_reporting","label":"SLA reporting","category":"reporting_analytics","support_state":"requires_confirmation","qualification":"Not confirmed","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:dd4b3456cfbc4a3bf7a8b319","capability_code":"scheduled_reports","label":"Scheduled reports","category":"reporting_analytics","support_state":"unknown","qualification":"Not confirmed","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:8cdcb6d0341b057892fe4b4e","capability_code":"security_events","label":"Security events","category":"reporting_analytics","support_state":"supported","qualification":"Not confirmed","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:15"]},{"id":"capability:249f1ce0ae3a5695edeaf795","capability_code":"site_and_circuit_performance","label":"Site and circuit performance","category":"reporting_analytics","support_state":"supported","qualification":"Requires DEM licence","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:16"]},{"id":"capability:616b8bd17ef1e2455e913324","capability_code":"threat_reporting","label":"Threat reporting","category":"reporting_analytics","support_state":"requires_confirmation","qualification":"Not confirmed","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"capability:35125de49100fc6d23de4f6f","capability_code":"user_experience","label":"User experience","category":"reporting_analytics","support_state":"supported","qualification":"Requires DEM licence","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:16"]}],"geographies":[{"id":"geographies:efb26f062d57ff45b6c19b12","geography":"Africa coverage","delivery_type":"Unknown - not itemised in sources reviewed.","delivery_relationship":"unknown","qualification":"Unknown - not itemised in sources reviewed. | Unknown | Not specified | No named PoPs found | Not found | Low | Same evidence gap as above.","confidence":"low","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"geographies:282ef05da50ba9b5bf4df335","geography":"Asia-Pacific coverage","delivery_type":"Partially evidenced - China (see above); broader APAC PoP list not found in sources reviewed. Sacra research (2026) notes new PoPs added in Kazakhstan (Central Asia) and Chennai (India, IP ranges) as part of ongoing expansion.","delivery_relationship":"owned","qualification":"Partially evidenced - China (see above); broader APAC PoP list not found in sources reviewed. Sacra research (2026) notes new PoPs added in Kazakhstan (Central Asia) and Chennai (India, IP ranges) as part of ongoing expansion. | Direct | China; expansion signals in Central Asia and India | Full APAC PoP map not found | Medium | Cato appears to be actively filling APAC gaps rather than having complete coverage already - useful context for buyers with APAC-heavy estates to ask about their specific countries directly.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:8"]},{"id":"geographies:c20d55cae9f631badc3375bd","geography":"Carrier interconnects","delivery_type":"Multiple tier-1 ISPs per PoP.","delivery_relationship":"owned","qualification":"Multiple tier-1 ISPs per PoP. | Direct | Global | Specific carrier names not disclosed | 2026 platform page | Medium | Standard practise for backbone resilience; nothing unusual to flag.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"geographies:9605a71c67348d0b0c1dbc6f","geography":"China coverage","delivery_type":"Explicitly documented - licensed PoPs in Beijing, Shanghai and Shenzhen, plus a stated government-approved link to Hong Kong.","delivery_relationship":"owned","qualification":"Explicitly documented - licensed PoPs in Beijing, Shanghai and Shenzhen, plus a stated government-approved link to Hong Kong. | Direct (licensed in-country presence) | China (3 named cities) + Hong Kong link | Extent of coverage beyond these 3 cities, and details of the regulatory licensing arrangement, not further detailed in sources reviewed | High | This is a genuinely differentiated claim - many SASE/SSE vendors treat China as partner-only or unsupported; Cato's direct licensed PoPs are worth verifying further as a specific buyer-relevant differentiator for multinational China-inclusive estates.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:7"]},{"id":"geographies:6ae1b9aedf5e868bb484255f","geography":"Data residency choices","delivery_type":"Private PoP option exists, allowing dedicated, isolated infrastructure with local internet peering for a single customer - implies some data residency control, though a formal data-residency policy document was not sourced in this pass.","delivery_relationship":"owned","qualification":"Private PoP option exists, allowing dedicated, isolated infrastructure with local internet peering for a single customer - implies some data residency control, though a formal data-residency policy document was not sourced in this pass. | Direct | Wherever a Private PoP is deployed | Formal data residency commitments/documentation not independently verified | Medium | Private PoP is the relevant lever for data-residency-sensitive buyers (e.g. public sector, regulated finance) - worth a direct question to Cato on which regions support Private PoP today.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:42"]},{"id":"geographies:dd0dc6613c8e816e14eb825c","geography":"Latin America coverage","delivery_type":"Unknown - not itemised in sources reviewed, though general global marketing implies presence.","delivery_relationship":"unknown","qualification":"Unknown - not itemised in sources reviewed, though general global marketing implies presence. | Unknown | Not specified | No named PoPs found | Not found | Low | Same evidence gap.","confidence":"low","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"geographies:b549bc0c9914a229c7fd400d","geography":"Middle East coverage","delivery_type":"Unknown - not itemised in sources reviewed beyond the general 'global' claim.","delivery_relationship":"unknown","qualification":"Unknown - not itemised in sources reviewed beyond the general 'global' claim. | Unknown | Not specified | No named PoPs found | Not found | Low | Evidence gap - do not infer coverage from the general global claim; ask directly or find a PoP map.","confidence":"low","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"geographies:1223b18a0c37db6b30303633","geography":"Private backbone","delivery_type":"Confirmed - multi-tier-1-carrier interconnected private backbone with SLA on availability, latency, packet loss and jitter; software selects optimum path including indirect routing.","delivery_relationship":"owned","qualification":"Confirmed - multi-tier-1-carrier interconnected private backbone with SLA on availability, latency, packet loss and jitter; software selects optimum path including indirect routing. | Direct | Global | Backbone capacity/ownership model (owned fibre vs leased tier-1 capacity) not fully itemised in sources reviewed | 2026 platform page | High | The backbone is Cato's central architectural claim and is well-documented directly by Cato; independent third-party performance benchmarking (e.g. the 13x jitter/latency reduction claim from firewall.cx) should be treated as vendor-adjacent rather than independently audited.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"geographies:648e51ea68e1b0cc0947d59c","geography":"Public cloud on-ramps","delivery_type":"AWS, Azure, GCP direct on-ramps via vSocket, cross-connect or agentless IPSec.","delivery_relationship":"owned","qualification":"AWS, Azure, GCP direct on-ramps via vSocket, cross-connect or agentless IPSec. | Direct | Wherever those hyperscalers have regions | None identified | High | Strong, multi-hyperscaler on-ramp story.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:38"]},{"id":"geographies:caeee3f5d8711dd95ca8aa78","geography":"SD-WAN gateways / cloud gateways","delivery_type":"Delivered from the same PoP infrastructure as security edges - Cato does not appear to operate a separate SD-WAN-only gateway network.","delivery_relationship":"owned","qualification":"Delivered from the same PoP infrastructure as security edges - Cato does not appear to operate a separate SD-WAN-only gateway network. | Direct | Same as above | None identified | Ongoing (platform architecture) | Medium | Consistent with Cato's single-converged-platform positioning.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"geographies:bde6445a59fae47d5280ce46","geography":"Security PoPs / service edges","delivery_type":"90+ PoPs cited in March 2026 vendor material; a separate 'Cato Neural Edge' GPU-enabled compute layer is described as spanning 100+ PoPs. Earlier vendor/partner pages (2024-2025) cite 65-80+, showing steady growth over time.","delivery_relationship":"owned","qualification":"90+ PoPs cited in March 2026 vendor material; a separate 'Cato Neural Edge' GPU-enabled compute layer is described as spanning 100+ PoPs. Earlier vendor/partner pages (2024-2025) cite 65-80+, showing steady growth over time. | Direct (Cato-owned/operated network) | Global - specific full country list not found in sources reviewed | Exact current PoP count varies by publication date; treat any single figure as a snapshot, not a fixed spec | Mar 2026 (90+); undated 2026 page (100+, Neural Edge) | Medium | The PoP count is a moving, actively-marketed number - cite it with the publication date every time rather than repeating a single figure as timeless fact.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"geographies:bc08930e6d5d75f74da39267","geography":"Sovereign/regional service options","delivery_type":"Same as Private PoP above; no separate 'sovereign cloud' branded offering found.","delivery_relationship":"owned","qualification":"Same as Private PoP above; no separate 'sovereign cloud' branded offering found. | Direct | As above | Not confirmed as a distinct sovereign-cloud product | As above | Low-Medium | Do not conflate Private PoP with a formal sovereign-cloud certification - they are not confirmed to be the same thing.","confidence":"low_medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]}],"service_models":[{"id":"service_models:01d58750b4fce5abbe8aecea","model":"other","support_state":"unknown","qualification":"Self-service via Cato Management Application (CMA); Socket ships pre-configured for zero-touch connect | Cato Management Application (CMA) | General IT/network admin, not vendor-certified specialist per multiple case studies | Zero-touch provisioning for Socket | Low, per case study evidence (jewelry retailer: 'extremely easy') | None significant identified in sources reviewed | Consistently described as low-effort across independent case studies - one of Cato's stronger, better-evidenced claims for lean IT teams.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:25"]},{"id":"service_models:0d2c0d2f191836990655394a","model":"other","support_state":"unknown","qualification":"Unknown - not found in sources reviewed | Presumably CMA/API | Not confirmed | Platform API exists (see Table 12) suggesting scriptable bulk change is possible | Not confirmed | Not confirmed | Not found in public sources reviewed | Reasonable to infer bulk-change capability exists given the documented REST/GraphQL API, but this should be confirmed directly rather than presented as verified.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"service_models:143f3fcd5d61db3e61dadb43","model":"other","support_state":"partner_delivered","qualification":"Referenced via partner example (Aegis IR 'owns carrier tickets and OEM TAC cases') | Per partner | N/A | Premium, MSP-delivered | Shared | Not specified | Not a native Cato capability as far as sources show - this is an MSP-layer service on top of the platform, relevant to how Netify frames MSP-delivered Cato vs direct Cato.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:31"]},{"id":"service_models:19e2e034b2620bc38a7f86e4","model":"other","support_state":"unknown","qualification":"Same as above | Per service tier | N/A | Premium | Shared | Not specified | Same | Same caveat as above.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"service_models:1b9164b1ddf09fbe28496b44","model":"other","support_state":"supported","qualification":"Available via Managed SASE / MSP co-managed models | Per service tier | N/A | Premium (managed service tier) | Shared per co-managed agreement | Not specified | Netify should clarify with Cato or the relevant MSASE partner exactly what 'co-managed configuration' includes before quoting to a buyer weighing self-service vs managed.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:28"]},{"id":"service_models:297d6e8f673a2bbe57d32668","model":"other","support_state":"requires_confirmation","qualification":"Confirmed via MSASE Partner Platform - flexible licensing, AI/ML-assisted SOC/NOC practices for partners | CMA (partner tier) | MSP/partner-level administrators | AI/ML used in partner SOC/NOC operations per Cato's own materials | Not itemised | Not itemised | A real, structured partner programme rather than an ad-hoc reseller arrangement - relevant if Netify profiles any Cato-powered MSPs separately.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:28","evidence:cato-networks:29"]},{"id":"service_models:33867e657c548c56672ae058","model":"other","support_state":"partner_delivered","qualification":"Referenced via MSP partner playbooks (e.g. Aegis IR/CM), not detailed directly by Cato | Per partner | N/A | Premium, MSP-delivered example found | Shared per MSP agreement | Not specified | This table row is better evidenced by looking at specific MSASE partners' service descriptions than by Cato's own site - worth noting this pattern for Netify's service-provider profiles too.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:31"]},{"id":"service_models:35b73eff026ab48a9137cdf2","model":"other","support_state":"supported","qualification":"Yes (as CPE only, not a self-contained on-prem product) | Cato Socket appliance | Socket → nearest PoP → backbone | Cloud (CMA) | Branch offices, data centres | Low (zero-touch provisioning) | Physical Socket shipped and self-configuring on connect | Not a traditional 'on-prem' deployment in the legacy sense - the appliance is a thin edge into the cloud platform, which is the point of SASE but worth explaining plainly to buyers used to on-box policy.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:9"]},{"id":"service_models:39d9bfcc95db57ba79ff8b4a","model":"other","support_state":"supported","qualification":"Native | 24x7 | N/A (cloud service) | Included for platform; MXDR is the premium security-monitoring tier | N/A | N/A | Same as above | N/A","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"service_models:3c7b1d35f6a5b2b211c77c05","model":"other","support_state":"supported","qualification":"Yes | Cato Socket | Socket → PoP | Cloud (CMA) | Distributed branch/retail estates | Low | See Table 4 zero-touch provisioning; strongly evidenced via Ulta Beauty rollout | Retail/branch rollout at scale is one of Cato's best-evidenced use cases.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:24"]},{"id":"service_models:46c1f881856f224e2ebcfb95","model":"other","support_state":"supported","qualification":"Native (MXDR) and self-service (XDR) | 24x7 for MXDR | N/A | MXDR is Cato-delivered/managed; base XDR gives the customer the tools | Depends on tier chosen | Not separately quantified | Since 2019 for MXDR per Cato's own materials - a reasonably long track record for this specific service line.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:30:1","evidence:cato-networks:30:2"]},{"id":"service_models:489cca0b9a467c875cb74745","model":"other","support_state":"supported","qualification":"Yes | Mix of Socket, vSocket, Client, clientless | Mixed | Cloud (CMA), unified | Most real-world enterprise estates | Moderate (depends on estate complexity) | Case studies show phased/gradual rollout across mixed environments | This is realistically how most Cato deployments look - a mix of edge types unified under one policy plane.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:24","evidence:cato-networks:25"]},{"id":"service_models:4ddfaa5d74b18b7bac280382","model":"other","support_state":"unknown","qualification":"Cato Client install or Browser Extension/clientless route | CMA + Client | End-user self-install typical of this style of client | Not itemised | Not itemised | Not itemised | General platform pages | Standard for the category; no distinctive evidence found either way.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"service_models:5a45f255d137d1464f1d6f44","model":"other","support_state":"unknown","qualification":"Unknown - not found in sources reviewed | Presumably CMA | Not confirmed | Not confirmed | Not confirmed | Not confirmed | Not found in public sources reviewed | Evidence gap.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"service_models:631d9b0c92f88920c954a970","model":"other","support_state":"unknown","qualification":"Referenced for Enterprise tier ('dedicated account management' per Vendr pricing analysis) | Not specified | Not specified | Premium (Enterprise tier) | N/A | Not specified | Consistent with typical enterprise-tier SaaS/network vendor practise.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:32"]},{"id":"service_models:757a78febff3fd1c96b97376","model":"other","support_state":"requires_confirmation","qualification":"Confirmed - Managed Deployment Advanced Package (Professional Services Engineering + Technical Product Management hours) referenced for AWS deployments | N/A | N/A | Premium/add-on | N/A | N/A | Concrete evidence of a paid professional-services onboarding package, at least for AWS-hosted deployments.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:38"]},{"id":"service_models:7c07239c1e3e6b02ac1f0800","model":"other","support_state":"supported","qualification":"Yes | Cato Management Application (CMA), Cato Cloud | Via nearest Cato PoP | Centralised, cloud | All customers - core delivery model | Low | N/A - default | This is the platform's default and only real operating model; everything else (Socket, Client) is an edge/on-ramp into it.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:9"]},{"id":"service_models:8347fe96371ae101634695bc","model":"other","support_state":"supported","qualification":"Native - Cato MXDR, delivered since 2019 per Cato's own materials | 24x7 | Not itemised by location | Premium tier | N/A | Not separately quantified | One of the better-evidenced managed-service claims, with a specific start year - still worth independently corroborating the '2019' claim via a primary Cato source rather than a partner page.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:30:1","evidence:cato-networks:30:2"]},{"id":"service_models:92c00cccdd2bac4ec59cde4e","model":"other","support_state":"unknown","qualification":"Rule-based policy in CMA, unified across networking and security | CMA | Not itemised | Unknown | Not itemised | Not itemised | General platform pages | Insufficient specific evidence to grade confidently - flag as a gap rather than assume ease based on general platform marketing.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"service_models:946f924e8f16b0f747c35b87","model":"other","support_state":"supported","qualification":"Yes | Cato vSocket | vSocket → nearest PoP → backbone | Cloud (CMA) | Cloud datacentres (AWS/Azure/GCP/VMware) | Low | Deploy as VM image | Good fit for cloud-first estates wanting to avoid physical hardware entirely.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:9"]},{"id":"service_models:98b8a304c6ff824f3ad4f176","model":"other","support_state":"supported","qualification":"Yes | Browser Extension / web portal | Browser → PoP | Cloud (CMA) | BYOD, contractors | Low | N/A | See Table 5.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"service_models:a173ec3a9b75e7a4dee6a555","model":"other","support_state":"supported","qualification":"Yes | Cato + customer IT, or Cato + MSP partner | As above | Shared, via CMA roles | Lean IT teams wanting shared operational control | Depends on split of responsibilities | See Table 8/9 for operational detail | Netify should get explicit clarity from Cato/MSP partners on where the line sits before recommending for a specific buyer's staffing model.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"service_models:a36efba5b34fa4d32f22c18d","model":"other","support_state":"supported","qualification":"Native - Cato SOC exists and underpins Managed XDR/MDR | 24x7 | Not itemised by location | Included in Managed XDR; base XDR is self-service | Depends on tier - self-service XDR vs fully managed MXDR | Not separately quantified | Clear tiering exists (self-service vs Cato-managed) - Netify should present these as genuinely different propositions, not interchangeable, since staffing implications differ a lot for the buyer.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:30:1","evidence:cato-networks:30:2"]},{"id":"service_models:a8bf9fdf1848df81e091a78e","model":"other","support_state":"supported","qualification":"Yes | Direct cross-connect or agentless IPSec, or vSocket | Cloud provider → Cato PoP | Cloud (CMA) | Hybrid/multi-cloud enterprises | Low-Moderate | Multiple connectivity options avoid AWS Direct Connect/Azure ExpressRoute costs | A genuinely useful cost-avoidance angle for buyers already paying for premium cloud connectivity.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:9"]},{"id":"service_models:a967f60603ab40a26a37ddc1","model":"other","support_state":"unknown","qualification":"Unknown - not found in sources reviewed | Not found | Not found | Not confirmed | Not confirmed | Not confirmed | Not found in public sources reviewed | Evidence gap.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"service_models:b1ec4220f96cb48683d57c4d","model":"other","support_state":"supported","qualification":"Yes | Cato Managed SASE / MSASE partner | As above | Cato or partner-managed | SME/mid-market via MSP, or enterprises wanting full outsourcing | Low for the customer | Delivered via Cato's own Managed Services or the MSASE Partner Platform for MSPs | Genuinely two routes to 'fully managed' - direct from Cato, or via a Cato-powered MSP - worth distinguishing clearly in buyer guidance since service quality will vary by MSP.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:28"]},{"id":"service_models:bfc98c4203a3b3701eab5134","model":"other","support_state":"unknown","qualification":"Cloud-delivered updates for the platform; Socket firmware lifecycle not detailed in sources reviewed | CMA (implied) | Not confirmed for Socket firmware specifically | Cloud platform updates are automatic per Cato's 'no customer involvement' claims (Table 8 NOC) | Low for cloud platform; Socket firmware process not confirmed | Not confirmed | Reasonable to assume low customer burden given the cloud-native model, but Socket-specific firmware/patch cadence should be verified directly for hardware-heavy retail/branch buyers.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:30:1","evidence:cato-networks:30:2"]},{"id":"service_models:ccb6de431c4c17e7bf72bae5","model":"other","support_state":"unknown","qualification":"Ship Socket, connects and self-configures | CMA (remote) | No on-site specialist required per multiple case studies | Zero-touch | Low - Ulta Beauty scaled to 10 stores/night at 99.99% success | Early-stage manual pilots had lower (70-90%) success rates before process automation | The Ulta story is genuinely useful evidence here: even Cato's own customer needed to build process maturity before reaching the headline success rate - a fair caveat for buyers expecting instant perfection.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:24"]},{"id":"service_models:e1576b4aaa95fc934919e6c4","model":"other","support_state":"requires_confirmation","qualification":"Confirmed - 'true multi-tenancy' cited specifically for the MSASE Partner Platform | CMA (partner-tier) | MSP/partner administrators | Not itemised | Not itemised | Not itemised | Relevant mainly to MSP/service-provider buyers rather than direct enterprise buyers - worth keeping that distinction clear.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:28"]},{"id":"service_models:e1eed84a28af12d7ea8589da","model":"other","support_state":"unknown","qualification":"Unknown - not found in sources reviewed for Socket hardware RMA/replacement terms | Not found | Not found | Not confirmed | Not confirmed | Not confirmed | Not found in public sources reviewed | Evidence gap - ask directly, this matters for branch/retail buyers doing hardware rollouts at scale.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"service_models:e996ee5c34a23515cb33ef86","model":"other","support_state":"supported","qualification":"Yes | Cato Client | Client → PoP | Cloud (CMA) | Managed device remote/hybrid workforce | Low | N/A | Standard SASE remote-access pattern.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:9"]},{"id":"service_models:f538bd366ade040e5304c338","model":"other","support_state":"unknown","qualification":"Unknown - not found in sources reviewed | Presumably CMA | Not confirmed | Not confirmed | Not confirmed | Not confirmed | Not found in public sources reviewed | Evidence gap - most enterprise platforms of this kind support RBAC, but Netify should not assert it as verified without a source.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"service_models:fabd0ff0a6a8663f3eb6c1a7","model":"other","support_state":"supported","qualification":"Native - Cato operates its own NOC for the backbone/platform itself | 24x7x365 (per partner-sourced material) | Not itemised by location in sources reviewed | Included as part of the platform service (backbone operation), separate from customer-facing Managed SASE add-on | Customer configures site policy; Cato operates the underlying network | 99.999% uptime SLA cited (see Table 4) | Backbone NOC operation is core to the service and not itself optional - but note the 24x7 figure and SLA came from partner pages in this pass, so pull Cato's own service description/SLA document for the evidence register before quoting to a buyer.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:30:1","evidence:cato-networks:30:2"]},{"id":"service_models:ffbdcbc0e927c805254cb252","model":"other","support_state":"unknown","qualification":"DEM and XDR 'stories' correlate network/security signals for root-cause analysis | CMA (DEM/XDR dashboards) | Reduced specialist requirement per Cato's own positioning ('no specialized knowledge needed' - customer quote) | AI-assisted correlation (DEM stories, XDR network stories) | Positioned as low-effort | Depends on DEM/XDR licence being active | The AI-correlated 'stories' concept (combining DEM + XDR) is a genuine, well-documented operational aid - but note it depends on add-on licenses (DEM, XDR) being purchased, not just the base SASE platform.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:9"]}],"compliance":[{"id":"compliance:82ed1ab4e7d918607faa57a5","framework":"DORA relevance","scope":"N/A","support_state":"unknown","expiry_or_review_date":null,"qualification":"Unknown - not found in sources reviewed | N/A | Not confirmed | EU financial services | Not found in public sources reviewed | Not found | Evidence gap - relevant to Netify's financial-services sector suitability assessment (Table 14).","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"compliance:72c7a67c6c3a81231da61cb8","framework":"Data residency","scope":"Per-customer, where Private PoP is deployed","support_state":"partially_supported","expiry_or_review_date":null,"qualification":"Partial - see Table 7 Private PoP entry | Per-customer, where Private PoP is deployed | Private PoP (dedicated, isolated infrastructure) | Wherever Private PoP is available | 22 Jul 2026 | See Table 7 - same evidence and same caveat about needing a formal data-residency policy document.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:42"]},{"id":"compliance:038d547bde4d967dd091f70c","framework":"Encryption/key management","scope":"Platform","support_state":"unknown","expiry_or_review_date":null,"qualification":"Unknown in detail - not found beyond general 'secure' claims in sources reviewed | Platform | Not confirmed in technical detail (e.g. specific encryption standards, key management/HSM approach) | None identified | Not found in public sources reviewed at sufficient technical depth | Not found | Evidence gap - this is a common RFP question and Netify should source Cato's actual security whitepaper/architecture guide rather than rely on marketing pages.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"compliance:689c7af228b4008e98fe7ef6","framework":"FedRAMP","scope":"N/A","support_state":"not_supported","expiry_or_review_date":null,"qualification":"Not found - no evidence of FedRAMP authorisation in sources reviewed | N/A | Not confirmed/likely not applicable given Cato's non-US-government-focused positioning | US federal | Not found in public sources reviewed | Not found | Reasonable to mark as Not Applicable pending confirmation, given no US-federal-specific positioning found anywhere in Cato's materials reviewed - but do not assert this definitively without a direct cheque.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"compliance:424f2c5b44aa0cfde9c689aa","framework":"GDPR","scope":"Platform/company","support_state":"unknown","expiry_or_review_date":null,"qualification":"Compliant (self-attested) | Platform/company | Privacy-by-design approach referenced; Data Processing and Privacy Agreement available | EU/UK relevant | 22 Jul 2026 | Standard vendor self-attestation plus a public DPA - reasonable baseline evidence, though GDPR 'compliance' is ultimately a shared responsibility with the customer, not a certification in the ISO/SOC sense.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:41"]},{"id":"compliance:26fd0722f3d925a989931b42","framework":"HIPAA","scope":"Platform","support_state":"unknown","expiry_or_review_date":null,"qualification":"Attestation report achieved (per Trust Centre announcement) | Platform | HIPAA attestation report referenced alongside the 2025/2026 SOC 2 Type II renewal | US healthcare-relevant | 22 Jul 2026 | Relevant for US healthcare buyers; UK/NHS-specific frameworks are a separate question (see below).","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:18"]},{"id":"compliance:b95e7447c44be41ac7103178","framework":"ISO 27001","scope":"Cato SASE Cloud platform/company ISMS","support_state":"unknown","expiry_or_review_date":null,"qualification":"Certified | Cato SASE Cloud platform/company ISMS | ISO/IEC 27001:2013 certification cited; Trust Centre also references renewal of 27001/27017/27018/27701 family | None identified | 22 Jul 2026 | Solid, consistently repeated across Cato's own primary pages - high confidence.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:17","evidence:cato-networks:18"]},{"id":"compliance:2e3309ef10332c494b3b96ce","framework":"Logging/auditability","scope":"Platform","support_state":"requires_confirmation","expiry_or_review_date":null,"qualification":"Partial - CVE Numbering Authority (CNA) status and Responsible Disclosure Policy confirm a mature security-engineering practise; customer-facing audit logging depth not itemised | Platform | CNA status; XDR data lake provides underlying event logging | None identified | 22 Jul 2026 | CNA status is a genuinely credible signal of security-programme maturity (Cato assigns its own CVEs) - a good, under-used data point for the Netify View on this vendor's security posture.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:18"]},{"id":"compliance:1b41fa6c9d74f5dda718c9d7","framework":"NHS DSPT relevance","scope":"N/A","support_state":"unknown","expiry_or_review_date":null,"qualification":"Unknown - not found in sources reviewed | N/A | Not confirmed | UK | Not found in public sources reviewed | Not found | Evidence gap - this is directly relevant to Netify's UK healthcare-sector buyers and should be asked of Cato/its UK entity directly rather than left blank.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"compliance:aded66fd92e6bb00353a7e9f","framework":"NIS2 relevance","scope":"N/A","support_state":"unknown","expiry_or_review_date":null,"qualification":"Unknown - not found in sources reviewed | N/A | Not confirmed | EU | Not found in public sources reviewed | Not found | Evidence gap - increasingly relevant for EU critical-infrastructure buyers; worth a direct question.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"compliance:3a4dea60e004fae5d26ede41","framework":"PCI DSS","scope":"Platform","support_state":"unknown","expiry_or_review_date":null,"qualification":"Certified | Platform | PCI-DSS Level 1 - highest tier for payment data | None identified | 22 Jul 2026 | Level 1 (not a lower merchant tier) is a meaningfully strong claim for retail/payment-handling buyers.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:17"]},{"id":"compliance:39699cff01bb4c23a389ace2","framework":"SOC 2","scope":"Platform","support_state":"unknown","expiry_or_review_date":null,"qualification":"Certified (Type II) | Platform | SOC 2 Type II report; SOC 3 also referenced | None identified | 22 Jul 2026 | Confirmed, with both SOC 2 and the public-facing SOC 3 summary available - useful for buyers wanting a lighter-weight public attestation.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:18"]},{"id":"compliance:abe1e7c7401317d83d59b97a","framework":"UK public sector frameworks","scope":"N/A","support_state":"unknown","expiry_or_review_date":null,"qualification":"Unknown - not found in sources reviewed | N/A | Not confirmed | UK | Not found in public sources reviewed | Not found | Evidence gap - directly relevant to Netify's BT/UK public-sector-facing work; worth checking G-Cloud/Crown Commercial Service framework listings directly.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]}],"integrations":[{"id":"integrations:b3b2445141024cb302180a58","integration_name":"AWS","integration_type":"Cloud","delivery_relationship":"native","qualification":"Cloud | Native (vSocket, cross-connect, agentless IPSec; also a Marketplace listing) | Bidirectional (connectivity + optional Marketplace billing) | Not specified | Available via AWS Marketplace | High | Well-evidenced, including a formal Marketplace presence.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:38"]},{"id":"integrations:b65acd2d49cffb2fbf84d7dd","integration_name":"Active Directory","integration_type":"Identity","delivery_relationship":"unknown","qualification":"Identity | Not separately confirmed as distinct from Entra ID integration | Unknown | Not specified | Not detailed | Not found as distinct from Entra ID in sources reviewed | Low | Do not assume classic on-prem AD/LDAP support is identical to Entra ID support - verify separately.","confidence":"low","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"integrations:8caafa1730a4a286f84f9581","integration_name":"CrowdStrike","integration_type":"EDR","delivery_relationship":"api","qualification":"EDR | Native (two integration paths found: XOps API integration, and CrowdStrike Falcon Next-Gen SIEM event export) | Bidirectional (Cato reads CrowdStrike detections; Cato also sends events to CrowdStrike) | CrowdStrike Falcon Next-Gen SIEM subscription required for the SIEM-direction integration | Two distinct configured-integration paths documented | High | Unusually well-documented for a single integration - two separate, current support articles found.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:21"]},{"id":"integrations:08a38ebfe7444044c6418e90","integration_name":"Google Cloud","integration_type":"Cloud","delivery_relationship":"native","qualification":"Cloud | Native (vSocket) | Bidirectional | Not specified | Not detailed | Medium | Confirmed via secondary source; worth a primary Cato citation for the evidence register.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:36"]},{"id":"integrations:8c1bb40060f4083008faea35","integration_name":"Google Workspace","integration_type":"Identity/productivity","delivery_relationship":"unknown","qualification":"Identity/productivity | Unknown - not found in sources reviewed | - | - | - | Not found | Low | Evidence gap.","confidence":"low","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"integrations:6b240eff3862af2198996717","integration_name":"Intune","integration_type":"MDM/UEM","delivery_relationship":"unknown","qualification":"MDM/UEM | Unknown - not found in sources reviewed, though Microsoft Tenant connector suggests plausible technical adjacency | - | - | - | Not found directly | Low | Do not assume Intune integration exists just because Entra ID/Sentinel integrations do - verify separately.","confidence":"low","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"integrations:dff1357df1c6a9c6d162df16","integration_name":"Jamf","integration_type":"MDM/UEM","delivery_relationship":"unknown","qualification":"MDM/UEM | Unknown - not found in sources reviewed | - | - | - | Not found | Low | Evidence gap - relevant to verify given Apple-heavy enterprise estates.","confidence":"low","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"integrations:f13e4efd123f64300ba7a849","integration_name":"Microsoft 365","integration_type":"Productivity/SaaS","delivery_relationship":"unknown","qualification":"Productivity/SaaS | Implied via Teams DEM integration and general SaaS visibility, not separately itemised as a full M365 integration | Cato monitors/optimises traffic to M365 services | Not specified | Not detailed beyond Teams-specific DEM integration | Medium | Confirm scope directly - 'optimises M365 traffic' and 'full M365 tenant integration' are different claims.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:19"]},{"id":"integrations:df237b6b2a21810cece2bac8","integration_name":"Microsoft Azure","integration_type":"Cloud","delivery_relationship":"native","qualification":"Cloud | Native (vSocket, cross-connect, agentless IPSec) | Bidirectional | Not specified | Not detailed beyond general cloud on-ramp pages | High | Confirmed.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:9"]},{"id":"integrations:8281440b0769c631b6fbc552","integration_name":"Microsoft Defender","integration_type":"EDR","delivery_relationship":"native","qualification":"EDR | Native | Cato correlates Defender endpoint detections with network telemetry | Not specified | Listed on Integration Hub | High | Confirmed.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:19"]},{"id":"integrations:113111078b1fa9e37b689f82","integration_name":"Microsoft Entra ID","integration_type":"Identity","delivery_relationship":"native","qualification":"Identity | Native (via Cato Microsoft Tenant connector) | Cato reads identity data from Entra ID | Not specified | Configured via a shared 'MS Tenant' parent connector in the CMA, also used for Sentinel/other MS integrations | High | Well-documented, current (referenced alongside 2026-dated support articles).","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:20"]},{"id":"integrations:8af73afef578974297ca3b3d","integration_name":"Microsoft Sentinel","integration_type":"SIEM","delivery_relationship":"native","qualification":"SIEM | Native | Cato → Sentinel (event export) | Not specified | Uses shared MS Tenant connector; maps automatically to Sentinel data model | High | Well-documented and recently updated (2026 support articles) - a genuinely current integration.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:20"]},{"id":"integrations:75c44fae8b3f7305a0b3cca5","integration_name":"Okta","integration_type":"Identity","delivery_relationship":"native","qualification":"Identity | Native | Cato syncs Okta LDAP/SCIM users for user-aware access | Not specified | Listed on Cato Integration Hub | High | Confirmed native.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:19"]},{"id":"integrations:33c3d8ba9453a453ce81a7b1","integration_name":"Palo Alto Cortex","integration_type":"SIEM/XDR","delivery_relationship":"unknown","qualification":"SIEM/XDR | Unknown - not found in sources reviewed | - | - | - | Not found | Low | Evidence gap.","confidence":"low","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"integrations:532841c2d1cb64b4523cce99","integration_name":"REST API","integration_type":"Platform API","delivery_relationship":"api","qualification":"Platform API | Native - 'Platform API' listed as a core platform component; third-party sources also reference GraphQL API calls for monitoring | Bidirectional | Not specified | Used for monitoring/automation per community discussion (support forum) | Medium-High | API access is confirmed to exist and to support GraphQL-style queries per a Cato staff forum reply - good foundation for the bulk-change/automation questions flagged in Table 9.","confidence":"medium_high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:10","evidence:cato-networks:23"]},{"id":"integrations:7388f966ec504b3ccfaa5075","integration_name":"SCIM/SAML/OIDC","integration_type":"Identity federation","delivery_relationship":"native","qualification":"Identity federation | Native (SCIM confirmed for Okta/OneLogin/JumpCloud sync; SAML/OIDC implied by standard IdP integrations but not separately itemised) | Bidirectional (auth + user sync) | Not specified | Not detailed further | Medium | SCIM is explicitly confirmed; SAML/OIDC support is a reasonable inference from standard IdP integration but should be confirmed by name.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:19"]},{"id":"integrations:4ae4990e57bce338f60c01d7","integration_name":"ServiceNow","integration_type":"ITSM","delivery_relationship":"unknown","qualification":"ITSM | Unknown - not found in sources reviewed | - | - | - | Not found | Low | Evidence gap - do not assume ITSM integration exists without confirmation.","confidence":"low","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"integrations:62b043d14b4db4a34aa8b706","integration_name":"Splunk","integration_type":"SIEM","delivery_relationship":"native","qualification":"SIEM | Native (Cato Technology Add-on for Splunk) | Cato → Splunk (event export) | Not specified | Documented support article exists | High | Confirmed native, not just generic API/Syslog.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:22"]},{"id":"integrations:601fbf111e4ac2690962ed5c","integration_name":"Syslog","integration_type":"Log export","delivery_relationship":"native","qualification":"Log export | Native | Cato → Syslog receiver | Not specified | Documented under Event Integration support section | High | Confirmed.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:22"]},{"id":"integrations:6b2cd73d2acdb0760d7d08fd","integration_name":"Terraform","integration_type":"Infrastructure-as-code","delivery_relationship":"unknown","qualification":"Infrastructure-as-code | Unknown - not found in sources reviewed | - | - | - | Not found | Low | Evidence gap - worth checking Cato's developer/API documentation directly, as IaC support is increasingly expected by enterprise network teams.","confidence":"low","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]}],"sector_evidence":[{"id":"sector_evidence:21a084dce7bb898b21e4d2cc","sector":"Education","suitability_state":"unknown","named_evidence":"One qualitative customer quote found (unnamed institution) on catonetworks.com/platform/","case_study_strength":"strong","qualification":"Referenced in a customer quote ('reorganize our entire security portfolio... for our students, professors, and administrators') | General SASE consolidation value referenced qualitatively | Not assessed | One qualitative customer quote found (unnamed institution) on catonetworks.com/platform/ | N/A | Quote-level evidence only, not a structured case study with metrics | Treat as a weak signal only - a single unattributed quote is not the same standard of evidence as the Ulta Beauty case study; do not over-weight it.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:9"]},{"id":"sector_evidence:62867ffa04e40dd23ca9018f","sector":"Energy/utilities","suitability_state":"unknown","named_evidence":"None found","case_study_strength":"none","qualification":"Insufficient evidence | Not assessed | Not assessed | None found | N/A | No case study found | Evidence gap.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"sector_evidence:7c5430e393bcac6021abfde8","sector":"Financial services","suitability_state":"unknown","named_evidence":"None found in this research pass","case_study_strength":"none","qualification":"Insufficient evidence | PCI-DSS Level 1, DLP, CASB plausibly relevant | PCI-DSS Level 1 confirmed; DORA relevance not found | None found in this research pass | N/A | No named financial-services case study found in this pass | PCI-DSS Level 1 is a real, relevant data point for retail/payment buyers, but do not extend that into a general 'strong financial services fit' claim without case evidence.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:17"]},{"id":"sector_evidence:cb4f12938d7f8c0ef949acee","sector":"Government/public sector","suitability_state":"unknown","named_evidence":"None found in this research pass","case_study_strength":"none","qualification":"Insufficient evidence | Private PoP (data residency) plausibly relevant | UK/EU public-sector frameworks not found | None found in this research pass | N/A | No case study or framework listing found | Evidence gap - directly relevant to Netify's public-sector guidance; needs direct follow-up.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"sector_evidence:61c267f079f87c95f3a3f00b","sector":"Healthcare/NHS","suitability_state":"unknown","named_evidence":"None found in this research pass","case_study_strength":"none","qualification":"Insufficient evidence | DLP, ZTNA, RBI could plausibly support healthcare use cases | HIPAA attestation found (US); NHS DSPT relevance not found | None found in this research pass | N/A | No named healthcare case study or NHS-specific material found | Do not claim healthcare/NHS suitability beyond 'has HIPAA attestation' without a supporting case study or direct vendor confirmation of NHS DSPT status.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"sector_evidence:965f71ba6f4884af02cfe61f","sector":"Hospitality","suitability_state":"unknown","named_evidence":"None found","case_study_strength":"none","qualification":"Insufficient evidence | Branch/site model plausibly relevant | Not assessed | None found | N/A | No case study found | Evidence gap.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"sector_evidence:1c299e4ab3d4b6c4ab857427","sector":"Manufacturing","suitability_state":"unknown","named_evidence":"None found in this research pass","case_study_strength":"none","qualification":"Insufficient evidence | SD-WAN/branch capability plausibly relevant | Not assessed | None found in this research pass | N/A | No case study found | Evidence gap.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"sector_evidence:4c88cd722278647534f2ce00","sector":"Professional services","suitability_state":"unknown","named_evidence":"None found","case_study_strength":"none","qualification":"Insufficient evidence | Not assessed | Not assessed | None found | N/A | No case study found | Evidence gap.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"sector_evidence:0a30fdb049a166817e42492b","sector":"Retail","suitability_state":"unknown","named_evidence":"Ulta Beauty (large-scale, phased, near-zero-touch, 99.99% cutover success, 10 stores/night); Opkalla-documented jewelry retailer (24 stores, MSP cost reduction)","case_study_strength":"strong","qualification":"Strong fit (best-evidenced sector) | Zero-touch branch provisioning, backbone performance, DEM | PCI-DSS Level 1 | Ulta Beauty (large-scale, phased, near-zero-touch, 99.99% cutover success, 10 stores/night); Opkalla-documented jewelry retailer (24 stores, MSP cost reduction) | Backbone/PoP density matters most for geographically distributed store estates | Case evidence is US-centric; UK/EU retail-specific case studies not found in this pass | This is genuinely Cato's best-evidenced sector - Netify can cite the Ulta Beauty story with confidence given it's a named, detailed, metric-rich case study.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:24","evidence:cato-networks:25"]},{"id":"sector_evidence:c90d08f5586911314e762166","sector":"Transport/logistics","suitability_state":"unknown","named_evidence":"None found","case_study_strength":"none","qualification":"Insufficient evidence | Not assessed | Not assessed | None found | N/A | No case study found | Evidence gap.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]}],"case_studies":[{"id":"case_studies:1dba88e69b4c1c504b415f52","customer_type":"Anonymous (described only as 'a jewelry retailer' by the case study author, Opkalla, a Cato reseller partner)","named_customer":null,"sector":"Retail (jewelry)","geography":"Not specified","estate":"Not quantified; 24 stores","outcome":"Qualitative: 'tens of thousands of dollars' saved in implementation and ongoing MSP hardware-support costs (not independently itemised); ease-of-setup for 24 stores described as dramatically improved over the prior approach","quantified_result":"Qualitative: 'tens of thousands of dollars' saved in implementation and ongoing MSP hardware-support costs (not independently itemised); ease-of-setup for 24 stores described as dramatically improved over the prior approach","qualification":"Anonymous (described only as 'a jewelry retailer' by the case study author, Opkalla, a Cato reseller partner) | Retail (jewelry) | Not specified | Not quantified | 24 stores | Inconsistent, MSP-dependent firewall setup requiring physical site visits to fix issues; wanted easy, scalable technology for new store openings | Cato Socket-based branch connectivity, cloud-managed firewall replacing prior appliances | Branch appliance, remote/cloud configuration | Not itemised | Qualitative: 'tens of thousands of dollars' saved in implementation and ongoing MSP hardware-support costs (not independently itemised); ease-of-setup for 24 stores described as dramatically improved over the prior approach | Medium - published by a Cato reseller (Opkalla) rather than Cato directly or an independent outlet, and the customer is anonymous with only broad cost-saving language, not itemised figures | Useful as a smaller-scale, mid-market complement to the Ulta Beauty story, but weaker evidence quality (partner-published, anonymous, non-itemised savings) - cite with that caveat, don't treat it as equally rigorous.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:25"]},{"id":"case_studies:2faac703ea90ddeb30b17ab0","customer_type":"Named - Ulta Beauty","named_customer":null,"sector":"Retail (beauty)","geography":"United States","estate":"Not quantified; Large, multi-store estate (exact count not stated in source reviewed; described as company-wide rollout)","outcome":"Cutover success rate improved from 70-90% (early manual pilot) to 99.99% (scripted, automated); rollout pace reached 10 stores/night","quantified_result":"Cutover success rate improved from 70-90% (early manual pilot) to 99.99% (scripted, automated); rollout pace reached 10 stores/night","qualification":"Named - Ulta Beauty | Retail (beauty) | United States | Not quantified | Large, multi-store estate (exact count not stated in source reviewed; described as company-wide rollout) | Coordinating combined networking and Wi-Fi upgrades across many stores without a large on-site technical footprint | Cato SASE Cloud Platform, Socket-based branch connectivity, 90+ PoP backbone | Branch appliance, phased/scripted rollout | Not itemised | Cutover success rate improved from 70-90% (early manual pilot) to 99.99% (scripted, automated); rollout pace reached 10 stores/night | High - named customer, direct quotes from a named individual (Moncada), specific before/after metrics | The single best piece of evidence in this profile: named, quantified, and honest about the ramp-up curve rather than only showing the polished end state. Strong candidate for direct citation in buyer-facing content.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:24"]},{"id":"case_studies:76503c57df0f710e712068cf","customer_type":"Described as 'the SAP project team' in Cato's own blog - appears to be a named engagement with a company running SAP HANA Enterprise Cloud, but the end-customer company name was not evident in the source reviewed","named_customer":null,"sector":"Not specified (enterprise SAP user)","geography":"Not specified","estate":"Not quantified; Not quantified","outcome":"Qualitative: project delivered on schedule despite a short deployment window; point-to-point connectivity achieved without a full site-to-site mesh","quantified_result":"Qualitative: project delivered on schedule despite a short deployment window; point-to-point connectivity achieved without a full site-to-site mesh","qualification":"Described as 'the SAP project team' in Cato's own blog - appears to be a named engagement with a company running SAP HANA Enterprise Cloud, but the end-customer company name was not evident in the source reviewed | Not specified (enterprise SAP user) | Not specified | Not quantified | Not quantified | Needed to reconnect distributed sites and cloud datacentres (SAP HEC, AWS, Azure) into a coherent WAN within a short deployment window | Cato Cloud, IPSec tunnels from existing firewalls, cloud datacentre integration (AWS, Azure, SAP HEC) | Hybrid - site IPSec plus cloud datacentre integration, no full-site-mesh required | AWS, Microsoft Azure, SAP HANA Enterprise Cloud | Qualitative: project delivered on schedule despite a short deployment window; point-to-point connectivity achieved without a full site-to-site mesh | Low-Medium - published directly by Cato (own blog) but the case is thin on hard metrics (no user/site counts, no time-to-deploy figure, no named end customer) | Demonstrates the multi-cloud-datacentre integration use case specifically (SAP HEC + AWS + Azure together) which the other two case studies don't cover, but the lack of a named customer and hard numbers means it should be used to illustrate a use case, not as a quantified proof point.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:26"]}],"evaluations":[{"id":"evaluations:021b5d2b059480012da2f9b4","evaluation_type":"summary","finding":"Where does it stand out? (mandatory) | The global private backbone with continuous, software-driven path optimisation; zero-touch branch deployment proven at real operational scale (Ulta Beauty); and a genuinely converged single-data-lake architecture underpinning its AI-driven XDR and DEM features rather than bolted-together acquisitions. | Tables 4, 7, 9, 11, 19 | High | These are the claims Netify can make most confidently and specifically to buyers, backed by named case evidence rather than generic marketing language.","buyer_implication":"These are the claims Netify can make most confidently and specifically to buyers, backed by named case evidence rather than generic marketing language.","qualification":"The global private backbone with continuous, software-driven path optimisation; zero-touch branch deployment proven at real operational scale (Ulta Beauty); and a genuinely converged single-data-lake architecture underpinning its AI-driven XDR and DEM features rather than bolted-together acquisitions. | Tables 4, 7, 9, 11, 19 | High | These are the claims Netify can make most confidently and specifically to buyers, backed by named case evidence rather than generic marketing language.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:0bb73e8ec8b8fe69a19a4ffd","evaluation_type":"summary","finding":"Co-managed transition | Not documented as a distinct migration scenario in sources reviewed | Not itemised | Not itemised | Not itemised | Not quantified | Not itemised | Not detailed | Evidence gap - relevant for buyers moving from fully self-managed to co-managed (or vice versa) partway through a contract.","buyer_implication":null,"qualification":"Not documented as a distinct migration scenario in sources reviewed | Not itemised | Not itemised | Not itemised | Not quantified | Not itemised | Not detailed | Evidence gap - relevant for buyers moving from fully self-managed to co-managed (or vice versa) partway through a contract.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:0e82fce8ffa032d5e910e4a2","evaluation_type":"summary","finding":"MPLS to SD-WAN migration | Gradual coexistence - Socket can route site-to-site over both MPLS and internet during transition, per Cato's own platform documentation | Existing MPLS circuits remain usable during transition | General IT/network admin per case study evidence, not a dedicated MPLS specialist | Cato professional services available (at least via AWS Marketplace channel) | SAP HEC case study describes deployment to a 'short window' but exact duration not quantified in the source | Coexistence period complexity if not carefully sequenced | Cato's documented ability to route over both underlays during transition is itself the main mitigation | Well-evidenced as a supported, gradual pattern rather than a forced cutover - genuinely lower migration risk than a hard MPLS decommission date.","buyer_implication":null,"qualification":"Gradual coexistence - Socket can route site-to-site over both MPLS and internet during transition, per Cato's own platform documentation | Existing MPLS circuits remain usable during transition | General IT/network admin per case study evidence, not a dedicated MPLS specialist | Cato professional services available (at least via AWS Marketplace channel) | SAP HEC case study describes deployment to a 'short window' but exact duration not quantified in the source | Coexistence period complexity if not carefully sequenced | Cato's documented ability to route over both underlays during transition is itself the main mitigation | Well-evidenced as a supported, gradual pattern rather than a forced cutover - genuinely lower migration risk than a hard MPLS decommission date.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:9","evidence:cato-networks:26"]},{"id":"evaluations:0fba09d3142ee91eea5bcb3d","evaluation_type":"summary","finding":"Procurement watch-out | China coverage is a genuine differentiator (licensed Beijing/Shanghai/Shenzhen PoPs) but broader regional coverage (Middle East, Africa, Latin America) is not itemised anywhere found - buyers should not assume uniform global coverage | Multinational buyers must verify their specific country footprint against Cato's actual current PoP map rather than relying on general 'global' marketing language | Most relevant to multinational/global buyers with footprints outside North America/Europe/China | Table 7 findings | Medium-High | A clear, specific, actionable watch-out to put directly in front of buyers rather than softening into generic 'cheque coverage' advice.","buyer_implication":"Multinational buyers must verify their specific country footprint against Cato's actual current PoP map rather than relying on general 'global' marketing language","qualification":"China coverage is a genuine differentiator (licensed Beijing/Shanghai/Shenzhen PoPs) but broader regional coverage (Middle East, Africa, Latin America) is not itemised anywhere found - buyers should not assume uniform global coverage | Multinational buyers must verify their specific country footprint against Cato's actual current PoP map rather than relying on general 'global' marketing language | Most relevant to multinational/global buyers with footprints outside North America/Europe/China | Table 7 findings | Medium-High | A clear, specific, actionable watch-out to put directly in front of buyers rather than softening into generic 'cheque coverage' advice.","confidence":"medium_high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:13ff75e29c26901960a0a535","evaluation_type":"summary","finding":"What implementation challenges should buyers expect? (mandatory) | Expect a ramp-up period before reaching peak deployment efficiency (the Ulta Beauty evidence shows an explicit early-stage dip in cutover success rate before process maturity was reached). Expect to need a direct conversation with Cato or a partner to confirm exactly which security capabilities are included at the buyer's chosen tier, since several 'native' features may sit behind Premium/Enterprise licensing. Buyers with VDI, privileged-access, or complex RBAC/delegated-administration requirements should get those specifically confirmed before committing, as public evidence is thin. | Tables 9, 16, 19 | Medium-High | These are practical, evidence-based expectations to set with a buyer rather than assumptions - each one is traceable to a specific gap or finding elsewhere in this profile.","buyer_implication":"These are practical, evidence-based expectations to set with a buyer rather than assumptions - each one is traceable to a specific gap or finding elsewhere in this profile.","qualification":"Expect a ramp-up period before reaching peak deployment efficiency (the Ulta Beauty evidence shows an explicit early-stage dip in cutover success rate before process maturity was reached). Expect to need a direct conversation with Cato or a partner to confirm exactly which security capabilities are included at the buyer's chosen tier, since several 'native' features may sit behind Premium/Enterprise licensing. Buyers with VDI, privileged-access, or complex RBAC/delegated-administration requirements should get those specifically confirmed before committing, as public evidence is thin. | Tables 9, 16, 19 | Medium-High | These are practical, evidence-based expectations to set with a buyer rather than assumptions - each one is traceable to a specific gap or finding elsewhere in this profile.","confidence":"medium_high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:167fbc1de491e22a43eb1fa2","evaluation_type":"summary","finding":"Regulated organisation | Conditional fit - needs vendor follow-up | Strong general certifications (ISO 27001, SOC 2, PCI-DSS L1) but sector-specific frameworks (NHS DSPT, DORA, NIS2, UK public sector) not evidenced either way | Buyer must independently verify sector-specific compliance status with Cato directly | Not assessed | Table 13 findings | Do not present Cato as pre-verified for UK/EU regulated sectors beyond the general certifications actually found - this is a clear case for 'record both positions and note the uncertainty' per the blueprint's evidence standard.","buyer_implication":null,"qualification":"Conditional fit - needs vendor follow-up | Strong general certifications (ISO 27001, SOC 2, PCI-DSS L1) but sector-specific frameworks (NHS DSPT, DORA, NIS2, UK public sector) not evidenced either way | Buyer must independently verify sector-specific compliance status with Cato directly | Not assessed | Table 13 findings | Do not present Cato as pre-verified for UK/EU regulated sectors beyond the general certifications actually found - this is a clear case for 'record both positions and note the uncertainty' per the blueprint's evidence standard.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:18228330d06549a5032de456","evaluation_type":"summary","finding":"Reporting reality | Strong specifically around DEM (network/application/user experience) and XDR (security incidents), both AI-correlated; weaker or unconfirmed on executive dashboards, compliance reporting, and scheduled/custom reporting, which were not found in sources reviewed. | Table 10 | Medium | Netify should present the DEM/XDR reporting strength specifically rather than imply comprehensive reporting maturity across the board.","buyer_implication":"Netify should present the DEM/XDR reporting strength specifically rather than imply comprehensive reporting maturity across the board.","qualification":"Strong specifically around DEM (network/application/user experience) and XDR (security incidents), both AI-correlated; weaker or unconfirmed on executive dashboards, compliance reporting, and scheduled/custom reporting, which were not found in sources reviewed. | Table 10 | Medium | Netify should present the DEM/XDR reporting strength specifically rather than imply comprehensive reporting maturity across the board.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:1d97cd4b222626e8149d17b0","evaluation_type":"summary","finding":"AI reality | A genuinely evidenced set of specific AI functions (anomaly/threat detection, DEM/XDR root-cause correlation, AI Security/DLP-for-AI) sits inside broader 'AI-powered' marketing language that extends further than what's independently confirmed. | Table 11 | Medium | Represent the narrower, evidenced AI feature set in buyer-facing content rather than the full marketing scope.","buyer_implication":"Represent the narrower, evidenced AI feature set in buyer-facing content rather than the full marketing scope.","qualification":"A genuinely evidenced set of specific AI functions (anomaly/threat detection, DEM/XDR root-cause correlation, AI Security/DLP-for-AI) sits inside broader 'AI-powered' marketing language that extends further than what's independently confirmed. | Table 11 | Medium | Represent the narrower, evidenced AI feature set in buyer-facing content rather than the full marketing scope.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:22dad68df5a710392efa1875","evaluation_type":"summary","finding":"Mid-market | Good fit | Sweet spot implied by case study profile (single-site to modest multi-site retail/services businesses) | Low - case studies show non-specialist IT managing rollouts | Standard tier pricing likely applies | Reasonably well evidenced by the mid-sized retailer case study.","buyer_implication":null,"qualification":"Good fit | Sweet spot implied by case study profile (single-site to modest multi-site retail/services businesses) | Low - case studies show non-specialist IT managing rollouts | Standard tier pricing likely applies | Reasonably well evidenced by the mid-sized retailer case study.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:25"]},{"id":"evaluations:3b327258c239bbb31a37a604","evaluation_type":"summary","finding":"Biggest operational advantage | Demonstrated ability to onboard and operate a large distributed estate with minimal on-site specialist skill, evidenced concretely (not just claimed) via the Ulta Beauty rollout metrics. | Table 4, 9, 19 | High | Directly quotable with the specific Ulta Beauty figures for credibility.","buyer_implication":"Directly quotable with the specific Ulta Beauty figures for credibility.","qualification":"Demonstrated ability to onboard and operate a large distributed estate with minimal on-site specialist skill, evidenced concretely (not just claimed) via the Ulta Beauty rollout metrics. | Table 4, 9, 19 | High | Directly quotable with the specific Ulta Beauty figures for credibility.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:5e8aed03deaea0f64ed94c82","evaluation_type":"summary","finding":"Limitation | Commercial terms are opaque - no public pricing, and even tier-to-feature mapping (e.g. which security capabilities sit in which tier) is not confirmed from primary sources | Buyers cannot self-serve a budget estimate and must engage Cato/a partner early to understand true cost, including for capabilities marked 'native' in this profile | Affects all buyer sizes but hits SME/mid-market hardest, where budget certainty matters most | Table 16 findings | Medium (based on absence of primary source, corroborated by consistent gaps across two independent third-party pricing analyses) | This is a genuine watch-out for Netify's own comparison tool: several 'native' capabilities in Table 3 (DLP, RBI, CASB) may sit behind Premium/Enterprise tiers or add-on licenses - the comparison engine should not treat 'native' as synonymous with 'included at base price'.","buyer_implication":"Buyers cannot self-serve a budget estimate and must engage Cato/a partner early to understand true cost, including for capabilities marked 'native' in this profile","qualification":"Commercial terms are opaque - no public pricing, and even tier-to-feature mapping (e.g. which security capabilities sit in which tier) is not confirmed from primary sources | Buyers cannot self-serve a budget estimate and must engage Cato/a partner early to understand true cost, including for capabilities marked 'native' in this profile | Affects all buyer sizes but hits SME/mid-market hardest, where budget certainty matters most | Table 16 findings | Medium (based on absence of primary source, corroborated by consistent gaps across two independent third-party pricing analyses) | This is a genuine watch-out for Netify's own comparison tool: several 'native' capabilities in Table 3 (DLP, RBI, CASB) may sit behind Premium/Enterprise tiers or add-on licenses - the comparison engine should not treat 'native' as synonymous with 'included at base price'.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:69e6d083494514b4aa464358","evaluation_type":"summary","finding":"Questions Netify still cannot verify | Exact current PoP count and full country coverage list; tier-to-feature mapping for DLP/CASB/RBI/ATP; NHS DSPT/DORA/NIS2/UK public sector compliance status; hardware charging model; minimum commitments and renewal/true-up terms; VDI, privileged access, RBAC and delegated administration support; bulk-change/API automation depth beyond confirmed existence of a Platform API. | Synthesis of Tables 7, 9, 13, 16 | N/A - explicitly unresolved | This list is the direct input for the 'Unresolved Questions' section below and should drive Harry's next follow-up (vendor briefing or partner conversation) before this profile is considered final.","buyer_implication":"This list is the direct input for the 'Unresolved Questions' section below and should drive Harry's next follow-up (vendor briefing or partner conversation) before this profile is considered final.","qualification":"Exact current PoP count and full country coverage list; tier-to-feature mapping for DLP/CASB/RBI/ATP; NHS DSPT/DORA/NIS2/UK public sector compliance status; hardware charging model; minimum commitments and renewal/true-up terms; VDI, privileged access, RBAC and delegated administration support; bulk-change/API automation depth beyond confirmed existence of a Platform API. | Synthesis of Tables 7, 9, 13, 16 | N/A - explicitly unresolved | This list is the direct input for the 'Unresolved Questions' section below and should drive Harry's next follow-up (vendor briefing or partner conversation) before this profile is considered final.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:715752b09329b359911f51ba","evaluation_type":"summary","finding":"Large enterprise | Strong fit | Ulta Beauty-scale rollout evidence, Enterprise pricing tier with dedicated account management exists | Requires internal or MSP-provided operational ownership at scale | Enterprise tier - custom quoted, can exceed $1M/year for 150+ sites/3,000+ users per Vendr's third-party analysis | Well evidenced at the large end via Ulta Beauty specifically.","buyer_implication":null,"qualification":"Strong fit | Ulta Beauty-scale rollout evidence, Enterprise pricing tier with dedicated account management exists | Requires internal or MSP-provided operational ownership at scale | Enterprise tier - custom quoted, can exceed $1M/year for 150+ sites/3,000+ users per Vendr's third-party analysis | Well evidenced at the large end via Ulta Beauty specifically.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:24","evidence:cato-networks:32"]},{"id":"evaluations:7a81aabb236082fd59163e25","evaluation_type":"summary","finding":"Commercial reality | No public pricing; third-party analyst/practitioner sources suggest a per-site/per-user/bandwidth-tier model with Enterprise-tier deals potentially exceeding $1M/year for large estates (150+ sites, 3,000+ users) - directionally useful for budget conversations but not authoritative. | Table 16 | Low-Medium (third-party sourced) | Use only as a rough planning signal with buyers, not as a quotable figure - always route to a direct Cato/partner quote for real numbers.","buyer_implication":"Use only as a rough planning signal with buyers, not as a quotable figure - always route to a direct Cato/partner quote for real numbers.","qualification":"No public pricing; third-party analyst/practitioner sources suggest a per-site/per-user/bandwidth-tier model with Enterprise-tier deals potentially exceeding $1M/year for large estates (150+ sites, 3,000+ users) - directionally useful for budget conversations but not authoritative. | Table 16 | Low-Medium (third-party sourced) | Use only as a rough planning signal with buyers, not as a quotable figure - always route to a direct Cato/partner quote for real numbers.","confidence":"low_medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:7b4d37bf35ee847d3258f230","evaluation_type":"summary","finding":"Biggest operational concern | Commercial and tier-mapping opacity creates real risk of buyers assuming broader 'native' capability than their contracted tier actually includes - this is as much a process risk (misaligned expectations) as a product risk. | Table 16, 19 | Medium | Netify should proactively flag this to buyers rather than let it surface as a surprise during contracting.","buyer_implication":"Netify should proactively flag this to buyers rather than let it surface as a surprise during contracting.","qualification":"Commercial and tier-mapping opacity creates real risk of buyers assuming broader 'native' capability than their contracted tier actually includes - this is as much a process risk (misaligned expectations) as a product risk. | Table 16, 19 | Medium | Netify should proactively flag this to buyers rather than let it surface as a surprise during contracting.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:7bdbc69763b9c637856718e7","evaluation_type":"summary","finding":"Deployment reality | Fast and low-effort at the branch/site level once process maturity is reached, based on real case evidence - but that maturity curve itself should be set as an expectation, not assumed from day one. | Table 9, 17 | High | Set expectations using the Ulta Beauty ramp-up curve specifically.","buyer_implication":"Set expectations using the Ulta Beauty ramp-up curve specifically.","qualification":"Fast and low-effort at the branch/site level once process maturity is reached, based on real case evidence - but that maturity curve itself should be set as an expectation, not assumed from day one. | Table 9, 17 | High | Set expectations using the Ulta Beauty ramp-up curve specifically.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:7e527116ac7170adeb16aed0","evaluation_type":"summary","finding":"Global branch rollout | Phased, scripted, increasingly automated cutover process - explicitly evidenced by Ulta Beauty's evolution from manual pilot (70-90% success) to scripted near-zero-touch (99.99% success, 10 stores/night) | Existing store network/Wi-Fi infrastructure to integrate or replace | Store-level non-specialist staff for physical connect; central IT for remote configuration | Cato customer success team explicitly credited with helping build the automated cutover model | Concrete cadence evidence: 10 stores/night at scale | Early-stage success rate is meaningfully lower than mature-state - buyers should expect a ramp-up period, not instant peak performance | Documented iterative process improvement (pilot → scripted automation) is itself the mitigation model to recommend to other buyers | This is Cato's best-evidenced deployment scenario in the entire profile - a genuinely useful, honest case study because it shows the realistic ramp-up curve, not just the end-state headline number.","buyer_implication":null,"qualification":"Phased, scripted, increasingly automated cutover process - explicitly evidenced by Ulta Beauty's evolution from manual pilot (70-90% success) to scripted near-zero-touch (99.99% success, 10 stores/night) | Existing store network/Wi-Fi infrastructure to integrate or replace | Store-level non-specialist staff for physical connect; central IT for remote configuration | Cato customer success team explicitly credited with helping build the automated cutover model | Concrete cadence evidence: 10 stores/night at scale | Early-stage success rate is meaningfully lower than mature-state - buyers should expect a ramp-up period, not instant peak performance | Documented iterative process improvement (pilot → scripted automation) is itself the mitigation model to recommend to other buyers | This is Cato's best-evidenced deployment scenario in the entire profile - a genuinely useful, honest case study because it shows the realistic ramp-up curve, not just the end-state headline number.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:24"]},{"id":"evaluations:808ba53bba8b5b327659ec7e","evaluation_type":"summary","finding":"Lean IT team | Strong fit | Zero-touch provisioning, AI-assisted DEM/XDR root-cause tooling, customer quotes specifically citing reduced specialist skill need | None significant - this is the target operating profile | Managed SASE/MXDR options available to further reduce internal burden | Multiple case studies and customer quotes across Tables 4, 8, 9 | One of the more consistently evidenced suitability claims across the whole profile.","buyer_implication":null,"qualification":"Strong fit | Zero-touch provisioning, AI-assisted DEM/XDR root-cause tooling, customer quotes specifically citing reduced specialist skill need | None significant - this is the target operating profile | Managed SASE/MXDR options available to further reduce internal burden | Multiple case studies and customer quotes across Tables 4, 8, 9 | One of the more consistently evidenced suitability claims across the whole profile.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:884503a0b20226ba231afc5b","evaluation_type":"summary","finding":"Compliance & Footprint | Strong global certifications, holding ISO 27001, SOC 2 Type II, and PCI-DSS Level 1 | Unverified sector frameworks, and public evidence is genuinely lacking for regional frameworks like NHS DSPT, DORA, NIS2, or UK public sector listings, so don't assume coverage without asking","buyer_implication":null,"qualification":"Strong global certifications, holding ISO 27001, SOC 2 Type II, and PCI-DSS Level 1 | Unverified sector frameworks, and public evidence is genuinely lacking for regional frameworks like NHS DSPT, DORA, NIS2, or UK public sector listings, so don't assume coverage without asking","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:8b98920365436fe6ee2f1a41","evaluation_type":"summary","finding":"Mature NetOps/SecOps team | Good fit, with a caveat | Full platform API and SIEM/EDR integrations (Sentinel, Splunk, CrowdStrike) support integration into an existing mature toolchain | Mature teams may find the converged, single-console model less flexible than a best-of-breed stack they've already built and tuned | Not assessed | Table 12 findings | Worth being candid in the Netify View that a single-vendor converged platform is a better fit for teams wanting to reduce tool sprawl than for teams who have already invested heavily in a best-of-breed stack and want Cato to slot in as one component among many.","buyer_implication":null,"qualification":"Good fit, with a caveat | Full platform API and SIEM/EDR integrations (Sentinel, Splunk, CrowdStrike) support integration into an existing mature toolchain | Mature teams may find the converged, single-console model less flexible than a best-of-breed stack they've already built and tuned | Not assessed | Table 12 findings | Worth being candid in the Netify View that a single-vendor converged platform is a better fit for teams wanting to reduce tool sprawl than for teams who have already invested heavily in a best-of-breed stack and want Cato to slot in as one component among many.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:9429fce9e12d1c3de7b6a9c6","evaluation_type":"summary","finding":"Scope & Boundaries | Unified cloud & remote access, with vSockets for AWS/Azure/GCP simplifying cloud on-ramps while replacing legacy VPNs at the same time | Limited campus LAN/WLAN, since Cato really focuses on WAN/Edge and buyers wanting unified campus-to-WAN (LAN/Wi-Fi) coverage may prefer vendors like HPE Aruba instead","buyer_implication":null,"qualification":"Unified cloud & remote access, with vSockets for AWS/Azure/GCP simplifying cloud on-ramps while replacing legacy VPNs at the same time | Limited campus LAN/WLAN, since Cato really focuses on WAN/Edge and buyers wanting unified campus-to-WAN (LAN/Wi-Fi) coverage may prefer vendors like HPE Aruba instead","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:947e9404e1ebfab01195ede4","evaluation_type":"summary","finding":"Procurement watch-out | 'AI-powered' marketing language spans the whole platform, but only a subset of specific AI functions (anomaly/threat detection, DEM/XDR root-cause correlation, AI Security/DLP-for-AI) are evidenced with real product mechanics; others (natural-language querying, automated policy recommendation, configuration generation) were not found as confirmed features | Buyers should ask Cato to name the specific AI function behind any 'AI-powered' claim in a sales conversation, per the blueprint's own instruction not to accept 'AI-powered' as a fact in itself | Relevant to all buyer sizes, especially those with AI-specific RFP requirements | Table 11 findings | Medium | A direct application of the blueprint's Section 4.6 principle: several genuinely evidenced AI features exist (this is not a hollow AI-washing situation) but the marketing scope is broader than what's independently confirmed - Netify should represent the narrower, evidenced set.","buyer_implication":"Buyers should ask Cato to name the specific AI function behind any 'AI-powered' claim in a sales conversation, per the blueprint's own instruction not to accept 'AI-powered' as a fact in itself","qualification":"'AI-powered' marketing language spans the whole platform, but only a subset of specific AI functions (anomaly/threat detection, DEM/XDR root-cause correlation, AI Security/DLP-for-AI) are evidenced with real product mechanics; others (natural-language querying, automated policy recommendation, configuration generation) were not found as confirmed features | Buyers should ask Cato to name the specific AI function behind any 'AI-powered' claim in a sales conversation, per the blueprint's own instruction not to accept 'AI-powered' as a fact in itself | Relevant to all buyer sizes, especially those with AI-specific RFP requirements | Table 11 findings | Medium | A direct application of the blueprint's Section 4.6 principle: several genuinely evidenced AI features exist (this is not a hollow AI-washing situation) but the marketing scope is broader than what's independently confirmed - Netify should represent the narrower, evidenced set.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:9a8b5197db3b377259ce0d8f","evaluation_type":"summary","finding":"Limitation | Several operational/administrative depth questions (bulk changes, RBAC, delegated administration, VDI/privileged access support) are unconfirmed in public sources | Buyers with complex governance or VDI-heavy estates cannot fully evaluate operational fit from public information alone | Affects enterprise/regulated buyers with mature governance requirements most | Tables 5 and 9 findings | Medium | A genuine gap in what's publicly documented, not necessarily a genuine product gap - flagged as an evidence gap for direct vendor follow-up rather than treated as a confirmed weakness.","buyer_implication":"Buyers with complex governance or VDI-heavy estates cannot fully evaluate operational fit from public information alone","qualification":"Several operational/administrative depth questions (bulk changes, RBAC, delegated administration, VDI/privileged access support) are unconfirmed in public sources | Buyers with complex governance or VDI-heavy estates cannot fully evaluate operational fit from public information alone | Affects enterprise/regulated buyers with mature governance requirements most | Tables 5 and 9 findings | Medium | A genuine gap in what's publicly documented, not necessarily a genuine product gap - flagged as an evidence gap for direct vendor follow-up rather than treated as a confirmed weakness.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:9d264ad9c50ef87c4a40c290","evaluation_type":"summary","finding":"VPN to ZTNA migration | Not explicitly documented as a distinct migration playbook in sources reviewed, though ZTNA/Universal ZTNA and Cato Client both replace traditional VPN client functions | Existing VPN concentrator/client footprint to retire | Not itemised | Not itemised | Not quantified | User change-management for new client/access model | Not detailed | Reasonable to infer this migration path exists given ZTNA is a native, mature feature, but no dedicated case study or migration guide was found to evidence it directly - flag as an evidence gap rather than assert a proven playbook.","buyer_implication":null,"qualification":"Not explicitly documented as a distinct migration playbook in sources reviewed, though ZTNA/Universal ZTNA and Cato Client both replace traditional VPN client functions | Existing VPN concentrator/client footprint to retire | Not itemised | Not itemised | Not quantified | User change-management for new client/access model | Not detailed | Reasonable to infer this migration path exists given ZTNA is a native, mature feature, but no dedicated case study or migration guide was found to evidence it directly - flag as an evidence gap rather than assert a proven playbook.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:9e31ea6d1076bf792370fd62","evaluation_type":"summary","finding":"Strength | Zero-touch, low-specialist-skill branch deployment at scale | Enables lean IT teams to roll out and operate a distributed estate without deep networking specialists on staff | Best: retail/branch-heavy buyers with lean central IT. Less relevant: buyers with mature in-house NetOps wanting granular manual control | High | Consistently evidenced across multiple independent case studies - one of the more reliable claims in this profile.","buyer_implication":"Enables lean IT teams to roll out and operate a distributed estate without deep networking specialists on staff","qualification":"Zero-touch, low-specialist-skill branch deployment at scale | Enables lean IT teams to roll out and operate a distributed estate without deep networking specialists on staff | Best: retail/branch-heavy buyers with lean central IT. Less relevant: buyers with mature in-house NetOps wanting granular manual control | High | Consistently evidenced across multiple independent case studies - one of the more reliable claims in this profile.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:9","evidence:cato-networks:24","evidence:cato-networks:25"]},{"id":"evaluations:a3d8d8a5ab09686e1b5208a4","evaluation_type":"summary","finding":"Most credible differentiator | The combination of a global private backbone plus a genuinely converged (not stitched-together) security data lake - most competitors have one or the other, few have both as natively engineered together from the start. | Tables 4, 7, 11 | High | This is the single sentence Netify's comparison engine could most confidently quote.","buyer_implication":"This is the single sentence Netify's comparison engine could most confidently quote.","qualification":"The combination of a global private backbone plus a genuinely converged (not stitched-together) security data lake - most competitors have one or the other, few have both as natively engineered together from the start. | Tables 4, 7, 11 | High | This is the single sentence Netify's comparison engine could most confidently quote.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:a78feb7914d481502ca42885","evaluation_type":"summary","finding":"Strength | Genuinely converged single-vendor platform (one data lake, one console) underpinning XDR and DEM AI features | Reduces integration overhead and improves incident correlation quality versus stitched-together multi-vendor stacks | Best: buyers actively trying to reduce tool sprawl. Less relevant: buyers with an already-mature best-of-breed stack they don't want to replace | Medium-High | Logically sound and consistently repeated across Cato's own materials; independent verification of the AI/ML quality claims specifically was not found.","buyer_implication":"Reduces integration overhead and improves incident correlation quality versus stitched-together multi-vendor stacks","qualification":"Genuinely converged single-vendor platform (one data lake, one console) underpinning XDR and DEM AI features | Reduces integration overhead and improves incident correlation quality versus stitched-together multi-vendor stacks | Best: buyers actively trying to reduce tool sprawl. Less relevant: buyers with an already-mature best-of-breed stack they don't want to replace | Medium-High | Logically sound and consistently repeated across Cato's own materials; independent verification of the AI/ML quality claims specifically was not found.","confidence":"medium_high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:16"]},{"id":"evaluations:abdbdb294cce2886a5895925","evaluation_type":"summary","finding":"SSE deployment to remote users | Cato Client or Browser Extension rollout to remote/mobile users, layered onto or independent of site-based SD-WAN deployment | IdP integration (Okta/Entra ID etc.) generally a prerequisite for user-aware policy | End-user self-install typical | Not itemised | Not quantified | Not itemised | Not detailed | Platform supports this cleanly by design (SSE 360 is usable independently of SD-WAN per Cato's own service-model description) but no dedicated remote-user-only case study was found to evidence time/effort at scale.","buyer_implication":null,"qualification":"Cato Client or Browser Extension rollout to remote/mobile users, layered onto or independent of site-based SD-WAN deployment | IdP integration (Okta/Entra ID etc.) generally a prerequisite for user-aware policy | End-user self-install typical | Not itemised | Not quantified | Not itemised | Not detailed | Platform supports this cleanly by design (SSE 360 is usable independently of SD-WAN per Cato's own service-model description) but no dedicated remote-user-only case study was found to evidence time/effort at scale.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:b00b28e4e3525d9f33e6f7ac","evaluation_type":"summary","finding":"Security & Analytics | Built-in XDR & DEM, with AI-assisted correlation across network, endpoint, and application layers giving genuinely actionable context for lean IT teams who don't have the headcount to correlate it manually | Layered licensing requirement, since advanced features like DEM, XDR, and RBI need add-on SKUs or higher tier subscriptions before you can actually use them","buyer_implication":null,"qualification":"Built-in XDR & DEM, with AI-assisted correlation across network, endpoint, and application layers giving genuinely actionable context for lean IT teams who don't have the headcount to correlate it manually | Layered licensing requirement, since advanced features like DEM, XDR, and RBI need add-on SKUs or higher tier subscriptions before you can actually use them","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:b17c0723f8a72ebbe8107fc2","evaluation_type":"summary","finding":"Where does it fall behind competitors? (mandatory) | Commercial transparency is weak - no public pricing and unclear tier-to-feature mapping, which is a genuine competitive disadvantage against vendors with clearer packaging. Regional coverage evidence outside North America/Europe/China is thin, which could disadvantage Cato against providers with clearer published global PoP maps. Native LAN/WLAN/campus capability is limited compared with vendors like HPE Aruba who compete on campus-to-WAN integration. | Tables 4, 7, 16 | Medium | Named competitors are referenced only where the shortfall is specific and evidenced (commercial opacity, coverage gaps, campus/LAN scope) - this is not a general ranking claim.","buyer_implication":"Named competitors are referenced only where the shortfall is specific and evidenced (commercial opacity, coverage gaps, campus/LAN scope) - this is not a general ranking claim.","qualification":"Commercial transparency is weak - no public pricing and unclear tier-to-feature mapping, which is a genuine competitive disadvantage against vendors with clearer packaging. Regional coverage evidence outside North America/Europe/China is thin, which could disadvantage Cato against providers with clearer published global PoP maps. Native LAN/WLAN/campus capability is limited compared with vendors like HPE Aruba who compete on campus-to-WAN integration. | Tables 4, 7, 16 | Medium | Named competitors are referenced only where the shortfall is specific and evidenced (commercial opacity, coverage gaps, campus/LAN scope) - this is not a general ranking claim.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:b2fcb1eaeedbc72ea9fc490e","evaluation_type":"summary","finding":"Who is this genuinely best suited for? (mandatory) | Mid-market to large enterprises and multinationals with a distributed branch/retail estate and/or a significant remote workforce, wanting to consolidate networking and security under one vendor with a lean internal IT team, and who value backbone-based performance over pure lowest-cost internet routing. | Tables 1, 4, 9, 15, 19 (backbone architecture, zero-touch deployment evidence, lean-IT-team suitability) | High | Buyers matching this profile can move forward with reasonable confidence in the core architecture claims; buyers outside it (very small single-site SMEs, or teams wanting granular best-of-breed control) should look closely at the alternatives noted below.","buyer_implication":"Buyers matching this profile can move forward with reasonable confidence in the core architecture claims; buyers outside it (very small single-site SMEs, or teams wanting granular best-of-breed control) should look closely at the alternatives noted below.","qualification":"Mid-market to large enterprises and multinationals with a distributed branch/retail estate and/or a significant remote workforce, wanting to consolidate networking and security under one vendor with a lean internal IT team, and who value backbone-based performance over pure lowest-cost internet routing. | Tables 1, 4, 9, 15, 19 (backbone architecture, zero-touch deployment evidence, lean-IT-team suitability) | High | Buyers matching this profile can move forward with reasonable confidence in the core architecture claims; buyers outside it (very small single-site SMEs, or teams wanting granular best-of-breed control) should look closely at the alternatives noted below.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:b8d14ffb34251d82f0a40c0f","evaluation_type":"summary","finding":"Global fit | Architecturally designed for global/multinational use, with a specific, credible China differentiator, but coverage evidence outside North America, Europe and China is thin. | Table 7 | Medium | Always verify buyer-specific country coverage rather than relying on the general 'global' claim.","buyer_implication":"Always verify buyer-specific country coverage rather than relying on the general 'global' claim.","qualification":"Architecturally designed for global/multinational use, with a specific, credible China differentiator, but coverage evidence outside North America, Europe and China is thin. | Table 7 | Medium | Always verify buyer-specific country coverage rather than relying on the general 'global' claim.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:b9478b46d2b61294696390f0","evaluation_type":"summary","finding":"Limitation | Sector-specific compliance evidence (NHS DSPT, DORA, NIS2, UK public sector frameworks) not found despite strong general certifications (ISO 27001, SOC 2, PCI-DSS L1) | UK/EU regulated-sector buyers cannot currently get a fully evidenced sector-compliance answer from public sources alone | Most relevant to Netify's UK healthcare, financial services, and public-sector audiences specifically | Table 13 findings | Medium | Direct, practical follow-up item - Netify's comparison tool serves UK buyers specifically, so this gap should be prioritised for direct vendor engagement ahead of general availability of this profile.","buyer_implication":"UK/EU regulated-sector buyers cannot currently get a fully evidenced sector-compliance answer from public sources alone","qualification":"Sector-specific compliance evidence (NHS DSPT, DORA, NIS2, UK public sector frameworks) not found despite strong general certifications (ISO 27001, SOC 2, PCI-DSS L1) | UK/EU regulated-sector buyers cannot currently get a fully evidenced sector-compliance answer from public sources alone | Most relevant to Netify's UK healthcare, financial services, and public-sector audiences specifically | Table 13 findings | Medium | Direct, practical follow-up item - Netify's comparison tool serves UK buyers specifically, so this gap should be prioritised for direct vendor engagement ahead of general availability of this profile.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:c14c4a6b75fd56fe9245bf50","evaluation_type":"summary","finding":"Remote-user-heavy organisation | Good fit | Cato Client + Browser Extension + RBI + DEM cover the core remote-access and experience-monitoring needs | Requires DEM licence for full experience visibility | User licensing separate from site licensing | Table 2/5/10 findings | Solid but not as distinctively evidenced by named case studies as the branch/retail use case - mostly platform-page evidence rather than customer proof points.","buyer_implication":null,"qualification":"Good fit | Cato Client + Browser Extension + RBI + DEM cover the core remote-access and experience-monitoring needs | Requires DEM licence for full experience visibility | User licensing separate from site licensing | Table 2/5/10 findings | Solid but not as distinctively evidenced by named case studies as the branch/retail use case - mostly platform-page evidence rather than customer proof points.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:c8cf34f85baf74035bcde0aa","evaluation_type":"summary","finding":"Highly distributed branch estate | Strong fit (best-evidenced use case) | Zero-touch provisioning, backbone-based path optimisation, retail case study evidence | Low per-site effort per case study evidence | Site-based licensing scales with estate size - model this carefully for very large estates | Cato's strongest, most concretely evidenced use case profile.","buyer_implication":null,"qualification":"Strong fit (best-evidenced use case) | Zero-touch provisioning, backbone-based path optimisation, retail case study evidence | Low per-site effort per case study evidence | Site-based licensing scales with estate size - model this carefully for very large estates | Cato's strongest, most concretely evidenced use case profile.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:24","evidence:cato-networks:25"]},{"id":"evaluations:c96f21bf118d13988caeff8d","evaluation_type":"summary","finding":"Strength | Global private backbone with continuous path optimisation, not just internet-based SD-WAN | Predictable, SLA-backed performance for distributed sites and cloud/SaaS access without buying MPLS | Best: multinational/distributed-branch buyers. Less relevant: single-site buyers with simple internet-only needs | High | This is Cato's genuine architectural differentiator versus internet-only SSE vendors, and it's well-evidenced directly by Cato and indirectly by case studies.","buyer_implication":"Predictable, SLA-backed performance for distributed sites and cloud/SaaS access without buying MPLS","qualification":"Global private backbone with continuous path optimisation, not just internet-based SD-WAN | Predictable, SLA-backed performance for distributed sites and cloud/SaaS access without buying MPLS | Best: multinational/distributed-branch buyers. Less relevant: single-site buyers with simple internet-only needs | High | This is Cato's genuine architectural differentiator versus internet-only SSE vendors, and it's well-evidenced directly by Cato and indirectly by case studies.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:5"]},{"id":"evaluations:ce9a55d02be0c310fed5e2cf","evaluation_type":"summary","finding":"Firewall consolidation | Implied by FWaaS/NGFW being native to the platform, replacing standalone firewall appliances per the jewelry retailer case study (moved off separately-managed firewalls) | Existing firewall rule sets need translation into Cato policy | IT admin, per case study | Not itemised | Not quantified | Policy translation errors during cutover | Not detailed in sources reviewed | Real-world evidence exists (jewelry retailer explicitly cut ties with their MSP's firewall management) but process detail (e.g. rule-migration tooling) was not found - worth a direct question if a buyer needs this reassurance.","buyer_implication":null,"qualification":"Implied by FWaaS/NGFW being native to the platform, replacing standalone firewall appliances per the jewelry retailer case study (moved off separately-managed firewalls) | Existing firewall rule sets need translation into Cato policy | IT admin, per case study | Not itemised | Not quantified | Policy translation errors during cutover | Not detailed in sources reviewed | Real-world evidence exists (jewelry retailer explicitly cut ties with their MSP's firewall management) but process detail (e.g. rule-migration tooling) was not found - worth a direct question if a buyer needs this reassurance.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:25"]},{"id":"evaluations:cf53dde280049d02f9854431","evaluation_type":"summary","finding":"Commercials | Bandwidth & site-based model, which tends to give more predictable scaling for site-heavy organisations than a pure per-seat pricing model would offer | Opaque packaging, and there's no public list pricing along with unclear tier-to-feature mapping, so which tier actually includes DLP or CASB isn't obvious until you ask directly","buyer_implication":null,"qualification":"Bandwidth & site-based model, which tends to give more predictable scaling for site-heavy organisations than a pure per-seat pricing model would offer | Opaque packaging, and there's no public list pricing along with unclear tier-to-feature mapping, so which tier actually includes DLP or CASB isn't obvious until you ask directly","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:d9a50f3ec351fed757e24bd1","evaluation_type":"summary","finding":"When would Netify recommend it? (mandatory) | When a buyer has (a) a distributed multi-site or branch/retail estate, (b) a lean internal IT/network team wanting to reduce specialist staffing needs, (c) a genuine appetite for single-vendor consolidation over best-of-breed assembly, and (d) is prepared to have a direct commercial conversation with Cato/a partner rather than needing public list pricing to shortlist. | Synthesis of Tables 4, 9, 15, 16 | High | A clear, actionable recommendation trigger set Netify's comparison tool can apply directly.","buyer_implication":"A clear, actionable recommendation trigger set Netify's comparison tool can apply directly.","qualification":"When a buyer has (a) a distributed multi-site or branch/retail estate, (b) a lean internal IT/network team wanting to reduce specialist staffing needs, (c) a genuine appetite for single-vendor consolidation over best-of-breed assembly, and (d) is prepared to have a direct commercial conversation with Cato/a partner rather than needing public list pricing to shortlist. | Synthesis of Tables 4, 9, 15, 16 | High | A clear, actionable recommendation trigger set Netify's comparison tool can apply directly.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:d9bbf8ff757b6e10a52e80b5","evaluation_type":"summary","finding":"Sector fit | Retail is the clearly best-evidenced sector by a significant margin; healthcare, financial services, government, manufacturing, education, hospitality, transport and energy all lack specific case-study evidence in the sources reviewed for this pass, despite plausible capability fit in several cases. | Table 14 | Medium-High for retail; Low for all other sectors | Do not claim strong sector fit beyond retail without further case-study research or direct vendor engagement.","buyer_implication":"Do not claim strong sector fit beyond retail without further case-study research or direct vendor engagement.","qualification":"Retail is the clearly best-evidenced sector by a significant margin; healthcare, financial services, government, manufacturing, education, hospitality, transport and energy all lack specific case-study evidence in the sources reviewed for this pass, despite plausible capability fit in several cases. | Table 14 | Medium-High for retail; Low for all other sectors | Do not claim strong sector fit beyond retail without further case-study research or direct vendor engagement.","confidence":"medium_high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:ddcbc4e645baa87d0ea49c8a","evaluation_type":"summary","finding":"Deployment & Ops | Zero-touch branch onboarding at scale, proven in major enterprise rollouts, Ulta Beauty scaling to 10 stores a night with a 99.99% cutover success rate is the example most often cited | Ramp-up learning curve, and early-stage pilots in large rollouts tend to show lower success rates (70-90%) before the automation workflows have properly matured","buyer_implication":null,"qualification":"Zero-touch branch onboarding at scale, proven in major enterprise rollouts, Ulta Beauty scaling to 10 stores a night with a 99.99% cutover success rate is the example most often cited | Ramp-up learning curve, and early-stage pilots in large rollouts tend to show lower success rates (70-90%) before the automation workflows have properly matured","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:e3461481f21880752ac5e28b","evaluation_type":"summary","finding":"SME | Conditional fit | Platform capability is enterprise-grade, but pricing model (site/bandwidth-based, Enterprise tier quoted for 150+ sites/3,000+ users) points toward mid-market/enterprise economics; SME access is realistically via MSP-delivered Managed SASE | Minimal internal skills needed given zero-touch provisioning | Likely most cost-effective for SME via an MSASE partner rather than direct | Netify should route most SME enquiries toward Cato's MSP ecosystem rather than direct, based on the pricing/tiering evidence found.","buyer_implication":null,"qualification":"Conditional fit | Platform capability is enterprise-grade, but pricing model (site/bandwidth-based, Enterprise tier quoted for 150+ sites/3,000+ users) points toward mid-market/enterprise economics; SME access is realistically via MSP-delivered Managed SASE | Minimal internal skills needed given zero-touch provisioning | Likely most cost-effective for SME via an MSASE partner rather than direct | Netify should route most SME enquiries toward Cato's MSP ecosystem rather than direct, based on the pricing/tiering evidence found.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:32"]},{"id":"evaluations:e5867a2581b8953a5e040441","evaluation_type":"summary","finding":"When would Netify recommend looking elsewhere? (mandatory) | When a buyer needs confirmed regional coverage in Africa, the Middle East, or Latin America and cannot get that confirmed directly; when a buyer specifically wants converged campus LAN/WLAN plus WAN from one vendor (better served by HPE Aruba or Cisco); when a buyer has hard, near-term budget-certainty requirements and cannot tolerate an opaque, sales-engagement-gated pricing process; or when a buyer already has a mature, tuned best-of-breed security stack and wants to add one component rather than replace the whole stack. | Synthesis of Tables 7, 16, 17, 19 | Medium-High | Each trigger is tied to a specific, evidenced gap rather than a generic 'consider alternatives' hedge.","buyer_implication":"Each trigger is tied to a specific, evidenced gap rather than a generic 'consider alternatives' hedge.","qualification":"When a buyer needs confirmed regional coverage in Africa, the Middle East, or Latin America and cannot get that confirmed directly; when a buyer specifically wants converged campus LAN/WLAN plus WAN from one vendor (better served by HPE Aruba or Cisco); when a buyer has hard, near-term budget-certainty requirements and cannot tolerate an opaque, sales-engagement-gated pricing process; or when a buyer already has a mature, tuned best-of-breed security stack and wants to add one component rather than replace the whole stack. | Synthesis of Tables 7, 16, 17, 19 | Medium-High | Each trigger is tied to a specific, evidenced gap rather than a generic 'consider alternatives' hedge.","confidence":"medium_high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:e5bc93acbc69e4f952fa23f9","evaluation_type":"summary","finding":"Global multinational | Good fit, with coverage caveats | Global backbone architecture is designed for this; China coverage is genuinely differentiated | Needs Netify/buyer to verify specific-country PoP coverage (Middle East/Africa/LatAm gaps identified in Table 7) before assuming global parity | Custom Enterprise pricing | Table 7 findings | The architecture is right for multinational buyers, but Netify should not claim complete global coverage - verify the buyer's specific footprint against Cato's actual PoP map, especially in Africa/Middle East/LatAm where evidence was not found.","buyer_implication":null,"qualification":"Good fit, with coverage caveats | Global backbone architecture is designed for this; China coverage is genuinely differentiated | Needs Netify/buyer to verify specific-country PoP coverage (Middle East/Africa/LatAm gaps identified in Table 7) before assuming global parity | Custom Enterprise pricing | Table 7 findings | The architecture is right for multinational buyers, but Netify should not claim complete global coverage - verify the buyer's specific footprint against Cato's actual PoP map, especially in Africa/Middle East/LatAm where evidence was not found.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:e6cc2098d58db1494e98d1b2","evaluation_type":"summary","finding":"Cloud-first organisation | Good fit | Multiple cloud on-ramp options (vSocket, cross-connect, agentless IPSec) across AWS/Azure/GCP, avoiding premium cloud connectivity costs | None significant identified | Potential cost avoidance vs Direct Connect/ExpressRoute - a genuine, quantifiable-in-principle commercial argument, though no independent cost-comparison evidence was found | Table 6 findings | A logically strong pitch for cloud-first buyers; Netify should ask Cato for real customer cost-comparison data if making this argument concretely to a buyer.","buyer_implication":null,"qualification":"Good fit | Multiple cloud on-ramp options (vSocket, cross-connect, agentless IPSec) across AWS/Azure/GCP, avoiding premium cloud connectivity costs | None significant identified | Potential cost avoidance vs Direct Connect/ExpressRoute - a genuine, quantifiable-in-principle commercial argument, though no independent cost-comparison evidence was found | Table 6 findings | A logically strong pitch for cloud-first buyers; Netify should ask Cato for real customer cost-comparison data if making this argument concretely to a buyer.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:e8827f39176f0f538cbab731","evaluation_type":"summary","finding":"Support/service reality | A credible, tiered NOC/SOC/MXDR structure exists with a specific claimed track record (MXDR since 2019), but much of the detailed evidence for this profile came from partner/reseller pages rather than a primary Cato service description - worth pulling Cato's own SLA/service description document directly for a stronger evidence base before this profile is finalised. | Table 8 | Medium | Flag internally as a priority follow-up source to strengthen, not just a note for the buyer.","buyer_implication":"Flag internally as a priority follow-up source to strengthen, not just a note for the buyer.","qualification":"A credible, tiered NOC/SOC/MXDR structure exists with a specific claimed track record (MXDR since 2019), but much of the detailed evidence for this profile came from partner/reseller pages rather than a primary Cato service description - worth pulling Cato's own SLA/service description document directly for a stronger evidence base before this profile is finalised. | Table 8 | Medium | Flag internally as a priority follow-up source to strengthen, not just a note for the buyer.","confidence":"medium","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:eaaf3bc6474307804f4dd221","evaluation_type":"summary","finding":"Multi-vendor SASE integration | Not documented - Cato's positioning is explicitly single-vendor/converged, so a 'multi-vendor SASE integration' scenario runs somewhat against the product's core pitch | N/A | N/A | N/A | N/A | N/A | N/A | Worth noting directly in the Netify View: Cato is not well-positioned (by its own design philosophy) for buyers wanting to integrate it as one component of a deliberately multi-vendor SASE stack - that buyer profile is better served by a more modular competitor.","buyer_implication":null,"qualification":"Not documented - Cato's positioning is explicitly single-vendor/converged, so a 'multi-vendor SASE integration' scenario runs somewhat against the product's core pitch | N/A | N/A | N/A | N/A | N/A | N/A | Worth noting directly in the Netify View: Cato is not well-positioned (by its own design philosophy) for buyers wanting to integrate it as one component of a deliberately multi-vendor SASE stack - that buyer profile is better served by a more modular competitor.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:ec459966cc6513bdbe9f81e3","evaluation_type":"summary","finding":"Questions to ask before recommending it | 1) Which Table 3 capabilities marked 'native' are actually included at the buyer's target tier, versus requiring Premium/Enterprise or an add-on licence? 2) What PoP coverage exists in the buyer's specific target countries, especially outside North America/Europe/China? 3) Does the buyer have NHS DSPT, DORA, or NIS2 compliance requirements, and can Cato confirm status directly? 4) Does the buyer need VDI, privileged access management, or complex delegated administration - and can Cato confirm these are supported? | Synthesis of Tables 3, 7, 13, 5/9 | High | A direct, reusable question set for Netify's advisory conversations with buyers considering Cato.","buyer_implication":"A direct, reusable question set for Netify's advisory conversations with buyers considering Cato.","qualification":"1) Which Table 3 capabilities marked 'native' are actually included at the buyer's target tier, versus requiring Premium/Enterprise or an add-on licence? 2) What PoP coverage exists in the buyer's specific target countries, especially outside North America/Europe/China? 3) Does the buyer have NHS DSPT, DORA, or NIS2 compliance requirements, and can Cato confirm status directly? 4) Does the buyer need VDI, privileged access management, or complex delegated administration - and can Cato confirm these are supported? | Synthesis of Tables 3, 7, 13, 5/9 | High | A direct, reusable question set for Netify's advisory conversations with buyers considering Cato.","confidence":"high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:ef03111abbb7881528d2842a","evaluation_type":"summary","finding":"Overall Netify Assessment | Cato Networks is a credible, architecturally well-differentiated single-vendor SASE platform with genuinely strong, well-evidenced claims around backbone performance and zero-touch distributed deployment - best demonstrated by the Ulta Beauty case study. Its weakest points for Netify's purposes are commercial transparency and the depth of publicly available evidence for UK/EU regulated-sector compliance and non-retail sectors. This profile is solid enough to support initial shortlist guidance for the buyer profile described above, but several specific fields (flagged throughout as Unknown/Not Publicly Disclosed) should be closed out with Cato directly before the profile is used to support high-stakes procurement decisions. | Whole profile | Medium-High overall | Recommend direct Cato/partner engagement to close the flagged evidence gaps as the immediate next step, rather than treating this pilot profile as fully complete.","buyer_implication":"Recommend direct Cato/partner engagement to close the flagged evidence gaps as the immediate next step, rather than treating this pilot profile as fully complete.","qualification":"Cato Networks is a credible, architecturally well-differentiated single-vendor SASE platform with genuinely strong, well-evidenced claims around backbone performance and zero-touch distributed deployment - best demonstrated by the Ulta Beauty case study. Its weakest points for Netify's purposes are commercial transparency and the depth of publicly available evidence for UK/EU regulated-sector compliance and non-retail sectors. This profile is solid enough to support initial shortlist guidance for the buyer profile described above, but several specific fields (flagged throughout as Unknown/Not Publicly Disclosed) should be closed out with Cato directly before the profile is used to support high-stakes procurement decisions. | Whole profile | Medium-High overall | Recommend direct Cato/partner engagement to close the flagged evidence gaps as the immediate next step, rather than treating this pilot profile as fully complete.","confidence":"medium_high","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":[]},{"id":"evaluations:f24c4c770621188c80496789","evaluation_type":"summary","finding":"Merger/acquisition integration | Referenced as a supported use case (rapid onboarding of new locations/users via zero-touch provisioning) but not evidenced via a named M&A-specific case study | Not itemised | Not itemised | Not itemised | Not quantified | Not itemised | Not detailed | Plausible given the zero-touch provisioning model, but this is marketing-page positioning (catonetworks.com/use-cases/) rather than a named customer proof point - grade confidence accordingly.","buyer_implication":null,"qualification":"Referenced as a supported use case (rapid onboarding of new locations/users via zero-touch provisioning) but not evidenced via a named M&A-specific case study | Not itemised | Not itemised | Not itemised | Not quantified | Not itemised | Not detailed | Plausible given the zero-touch provisioning model, but this is marketing-page positioning (catonetworks.com/use-cases/) rather than a named customer proof point - grade confidence accordingly.","confidence":"unresolved","verified_date":"2026-07-22T00:00:00.000Z","freshness_state":"current","evidence_source_ids":["evidence:cato-networks:7"]}],"evidence_sources":[{"id":"evidence:cato-networks:38","url":"https://aws.amazon.com/marketplace/pp/prodview-7znddzznxhd6g","title":"AWS Marketplace - Cato Networks Virtual Socket listing (vendor-published)","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:44","url":"https://support.catonetworks.com/hc/en-us/articles/360001868837","title":"Cato Learning Centre - Accelerating and Optimizing Traffic","publisher":"","publication_date":"2025-03-06T00:00:00.000Z","verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:46","url":"https://support.catonetworks.com/hc/en-us/articles/7790698733341","title":"Cato Learning Centre - Configuring Network Rules","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:21","url":"https://support.catonetworks.com","title":"Cato Learning Centre - CrowdStrike integration articles (XOps, NG-SIEM)","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:22","url":"https://support.catonetworks.com/hc/en-us/sections/13977310566690","title":"Cato Learning Centre - Event Integration section (Splunk/Syslog/S3/Azure Storage)","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:20","url":"https://support.catonetworks.com/hc/en-us/articles/31849681948061","title":"Cato Learning Centre - Microsoft Sentinel integration articles","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:42","url":"https://support.catonetworks.com/hc/en-us/articles/34177190210013","title":"Cato Learning Centre - Private PoP Overview for Customers","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:45","url":"https://support.catonetworks.com/hc/en-us/articles/30175650827677","title":"Cato Learning Centre - What are Cato Sockets","publisher":"","publication_date":"2026-04-15T00:00:00.000Z","verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:3","url":"https://catonetworks.com/company/","title":"Cato Networks - Company page","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:24","url":"https://catonetworks.com/customers/ulta-beauty-reinvents-network-deliver-seamless-retail-experience/","title":"Cato Networks - Customers: Ulta Beauty case study","publisher":"","publication_date":"2026-01-13T00:00:00.000Z","verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:41","url":"https://catonetworks.com/cato-networks-data-processing-and-privacy-agreement/","title":"Cato Networks - Data Processing and Privacy Agreement","publisher":"","publication_date":"2025-11-18T00:00:00.000Z","verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:16","url":"https://catonetworks.com/platform/digital-experience-monitoring-dem/","title":"Cato Networks - Digital Experience Monitoring page","publisher":"","publication_date":"2025-08-04T00:00:00.000Z","verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:5","url":"https://catonetworks.com/platform/global-private-backbone/","title":"Cato Networks - Global Private Backbone","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:19","url":"https://catonetworks.com/integrations/","title":"Cato Networks - Integration Hub","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:28","url":"https://catonetworks.com/services/managed-sase/","title":"Cato Networks - Managed SASE / MSASE Partner Platform","publisher":"","publication_date":"2024-12-10T00:00:00.000Z","verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:29","url":"https://catonetworks.com/partners/managed-services-provider/","title":"Cato Networks - Managed Services Provider partner page","publisher":"","publication_date":"2025-05-06T00:00:00.000Z","verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:9","url":"https://catonetworks.com/platform/","title":"Cato Networks - Platform overview","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:7","url":"https://catonetworks.com/use-cases/","title":"Cato Networks - SASE Use Cases","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:17","url":"https://catonetworks.com/security-compliance-and-privacy/","title":"Cato Networks - Security, Compliance and Privacy","publisher":"","publication_date":"2026-03-04T00:00:00.000Z","verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:10","url":"https://catonetworks.com/solutions/","title":"Cato Networks - Solutions","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:15","url":"https://catonetworks.com/platform/extended-detection-and-response-xdr/","title":"Cato Networks - XDR platform page","publisher":"","publication_date":"2026-02-17T00:00:00.000Z","verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:18","url":"https://security.catonetworks.com","title":"Cato Networks Trust Centre (Conveyor)","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:26","url":"https://catonetworks.com/blog/customer-case-study-cloud-migration-drives-global-wan-overhaul/","title":"Cato Networks blog - SAP HEC / Global WAN Overhaul case study","publisher":"","publication_date":"2022-12-21T00:00:00.000Z","verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:13","url":"https://catonetworks.com/blog/securing-the-ai-browser-revolution/","title":"Cato Networks blog - Securing the AI Browser Revolution","publisher":"","publication_date":"2025-11-05T00:00:00.000Z","verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:39","url":"https://catonetworks.com/blog/sase-based-xdr-expands-into-network-operations/","title":"Cato Networks blog - When SASE-based XDR Expands into Network Operations","publisher":"","publication_date":"2024-04-04T00:00:00.000Z","verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:40","url":"https://prnewswire.com/news-releases/cato-networks-unveils-modular-adoption-model...","title":"PRNewswire / Cato Networks - Modular Adoption Model for AI-Native Cybersecurity Platform (vendor-issued release)","publisher":"","publication_date":"2026-03-31T00:00:00.000Z","verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_1","source_status":"current"},{"id":"evidence:cato-networks:11","url":"https://csoonline.com/article/1297661","title":"CSO Online - Cato Networks launches SASE-powered XDR","publisher":"","publication_date":"2024-01-23T00:00:00.000Z","verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_2","source_status":"current"},{"id":"evidence:cato-networks:43","url":"https://calcalistech.com/ctechnews/article/rjf7exsube","title":"Calcalist/CTech - Cato Networks hits $350M revenue run rate amid IPO uncertainty","publisher":"","publication_date":"2026-02-24T00:00:00.000Z","verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_2","source_status":"current"},{"id":"evidence:cato-networks:2","url":"https://find-and-update.company-information.service.gov.uk/company/10964512","title":"Companies House - CATO NETWORKS (UK) LIMITED","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_2","source_status":"current"},{"id":"evidence:cato-networks:23","url":"https://support.catonetworks.com/hc/en-us/articles/13975273800733","title":"Cato Learning Centre - Third-Party Supported Integrations (forum)","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_3","source_status":"current"},{"id":"evidence:cato-networks:37","url":"https://netpoleons.com/uploads/.../cato-solution-brief_white_paper.pdf","title":"Cato SASE Cloud Platform solution brief (hosted by partner Netpoleons)","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_3","source_status":"current"},{"id":"evidence:cato-networks:36","url":"https://blogs.fsd-tech.com","title":"FSD Tech blog - Cato Sockets Explained / Global Backbone (third-party)","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_3","source_status":"current"},{"id":"evidence:cato-networks:31","url":"https://intelligentvisibility.com/managed-cato-networks-sase-services...","title":"Intelligent Visibility - Managed Cato Networks SASE Services (Aegis)","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_3","source_status":"current"},{"id":"evidence:cato-networks:25","url":"https://opkalla.com/case-studies/jewelry-retailer-finds-consistency...","title":"Opkalla - jewelry retailer case study","publisher":"","publication_date":"2023-11-08T00:00:00.000Z","verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_3","source_status":"current"},{"id":"evidence:cato-networks:4","url":"https://pitchbook.com/profiles/company/126378-19","title":"PitchBook - Cato Networks company profile","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_3","source_status":"current"},{"id":"evidence:cato-networks:8","url":"https://sacra.com/c/cato-networks/","title":"Sacra - Cato Networks research","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_3","source_status":"current"},{"id":"evidence:cato-networks:30:1","url":"https://security7.net","title":"Security7 Networks / CommuniCloud - Cato partner pages (NOC/SOC claims)","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_3","source_status":"current"},{"id":"evidence:cato-networks:30:2","url":"https://communicloud.com","title":"Security7 Networks / CommuniCloud - Cato partner pages (NOC/SOC claims)","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_3","source_status":"current"},{"id":"evidence:cato-networks:12","url":"https://blog.send.win/cato-networks-remote-browser-isolation-features...","title":"Sendwin blog - Cato Networks RBI guide","publisher":"","publication_date":"2026-06-05T00:00:00.000Z","verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_3","source_status":"current"},{"id":"evidence:cato-networks:32","url":"https://vendr.com/marketplace/cato-networks","title":"Vendr - Cato Networks Software Pricing & Plans 2026","publisher":"","publication_date":null,"verified_date":"2026-07-22T00:00:00.000Z","reliability_tier":"tier_3","source_status":"current"}]}