NNetify

BT Business / BT Global - Managed SASE - Netify Knowledge Profile

Read MarkdownJSON

Research updates

Checked 23 October 2026. These sourced updates are separate from Harry Yelland's original profile, preserved in full below. Platform documentation describes technology support; the BT order determines service inclusion.

Fortinet launch date

BT announcement

BT announced the UK Fortinet managed SASE expansion on 25 November 2024.

Announcement date

International SSE choices

BT International

The 14 October 2026 announcement names Cisco, Fortinet, Netskope and Zscaler SSE connectivity through Global Fabric. This is an International offer, not a universal UK package.

Announcement and notes to editors

Data loss prevention

BT published service description

BT now names DLP for cloud applications, including M365.

Converged threat detection and prevention

Operations and reporting

BT published service description

BT names unified incident response, quarterly business reviews, a unified dashboard, custom reporting, anomaly detection and auto-remediation. These marketing claims do not establish each ordered package or its response targets.

End-to-end SASE managed by BT

UK logging

BT published service description

BT describes UK-resident logging and management. Retention, export permissions and the contracted processing scope need agreement.

Converged threat detection and prevention

Remote access and DNS

BT FortiSASE

The BT FortiSASE schedule names FortiClient, DNS security, CASB and private-application ZTNA.

Part B 1.1.2, 1.1.5-1.1.7; 3.1.1

Digital experience monitoring

BT FortiSASE option

DEM is orderable with an additional licence.

Part B 1.1.9

Customer access and changes

BT FortiSASE

Portal monitoring and reports require co-management. Permitted commands are agreed; BT disclaims losses from customer changes. Five simple service requests per year are included.

Part B 1.1.3; 2.2; 3.2; 8.1

Licence duration

BT FortiSASE

Licences may cover the service term or a minimum year with yearly renewals. BT manages the subscriptions.

Part B 1.1.10

Service-edge locations

BT FortiSASE

Specific PoPs are agreed for customer requirements; the schedule supplies no fixed worldwide count.

Part B 1.1.1

Physical, virtual and LAN options

BT Fortinet SD-WAN

BT specifies physical and virtual edges, optional cloud deployment, switches, Wi-Fi access points and LAN CPE. Exact models remain order-specific.

Part B 1.1; 2.1; 2.4; 2.8

4G and 5G underlay

BT Fortinet SD-WAN option

UK mobile options include 4G and 5G. Active-active mobile access requires available 5G.

Part B 2.3

Application and site visibility

BT Fortinet SD-WAN

Co-management provides FortiManager/FortiAnalyzer visibility; write access needs permission. The customer portal monitors network status and generates reports.

Part B 1.6; 2.2

Protective monitoring

BT Fortinet SD-WAN option

Optional protective monitoring handles high/critical events continuously and uses agreed response playbooks. It is separate from security licensing.

Part B 2.5-2.6

Hardware maintenance

BT Fortinet SD-WAN

BT maintains and, where applicable, replaces BT-owned SD-WAN edge devices.

Part B 7.2.2

Bandwidth and user licences

BT Fortinet SD-WAN option

FortiSASE add-ons include bandwidth, public IP and remote-user licences. No public unit price is stated.

Part B 2.7.1

Contracted service levels

BT FortiSASE contract

BT FortiSASE Part A gives on-time delivery a service level; availability and incident resolution have targets. This differs from other BT service schedules.

Part A 13.2-14

Commitments and renewal

BT FortiSASE contract

Charges and volume commitments are set in the order. Renewal requests are described at least 90 days before expiry; renewal needs an order. Reconfiguration and out-of-hours work can incur extra charges.

Part A 10-11

China availability

BT FortiSASE contract

The schedule addresses China restrictions; this does not establish universal availability or a named local PoP.

Part A 9

Incident and change management

BT management schedule

STANDARD defines incident ownership, escalation, diagnosis, restoration and controlled changes. The applicable management schedule is identified in the order.

STANDARD sections 4-12, 18-21; schedule index

Service reviews and reporting

BT management option

PLUS describes monthly performance reports and service management. Applicable options must be purchased and listed in the order.

PLUS sections 9-11, 14-15; schedule index

SOC 2 report access

BT assurance process

BT offers its SOC 2 report to customers and prospects under NDA. Request the report and check the exact service, legal entity, audit period and exceptions. The public page does not establish SASE-specific scope.

SOC2 Assurance

Browser access for contractors

Underlying platform, not BT inclusion

FortiSASE documents browser-only access to private HTTPS applications for contractors and temporary workers. BT orderability and application scope still need confirmation.

Agentless ZTNA; subscription prerequisites

Mobile clients

Underlying platform, not BT inclusion

FortiSASE lists Android and iOS clients alongside Windows and macOS. BT must confirm supported versions and feature parity for the chosen service.

Product integration and support

API-based CASB

Underlying platform, not BT inclusion

Fortinet documents out-of-band CASB for AWS S3, Google Cloud Storage and Office 365, with licence prerequisites. This does not prove inclusion in a BT order.

API-based CASB prerequisites

Browser isolation

Underlying platform, not BT inclusion

FortiSASE RBI is a select-availability feature, disabled by default where not already enabled. It requires an eligible subscription, proxy and Fortinet PoP. BT availability must be agreed.

RBI availability and prerequisites

Identity integration

Underlying platform, not BT inclusion

FortiSASE documents Entra ID, Okta, LDAP and RADIUS authentication. BT configuration and support responsibilities remain order-specific.

Access and authentication

Multiple identity providers

Underlying platform, not BT inclusion

FortiAuthenticator can proxy employee and contractor identities from Entra ID, Google Workspace or Okta. Its inclusion in BT service scope needs agreement.

Identity-provider proxy example

User provisioning

Underlying platform, not BT inclusion

FortiSASE documents SCIM provisioning with eligibility and instance restrictions. SAML support does not itself prove OIDC support. BT must confirm instance eligibility and enabled protocols.

SCIM server support prerequisites

External log export

Underlying platform, not BT inclusion

FortiSASE supports external FortiAnalyzer, Syslog and CEF forwarding, including DLP, security and administrative events. This is not evidence of a ready-made Sentinel or Splunk integration or BT-granted export access.

Forwarding logs to an external server

Loss protection

Underlying platform, not BT inclusion

FortiGate supports forward error correction and packet duplication. Firmware, design and BT support scope need matching before procurement.

SD-WAN architecture guides

AI assistant and reports

Underlying platform, not BT inclusion

FortiAnalyzer FortiAI supports natural-language queries, report generation and configuration assistance with its own licence. BT has not been shown to include that licence or customer access.

FortiAI capabilities and licence

Zero-touch Wi-Fi deployment

BT published component description

BT names zero-touch deployment for FortiAP. This is specific to Wi-Fi access points and does not prove a universal zero-touch branch workflow.

Notes to editors, FortiAP

Manufacturing experience

Sector experience, not product proof

BT publishes manufacturing case studies and links to its SD-WAN/SASE portfolio. These references do not establish a named Fortinet SASE manufacturing deployment.

Manufacturing case-study directory

ServiceNow orchestration

BT published transformation description

BT describes ServiceNow digital service apps for SASE-controller orchestration. A customer-facing ServiceNow connector, entitlement and workflow scope still need agreement.

Automation and orchestration

Separate security products

Separate BT offers

BT lists Managed CrowdStrike, Managed CySOC for Splunk and multiple cloud-security offers separately. Their presence in the catalogue does not establish integration or inclusion in BT FortiSASE.

Security service schedule list

Satellite scope

Different BT service

BT and Starlink announced consumer broadband and mobile-backhaul uses. This does not establish a managed SASE satellite option. Ask BT for the enterprise offer and support boundary.

Consumer announcement scope

Questions for BT

26 items need service-specific evidence

Public sources reviewed have not settled these points. They are procurement questions, not findings that BT lacks the capability.

SaaS security posture
Please identify the ordered product, licence and supported configuration for SaaS security posture, with a service-document reference.
VDI environments
Please confirm supported devices, applications, enrolment requirements and licence scope for VDI environments.
Privileged access
Please confirm supported devices, applications, enrolment requirements and licence scope for Privileged access.
Middle East coverage
Please provide the country/location list, regulatory restrictions and contracted delivery scope for Middle East coverage.
Africa coverage
Please provide the country/location list, regulatory restrictions and contracted delivery scope for Africa coverage.
Latin America coverage
Please provide the country/location list, regulatory restrictions and contracted delivery scope for Latin America coverage.
Sovereign/regional service options
Please provide the country/location list, regulatory restrictions and contracted delivery scope for Sovereign/regional service options.
Role-based administration
Please demonstrate Role-based administration and specify customer permissions, change controls and any additional charge.
Multi-tenancy
Please demonstrate Multi-tenancy and specify customer permissions, change controls and any additional charge.
User/entity behaviour analytics
Please identify the product/version, licence, customer access and BT support scope for User/entity behaviour analytics.
Generative AI application controls
Please identify the product/version, licence, customer access and BT support scope for Generative AI application controls.
AI data protection controls
Please identify the product/version, licence, customer access and BT support scope for AI data protection controls.
VMware (historical)
Please provide the supported connector or protocol, data flow, licence and responsibility split for VMware (historical).
AWS
Please provide the supported connector or protocol, data flow, licence and responsibility split for AWS.
Microsoft Azure
Please provide the supported connector or protocol, data flow, licence and responsibility split for Microsoft Azure.
Google Cloud
Please provide the supported connector or protocol, data flow, licence and responsibility split for Google Cloud.
Microsoft Defender
Please provide the supported connector or protocol, data flow, licence and responsibility split for Microsoft Defender.
Nokia
Please provide the supported connector or protocol, data flow, licence and responsibility split for Nokia.
REST API
Please provide the supported connector or protocol, data flow, licence and responsibility split for REST API.
PCI DSS
Please provide the service-specific assurance documentation and contractual scope for PCI DSS.
GDPR
Please provide the service-specific assurance documentation and contractual scope for GDPR.
NIS2 relevance
Please provide the service-specific assurance documentation and contractual scope for NIS2 relevance.
DORA relevance
Please provide the service-specific assurance documentation and contractual scope for DORA relevance.
Financial services
Please provide a named, product-specific deployment reference for Financial services.
Retail
Please provide a named, product-specific deployment reference for Retail.
Mid-market
Please provide a comparable deployment and explain service fit, scale and support scope for Mid-market.

Netify Overview: BT Business / BT Global Managed SASE

BT is not a single-platform SASE company, but the UK’s largest telecommunications operator and managed service provider, delivering SASE as one service line within a vastly larger, publicly-listed (LSE: BT.A) group. For FY2026 (year ended 31 March 2026), BT Group reported revenue of £19.7 billion, adjusted EBITDA of £8.2 billion, and profit before tax of £1.4 billion - a large corporate scale, reflecting BT’s identity as a diversified national telecommunications operator rather than a standalone SASE vendor. BT’s SASE proposition is delivered under its own named managed-connectivity brand, Agile Connect, and is explicitly multi-platform rather than built on a single, proprietary technology stack: BT’s own materials and Netify’s own published research confirm managed SD-WAN delivered on Cisco Meraki and Versa, with managed SASE delivered on Fortinet and Meraki, reinforced by BT’s own Managed Detection and Response service. The current, Fortinet-based managed SASE offering - adding firewall-as-a-service, secure web gateway, cloud access security broker and zero-trust network access on top of BT’s existing managed SD-WAN - launched in its most recent expanded form in late 2025, following an earlier, distinct managed SASE service built on VMware technology that BT brought to market in January 2022. Buyers researching BT’s SASE history should understand these as two different underlying technology generations rather than a single, continuous product. BT’s core differentiator is not a proprietary SASE architecture but infrastructural depth: Openreach, BT’s wholly-owned but operationally separate access-network subsidiary (established 2006 under Ofcom/Enterprise Act 2002 undertakings), gives BT direct control over one of the deepest last-mile access estates in the UK market, combined with BT’s own international core network and long-established BT Security division. Evidence quality here differs in character from many pure-play SASE vendors: no fully-named, quantified customer success story with an identified company was found, though a real, detailed, primary-sourced case study describes an anonymised global financial-services customer’s deployment of Agile Connect with BT Managed Fortinet Firewall. Commercially, BT’s SASE offering is confirmed as quote-based with no published enterprise pricing, and buyers should confirm directly which specific underlying vendor platform (Fortinet, Meraki, or otherwise) is being proposed for their specific deployment, since BT’s own positioning is explicit that platform choice and packaging vary by customer.

Core Architecture & Key Differentiators

BT's SASE architecture reflects its identity as a large, diversified telecommunications operator and systems integrator rather than a single-platform technology company: the differentiators are infrastructural and operational, not proprietary software.

Genuine, owned last-mile and core network depth via Openreach.

Netify's own published capability research on BT specifically confirms 'Openreach-adjacent last mile, owned core, and global reach through BT's international network' with 'dual-hub and diverse last-mile designs' as standard practise for resilience - a specific, structural advantage rooted in BT's ownership of Openreach rather than a SASE-platform feature.

A confirmed, deliberately multi-platform technology strategy.

Rather than committing to one SASE vendor, BT offers managed SD-WAN on Cisco Meraki and Versa, and managed SASE on Fortinet and Meraki, giving buyers genuine platform choice within a single managed-service contract - though this also means buyers must confirm exactly which platform is being proposed for their specific requirement, since capability and packaging vary between them.

Sector-specific SASE positioning with named, concrete use cases.

BT's own current SASE materials describe specific, named sector applications rather than generic capability claims - for retail, 'elastic SD-WAN and CASB to dynamically steer traffic and safeguard payment and customer data' during seasonal surges and pop-up environments; for financial services, ZTNA-based identity-first access with data residency support 'by keeping sensitive traffic within localised data paths'.

Where BT Managed SASE Stands Out vs Where It Falls Short

Evaluation Area

Strengths & Differentiators

Weaknesses & Watch-Outs

Deployment & Ops

Strengths & Differentiators

Genuine, confirmed field-engineering depth and UK-wide access-network ownership via Openreach, reinforced by a real, detailed (if anonymised) case study describing a full global, multi-country managed SD-WAN and firewall deployment.

Weaknesses & Watch-Outs

BT's own positioning, per Netify's independent research, is explicit that a DIY/self-managed model is 'not BT's primary positioning' - buyers wanting a lighter-touch, self-administered platform should confirm the co-managed model and customer control boundaries directly via RACI documentation and a portal demonstration before committing.

Security & Analytics

Strengths & Differentiators

BT Security provides a confirmed, named Managed Detection and Response service layered on top of the SASE offering, reinforced by BT's own confirmed 'unified monitoring services' and round-the-clock access to BT security experts.

Weaknesses & Watch-Outs

The specific security-stack capabilities (RBI, DLP, granular CASB detail) depend on which underlying vendor platform (Fortinet vs. Meraki) is proposed for a given deployment - buyers should request platform-specific technical detail rather than assume uniform capability across BT's whole SASE portfolio.

Commercials

Strengths & Differentiators

A single managed contract can combine access, CPE, the underlying vendor stack, and service-tier options together, reducing multi-vendor procurement complexity for buyers who value contractual simplicity.

Weaknesses & Watch-Outs

No complete, public enterprise price was found in any source reviewed - pricing is confirmed quote-based, consistent with the pattern for the large majority of managed-service and carrier-delivered SASE offerings.

Compliance & Footprint

Strengths & Differentiators

Confirmed HSCN (Health and Social Care Network) accreditation specifically supports NHS and healthcare-sector public bodies, reinforced by BT's own confirmed compliance-support materials describing managed logs, policies and controls to simplify staying compliant.

Weaknesses & Watch-Outs

This research pass found no confirmation of platform-specific certifications (FedRAMP, ISO 27001 specifically for the SASE service, SOC 2) distinct from BT Group's broader, much larger corporate compliance posture - a genuine, specific gap worth closing directly for buyers with formal, platform-level certification requirements.

Scope & Boundaries

Strengths & Differentiators

Genuine platform flexibility (Fortinet, Meraki, Versa) inside one managed relationship gives buyers real optionality without needing to manage multiple separate vendor contracts directly.

Weaknesses & Watch-Outs

BT has offered managed SASE under at least two distinct underlying technology generations in recent years (VMware from January 2022, Fortinet from late 2024/2025) - buyers should confirm which specific, current generation and platform any proposal describes, rather than assume continuity with older, publicly-referenced BT SASE announcements.

Suitability Matrix: Who Should (and Shouldn't) Buy BT Managed SASE

Recommended for:

UK-headquartered or UK-anchored organisations wanting genuine underlay accountability and field-engineering depth alongside SD-WAN and SASE delivery, given BT's confirmed ownership of Openreach; public-sector and NHS-adjacent buyers specifically, given confirmed HSCN accreditation; and buyers wanting a single managed contract combining connectivity, hardware, and a choice of underlying SASE platform rather than separately procuring each element.

Look elsewhere if:

you want a fully self-managed, do-it-yourself platform, given BT's own confirmed positioning that this is not its primary delivery model; you need platform-specific compliance certifications (FedRAMP, an independently-confirmed ISO 27001 or SOC 2 for the SASE service itself) that this research pass could not confirm; or you want a single, proprietary, vendor-owned SASE architecture rather than a multi-platform managed-service model where the specific underlying technology varies by proposal.

Netify Buyer Checklist: Questions for BT

Before placing BT Managed SASE on a shortlist, it's worth getting clear answers to the following, ideally in writing rather than taken on trust from a slide.

On platform choice specifically:

exactly which underlying SASE platform (Fortinet or Meraki) is being proposed for this deployment, and why was it selected over the alternative?

On the co-managed model:

what does the RACI split actually look like in practise, and can BT provide a live portal demonstration showing exactly what visibility and control the customer retains directly?

On compliance:

beyond the confirmed HSCN accreditation, does the specific SASE service itself carry any independently-verified certifications (ISO 27001, SOC 2, or equivalent), distinct from BT Group's broader corporate compliance posture?

And on migration history:

given BT has offered managed SASE under at least two different underlying technology generations (VMware from 2022, Fortinet from 2024-2025), what is the current status of any legacy VMware-based deployments, and what would a migration path to the current platform look like for an existing customer?

Research tables and sources

Table 1 - Entity Identity and Market Position

Field

Required data

Entity name

Required data

BT Group plc, operating this service via BT Business and BT Global under the named managed-connectivity brand Agile Connect, with managed SASE delivered on Fortinet and Cisco Meraki platforms specifically [5] [6]

Entity type

Required data

Telecommunications operator and managed service provider (publicly-listed parent company; SASE is one service line within a much larger, diversified group)

Headquarters

Required data

London, United Kingdom [10]

Ownership

Required data

Public company, listed on the London Stock Exchange (BT.A). For the financial year ended 31 March 2026, BT Group reported revenue of £19.7 billion (down 3% year-on-year), adjusted EBITDA of £8.2 billion (flat), profit before tax of £1.4 billion (up 8%), and capital expenditure of £5.1 billion. Allison Kirkby serves as CEO. BT's operations are organised into segments described variously across sources as Consumer, Business (or Enterprise/Global) and Openreach; Openreach - the UK access-network subsidiary responsible for the physical local-loop infrastructure connecting most UK homes and businesses - was established in 2006 following undertakings agreed with UK regulator Ofcom under the Enterprise Act 2002 to ensure equal access for rival telecom operators, and remains 100% owned by BT Group despite operating with additional regulatory governance independence. Openreach reported 2023/24 revenue of approximately £6.0 billion and operating income of approximately £3.8 billion. [12] [10] [13] [15] [14] [11] [16]

Primary proposition

Required data

A managed, multi-platform SD-WAN and SASE service (Agile Connect, with managed SASE on Fortinet and Meraki) combining BT's owned UK access-network depth (via Openreach), international core network, and BT Security's monitoring and Managed Detection and Response capability into a single managed contract. [2] [5] [6]

Core buyer segments

Required data

UK and multinational enterprises and public-sector organisations wanting a single managed contract for connectivity, hardware, and SASE security, particularly in retail, financial services, public sector, and healthcare (NHS-adjacent) sectors specifically. [7] [6]

Primary geographies

Required data

UK-anchored with genuine global reach for multinational customers, via BT's own international network - the specific case study evidence found in this research pass confirms multi-country deployment capability directly. [17]

Delivery model

Required data

Fully managed by default (BT's own confirmed core positioning), with a co-managed option available; customer control boundaries and the specific RACI split should be confirmed directly via documentation and a portal demonstration. [8]

Netify View

Required data

BT's identity in this category is defined by scale and infrastructural ownership rather than a single, proprietary SASE architecture - a genuinely different evaluation basis from a platform-focused, single-vendor SASE company. The confirmed ownership of Openreach is a real, structural differentiator no pure-play SASE vendor can replicate, but buyers must do more work to pin down exactly which underlying technology platform, service tier, and commercial terms apply to their specific deployment, given BT's own confirmed multi-platform, packaging-varies-by-customer positioning.

Table 2 - Product and Service Portfolio

Product/service

Category

Current name/version

Native or partner

Target buyer

Delivery model

Source

Last verified

Agile Connect

Category

Managed SD-WAN [8]

Current name/version

Agile Connect [8]

Native or partner

Native BT-managed service, delivered on partner platforms (Cisco Meraki, Versa) [8]

Target buyer

All buyers [8]

Delivery model

Fully managed, with mixed connectivity options per site [8]

Source

[8]

Last verified

22 Jul 2026 [8]

BT Managed SASE (Fortinet-based)

Category

Converged SASE (SD-WAN + SSE) [2]

Current name/version

BT Managed SASE, powered by Fortinet [2]

Native or partner

Native BT-managed service on Fortinet's platform [2]

Target buyer

Buyers wanting a full, current-generation SASE service [2]

Delivery model

Cloud-delivered SSE layered on managed SD-WAN [2]

Source

[2]

Last verified

22 Jul 2026 [2]

BT Managed SASE (Meraki-based)

Category

Converged SASE (SD-WAN + SSE) [7]

Current name/version

BT Managed SASE on Cisco Meraki [7]

Native or partner

Native BT-managed service on Meraki's platform [7]

Target buyer

Buyers preferring Cisco/Meraki-based technology specifically [7]

Delivery model

Cloud-delivered SSE layered on managed SD-WAN [7]

Source

[7]

Last verified

22 Jul 2026 [7]

BT Managed Fortinet Firewall

Category

Firewall as a Service [17]

Current name/version

BT Managed Fortinet Firewall [17]

Native or partner

Native BT-managed service on Fortinet's platform [17]

Target buyer

Buyers wanting managed firewall alongside SD-WAN specifically [17]

Delivery model

Managed, edge-deployed with SSL decryption [17]

Source

[17]

Last verified

22 Jul 2026 [17]

BT Security Managed Detection and Response

Category

Managed security service [7]

Current name/version

BT Security MDR [7]

Native or partner

Native [7]

Target buyer

Buyers wanting integrated threat detection/response alongside SASE [7]

Delivery model

Managed, 24x7 [7]

Source

[7]

Last verified

22 Jul 2026 [7]

BT-managed VMware SASE (legacy/historical)

Category

Converged SASE (SD-WAN + SSE) - historical [9]

Current name/version

VMware SASE, managed by BT [9]

Native or partner

Native BT-managed service on VMware's platform (historical) [9]

Target buyer

Buyers on this earlier technology generation specifically [9]

Delivery model

Cloud-delivered, via a global network of over 150 VMware/partner PoPs at launch [9]

Source

[9]

Last verified

22 Jul 2026 [9]

Table 3 - Core SASE, SSE and SD-WAN Feature Matrix

BT's SASE capability is delivered via named third-party platforms (principally Fortinet, with a Meraki-based alternative) rather than proprietary BT technology - several rows below reflect capabilities of the underlying platform as implemented and managed by BT, not a BT-built security stack.

Capability

Availability

Product/module

Included or add-on

Deployment options

Key limitations

Evidence

Confidence

Netify View

SD-WAN

Availability

Native, and genuinely the platform's founding, long-established capability - BT's managed SD-WAN service (Agile Connect) predates the current managed SASE offering [8]

Product/module

Agile Connect, delivered on Cisco Meraki and/or Versa [8]

Included or add-on

Included [8]

Deployment options

Fully managed, with confirmed flexibility to mix different connectivity options per site [8]

Key limitations

None identified [8]

Evidence

[8]

Confidence

High

Netify View

Confirmed with genuine specificity and reinforced by a real, detailed case study describing exactly this capability in a global, multi-country deployment.

Secure web gateway

Availability

Native, confirmed as part of the current, Fortinet-based managed SASE expansion [2]

Product/module

BT Managed SASE (Fortinet SSE stack) [2]

Included or add-on

Included [2]

Deployment options

Cloud-delivered [2]

Key limitations

Capability specifics depend on which underlying platform (Fortinet vs. Meraki) is proposed [2]

Evidence

[2]

Confidence

High

Netify View

Confirmed directly in BT's own current launch materials as one of four named, core SSE capabilities added to the managed SD-WAN base.

CASB - inline

Availability

Native, confirmed with genuine sector-specific detail - explicitly named for retail, combined with elastic SD-WAN 'to dynamically steer traffic and safeguard payment and customer data' [5] [6]

Product/module

BT Managed SASE (CASB) [5] [6]

Included or add-on

Included [5] [6]

Deployment options

Cloud-delivered [5] [6]

Key limitations

Specific inline-versus-API-mode technical detail not itemised [5] [6]

Evidence

[5] [6]

Confidence

High

Netify View

Genuinely well-evidenced with a specific, named, sector-relevant use case (retail payment/customer data protection) rather than a generic capability mention.

CASB - API

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Availability

Not independently confirmed as a distinct out-of-band/API-mode capability in sources reviewed, separate from inline CASB

Product/module

Unknown

Included or add-on

Unknown

Deployment options

Unknown

Key limitations

Not confirmed as distinct from inline CASB

Evidence

Not found in a Tier 1-2 source in this pass

Confidence

Low

Netify View

Flagged as an open question for direct vendor confirmation rather than assumed present or absent.

ZTNA

Availability

Native, confirmed with genuine sector-specific detail - explicitly named for financial services as 'secure, identity-based access through ZTNA' supporting data residency [5] [6]

Product/module

BT Managed SASE (ZTNA) [5] [6]

Included or add-on

Included [5] [6]

Deployment options

Cloud-delivered [5] [6]

Key limitations

None identified [5] [6]

Evidence

[5] [6]

Confidence

High

Netify View

Genuinely well-evidenced with specific, named, sector-relevant detail (financial-services identity-based access, data residency support) rather than a generic ZTNA mention.

Firewall as a Service

Availability

Native, and confirmed with genuine technical specificity via a real, detailed case study - 'BT Managed Fortinet Firewall... detecting malicious activity at the edge of the network... built-in Secure Sockets Layer (SSL) decryption' [17]

Product/module

BT Managed Fortinet Firewall [17]

Included or add-on

Included, or available as a distinct add-on per the confirmed named product [17]

Deployment options

Managed, edge-deployed [17]

Key limitations

None identified [17]

Evidence

[17]

Confidence

High

Netify View

Genuinely one of the strongest, most technically specific rows in this table - real, primary-sourced, case-study-evidenced detail (SSL decryption, edge-based malicious-activity detection) rather than a generic FWaaS claim.

Data loss prevention

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Availability

Not independently confirmed as a distinct, named DLP product in sources reviewed

Product/module

Unknown

Included or add-on

Unknown

Deployment options

Unknown

Key limitations

Not confirmed

Evidence

Not found in a Tier 1-2 source in this pass

Confidence

Low

Netify View

Evidence gap - worth a direct follow-up.

Remote browser isolation

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Availability

Not independently confirmed as a distinct named capability in sources reviewed

Product/module

Unknown

Included or add-on

Unknown

Deployment options

Unknown

Key limitations

Not confirmed

Evidence

Not found in a Tier 1-2 source in this pass

Confidence

Low

Netify View

Flag as an open question for direct vendor confirmation rather than assumed present or absent.

Digital experience monitoring

Availability

Native, implied via the confirmed 'unified monitoring services' and 'connecting insights across your network, users and devices' capability described directly by BT [5] [6]

Product/module

BT unified monitoring [5] [6]

Included or add-on

Included [5] [6]

Deployment options

Managed, 24x7 [5] [6]

Key limitations

A distinctly-branded DEM product name wasn't itemised [5] [6]

Evidence

[5] [6]

Confidence

Medium-High

Netify View

Real, confirmed operational-visibility capability via a specific, primary-sourced description; a distinctly-branded DEM product name wasn't separately confirmed.

DNS security

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Availability

Not independently confirmed as a distinct named feature in sources reviewed

Product/module

Unknown

Included or add-on

Unknown

Deployment options

Unknown

Key limitations

Not confirmed

Evidence

Not found in a Tier 1-2 source in this pass

Confidence

Low

Netify View

Evidence gap.

Cloud firewall / cloud network security

Availability

Native, via the confirmed FWaaS capability described above [17]

Product/module

BT Managed Fortinet Firewall [17]

Included or add-on

Included [17]

Deployment options

Managed, edge-deployed [17]

Key limitations

None identified [17]

Evidence

[17]

Confidence

High

Netify View

Same strong evidence as the FWaaS row above.

SaaS security posture

Research checked 23 October 2026

Please identify the ordered product, licence and supported configuration for SaaS security posture, with a service-document reference. Questions for BT

Harry's original entry follows, unchanged.

Availability

Not independently confirmed as a distinct, named DSPM/SSPM capability in sources reviewed

Product/module

Unknown

Included or add-on

Unknown

Deployment options

Unknown

Key limitations

Not confirmed

Evidence

Not found in a Tier 1-2 source in this pass

Confidence

Low

Netify View

Evidence gap.

Threat intelligence

Availability

Native, implied via the confirmed BT Security Managed Detection and Response service and BT's own confirmed 'AI-powered proactive threat detection' [2] [7]

Product/module

BT Security MDR [2] [7]

Included or add-on

Included, or available as an enhanced managed-service tier [2] [7]

Deployment options

Managed, 24x7 [2] [7]

Key limitations

A dedicated, separately-named threat-research organisation (comparable to some competitors' named equivalents) wasn't itemised specifically for the SASE service [2] [7]

Evidence

[2] [7]

Confidence

High

Netify View

Confirmed via both BT's own launch materials (AI-powered threat detection) and Netify's independent research (BT Security MDR) - genuinely concrete, corroborated evidence.

WAN optimisation

Availability

Native, implied via the confirmed 'traffic is prioritised from your devices to the SASE cloud node, avoiding public internet congestion' [5] [6]

Product/module

Agile Connect / BT Managed SASE [5] [6]

Included or add-on

Included [5] [6]

Deployment options

Managed [5] [6]

Key limitations

Named technical mechanisms (e.g. FEC, compression) not itemised [5] [6]

Evidence

[5] [6]

Confidence

Medium-High

Netify View

A specific, direct, primary-sourced confirmation of traffic prioritisation to avoid congestion; granular optimisation mechanics weren't independently itemised.

Application-aware routing

Availability

Native, implied via the confirmed 'elastic SD-WAN' capability described directly for dynamic traffic steering in the retail sector specifically [5] [6]

Product/module

Agile Connect (elastic SD-WAN) [5] [6]

Included or add-on

Included [5] [6]

Deployment options

Managed [5] [6]

Key limitations

None identified [5] [6]

Evidence

[5] [6]

Confidence

Medium-High

Netify View

A specific, named, sector-relevant capability ('elastic SD-WAN... to dynamically steer traffic') - genuinely concrete evidence.

Multi-cloud networking

Availability

Native, implied via the confirmed international network reach and multi-country customer deployment evidenced directly in the confirmed case study [17]

Product/module

Agile Connect (global reach) [17]

Included or add-on

Included [17]

Deployment options

Managed [17]

Key limitations

Specific, named hyperscaler cloud on-ramp partnerships weren't itemised by name [17]

Evidence

[17]

Confidence

Medium-High

Netify View

Reasonable, well-supported inference from the confirmed multi-country deployment case study; named hyperscaler-specific integrations weren't independently itemised in this pass.

Table 4 - SD-WAN and Branch Capability

Data point

Finding

Evidence

Confidence

Netify View

Supported WAN underlays

Finding

Native, confirmed directly - Agile Connect provides 'the flexibility to mix different connectivity options for each of their sites', reinforced by the confirmed 'over-the-internet connection' capability described in the case study specifically [8] [17]

Evidence

[8] [17]

Confidence

High

Netify View

Confirmed with genuine specificity via both primary BT positioning and real, case-study-evidenced deployment detail.

Edge form factors

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Finding

Not independently confirmed with specific named hardware model detail in sources reviewed - the platform's confirmed architecture centres on managed service delivery with CPE included in the commercial model, rather than a distinctly-named, purpose-built hardware line [8]

Evidence

[8]

Confidence

Medium

Netify View

A specific, worth-noting characteristic - CPE is confirmed as part of the managed commercial model (Table 16), though specific hardware model names weren't independently itemised.

Virtual/cloud edge support

Finding

Native, implied via the confirmed cloud-delivered SASE architecture and the 'SASE cloud node' terminology used directly by BT [5] [6]

Evidence

[5] [6]

Confidence

Medium-High

Netify View

Reasonable, well-supported inference from the confirmed cloud-node architecture description.

5G/LTE support

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Finding

Not independently confirmed as a distinct, named capability for the SASE/SD-WAN service specifically in sources reviewed, though BT Group's own, much larger EE mobile network (5G+ coverage confirmed at 73% of the UK population as of FY2026) makes underlying 5G capability highly plausible at the parent-company level [12]

Evidence

[12]

Confidence

Low-Medium

Netify View

A reasonable, though unconfirmed for the SASE service specifically, inference from BT Group's own substantial, confirmed 5G network investment via EE.

LEO satellite support

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Finding

Unknown - not found in sources reviewed

Evidence

Not found in a Tier 1-2 source in this pass

Confidence

Low

Netify View

Evidence gap.

Application identification

Finding

Native, implied via the confirmed elastic SD-WAN, dynamic-traffic-steering capability [5] [6]

Evidence

[5] [6]

Confidence

Medium-High

Netify View

Reasonable inference from the confirmed dynamic traffic-steering architecture.

Dynamic path selection

Finding

Native, confirmed directly - 'elastic SD-WAN' dynamically steers traffic, and 'traffic is prioritised from your devices to the SASE cloud node, avoiding public internet congestion' [5] [6]

Evidence

[5] [6]

Confidence

High

Netify View

A specific, direct, primary-sourced confirmation - genuinely concrete evidence.

Forward error correction / packet duplication

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Finding

Not confirmed as a distinct named capability in sources reviewed

Evidence

Not found in a Tier 1-2 source in this pass

Confidence

Low

Netify View

Evidence gap - flag rather than assume.

QoS and traffic engineering

Finding

Native, implied via the confirmed elastic, dynamically-steered traffic architecture [5] [6]

Evidence

[5] [6]

Confidence

Medium-High

Netify View

Reasonable inference from the confirmed elastic SD-WAN architecture; granular QoS configuration mechanics not independently detailed.

Local internet breakout

Finding

Native, implied via the confirmed 'over-the-internet connection' capability described directly in the case study, and the confirmed SASE-cloud-node architecture avoiding public internet congestion for prioritised traffic specifically [17]

Evidence

[17]

Confidence

Medium-High

Netify View

Reasonable, well-supported inference from the confirmed internet-based connectivity option evidenced in a real customer deployment.

Segmentation / VRF capability

Finding

Native, confirmed directly and with genuine technical specificity - 'the network is segmented too. So if a breach happens in one area, data in other areas stays protected' [17]

Evidence

[17]

Confidence

High

Netify View

A specific, direct, case-study-evidenced confirmation of network segmentation for breach containment - genuinely concrete evidence.

High availability

Finding

Native, confirmed directly and with genuine specificity via Netify's own independent research - 'Dual-hub and diverse last-mile designs are standard practise for resilience' [8]

Evidence

[8]

Confidence

High

Netify View

A specific, named architectural confirmation (dual-hub, diverse last-mile) - genuinely concrete evidence, reinforced by BT's confirmed ownership of the underlying UK access network via Openreach.

Zero-touch provisioning

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Finding

Not independently confirmed with a specific, named zero-touch mechanism in sources reviewed, though the confirmed fully-managed delivery model implies BT-led deployment rather than customer-driven manual configuration by default [8]

Evidence

[8]

Confidence

Medium

Netify View

Reasonable inference from the confirmed fully-managed delivery model; a specific, named zero-touch mechanism wasn't independently itemised.

Branch LAN/WLAN integration

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Finding

Not independently confirmed as a distinct, named capability specifically for the SASE/SD-WAN service in sources reviewed, though BT's much broader telecommunications infrastructure business may address adjacent capability not confirmed as unified with this specific service in this pass

Evidence

Not found in a Tier 1-2 source in this pass at this specificity

Confidence

Low

Netify View

Evidence gap - worth a direct follow-up, given BT's broader infrastructure portfolio may have relevant, adjacent capability not confirmed as unified with the SASE service specifically in this pass.

Brownfield migration support

Finding

Native, well-evidenced via a real, detailed case study directly describing exactly this scenario - a customer migrating from a legacy approach to 'an over-the-internet connection' to 'solve many of these problems', citing the inability 'to handle a network transformation like this in-house' [17]

Evidence

[17]

Confidence

High

Netify View

Genuinely one of the platform's most concretely evidenced capabilities - a real, detailed customer example directly describing legacy-infrastructure migration challenges and the managed-service resolution.

Table 5 - Remote User, Mobile and BYOD Support

Use case

Supported

Method/client

Operating systems

Identity/device requirements

User experience controls

Limitations

Netify View

Managed laptops

Supported

Yes

Method/client

Not itemised by specific client technology - dependent on the underlying platform (Fortinet or Meraki) proposed

Operating systems

Not itemised by specific OS in sources reviewed

Identity/device requirements

Identity-based access confirmed generally via ZTNA (Table 3)

User experience controls

Not fully detailed

Limitations

Platform-dependent; specific client detail not itemised

Netify View

Confirmed at the architectural level via ZTNA; specific client/agent technology detail depends on the underlying platform proposed and wasn't independently itemised in this pass.

Unmanaged/BYOD devices

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Supported

Not independently confirmed as a distinct, named BYOD-specific capability in sources reviewed

Method/client

Unknown

Operating systems

Unknown

Identity/device requirements

Unknown

User experience controls

Unknown

Limitations

Not confirmed

Netify View

Evidence gap - worth a direct follow-up, and likely dependent on which underlying platform (Fortinet or Meraki) is proposed for a specific deployment.

Mobile devices

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Supported

Not independently confirmed with specific detail in sources reviewed

Method/client

Unknown

Operating systems

Unknown

Identity/device requirements

Unknown

User experience controls

Unknown

Limitations

Not confirmed

Netify View

Evidence gap.

Contractors/third parties

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Supported

Not independently confirmed as a distinct capability in sources reviewed

Method/client

Unknown

Operating systems

Unknown

Identity/device requirements

Unknown

User experience controls

Unknown

Limitations

Not confirmed by a named case study specifically about contractor access

Netify View

Evidence gap.

Clientless access

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Supported

Not independently confirmed as a distinct clientless mode in sources reviewed

Method/client

Unknown

Operating systems

Unknown

Identity/device requirements

Unknown

User experience controls

Unknown

Limitations

Not confirmed

Netify View

Evidence gap.

VDI environments

Research checked 23 October 2026

Please confirm supported devices, applications, enrolment requirements and licence scope for VDI environments. Questions for BT

Harry's original entry follows, unchanged.

Supported

Unknown - not found in sources reviewed

Method/client

Not found in public sources reviewed

Operating systems

-

Identity/device requirements

-

User experience controls

-

Limitations

Not confirmed

Netify View

Evidence gap.

Privileged access

Research checked 23 October 2026

Please confirm supported devices, applications, enrolment requirements and licence scope for Privileged access. Questions for BT

Harry's original entry follows, unchanged.

Supported

Unknown - not found in sources reviewed

Method/client

Not found in public sources reviewed

Operating systems

-

Identity/device requirements

-

User experience controls

-

Limitations

Not confirmed

Netify View

Evidence gap.

Remote browser isolation

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Supported

Not independently confirmed (see Table 3)

Method/client

Unknown

Operating systems

Unknown

Identity/device requirements

Unknown

User experience controls

Unknown

Limitations

Unknown

Netify View

See Table 3 - an evidence gap, not a confirmed absence.

Table 6 - Architecture and Deployment Models

Deployment model

Supported

Components required

Traffic path

Policy location

Typical use case

Complexity

Migration notes

Netify View

Cloud-delivered

Supported

Yes, and genuinely the default model for the SSE/SASE half of the service

Components required

BT Managed SASE (Fortinet or Meraki cloud SSE)

Traffic path

Via the confirmed SASE cloud node architecture

Policy location

Managed by BT, per the confirmed fully-managed default

Typical use case

All customers - core delivery model for the SASE/security layer

Complexity

Low for the customer, given the confirmed fully-managed model

Migration notes

N/A - default

Netify View

Confirmed via BT's own direct 'SASE cloud node' terminology and architecture description.

On-premises edge

Supported

Yes, via customer-premises equipment included in the confirmed managed commercial model

Components required

CPE (specific hardware model not itemised)

Traffic path

CPE → Agile Connect → cloud SASE layer

Policy location

Managed by BT

Typical use case

Fixed branch sites

Complexity

Low, given the confirmed fully-managed model

Migration notes

Not itemised in detail

Netify View

Real, confirmed capability via the confirmed CPE-inclusive commercial model (Table 16); specific hardware model names weren't independently itemised.

Virtual edge

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Supported

Not independently confirmed with specific detail in sources reviewed

Components required

Unknown

Traffic path

Unknown

Policy location

Unknown

Typical use case

Unknown

Complexity

Not confirmed

Migration notes

Not found in a Tier 1-2 source in this pass

Netify View

Evidence gap.

Public cloud edge

Supported

Native, implied via the confirmed cloud-delivered SASE architecture

Components required

BT Managed SASE (cloud SSE)

Traffic path

Via the confirmed SASE cloud node

Policy location

Managed by BT

Typical use case

Cloud-first organisations

Complexity

Low

Migration notes

Not itemised for specific named hyperscalers

Netify View

Confirmed at the architectural level; named hyperscaler-specific integration detail wasn't independently itemised.

Branch appliance

Supported

Yes, and genuinely well-evidenced via a real, detailed customer example

Components required

CPE plus Agile Connect managed service

Traffic path

Branch → Agile Connect → cloud SASE layer

Policy location

Managed by BT

Typical use case

Distributed, multi-country branch estates

Complexity

Low, given the confirmed fully-managed model

Migration notes

Confirmed directly via a real, detailed, multi-country case study (Table 4, 17)

Netify View

Well-evidenced via specific, real, primary-sourced customer-deployment detail rather than only a generic capability claim.

Client-based remote access

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Supported

Not independently confirmed with specific client-technology detail in sources reviewed

Components required

Unknown

Traffic path

Unknown

Policy location

Unknown

Typical use case

Unknown

Complexity

Not confirmed

Migration notes

N/A

Netify View

See Table 5 - a genuine, specific evidence gap, likely dependent on which underlying platform (Fortinet or Meraki) is proposed.

Clientless remote access

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Supported

Not independently confirmed as a distinct capability in sources reviewed

Components required

Unknown

Traffic path

Unknown

Policy location

Unknown

Typical use case

Unknown

Complexity

Not confirmed

Migration notes

N/A

Netify View

See Table 5 - a genuine, specific evidence gap.

Hybrid deployment

Supported

Yes, implied via the confirmed combination of on-premises CPE, managed SD-WAN, and cloud-delivered SASE together under one contract, reinforced by the confirmed case study describing protection across on-premises and internet-based connectivity together

Components required

CPE plus Agile Connect plus BT Managed SASE (cloud)

Traffic path

Mixed

Policy location

Managed by BT, unified under one contract

Typical use case

Most real-world enterprise estates with mixed on-premises and cloud requirements

Complexity

Low for the customer, given the confirmed fully-managed model

Migration notes

Confirmed directly via the case study's described transition from a legacy approach to a hybrid, internet-augmented model

Netify View

A genuine, confirmed architectural strength - the combination of owned last-mile infrastructure, managed CPE, and cloud-delivered SASE under one managed contract is a real, specific characteristic of BT's offering.

Co-managed deployment

Supported

Yes, confirmed as an available option, though Netify's own independent research specifically notes 'DIY/self-managed model is not BT's primary positioning' and recommends confirming 'customer control boundaries... via RACI and portal demo'

Components required

Not itemised with specific technical components

Traffic path

N/A

Policy location

Shared between BT and customer IT staff, per a confirmed but not fully specified RACI split

Typical use case

Buyers wanting some direct operational involvement alongside BT-managed delivery

Complexity

Not fully detailed - buyers should confirm the specific RACI split directly

Migration notes

N/A

Netify View

A specific, important, independently-sourced caution - a co-managed option is confirmed to exist, but the exact division of responsibility should be confirmed directly rather than assumed, since BT's core, confirmed positioning centres on fully-managed delivery.

Fully managed deployment

Supported

Yes, and genuinely the platform's default, most consistently evidenced delivery model

Components required

Full BT-managed service (Agile Connect plus BT Managed SASE)

Traffic path

N/A

Policy location

Managed by BT

Typical use case

Buyers wanting to minimise IT operational burden entirely - BT's own core, confirmed positioning

Complexity

Very low for the customer

Migration notes

N/A

Netify View

Genuinely the platform's clearest, most consistently-evidenced delivery model - fully-managed delivery is confirmed directly as BT's primary positioning, not merely one option among several.

Table 7 - Global Platform and Service Coverage

Data point

Verified finding

Direct or partner

Regions/countries

Limitations

Evidence date

Confidence

Netify View

Security PoPs / service edges

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Verified finding

Not confirmed with a specific, quantified PoP-count figure for the current, Fortinet-based managed SASE service specifically in sources reviewed; the earlier, historical VMware-based service was confirmed at launch to use 'a global network of over 150 points of presence (PoPs) deployed by VMware and its SASE service pro[viders]' - a figure describing the prior, distinct technology generation rather than the current offering

Direct or partner

Partner (Fortinet's or VMware's PoP network, per the relevant technology generation) [9]

Regions/countries

Global, per the confirmed (historical) VMware-era figure; current, Fortinet-era figure not itemised [9]

Limitations

The confirmed 150+-PoP figure describes the historical VMware-based service specifically, not confirmed as applicable to the current Fortinet-based offering [9]

Evidence date

[9]

Confidence

Low-Medium (historical figure only; current-generation figure not found)

Netify View

A specific, worth-noting evidentiary gap - the only quantified PoP figure found in this research pass describes BT's earlier, historical VMware-based SASE service rather than the current, Fortinet-based offering; buyers should request the current, platform-specific PoP count directly.

SD-WAN gateways / cloud gateways

Verified finding

Delivered via BT's own international core network and the relevant underlying platform's (Fortinet's or Meraki's) cloud infrastructure [8]

Direct or partner

Direct (BT core network) and partner (platform-specific cloud infrastructure) [8]

Regions/countries

UK-anchored with global reach, per BT's own confirmed international network [8]

Limitations

Specific, quantified gateway-count figures not itemised [8]

Evidence date

[8]

Confidence

Medium

Netify View

Reasonable, well-supported inference from BT's own confirmed international network and the relevant platform's cloud infrastructure.

Private backbone

Verified finding

Native, and genuinely one of BT's clearest, most distinctive structural strengths - Netify's own independent research confirms BT operates with an 'owned core, and global reach through BT's international network' [8]

Direct or partner

Direct (owned) [8]

Regions/countries

Global, via BT's own international network [8]

Limitations

None identified [8]

Evidence date

[8]

Confidence

High

Netify View

A specific, direct, independently-sourced confirmation of an owned core network - genuinely one of BT's most concrete, structural differentiators relative to platform-only SASE vendors without equivalent owned infrastructure.

Carrier interconnects

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Verified finding

Native, implied via BT's own status as a major, established global telecommunications carrier with extensive, long-established interconnection relationships, though specific, itemised carrier/exchange detail wasn't independently confirmed in this pass

Direct or partner

Direct

Regions/countries

Global, per BT's own established carrier status

Limitations

Specific, itemised carrier/exchange detail not itemised

Evidence date

Not found at this specificity in a Tier 1-2 source in this pass

Confidence

Medium

Netify View

A reasonable, well-supported inference from BT's own established, long-standing position as a major global telecommunications carrier; granular, itemised interconnect detail wasn't independently confirmed.

Public cloud on-ramps

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Verified finding

Not independently confirmed with specific named hyperscaler detail in sources reviewed

Direct or partner

Unknown

Regions/countries

Unknown

Limitations

Not detailed by named hyperscaler

Evidence date

Not found at this specificity in a Tier 1-2 source in this pass

Confidence

Low-Medium

Netify View

See Table 3, 6 for the related finding.

China coverage

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Verified finding

Unknown - no China-specific data-centre or licensed-PoP detail found for the SASE/SD-WAN service specifically in sources reviewed, though BT Group's own, much larger, established global telecommunications business is highly likely to have some form of China-relevant presence at the parent-company level, not confirmed as unified with the SASE service specifically in this pass

Direct or partner

Unknown at the SASE-service-specific level

Regions/countries

Not specified for the SASE service specifically

Limitations

No named China presence confirmed for the SASE service specifically

Evidence date

Not found in a Tier 1-2 source in this pass at this specificity

Confidence

Low

Netify View

Evidence gap for the SASE service specifically, though BT Group's own broader global telecommunications footprint makes some form of parent-company-level China presence plausible.

Middle East coverage

Research checked 23 October 2026

Please provide the country/location list, regulatory restrictions and contracted delivery scope for Middle East coverage. Questions for BT

Harry's original entry follows, unchanged.

Verified finding

Unknown - not itemised for the SASE service specifically in sources reviewed

Direct or partner

Unknown

Regions/countries

Not specified

Limitations

No named data centres found for the SASE service specifically

Evidence date

Not found in a Tier 1-2 source in this pass

Confidence

Low

Netify View

Evidence gap.

Africa coverage

Research checked 23 October 2026

Please provide the country/location list, regulatory restrictions and contracted delivery scope for Africa coverage. Questions for BT

Harry's original entry follows, unchanged.

Verified finding

Unknown - not itemised for the SASE service specifically in sources reviewed

Direct or partner

Unknown

Regions/countries

Not specified

Limitations

No named data centres found for the SASE service specifically

Evidence date

Not found in a Tier 1-2 source in this pass

Confidence

Low

Netify View

Evidence gap.

Latin America coverage

Research checked 23 October 2026

Please provide the country/location list, regulatory restrictions and contracted delivery scope for Latin America coverage. Questions for BT

Harry's original entry follows, unchanged.

Verified finding

Unknown - no specific evidence found for the SASE service specifically in this pass

Direct or partner

Unknown

Regions/countries

Not specified

Limitations

No named data centres or customer evidence found for this region specifically

Evidence date

Not found in a Tier 1-2 source in this pass

Confidence

Low

Netify View

Evidence gap.

United Kingdom coverage

Verified finding

Strong fit, genuinely the best-evidenced region in this entire table [8] [12]

Direct or partner

Direct (owned, via Openreach) [8] [12]

Regions/countries

United Kingdom, comprehensively [8] [12]

Limitations

None identified [8] [12]

Evidence date

[8] [12]

Confidence

High

Netify View

Genuinely the strongest-evidenced coverage finding in this entire profile - BT's confirmed ownership of Openreach, the UK's dominant last-mile access network, gives it a structural UK-coverage advantage no platform-only SASE vendor can replicate.

Data residency choices

Verified finding

Native, confirmed with genuine sector-specific detail for financial services specifically - ZTNA 'supports data residency by keeping sensitive traffic within localised data paths' [5] [6]

Direct or partner

Direct (via BT's own network) [5] [6]

Regions/countries

UK/localised, per the confirmed financial-services-specific claim [5] [6]

Limitations

Broader, general data-residency architecture beyond this specific sector claim wasn't itemised [5] [6]

Evidence date

[5] [6]

Confidence

Medium-High

Netify View

A specific, named, sector-relevant confirmation of data-residency support - genuinely concrete evidence for this exact, named use case, even without a broader, general data-residency architecture page.

Sovereign/regional service options

Research checked 23 October 2026

Please provide the country/location list, regulatory restrictions and contracted delivery scope for Sovereign/regional service options. Questions for BT

Harry's original entry follows, unchanged.

Verified finding

Not confirmed as a distinct, named FedRAMP or equivalent sovereign-cloud authorization in sources reviewed; BT's own confirmed HSCN accreditation is the closest, specific, sector-relevant regional/sovereign-adjacent credential found in this pass

Direct or partner

Direct (HSCN accreditation) [7]

Regions/countries

United Kingdom, NHS/healthcare-adjacent public bodies specifically [7]

Limitations

No FedRAMP or equivalent US federal authorization found for the SASE service specifically [7]

Evidence date

[7]

Confidence

Medium-High

Netify View

A real, specific, UK-relevant accreditation (HSCN) is confirmed; broader, international sovereign/regional credentials (e.g. FedRAMP) were not found for this service in this pass.

Table 8 - NOC, SOC, Support and Managed Operations

Operational capability

Availability

Hours

Locations/coverage

Included or premium

Customer responsibility

Escalation/SLA

Evidence

Netify View

Network operations centre

Availability

Native, and genuinely well-evidenced via Netify's own independent research confirming '24×7 NOC tooling' as a core evaluated capability for BT specifically [7]

Hours

24x7, confirmed directly [7]

Locations/coverage

UK-wide, per confirmed UK-wide engineering reach [7]

Included or premium

Included, per the confirmed fully-managed default model [7]

Customer responsibility

Customer configures high-level policy; day-to-day NOC operations are BT-managed by default [7]

Escalation/SLA

Not itemised with a specific numeric figure

Evidence

[7]

Netify View

A specific, direct, independently-sourced confirmation of 24x7 NOC capability - genuinely concrete evidence, reinforced by BT's confirmed UK-wide field-engineering reach.

Security operations centre

Availability

Native, and genuinely well-evidenced via the confirmed BT Security division and its named Managed Detection and Response service, reinforced by Netify's own independent research confirming 'MDR and SOC capability' as a core evaluated capability for BT specifically [7]

Hours

24x7, per the confirmed MDR/SOC framing [7]

Locations/coverage

UK-wide, with international reach via BT's global network [7]

Included or premium

Included, or available as an enhanced managed-service tier [7]

Customer responsibility

Customer configures high-level policy; SOC operations are BT Security-managed [7]

Escalation/SLA

Not itemised with a specific numeric figure

Evidence

[7]

Netify View

Real, confirmed capability via both BT's own named security division and Netify's independent research - genuinely credible, corroborated evidence.

24x7 monitoring

Availability

Native, confirmed directly and repeatedly - 'Round-the-clock monitoring and access to BT security experts when you need them' [5] [6]

Hours

24x7x365, confirmed directly [5] [6]

Locations/coverage

UK-wide, with international reach [5] [6]

Included or premium

Included [5] [6]

Customer responsibility

N/A

Escalation/SLA

Not itemised with a specific numeric figure

Evidence

[5] [6]

Netify View

A specific, direct, primary-sourced confirmation - genuinely concrete evidence.

Incident response

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Availability

Native, implied via the confirmed BT Security MDR service and BT's own confirmed 'AI-powered proactive threat detection', though a distinctly-named IR service with a specific, published SLA figure wasn't itemised [7]

Hours

Not confirmed with a specific figure

Locations/coverage

N/A

Included or premium

Included, or available as an enhanced managed-service tier [7]

Customer responsibility

N/A

Escalation/SLA

Not itemised with a specific numeric figure

Evidence

[7]

Netify View

Real, confirmed capability via the confirmed MDR service; a distinctly-named IR product with a specific, published SLA figure wasn't independently itemised.

Configuration management

Availability

Native, via the confirmed fully-managed default delivery model [8]

Hours

N/A

Locations/coverage

N/A

Included or premium

Included [8]

Customer responsibility

Customer-managed via the co-managed option, or BT-managed by default [8]

Escalation/SLA

N/A

Evidence

[8]

Netify View

Confirmed via the platform's core, fully-managed default architecture.

Policy management

Availability

Native, via the same confirmed fully-managed default architecture [8]

Hours

N/A

Locations/coverage

N/A

Included or premium

Included [8]

Customer responsibility

Customer or BT-managed, per the confirmed co-managed option [8]

Escalation/SLA

N/A

Evidence

[8]

Netify View

Same evidence and finding as Configuration management above.

Change management

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Availability

Native, implied via Netify's own independent research confirming 'change windows' as a core evaluated capability for BT specifically [7]

Hours

Not confirmed with a specific figure

Locations/coverage

N/A

Included or premium

Included [7]

Customer responsibility

Customer requests changes within confirmed change-window processes [7]

Escalation/SLA

N/A

Evidence

[7]

Netify View

A specific, direct, independently-sourced confirmation of a formal change-management process ('change windows') - genuinely concrete evidence.

Carrier/last-mile management

Availability

Native, and genuinely one of BT's most structurally distinctive capabilities - direct ownership of Openreach gives BT genuine, first-party accountability for UK last-mile infrastructure that no platform-only SASE vendor can replicate [8]

Hours

24x7, per the confirmed NOC/monitoring architecture [8]

Locations/coverage

UK-wide [8]

Included or premium

Included [8]

Customer responsibility

N/A - BT owns the underlying access network directly via Openreach

Escalation/SLA

N/A

Evidence

[8]

Netify View

Genuinely the strongest, most structurally distinctive finding in this entire profile for this exact row - BT's direct ownership of Openreach means last-mile accountability sits with the same corporate group delivering the SASE service, a genuine structural advantage most competitors cannot offer.

Hardware replacement

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Availability

Not independently confirmed with specific RMA/replacement terms in sources reviewed, though CPE is confirmed as included within the managed commercial model (Table 16), implying lifecycle management is BT's responsibility by default [8]

Hours

Not found

Locations/coverage

Not found

Included or premium

Included, per the confirmed CPE-inclusive commercial model [8]

Customer responsibility

N/A

Escalation/SLA

Not confirmed

Evidence

[8]

Netify View

Reasonable inference from the confirmed CPE-inclusive commercial model; specific RMA/replacement terms weren't independently itemised.

Technical account management

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Availability

Not confirmed as a distinct named support tier with specific TAM detail in sources reviewed

Hours

Not confirmed with specific figures

Locations/coverage

Not specified

Included or premium

Not confirmed

Customer responsibility

N/A

Escalation/SLA

Not confirmed

Evidence

Not found at this level of detail in a Tier 1-2 source in this pass

Netify View

Evidence gap - worth a direct follow-up, particularly given BT's much broader enterprise account-management infrastructure across its wider portfolio.

Service reviews

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Availability

Unknown - not found in sources reviewed

Hours

Not found

Locations/coverage

Not specified

Included or premium

Not confirmed

Customer responsibility

N/A

Escalation/SLA

Not confirmed

Evidence

Not found in a Tier 1-2 source in this pass

Netify View

Evidence gap.

Professional services

Availability

Native, implied via Netify's own independent research confirming 'field engineering reach' as a core evaluated capability for BT specifically [7]

Hours

N/A

Locations/coverage

UK-wide field engineering reach confirmed directly [7]

Included or premium

Included, or available as an enhanced service tier [7]

Customer responsibility

N/A

Escalation/SLA

N/A

Evidence

[7]

Netify View

A specific, direct, independently-sourced confirmation of field-engineering capability - genuinely concrete evidence, though specific standalone Professional Services pricing wasn't itemised.

Managed detection and response

Availability

Native, and genuinely well-evidenced via a specifically-named BT service [7]

Hours

BT Security MDR [7]

Locations/coverage

24x7 [7]

Included or premium

Included, or available as an enhanced managed-service tier [7]

Customer responsibility

N/A

Escalation/SLA

Not itemised with a specific numeric figure

Evidence

[7]

Netify View

A specific, named, credible, independently-corroborated managed-service product - genuinely concrete evidence, backed by BT's own long-established security division.

Table 9 - Configuration, Administration and Operating Effort

Area

How it works

Primary interface

Skills required

Automation available

Operational effort

Known friction

Evidence

Netify View

Initial tenant setup

How it works

Fully managed by default, evidenced via a real, detailed case study describing BT taking over an entire network transformation on the customer's behalf [17]

Primary interface

BT-managed, per the confirmed fully-managed default model [17]

Skills required

Very low, given the confirmed fully-managed model [17]

Automation available

Not itemised further

Operational effort

Genuinely well-evidenced as low-effort for the customer via a real, primary-sourced case study - the customer explicitly 'couldn't afford to handle a network transformation like this in-house' [17]

Known friction

None significant identified [17]

Evidence

[17]

Netify View

A specific, real, case-study-evidenced confirmation of low customer-side effort - genuinely concrete evidence directly addressing why the customer chose a managed approach in the first place.

Policy creation

How it works

Managed by BT by default, with a confirmed co-managed option for buyers wanting more direct involvement [8]

Primary interface

BT-managed portal, or customer-accessible tools under the confirmed co-managed option [8]

Skills required

Very low under the default managed model; benefits from technical familiarity under the co-managed option [8]

Automation available

Not itemised further

Operational effort

Positioned as simplified via the confirmed fully-managed default architecture [8]

Known friction

Buyers should confirm the exact RACI split directly (Table 6) [8]

Evidence

[8]

Netify View

Real, confirmed capability under the fully-managed default; the exact co-managed division of responsibility should be confirmed directly rather than assumed.

Branch onboarding

How it works

Fully managed, evidenced via a real, detailed, multi-country customer example [17]

Primary interface

BT-managed [17]

Skills required

Very low, given the confirmed fully-managed model [17]

Automation available

Not itemised as a distinct zero-touch mechanism, though implied by the managed-service model

Operational effort

Genuinely well-evidenced as low-effort for the customer, given the confirmed managed-service delivery and real case-study evidence [17]

Known friction

None significant identified [17]

Evidence

[17]

Netify View

Well-evidenced via a real, detailed customer example at genuine, multi-country scale.

Remote-user onboarding

Research checked 23 October 2026

Harry's original entry follows, unchanged.

How it works

Not independently confirmed with specific client/agent deployment-effort detail in sources reviewed

Primary interface

Unknown

Skills required

Not confirmed

Automation available

Not confirmed

Operational effort

Not confirmed

Known friction

Not confirmed

Evidence

Not found in a Tier 1-2 source in this pass at this level of detail

Netify View

See Table 5 - a genuine, specific evidence gap for the remote-user side of the platform specifically, likely dependent on which underlying platform is proposed.

Bulk changes

Research checked 23 October 2026

Harry's original entry follows, unchanged.

How it works

Unknown - not found in sources reviewed

Primary interface

Presumably BT-managed portal or API

Skills required

Not confirmed

Automation available

Not confirmed

Operational effort

Not confirmed

Known friction

Not confirmed

Evidence

Not found in public sources reviewed

Netify View

Evidence gap.

Role-based administration

Research checked 23 October 2026

Please demonstrate Role-based administration and specify customer permissions, change controls and any additional charge. Questions for BT

Harry's original entry follows, unchanged.

How it works

Unknown - not found in sources reviewed

Primary interface

Presumably BT-managed portal

Skills required

Not confirmed

Automation available

Not confirmed

Operational effort

Not confirmed

Known friction

Not confirmed

Evidence

Not found in public sources reviewed

Netify View

Evidence gap.

Multi-tenancy

Research checked 23 October 2026

Please demonstrate Multi-tenancy and specify customer permissions, change controls and any additional charge. Questions for BT

Harry's original entry follows, unchanged.

How it works

Not independently confirmed as a distinct, named MSP/multi-tenant capability in sources reviewed, though BT's own scale as one of the UK's largest managed service providers, per Netify's independent research, implies real, underlying multi-tenant operational capability exists in practise [7]

Primary interface

Not confirmed by name

Skills required

Not confirmed

Automation available

Not confirmed

Operational effort

Not confirmed

Known friction

Not confirmed

Evidence

[7]

Netify View

Reasonable inference from BT's confirmed scale as the largest UK managed network and managed security provider; a distinctly-named, customer-facing multi-tenant product feature wasn't independently itemised.

Delegated administration

Research checked 23 October 2026

Harry's original entry follows, unchanged.

How it works

Not independently confirmed with specific detail in sources reviewed, beyond the general confirmed co-managed option

Primary interface

Presumably BT-managed portal

Skills required

Not confirmed

Automation available

Not confirmed

Operational effort

Not confirmed

Known friction

Not confirmed

Evidence

Not found in a Tier 1-2 source in this pass at this level of granular detail

Netify View

Reasonable inference from the confirmed co-managed option; granular delegated-administration mechanics weren't independently itemised.

Troubleshooting

How it works

Native, and genuinely well-evidenced via BT's confirmed round-the-clock access to security experts and the confirmed centralised-visibility capability described directly in a real case study - 'better able to see and control their entire infrastructure and security' [17]

Primary interface

BT-managed portal/support [17]

Skills required

Very low, given the confirmed managed-troubleshooting model [17]

Automation available

Not itemised as a distinct AI-diagnostics feature

Operational effort

Positioned as low-effort via the confirmed centralised-visibility and expert-access architecture [17]

Known friction

None significant identified [17]

Evidence

[17]

Netify View

A specific, real, case-study-evidenced confirmation of centralised visibility and control - genuinely concrete evidence.

Software/firmware lifecycle

How it works

Native, implied via the confirmed CPE-inclusive, fully-managed commercial model, which by design shifts lifecycle-management responsibility to BT [8]

Primary interface

BT-managed [8]

Skills required

Very low, given the confirmed fully-managed model [8]

Automation available

Automatic, given the managed-service delivery model [8]

Operational effort

Very low [8]

Known friction

None significant identified [8]

Evidence

[8]

Netify View

Reasonable, well-supported inference from the confirmed fully-managed, CPE-inclusive commercial model.

Service-provider co-management

How it works

Yes, confirmed as an available option, though buyers should confirm the exact RACI split directly rather than assume equivalence with the confirmed, primary, fully-managed model (Table 6) [8]

Primary interface

BT-managed portal, with confirmed customer-accessible elements under the co-managed option [8]

Skills required

Low for the customer under the confirmed managed default; moderate under the co-managed option depending on the chosen involvement level [8]

Automation available

Confirmed, real option, though not itemised with full technical detail [8]

Operational effort

Low under the default managed model [8]

Known friction

Buyers should confirm the RACI split and request a portal demonstration directly, per Netify's own independent research [8]

Evidence

[8]

Netify View

A genuine, confirmed option exists, though this is a specific, worth-flagging area requiring direct buyer confirmation rather than assumption, given BT's core positioning centres on fully-managed delivery by default.

Table 10 - Reporting, Statistics and Visibility

Capability

Available

Audience

Real time or historical

Retention

Export/API

Customisation

Limitations

Netify View

Executive dashboard

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Available

Not independently confirmed as a distinct executive-level view in sources reviewed

Audience

Presumably IT leadership

Real time or historical

Not confirmed

Retention

Not confirmed

Export/API

Not confirmed

Customisation

Not confirmed

Limitations

Not confirmed

Netify View

Evidence gap.

Network health

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Available

Native, confirmed directly and with genuine specificity via a real case study - 'better able to see and control their entire infrastructure and security' [17]

Audience

IT operations [17]

Real time or historical

Not confirmed in granular technical detail

Retention

Not confirmed

Export/API

Not confirmed

Customisation

Not confirmed

Limitations

Not confirmed

Netify View

A specific, direct, case-study-evidenced confirmation of centralised network visibility - genuinely concrete evidence.

Application performance

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Available

Not independently confirmed as a distinct, named application-performance dashboard in sources reviewed, beyond the general confirmed network-visibility capability

Audience

IT operations

Real time or historical

Not confirmed

Retention

Not confirmed

Export/API

Not confirmed

Customisation

Not confirmed

Limitations

Not confirmed

Netify View

Reasonable inference from the confirmed general network-visibility capability; application-specific granularity wasn't independently itemised.

User experience

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Available

Not independently confirmed as a distinct, named DEM/UX-monitoring product in sources reviewed

Audience

IT operations, helpdesk

Real time or historical

Not confirmed

Retention

Not confirmed

Export/API

Not confirmed

Customisation

Not confirmed

Limitations

Not confirmed

Netify View

Evidence gap for a dedicated, named user-experience-monitoring product specifically.

Security events

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Available

Native, implied via the confirmed BT Security MDR service and the confirmed 'connecting insights across your network, users and devices' capability

Audience

SOC/security teams

Real time or historical

Real time, per the confirmed monitoring architecture

Retention

Not confirmed

Export/API

Not confirmed

Customisation

Not confirmed

Limitations

Not confirmed

Netify View

Reasonable, well-supported inference from the confirmed MDR and unified-monitoring architecture; a distinct, named security-event reporting product wasn't independently itemised.

DLP events

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Available

Not confirmed given DLP itself is not confirmed as a distinct, named capability (Table 3)

Audience

Security/compliance teams

Real time or historical

Not confirmed

Retention

Not confirmed

Export/API

Not confirmed

Customisation

Not confirmed

Limitations

Not confirmed

Netify View

See Table 3 - this row's evidence gap follows directly from the underlying DLP capability gap.

Threat reporting

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Available

Native, implied via the confirmed BT Security MDR service and BT's own confirmed AI-powered proactive threat-detection capability

Audience

SOC teams

Real time or historical

Not confirmed in granular reporting-dashboard detail

Retention

Not confirmed

Export/API

Not confirmed

Customisation

Not confirmed

Limitations

Not confirmed

Netify View

Reasonable inference from the confirmed MDR and AI-powered threat-detection architecture; a distinct, named threat-reporting dashboard product wasn't independently itemised.

Compliance reporting

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Available

Native, implied via BT's own confirmed 'logs, policies and controls are managed and kept up to date, so staying compliant is simpler' [6]

Audience

Compliance/audit teams [6]

Real time or historical

Not confirmed in granular detail

Retention

Not confirmed

Export/API

Not confirmed

Customisation

Not confirmed

Limitations

Not confirmed

Netify View

A specific, direct, primary-sourced confirmation of managed logs, policies and controls specifically framed around compliance simplification - genuinely concrete evidence.

SLA reporting

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Available

Unknown - no specific SLA figures were found for this platform in this pass (see Table 8), so a self-service SLA reporting dashboard is unconfirmed by extension

Audience

IT operations [7]

Real time or historical

Not confirmed

Retention

Not confirmed

Export/API

Not confirmed

Customisation

Not confirmed

Limitations

Not confirmed

Netify View

A compounded evidence gap given the underlying SLA figures themselves weren't found; Netify's own independent research confirms 'severity SLAs' exist as an evaluated capability generally, without itemising specific figures.

Site and circuit performance

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Available

Not independently confirmed as a distinct, named reporting product in sources reviewed, beyond the general confirmed network-visibility capability

Audience

IT operations

Real time or historical

Not confirmed

Retention

Not confirmed

Export/API

Not confirmed

Customisation

Not confirmed

Limitations

Not confirmed

Netify View

Reasonable inference from the confirmed general network-visibility capability; a distinct, named site/circuit-performance reporting product wasn't independently itemised.

Remote-user experience

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Available

Not independently confirmed with specific detail in sources reviewed

Audience

IT operations, helpdesk

Real time or historical

Not confirmed

Retention

Not confirmed

Export/API

Not confirmed

Customisation

Not confirmed

Limitations

Not confirmed

Netify View

Evidence gap.

Scheduled reports

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Available

Unknown - not found in sources reviewed

Audience

Not confirmed

Real time or historical

Not confirmed

Retention

Not confirmed

Export/API

Not confirmed

Customisation

Not confirmed

Limitations

Not confirmed

Netify View

Evidence gap.

Custom reports

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Available

Unknown - not found in sources reviewed

Audience

Not confirmed

Real time or historical

Not confirmed

Retention

Not confirmed

Export/API

Not confirmed

Customisation

Not confirmed

Limitations

Not confirmed

Netify View

Evidence gap.

Raw log access

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Available

Native, implied via BT's own confirmed 'logs, policies and controls are managed and kept up to date' capability, though granular, self-service raw-log-export detail wasn't itemised [6]

Audience

Security/SOC teams, integrations [6]

Real time or historical

Not confirmed

Retention

Not confirmed

Export/API

Not confirmed

Customisation

Not confirmed

Limitations

Not confirmed

Netify View

Reasonable inference from the confirmed managed-logs capability; self-service export/API detail wasn't independently itemised.

Table 11 - AI, Machine Learning and Automation

BT's confirmed AI investment is framed around threat detection specifically, layered on top of whichever underlying vendor platform (Fortinet or Meraki) is proposed - evidence in this table reflects BT's own positioning rather than a single, BT-built AI product.

Feature

Specific function

Input data

Output/action

Human approval required

GA or preview

Evidence

Practical value

Limitations

Netify View

AI assistant/copilot

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Specific function

Not confirmed as a single, distinctly-named AI copilot product in sources reviewed

Input data

-

Output/action

-

Human approval required

Not confirmed

GA or preview

Not confirmed

Evidence

Not found as a distinctly-named product in this pass

Practical value

Cannot fully assess without more specific evidence

Limitations

BT's confirmed AI investment centres on threat detection specifically (see Anomaly detection row) rather than a general administrative AI copilot product

Netify View

A specific, worth-noting distinction: no single, named AI copilot product was confirmed for this service specifically in the sources reviewed.

Natural-language querying

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Specific function

Unknown - not found in sources reviewed

Input data

-

Output/action

-

Human approval required

Not confirmed

GA or preview

Not confirmed

Evidence

Not found

Practical value

Not confirmed

Limitations

Not confirmed

Netify View

Evidence gap.

Automated policy recommendation

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Specific function

Unknown - not found in sources reviewed

Input data

-

Output/action

-

Human approval required

Not confirmed

GA or preview

Not confirmed

Evidence

Not found

Practical value

Not confirmed

Limitations

Not confirmed

Netify View

Evidence gap.

Anomaly detection

Specific function

Native, confirmed directly and with genuine specificity - 'new AI-powered SSE capabilities... will enhance customers' oversight of their networks backed with AI-powered proactive threat detection' [2] [3]

Input data

Network/security telemetry [2] [3]

Output/action

Automatic detection and alerting, feeding into BT's unified monitoring services [2] [3]

Human approval required

No - automatic, per the confirmed proactive-detection framing [2] [3]

GA or preview

GA, per BT's own current launch materials [2] [3]

Evidence

[2] [3]

Practical value

Well-evidenced via a specific, direct, primary-sourced claim naming both the AI-powered mechanism and its proactive framing explicitly [2] [3]

Limitations

Underlying detection methodology and the specific technical contribution of BT versus the underlying platform (Fortinet) not itemised separately [2] [3]

Netify View

A specific, direct, primary-sourced confirmation - genuinely concrete evidence, reinforced by independent trade-press corroboration of the same launch, though the precise split between BT's own value-add and the underlying Fortinet platform's native AI capability wasn't itemised separately.

Threat detection/classification

Specific function

Native, via the confirmed AI-powered proactive threat-detection capability and the confirmed BT Security MDR service [2] [4] [7]

Input data

Network/security telemetry [2] [4] [7]

Output/action

Threat detection and classification, escalated via BT Security [2] [4] [7]

Human approval required

No - automatic detection; human review for escalated incidents via BT Security [2] [4] [7]

GA or preview

GA [2] [4] [7]

Evidence

[2] [4] [7]

Practical value

Well evidenced, reinforced by a named, established internal security division (BT Security) [2] [4] [7]

Limitations

Same underlying-platform-versus-BT-value-add distinction noted above [2] [4] [7]

Netify View

Real, confirmed capability, reinforced by BT Security's long-established, named MDR service.

User/entity behaviour analytics

Research checked 23 October 2026

Please identify the product/version, licence, customer access and BT support scope for User/entity behaviour analytics. Questions for BT

Harry's original entry follows, unchanged.

Specific function

Not clearly confirmed as a distinct standalone UEBA product in sources reviewed

Input data

-

Output/action

-

Human approval required

Not confirmed

GA or preview

Not confirmed

Evidence

Not found as distinct in a Tier 1-2 source in this pass

Practical value

Not confirmed

Limitations

Not confirmed

Netify View

Evidence gap - do not assume UEBA parity without direct confirmation.

Root-cause analysis

Specific function

Native, implied via the confirmed centralised-visibility capability described directly in the case study - 'better able to see and control their entire infrastructure and security' [17]

Input data

Network/security telemetry [17]

Output/action

Diagnostic insight surfaced via the confirmed centralised-visibility architecture [17]

Human approval required

Analyst/admin reviews and acts, per the confirmed managed-service model [17]

GA or preview

GA [17]

Evidence

[17]

Practical value

Real, credible evidence via a specific, primary-sourced, real-customer account [17]

Limitations

Not itemised as a single, distinctly-named root-cause-analysis product

Netify View

Reasonable, well-supported inference from the confirmed centralised-visibility capability, evidenced via a real customer account.

Digital experience diagnostics

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Specific function

Not independently confirmed as a distinct, named DEM-equivalent AI diagnostic product in sources reviewed

Input data

-

Output/action

-

Human approval required

Not confirmed

GA or preview

Not confirmed

Evidence

Not found in a Tier 1-2 source in this pass

Practical value

Not confirmed

Limitations

Not confirmed

Netify View

Evidence gap, consistent with the Table 3, 10 DEM-related gaps.

Automated remediation

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Specific function

Not independently confirmed as a distinct, named automated-remediation capability (as opposed to detection/alerting) in sources reviewed

Input data

-

Output/action

-

Human approval required

Not confirmed

GA or preview

Not confirmed

Evidence

Not found in a Tier 1-2 source in this pass at sufficient specificity

Practical value

Not confirmed

Limitations

Not confirmed

Netify View

Evidence gap - BT's confirmed AI framing centres on proactive detection rather than confirmed autonomous remediation actions specifically.

Capacity/path optimisation

Specific function

Native, via the confirmed elastic SD-WAN, dynamic-traffic-steering architecture (Table 3, 4) [5] [6]

Input data

WAN/application telemetry [5] [6]

Output/action

Automatic optimal-path selection and traffic prioritisation [5] [6]

Human approval required

No - automatic per platform architecture [5] [6]

GA or preview

GA [5] [6]

Evidence

[5] [6]

Practical value

Core, continuously-operating function, confirmed directly by name (elastic SD-WAN, SASE cloud node prioritisation) [5] [6]

Limitations

Granular technical mechanics beyond the confirmed architecture description not itemised [5] [6]

Netify View

Real, credible, named capability, consistent with the platform's confirmed dynamic-traffic-steering architecture.

Configuration generation

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Specific function

Unknown - not found in sources reviewed

Input data

-

Output/action

-

Human approval required

Not confirmed

GA or preview

Not confirmed

Evidence

Not found

Practical value

Not confirmed

Limitations

Not confirmed

Netify View

Evidence gap.

Report summarisation

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Specific function

Unknown - not found in sources reviewed

Input data

-

Output/action

-

Human approval required

Not confirmed

GA or preview

Not confirmed

Evidence

Not found

Practical value

Not confirmed

Limitations

Not confirmed

Netify View

Evidence gap.

Generative AI application controls

Research checked 23 October 2026

Please identify the product/version, licence, customer access and BT support scope for Generative AI application controls. Questions for BT

Harry's original entry follows, unchanged.

Specific function

Not independently confirmed as a distinct, named GenAI-application-governance capability specifically for this platform in sources reviewed

Input data

-

Output/action

-

Human approval required

Not confirmed

GA or preview

Not confirmed

Evidence

Not found in a Tier 1-2 source in this pass at sufficient specificity

Practical value

Not confirmed

Limitations

Not confirmed

Netify View

A genuine, specific gap - worth a direct follow-up on BT's specific roadmap here, particularly given the confirmed reference to 'AI-driven fraud and phishing' as a named threat category BT positions itself against for financial-services customers specifically.

AI data protection controls

Research checked 23 October 2026

Please identify the product/version, licence, customer access and BT support scope for AI data protection controls. Questions for BT

Harry's original entry follows, unchanged.

Specific function

Not independently confirmed as a distinct, named capability specific to AI data interactions in sources reviewed

Input data

-

Output/action

-

Human approval required

Not confirmed

GA or preview

Not confirmed

Evidence

Not found in a Tier 1-2 source in this pass

Practical value

Not confirmed

Limitations

Not confirmed

Netify View

Evidence gap - worth a direct follow-up given how central this capability area has become across the wider SASE/SSE category.

Table 12 - Integrations and Ecosystem

Integration

Category

Native/certified/API/partner

Direction of data flow

Required licence

Implementation notes

Evidence

Confidence

Netify View

Microsoft Entra ID

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Category

Identity

Native/certified/API/partner

Unknown - not found in sources reviewed

Direction of data flow

-

Required licence

-

Implementation notes

-

Evidence

Not found

Confidence

Low

Netify View

Evidence gap.

Active Directory

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Category

Identity

Native/certified/API/partner

Unknown - not found in sources reviewed

Direction of data flow

-

Required licence

-

Implementation notes

-

Evidence

Not found

Confidence

Low

Netify View

Evidence gap.

Okta

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Category

Identity

Native/certified/API/partner

Unknown - not found in sources reviewed

Direction of data flow

-

Required licence

-

Implementation notes

-

Evidence

Not found

Confidence

Low

Netify View

Evidence gap.

Google Workspace

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Category

Identity/productivity

Native/certified/API/partner

Unknown - not found in sources reviewed

Direction of data flow

-

Required licence

-

Implementation notes

-

Evidence

Not found

Confidence

Low

Netify View

Evidence gap.

Microsoft 365

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Category

Productivity/SaaS

Native/certified/API/partner

Not separately confirmed as a distinct named integration in sources reviewed

Direction of data flow

Unknown

Required licence

Not specified

Implementation notes

Not detailed

Evidence

Not found as a distinct, named integration in this pass

Confidence

Low

Netify View

Evidence gap.

Fortinet

Category

SASE/SSE platform (core partner) [2]

Native/certified/API/partner

Native partnership, and genuinely BT's current, primary SASE technology partner [2]

Direction of data flow

Bidirectional (full platform integration) [2]

Required licence

Included within BT Managed SASE (Fortinet-based) [2]

Implementation notes

Confirmed as the technology foundation for BT's current, expanded managed SASE offering, launched in its most recent form in late 2025 [2]

Evidence

[2]

Confidence

High

Netify View

Genuinely the deepest, most current, most extensively-evidenced integration in this entire profile - not a peripheral feature but the technology foundation of BT's current managed SASE service.

Cisco Meraki

Category

SD-WAN/SASE platform (alternative partner) [7]

Native/certified/API/partner

Native partnership, confirmed as an alternative underlying platform for both managed SD-WAN and managed SASE [7]

Direction of data flow

Bidirectional (full platform integration) [7]

Required licence

Included within the Meraki-based service option [7]

Implementation notes

Confirmed directly via Netify's independent research as a named, distinct platform option alongside Fortinet [7]

Evidence

[7]

Confidence

High

Netify View

A specific, named, confirmed alternative platform - genuinely concrete evidence of real platform choice within BT's managed service.

Versa Networks

Category

SD-WAN platform (SD-WAN-specific partner) [7]

Native/certified/API/partner

Native partnership, confirmed specifically for managed SD-WAN (Agile Connect) [7]

Direction of data flow

Bidirectional (SD-WAN platform integration) [7]

Required licence

Included within the Versa-based SD-WAN service option [7]

Implementation notes

Confirmed directly via Netify's independent research as a named SD-WAN platform partner, distinct from the SASE-specific Fortinet/Meraki partnerships [7]

Evidence

[7]

Confidence

High

Netify View

A specific, named, confirmed SD-WAN-specific platform partnership - genuinely concrete evidence of BT's multi-platform strategy extending to the SD-WAN layer specifically.

VMware (historical)

Research checked 23 October 2026

Please provide the supported connector or protocol, data flow, licence and responsibility split for VMware (historical). Questions for BT

Harry's original entry follows, unchanged.

Category

SASE platform (legacy/historical partner) [9]

Native/certified/API/partner

Native partnership, historical - the basis for BT's earlier, 2022-launched managed SASE service, distinct from the current Fortinet-based offering [9]

Direction of data flow

Bidirectional (historical, full platform integration) [9]

Required licence

N/A - this was the technology foundation for an earlier, distinct product generation

Implementation notes

Confirmed directly via a dated (January 2022), primary, wire-distributed press release - buyers should confirm current status of any legacy VMware-based deployments directly [9]

Evidence

[9]

Confidence

High (for the historical fact itself; current relevance/status not confirmed)

Netify View

A specific, dated, confirmed historical partnership - genuinely important context for buyers researching BT's SASE history, distinct from and predating the current, confirmed Fortinet-based offering.

AWS

Research checked 23 October 2026

Please provide the supported connector or protocol, data flow, licence and responsibility split for AWS. Questions for BT

Harry's original entry follows, unchanged.

Category

Cloud

Native/certified/API/partner

Unknown - not found in sources reviewed

Direction of data flow

-

Required licence

-

Implementation notes

-

Evidence

Not found

Confidence

Low

Netify View

Evidence gap.

Microsoft Azure

Research checked 23 October 2026

Please provide the supported connector or protocol, data flow, licence and responsibility split for Microsoft Azure. Questions for BT

Harry's original entry follows, unchanged.

Category

Cloud

Native/certified/API/partner

Unknown - not found in sources reviewed

Direction of data flow

-

Required licence

-

Implementation notes

-

Evidence

Not found

Confidence

Low

Netify View

Evidence gap.

Google Cloud

Research checked 23 October 2026

Please provide the supported connector or protocol, data flow, licence and responsibility split for Google Cloud. Questions for BT

Harry's original entry follows, unchanged.

Category

Cloud

Native/certified/API/partner

Unknown - not found in sources reviewed

Direction of data flow

-

Required licence

-

Implementation notes

-

Evidence

Not found

Confidence

Low

Netify View

Evidence gap.

Microsoft Sentinel

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Category

SIEM

Native/certified/API/partner

Unknown - not found in sources reviewed

Direction of data flow

-

Required licence

-

Implementation notes

-

Evidence

Not found

Confidence

Low

Netify View

Evidence gap.

Splunk

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Category

SIEM

Native/certified/API/partner

Unknown - not found in sources reviewed

Direction of data flow

-

Required licence

-

Implementation notes

-

Evidence

Not found

Confidence

Low

Netify View

Evidence gap - a specific, worth-flagging gap given how common this kind of pairing is across the wider SASE/SSE category.

ServiceNow

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Category

ITSM

Native/certified/API/partner

Unknown - not found in sources reviewed

Direction of data flow

-

Required licence

-

Implementation notes

-

Evidence

Not found

Confidence

Low

Netify View

Evidence gap.

CrowdStrike

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Category

EDR

Native/certified/API/partner

Unknown - not found in sources reviewed

Direction of data flow

-

Required licence

-

Implementation notes

-

Evidence

Not found

Confidence

Low

Netify View

Evidence gap.

Microsoft Defender

Research checked 23 October 2026

Please provide the supported connector or protocol, data flow, licence and responsibility split for Microsoft Defender. Questions for BT

Harry's original entry follows, unchanged.

Category

EDR

Native/certified/API/partner

Unknown - not found in sources reviewed

Direction of data flow

-

Required licence

-

Implementation notes

-

Evidence

Not found

Confidence

Low

Netify View

Evidence gap.

Nokia

Research checked 23 October 2026

Please provide the supported connector or protocol, data flow, licence and responsibility split for Nokia. Questions for BT

Harry's original entry follows, unchanged.

Category

5G/telco infrastructure (parent-company-level partnership)

Native/certified/API/partner

Confirmed at the BT Group parent-company level - a memorandum of understanding covering 5G monetisation via telco APIs, not confirmed as unified with the SASE/SD-WAN service specifically

Direction of data flow

N/A - parent-company-level agreement

Required licence

N/A

Implementation notes

Describes BT Group's broader telco-API strategy rather than the SASE service specifically

Evidence

Not found at sufficient SASE-specific detail in a Tier 1-2 source in this pass

Confidence

Low (real, dated, parent-company-level agreement; not confirmed as SASE-specific)

Netify View

Real, dated, parent-company-level context; not confirmed as directly relevant to the SASE/SD-WAN service specifically in this pass.

REST API

Research checked 23 October 2026

Please provide the supported connector or protocol, data flow, licence and responsibility split for REST API. Questions for BT

Harry's original entry follows, unchanged.

Category

Platform API

Native/certified/API/partner

Not independently confirmed as a distinct, named public developer-API portal specifically for the SASE/SD-WAN service in sources reviewed

Direction of data flow

Unknown

Required licence

Not specified

Implementation notes

Not detailed

Evidence

Not found as a distinct, named integration in this pass

Confidence

Low

Netify View

Evidence gap - worth a direct follow-up.

Syslog

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Category

Log export

Native/certified/API/partner

Unknown - not found in sources reviewed

Direction of data flow

-

Required licence

-

Implementation notes

-

Evidence

Not found

Confidence

Low

Netify View

Evidence gap.

SCIM/SAML/OIDC

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Category

Identity federation

Native/certified/API/partner

Unknown - not found in sources reviewed

Direction of data flow

-

Required licence

-

Implementation notes

-

Evidence

Not found

Confidence

Low

Netify View

Evidence gap - a specific, worth-flagging follow-up given how central this capability is across the wider SASE/SSE category.

Table 13 - Security, Compliance and Data Sovereignty

This research pass found strong evidence of BT's own confirmed regulatory accreditations relevant to its network operations (HSCN), but no independently-confirmed, SASE-service-specific certifications (ISO 27001, SOC 2, FedRAMP) distinct from BT Group's much broader, larger corporate compliance posture.

Standard/requirement

Status

Scope

Certification or supporting capability

Region restrictions

Evidence

Last verified

Netify View

ISO 27001

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Status

Not independently confirmed as a distinct, SASE-service-specific certification in sources reviewed; BT Group's own, much larger, established corporate scale makes broader ISO 27001 certification plausible at the parent-company level, though this wasn't confirmed as specifically applicable to the SASE service in this pass

Scope

Not confirmed at the SASE-service-specific level

Certification or supporting capability

Not confirmed

Region restrictions

None identified

Evidence

Not found at this specificity in a Tier 1-2 source in this pass

Last verified

Not found

Netify View

A genuine, specific evidence gap for the SASE service itself - worth a direct follow-up, given BT Group's own scale and established market position make some form of corporate-level ISO 27001 certification plausible even without SASE-service-specific confirmation.

SOC 2

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Status

Not confirmed in sources reviewed

Scope

N/A

Certification or supporting capability

Not confirmed

Region restrictions

N/A

Evidence

Not found in a Tier 1-2 source in this pass

Last verified

Not found

Netify View

A genuine evidence gap worth a direct follow-up - this may reflect the UK/European market orientation, where SOC 2 (a US-originated attestation standard) is less commonly the lead certification, rather than confident evidence of absence.

PCI DSS

Research checked 23 October 2026

Please provide the service-specific assurance documentation and contractual scope for PCI DSS. Questions for BT

Harry's original entry follows, unchanged.

Status

Not independently confirmed as a distinct, named certification for the SASE service specifically in sources reviewed, despite the confirmed retail-sector positioning explicitly addressing 'payment and customer data' protection

Scope

Not confirmed at the SASE-service-specific level

Certification or supporting capability

Not confirmed

Region restrictions

N/A

Evidence

Not found in a Tier 1-2 source in this pass at sufficient specificity

Last verified

Not found

Netify View

A specific, worth-flagging gap given the confirmed, direct retail/payment-data positioning (Table 3) - worth a direct follow-up for any retail-sector buyer specifically.

GDPR

Research checked 23 October 2026

Please provide the service-specific assurance documentation and contractual scope for GDPR. Questions for BT

Harry's original entry follows, unchanged.

Status

Not separately itemised as a distinct compliance certification in sources reviewed, though BT's own confirmed UK/European market orientation and the confirmed data-residency claim (Table 7) make GDPR-aligned data handling highly plausible in practise [5] [6]

Scope

UK/EU-relevant, per BT's own market orientation [5] [6]

Certification or supporting capability

Not confirmed as a distinct, named certification

Region restrictions

EU/UK relevant [5] [6]

Evidence

[5] [6]

Last verified

22 Jul 2026 [5] [6]

Netify View

A reasonable, well-supported inference from BT's own confirmed UK/EU market orientation and the confirmed data-residency claim; a distinct, named GDPR-compliance certification wasn't independently itemised.

HIPAA

Status

Not applicable in the traditional sense - HIPAA is a US-specific healthcare regulation; BT's confirmed healthcare-adjacent accreditation (HSCN) is a UK-specific equivalent instead

Scope

N/A

Certification or supporting capability

Not applicable (UK market orientation)

Region restrictions

US healthcare-relevant only

Evidence

N/A

Last verified

N/A

Netify View

Not applicable given BT's confirmed UK market orientation - see the HSCN row below for the relevant UK-specific healthcare accreditation instead.

HSCN (Health and Social Care Network) accreditation

Status

Confirmed directly via Netify's own independent research [7]

Scope

UK NHS and social-care-sector organisations specifically [7]

Certification or supporting capability

HSCN accreditation [7]

Region restrictions

United Kingdom [7]

Evidence

[7]

Last verified

25 Jun 2026 [7]

Netify View

A specific, real, UK-relevant, sector-specific accreditation - genuinely concrete evidence for NHS and social-care-sector buyers specifically, and a real differentiator most non-UK-focused SASE vendors would not hold.

NIS2 relevance

Research checked 23 October 2026

Please provide the service-specific assurance documentation and contractual scope for NIS2 relevance. Questions for BT

Harry's original entry follows, unchanged.

Status

Unknown - not found in sources reviewed

Scope

N/A

Certification or supporting capability

Not confirmed

Region restrictions

EU

Evidence

Not found in a Tier 1-2 source in this pass

Last verified

Not found

Netify View

Evidence gap - worth a direct follow-up given BT's genuine European market presence.

DORA relevance

Research checked 23 October 2026

Please provide the service-specific assurance documentation and contractual scope for DORA relevance. Questions for BT

Harry's original entry follows, unchanged.

Status

Unknown - not found in sources reviewed, despite confirmed direct financial-services-sector positioning (Table 3, 14)

Scope

N/A

Certification or supporting capability

Not confirmed

Region restrictions

EU financial services

Evidence

Not found in a Tier 1-2 source in this pass

Last verified

Not found

Netify View

A specific, worth-flagging gap given the confirmed direct financial-services-sector positioning - worth a direct follow-up for any EU financial-services buyer specifically.

FedRAMP

Status

Not applicable in the traditional sense - FedRAMP is a US-specific federal-government cloud-authorization programme; BT's confirmed market orientation and accreditations (HSCN) are UK-specific instead

Scope

N/A

Certification or supporting capability

Not applicable (UK market orientation)

Region restrictions

US federal only

Evidence

N/A

Last verified

N/A

Netify View

Not applicable given BT's confirmed UK market orientation - no evidence was sought or expected for this US-specific framework.

UK public sector frameworks

Status

Native, implied via the confirmed HSCN accreditation and BT's own established, long-standing position as a major UK public-sector technology supplier, though a comprehensive, itemised list of specific UK public-sector frameworks (e.g. G-Cloud) wasn't independently confirmed for the SASE service specifically in this pass [7]

Scope

UK public sector [7]

Certification or supporting capability

HSCN confirmed specifically; broader frameworks not itemised [7]

Region restrictions

United Kingdom [7]

Evidence

[7]

Last verified

25 Jun 2026 [7]

Netify View

A real, specific, confirmed UK public-sector accreditation (HSCN) exists; a broader, comprehensive framework list wasn't independently itemised in this pass.

Data residency

Status

Native, confirmed with genuine sector-specific detail for financial services specifically (Table 7) - 'supports data residency by keeping sensitive traffic within localised data paths' [5] [6]

Scope

UK/localised, per the confirmed financial-services-specific claim [5] [6]

Certification or supporting capability

Confirmed at the mechanism level for this specific sector claim [5] [6]

Region restrictions

UK-relevant [5] [6]

Evidence

[5] [6]

Last verified

22 Jul 2026 [5] [6]

Netify View

A specific, named, sector-relevant confirmation; a broader, general data-residency architecture beyond this specific claim wasn't itemised.

Encryption/key management

Status

Native, confirmed with specific technical detail via a real case study - 'built-in Secure Sockets Layer (SSL) decryption keeps every user safe' [17]

Scope

BT Managed Fortinet Firewall specifically [17]

Certification or supporting capability

SSL decryption confirmed directly [17]

Region restrictions

None identified [17]

Evidence

[17]

Last verified

22 Jul 2026 [17]

Netify View

A specific, named, case-study-evidenced encryption capability - genuinely concrete evidence, though scoped specifically to the confirmed Fortinet-based firewall product rather than the platform generally.

Logging/auditability

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Status

Native, confirmed directly - 'Logs, policies and controls are managed and kept up to date, so staying compliant is simpler' [5] [6]

Scope

Platform-wide, per BT's own direct claim [5] [6]

Certification or supporting capability

Not confirmed at granular technical detail

Region restrictions

None identified [5] [6]

Evidence

[5] [6]

Last verified

22 Jul 2026 [5] [6]

Netify View

A specific, direct, primary-sourced confirmation explicitly framed around compliance simplification - genuinely concrete evidence, even without granular, technical export/retention detail.

Table 14 - Sector Suitability

BT's own current SASE materials name specific sectors directly with concrete, sector-relevant capability claims - genuinely stronger evidence than a generic sector list, even without individually-named customer case studies for most sectors.

Sector

Suitability

Relevant capabilities

Relevant compliance

Supporting case studies

Service/coverage considerations

Limitations

Netify View

Financial services

Research checked 23 October 2026

Please provide a named, product-specific deployment reference for Financial services. Questions for BT

Harry's original entry follows, unchanged.

Suitability

Strong fit, extensively evidenced [6] [17]

Relevant capabilities

ZTNA-based identity-first access, data-residency support via localised traffic paths, and a real, detailed (anonymised) case study directly in this sector [6] [17]

Relevant compliance

PCI DSS and DORA not independently confirmed (Table 13), though data residency is confirmed directly for this sector specifically [6] [17]

Supporting case studies

A real, detailed, primary-sourced (anonymised) global financial-services customer case study, describing Agile Connect plus BT Managed Fortinet Firewall deployment [6] [17]

Service/coverage considerations

Multi-country deployment confirmed directly in the case study [6] [17]

Limitations

The named certification gaps (PCI DSS, DORA) are worth flagging directly for this specific sector [6] [17]

Netify View

Genuinely the best-evidenced sector in this entire profile - both specific, named sector-relevant product positioning (ZTNA, data residency) and a real, detailed case study exist together, even without the customer's name disclosed.

Retail

Research checked 23 October 2026

Please provide a named, product-specific deployment reference for Retail. Questions for BT

Harry's original entry follows, unchanged.

Suitability

Good fit, evidenced via specific, named product positioning [6]

Relevant capabilities

Elastic SD-WAN and CASB, explicitly named for dynamically steering traffic and safeguarding payment/customer data during seasonal surges and pop-up environments [6]

Relevant compliance

PCI DSS not independently confirmed (Table 13), despite the direct payment-data positioning [6]

Supporting case studies

None found as a named individual case study in this pass [6]

Service/coverage considerations

N/A

Limitations

Specific, named product positioning exists without a named individual retail case study [6]

Netify View

A genuinely specific, concrete sector-fit claim (seasonal surges, pop-up environments, payment/customer data) - worth highlighting directly, even without a named case study to reinforce it.

Public sector (general)

Suitability

Good fit, evidenced generally via BT's own confirmed public-sector positioning and established market position [7]

Relevant capabilities

Not assessed in specific technical detail for this sector generally, beyond the confirmed HSCN accreditation for healthcare-adjacent public bodies specifically (see Healthcare row)

Relevant compliance

HSCN confirmed for healthcare-adjacent bodies specifically; broader public-sector framework detail not itemised [7]

Supporting case studies

None found as a named individual case study in this pass [7]

Service/coverage considerations

United Kingdom [7]

Limitations

General sector confirmation exists without a named individual case study [7]

Netify View

Real, credible fit given BT's established, long-standing position as a major UK public-sector technology supplier, even without a named public-sector case study specifically for the SASE service.

Healthcare / NHS

Suitability

Strong fit, evidenced via a specific, named UK accreditation [7]

Relevant capabilities

HSCN accreditation directly supports NHS and social-care-sector connectivity requirements [7]

Relevant compliance

HSCN confirmed directly (Table 13) [7]

Supporting case studies

None found as a named individual case study in this pass [7]

Service/coverage considerations

United Kingdom [7]

Limitations

A specific, named accreditation exists without a named individual healthcare case study [7]

Netify View

A genuine, specific, UK-relevant differentiator - HSCN accreditation is a real, checkable credential most non-UK-focused SASE vendors would not hold, even without a named case study to reinforce it.

Manufacturing

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Suitability

Unknown - not assessed, no case study or sector-specific product positioning found in this pass

Relevant capabilities

Not assessed in detail

Relevant compliance

Not assessed

Supporting case studies

None found

Service/coverage considerations

N/A

Limitations

No case study or sector-specific positioning found

Netify View

Evidence gap.

Multi-national / global enterprise

Suitability

Good fit, evidenced via a real, detailed case study describing exactly this scenario [17]

Relevant capabilities

Genuine multi-country deployment capability, confirmed directly via BT's own international network and a real, detailed case study [17]

Relevant compliance

Not assessed for sector-specific frameworks

Supporting case studies

The same financial-services case study confirms multi-country deployment directly [17]

Service/coverage considerations

Global, via BT's own confirmed international network [17]

Limitations

The available case-study evidence, while real and detailed, is specific to the financial-services sector rather than confirmed across other multinational-enterprise contexts [17]

Netify View

Real, credible, genuinely well-evidenced fit via a specific, detailed case study, even though the only such example found in this pass happens to be financial-services-specific.

Table 15 - Organisation and Estate Suitability

Buyer profile

Suitability

Why

Operational prerequisites

Commercial considerations

Evidence

Netify View

SME

Suitability

Conditional fit [8]

Why

BT's core positioning, per Netify's own independent research, centres on fully-managed delivery for larger, more complex estates rather than confirmed SME-specific packaging; no SME-specific pricing tier or positioning was found in this pass [8]

Operational prerequisites

Minimal internal skills needed given the confirmed fully-managed default model [8]

Commercial considerations

No confirmed entry-level pricing tier found in this pass [8]

Evidence

[8]

Netify View

A genuine, specific evidence gap for SME-specific fit - worth confirming directly rather than assuming this platform is optimised for the smallest buyer segment.

Mid-market

Research checked 23 October 2026

Please provide a comparable deployment and explain service fit, scale and support scope for Mid-market. Questions for BT

Harry's original entry follows, unchanged.

Suitability

Good fit, evidenced at a general level

Why

BT's confirmed multi-platform flexibility and managed-service model support genuine mid-market applicability, though no named mid-market case study was found specifically

Operational prerequisites

Benefits from, but doesn't strictly require, extensive internal networking expertise given the confirmed managed model

Commercial considerations

Not itemised

Evidence

Not found in a Tier 1-2 source in this pass at this specificity

Netify View

A reasonable, though not extensively evidenced, fit for this buyer profile.

Large enterprise

Suitability

Strong fit, extensively evidenced [17]

Why

A real, detailed case study describes exactly this profile - a global, multi-country financial-services enterprise unable to manage a network transformation in-house, reinforced by BT's own established position as a major, large-scale UK and international managed service provider [17]

Operational prerequisites

Requires coordination between internal IT and BT-managed delivery, though substantially reduced by the confirmed fully-managed default [17]

Commercial considerations

Custom enterprise pricing, quote-based [17]

Evidence

[17]

Netify View

Genuinely the best-evidenced buyer profile in this entire table - a real, detailed, primary-sourced case study directly confirms fit for exactly this buyer type.

Global multinational

Suitability

Good fit, evidenced [17]

Why

The confirmed case study directly describes a multi-country deployment, reinforced by BT's own confirmed international network reach [17]

Operational prerequisites

Needs Netify/buyer to verify specific-country coverage directly, given the Table 7 general-versus-specific coverage-detail gap outside the UK [17]

Commercial considerations

Custom enterprise pricing [17]

Evidence

[17]

Netify View

Real, credible fit for this buyer profile, backed by a specific, real, detailed multi-country case study, though country-by-country coverage detail beyond the UK wasn't independently itemised.

Highly distributed branch estate

Suitability

Strong fit, evidenced

Why

The confirmed elastic SD-WAN and flexible connectivity-mixing capability directly supports this buyer profile, reinforced by the confirmed managed CPE model reducing per-site deployment burden

Operational prerequisites

Low, given the confirmed fully-managed model

Commercial considerations

Not itemised

Evidence

Table 3, 4, 6 findings

Netify View

Real, confirmed capability, reinforced by BT's own long-established managed-connectivity heritage.

Remote-user-heavy organisation

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Suitability

Unknown - thin evidence specifically for the remote-user/client side of the platform (see Table 5)

Why

Not assessed with confidence

Operational prerequisites

Not assessed

Commercial considerations

Not assessed

Evidence

Table 5 findings

Netify View

A genuine, specific evidence gap - this profile's research skewed toward the site-to-site SD-WAN, managed-operations, and sector-specific-positioning sides of the service, leaving remote-user/client-side evidence comparatively thin.

Cloud-first organisation

Suitability

Good fit, evidenced at a general level

Why

Confirmed cloud-delivered SASE architecture ('SASE cloud node') supports this buyer profile

Operational prerequisites

None significant identified

Commercial considerations

Not assessed

Evidence

Table 3, 6 findings

Netify View

Real, credible fit; specific, named hyperscaler-level integration detail is a genuine, specific gap worth closing directly.

Regulated organisation (UK-specific)

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Suitability

Strong fit specifically for UK healthcare/social-care requirements, given the confirmed HSCN accreditation; conditional for other regulated frameworks

Why

HSCN is confirmed directly and is a genuine, specific, UK-relevant differentiator; PCI DSS, DORA, ISO 27001, and SOC 2 were not independently confirmed for the SASE service specifically

Operational prerequisites

Buyer must independently verify sector-specific compliance status directly with BT for anything outside the confirmed HSCN scope

Commercial considerations

Not assessed

Evidence

Table 13 findings

Netify View

A genuinely strong, specific compliance foundation for UK healthcare/social-care buyers specifically, tempered by the specific, worth-flagging absence of confirmed platform-level certifications for other regulated frameworks.

Lean IT team

Suitability

Strong fit, extensively evidenced [8] [17]

Why

BT's core, confirmed positioning centres on fully-managed delivery precisely to reduce internal operational burden, reinforced by a real, detailed case study describing a customer explicitly unable to manage a network transformation in-house [8] [17]

Operational prerequisites

Minimal training investment implied by the confirmed fully-managed default model [8] [17]

Commercial considerations

Not assessed

Evidence

[8] [17]

Netify View

A genuinely credible, well-evidenced fit - the confirmed, real customer account of exactly this scenario (insufficient in-house resources) gives this buyer profile real, concrete evidence.

Mature NetOps/SecOps team

Suitability

Conditional fit [8]

Why

Mature teams get real, confirmed flexibility via the confirmed co-managed option, though this platform's core, most extensively evidenced strength centres on fully-managed delivery rather than deep, self-directed technical control for sophisticated in-house teams specifically [8]

Operational prerequisites

Mature teams should confirm the exact RACI split directly, per Netify's own independent research recommendation [8]

Commercial considerations

Not assessed

Evidence

[8]

Netify View

A reasonable fit for teams specifically wanting the co-managed flexibility option; teams wanting maximum self-directed, self-managed control should confirm this platform's fully-managed default model and RACI boundaries fit their preference directly.

Table 16 - Commercial and Licensing Data

No pricing has been published for BT's managed SASE service in any source found in this research pass - Netify's own independent research explicitly confirms this is 'Quote-based. No complete public enterprise price was found in reviewed sources.'

Commercial field

Finding

Publicly disclosed

Variables/drivers

Buyer questions

Evidence

Confidence

Netify View

Licensing unit

Finding

Confirmed to be structured as a quote-based, managed-service model combining access, CPE, vendor stack, and service-tier options together, per Netify's own independent research [8]

Publicly disclosed

Partially - the general commercial-model structure is confirmed; specific per-unit pricing is not [8]

Variables/drivers

Access type, CPE model, vendor platform selected (Fortinet/Meraki/Versa), service tier [8]

Buyer questions

What is the actual cost structure at our expected site count and required service tier? [8]

Evidence

[8]

Confidence

Medium-High

Netify View

Confirmed at the structural level via a credible, independent, dated (May 2026) source - genuinely more concrete than an entirely undocumented commercial model.

Subscription terms

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Finding

Not itemised with specific term-length figures in sources reviewed

Publicly disclosed

Not found

Variables/drivers

Not confirmed

Buyer questions

What subscription term lengths does BT offer, and what discount applies to longer commitments?

Evidence

Not found in a Tier 1-2 source in this pass

Confidence

Low

Netify View

Evidence gap.

Bundles/editions

Finding

Confirmed to exist as multiple, distinct offerings - Agile Connect (SD-WAN), BT Managed SASE (Fortinet-based), BT Managed SASE (Meraki-based), and BT Managed Fortinet Firewall as a potentially separate product - each separately named

Publicly disclosed

Partially - product-line existence and names are confirmed; specific commercial tier boundaries and bundling rules were not itemised

Variables/drivers

Feature requirements, platform selected, deployment scale

Buyer questions

Exactly which Table 3 capabilities are included in the base SD-WAN service versus available only within the full managed SASE upgrade?

Evidence

Table 2 findings

Confidence

Medium-High

Netify View

A specific, confirmed multi-product structure - genuinely more concrete than a single, undifferentiated product name, even without published pricing per line.

Required add-ons

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Finding

Not itemised with specific figures in sources reviewed, beyond the confirmed distinction between base SD-WAN and the full managed SASE upgrade

Publicly disclosed

Not found beyond the confirmed tier structure

Variables/drivers

Buyer's required feature set

Buyer questions

Are all Table 3 capabilities included within the base managed SASE tier, or are some priced as separate add-ons (e.g. the specifically-named BT Managed Fortinet Firewall)?

Evidence

Not found in a Tier 1-2 source in this pass at this level of detail

Confidence

Low-Medium

Netify View

Evidence gap beyond the confirmed general product-tier structure.

Hardware charges

Finding

Confirmed to exist as a real, included commercial component - the quote-based commercial model is confirmed directly to include CPE alongside access and vendor stack [8]

Publicly disclosed

Partially - the existence of a CPE component is confirmed directly; specific pricing is not [8]

Variables/drivers

CPE model selected, deployment scale [8]

Buyer questions

What is the current cost of the required CPE hardware at our expected deployment scale, and is it included in the base quote or a separate line item? [8]

Evidence

[8]

Confidence

Medium-High

Netify View

A specific, confirmed commercial-model description - genuinely more concrete than the pattern found across most vendors in this category, even without published hardware pricing.

Bandwidth charging

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Finding

Not itemised as a distinct bandwidth-tier charging dimension in sources reviewed

Publicly disclosed

Not found

Variables/drivers

N/A

Buyer questions

Is there any bandwidth-related charge, separate from the base access/service subscription?

Evidence

Not found in a Tier 1-2 source in this pass

Confidence

Low

Netify View

Evidence gap.

User charging

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Finding

Not itemised with a specific figure in any source reviewed

Publicly disclosed

Not found

Variables/drivers

User count, tier selected

Buyer questions

What is the actual per-user rate at our expected volume, if user-based charging applies at all to this predominantly site/access-based commercial model?

Evidence

Not found in a Tier 1-2 source in this pass

Confidence

Low

Netify View

Evidence gap.

Site charging

Finding

Confirmed to exist as the primary commercial dimension, per the confirmed quote-based, access-plus-CPE-plus-stack commercial model [8]

Publicly disclosed

Partially - the site-based commercial logic is confirmed; specific per-site figures are not [8]

Variables/drivers

Site count, access type, CPE model, vendor platform selected [8]

Buyer questions

What is the actual per-site cost at our target branch count, factoring in access, CPE, and the selected vendor platform? [8]

Evidence

[8]

Confidence

Medium-High

Netify View

A specific, confirmed commercial-model logic - genuinely more concrete than an entirely undocumented pricing structure.

Support tiers

Finding

Not itemised with named tiers and specific SLA figures in sources reviewed, though Netify's own independent research confirms 'severity SLAs' exist as a general, evaluated capability

Publicly disclosed

Partially - the existence of severity-based SLAs is confirmed generally; specific figures are not [7]

Variables/drivers

Support tier selected [7]

Buyer questions

What named support tiers and severity-SLA response times exist specifically? [7]

Evidence

[7]

Confidence

Medium

Netify View

A specific, confirmed general existence of severity-based SLA structure - genuinely more concrete than the pattern found across most vendors in this category, even without specific published figures.

Professional services

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Finding

Not confirmed as a distinct, separately-priced Professional Services product in sources reviewed, consistent with BT's confirmed core positioning that implementation is included within the fully-managed default model

Publicly disclosed

N/A

Variables/drivers

N/A

Buyer questions

Is any element of deployment or migration support priced separately from the base managed-service quote?

Evidence

Consistent with the confirmed fully-managed delivery model found throughout this profile

Confidence

Medium

Netify View

A genuine, structural finding rather than a gap - this platform's entire value proposition centres on included, managed implementation rather than a separately-priced Professional Services line item.

Managed service charges

Finding

Confirmed to exist as the platform's entire, default commercial and delivery model, though specific, itemised managed-service pricing wasn't found in this pass

Publicly disclosed

Partially - the managed-service model itself is confirmed and central; specific pricing is not

Variables/drivers

Service scope, level of co-management chosen

Buyer questions

What does the confirmed fully-managed model cost at our expected scale, and does choosing the co-managed option instead affect pricing?

Evidence

Table 6, 8, 9 findings

Confidence

Medium

Netify View

A specific, worth-asking question given the confirmed choice between fully-managed and co-managed models - Netify should confirm directly whether this choice affects pricing.

Minimum commitments

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Finding

Unknown - not found in sources reviewed

Publicly disclosed

Not found

Variables/drivers

Not confirmed

Buyer questions

Is there a minimum site count, user count, or contract value?

Evidence

Not found in a Tier 1-2 source in this pass

Confidence

Low

Netify View

Evidence gap.

Renewal/true-up considerations

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Finding

Not itemised with a specific figure in sources reviewed

Publicly disclosed

Not found

Variables/drivers

Not confirmed

Buyer questions

How are mid-term site additions priced - pro-rated, or at renewal only?

Evidence

Not found in a Tier 1-2 source in this pass

Confidence

Low

Netify View

Evidence gap.

Table 17 - Deployment and Migration Evidence

Scenario

Typical sequence

Dependencies

Customer resources

Provider resources

Time evidence if public

Risks

Mitigations

Netify View

MPLS to SD-WAN migration

Typical sequence

Genuinely well-evidenced via a real, detailed case study directly describing a legacy-to-modern connectivity transition, with a customer moving toward an over-the-internet connection approach specifically

Dependencies

Existing legacy connectivity potentially coexisting during transition, per the confirmed flexible-underlay architecture

Customer resources

IT team, though substantially reduced given the confirmed fully-managed model

Provider resources

BT-managed, per the confirmed fully-managed default

Time evidence if public

Not quantified with a specific timeline in the source reviewed

Risks

The confirmed case study directly names the risk this scenario addresses: the customer 'couldn't afford to handle a network transformation like this in-house'

Mitigations

The confirmed fully-managed delivery model directly addresses the named in-house-resource-constraint risk

Netify View

Genuinely well-evidenced via a real, detailed customer example directly describing this exact migration scenario and the specific business constraint (lack of in-house resources) that drove the decision.

Firewall consolidation

Typical sequence

Evidenced via the confirmed BT Managed Fortinet Firewall product, combined with SD-WAN in the confirmed case study specifically to provide centralised, edge-based security

Dependencies

Existing firewall infrastructure potentially retired

Customer resources

IT/security team

Provider resources

BT-managed

Time evidence if public

Not quantified with a specific timeline

Risks

Not itemised

Mitigations

Not detailed

Netify View

The underlying capability is genuinely well-evidenced via a real, detailed case study combining SD-WAN and managed firewall together as a single, coordinated migration.

VPN to ZTNA migration

Typical sequence

Not evidenced via a named case study specifically describing VPN retirement in sources reviewed, though ZTNA itself is confirmed as a core capability (Table 3)

Dependencies

Existing VPN infrastructure potentially retired

Customer resources

IT team

Provider resources

BT-managed

Time evidence if public

Not quantified

Risks

Not itemised

Mitigations

Not detailed

Netify View

The underlying ZTNA capability is confirmed and specific (identity-based access, data residency support); a named customer case study specifically for VPN retirement wasn't found in this pass.

SSE deployment to remote users

Typical sequence

Not evidenced with specific detail in sources reviewed, consistent with the broader Table 5 finding that remote-user/client-side evidence is thinner than the site-to-site/sector-positioning side of the platform

Dependencies

Not itemised

Customer resources

Not itemised

Provider resources

Not itemised

Time evidence if public

Not quantified

Risks

Not itemised

Mitigations

Not detailed

Netify View

A genuine, specific evidence gap for this exact scenario, consistent with the pattern found throughout Table 5.

Global branch rollout

Typical sequence

Genuinely well-evidenced via a real, detailed case study describing a multi-country deployment specifically

Dependencies

Existing branch network/WAN infrastructure to integrate or replace across multiple countries

Customer resources

BT-managed, per the confirmed fully-managed default

Provider resources

BT-managed, with confirmed international network reach

Time evidence if public

Not quantified with a specific timeline

Risks

The confirmed case study directly names the challenge: 'they couldn't afford to handle a network transformation like this in-house' 'in all countries'

Mitigations

The confirmed fully-managed, internationally-capable delivery model directly addresses this scenario

Netify View

Well-evidenced via a real, detailed, multi-country customer example - genuinely concrete evidence for this exact scenario.

Merger/acquisition integration

Typical sequence

Not documented via a named customer M&A-specific scenario in sources reviewed

Dependencies

Not itemised

Customer resources

Not itemised

Provider resources

Not itemised

Time evidence if public

Not quantified

Risks

Not itemised

Mitigations

Not detailed

Netify View

Evidence gap for this specific scenario.

Co-managed transition

Typical sequence

Confirmed as an available option (Table 6, 9), though buyers should confirm the exact RACI split and request a portal demonstration directly, per Netify's own independent research recommendation

Dependencies

Existing tools/processes reviewed against BT's specific co-managed delivery model

Customer resources

Customer chooses desired level of involvement

Provider resources

BT-managed, with confirmed customer-accessible elements under the co-managed option

Time evidence if public

Not quantified

Risks

N/A

Mitigations

N/A

Netify View

Real, confirmed option exists, though this is a specific area worth confirming directly rather than assuming, given BT's core positioning centres on fully-managed delivery by default.

Multi-vendor SASE integration

Typical sequence

Not the platform's primary emphasis in the sources reviewed - BT's core positioning centres on a single managed contract spanning access, CPE, and a chosen underlying vendor platform (Fortinet, Meraki, or Versa) rather than explicitly marketed best-of-breed pairings with vendors outside its own confirmed platform partnerships

Dependencies

Existing security/identity tools already in place

Customer resources

Not itemised

Provider resources

Not itemised

Time evidence if public

Not quantified

Risks

N/A

Mitigations

N/A

Netify View

A specific, worth-stating architectural-philosophy distinction - BT's own confirmed strategy favours managed delivery of one of a small number of named, established vendor platforms (Fortinet, Meraki, Versa) rather than orchestrated integration with a broader ecosystem of third-party SASE/SSE vendors.

Table 18 - Structured Customer Case Studies

One real, detailed, primary-sourced case study was found in this research pass. The customer's own identity is anonymised - a common, standard practise for this class of content - but the technical and business narrative is genuinely specific and credible. No fully-named, individually-identified customer case study was found for BT's managed SD-WAN or SASE services in this research pass, a real, worth-flagging gap Netify should prioritise closing directly with BT.

Case study

Customer/anonymous

Sector

Country/region

Users

Sites

Problem

Products/services

Deployment model

Integrations

Measured outcomes

Evidence quality

Netify interpretation

Global financial-services customer - Agile Connect and Managed Fortinet Firewall

Customer/anonymous

Anonymous - described only as 'our global customer' and 'our customer'; company name not disclosed

Sector

Financial services

Country/region

Multi-country (specific countries not named)

Users

Not quantified

Sites

Not quantified - described generally as requiring consistent service 'in all countries'

Problem

The customer needed to move away from an existing approach that could not provide consistent service across all its countries of operation, and could not afford to handle a network transformation of this scale in-house

Products/services

Agile Connect (managed SD-WAN) combined with BT Managed Fortinet Firewall

Deployment model

Fully managed, over-the-internet connectivity combined with edge-based managed firewall

Integrations

Fortinet (via BT Managed Fortinet Firewall)

Measured outcomes

Simpler deployment and greater control over the network; centralised management providing better visibility and control over the entire infrastructure and security; network segmentation confirmed directly ('if a breach happens in one area, data in other areas stays protected'); higher bandwidth, greater connectivity and flexibility at lower cost; no specific quantified percentage or numeric outcome given

Evidence quality

Medium-High - a real, detailed, primary-sourced (BT's own published case study) account with specific technical detail (SSL decryption, network segmentation, centralised management) and a clear problem/solution narrative, though the customer's identity is anonymised and no specific quantified outcome figure (e.g. a percentage) is given

Netify interpretation

The strongest available customer evidence found in this research pass - genuinely detailed and technically specific rather than generic marketing language, even without the customer's name disclosed or a specific, quantified numeric outcome. Netify should treat obtaining additional, ideally fully-named, case studies as a priority follow-up item with BT directly.

Table 19 - Strengths, Limitations and Procurement Watch-outs

Type

Finding

Buyer impact

Best/worst affected buyers

Evidence

Confidence

Netify View

Strength

Finding

Genuine, confirmed ownership of Openreach gives BT direct control over one of the deepest UK last-mile access networks in the market - a structural advantage no platform-only SASE vendor can replicate [8]

Buyer impact

Buyers get genuine underlay accountability within a single corporate group, rather than a SASE platform layered on top of a third-party-owned, separately-accountable access network [8]

Best/worst affected buyers

Best: UK-anchored organisations prioritising underlay accountability and field-engineering depth. Less relevant: buyers with no particular UK-connectivity dependency [8]

Evidence

[8]

Confidence

High

Netify View

Genuinely BT's clearest, most structurally distinctive differentiator - a real, checkable, corporate-ownership fact rather than a marketing claim.

Strength

Finding

Confirmed, genuine multi-platform flexibility - managed SD-WAN on Cisco Meraki and Versa, managed SASE on Fortinet and Meraki - gives buyers real platform choice within a single managed contract [7]

Buyer impact

Buyers can select the underlying vendor platform that best fits their specific technical requirements without needing to manage multiple separate vendor relationships directly [7]

Best/worst affected buyers

Best: buyers wanting platform flexibility without separate procurement relationships. Less relevant: buyers who have already firmly decided on a specific, named SASE platform vendor directly [7]

Evidence

[7]

Confidence

High

Netify View

A specific, confirmed, genuine differentiator, though it also means buyers must do more work to confirm exactly which platform and packaging applies to their specific proposal.

Strength

Finding

A real, detailed, primary-sourced case study demonstrates concrete, specific technical and business outcomes for a genuinely challenging scenario (global, multi-country network transformation with insufficient in-house resources) [17]

Buyer impact

Buyers get real, checkable evidence of BT's capability for complex, large-scale, multi-country deployments, even without the customer's name disclosed [17]

Best/worst affected buyers

Best: large, multi-country enterprises, particularly in financial services. Less relevant: buyers wanting a fully-named, quotable customer reference specifically [17]

Evidence

[17]

Confidence

Medium-High

Netify View

Genuinely credible, specific evidence - real technical and business detail rather than generic marketing language, tempered only by the customer's anonymisation.

Limitation

Finding

This research pass found no independently-confirmed, SASE-service-specific certifications (ISO 27001, SOC 2, PCI DSS, DORA) distinct from BT Group's much larger, broader corporate compliance posture

Buyer impact

Buyers with formal, platform-level compliance-attestation requirements cannot currently verify these specific certifications for the SASE service itself from public sources

Best/worst affected buyers

Affects regulated-industry buyers most specifically, particularly financial services given the confirmed direct sector positioning without matching confirmed certifications

Evidence

Table 13 findings

Confidence

Medium-High (confident about the absence found in this specific research pass, though this may reflect a research-pass limitation given BT Group's own substantial scale)

Netify View

A genuine, specific gap worth flagging directly and early with any buyer requiring formal, platform-level compliance certification, particularly in financial services given the confirmed sector-specific positioning without matching confirmed certifications.

Limitation

Finding

No fully-named, individually-identified customer case study was found for BT's managed SD-WAN or SASE services in this research pass - the strongest available evidence is a real, detailed, but anonymised case study

Buyer impact

Buyers wanting a fully-named, quotable customer reference to validate against have less to draw on than the pattern found among several other vendors in this category

Best/worst affected buyers

Affects all buyer sizes wanting fully-attributable case-study evidence before committing

Evidence

Table 18 findings

Confidence

Medium-High (confident about the absence found in this specific research pass, though case studies may exist that weren't surfaced)

Netify View

A genuine, specific gap worth flagging as a direct follow-up request to BT, even though the anonymised evidence located is itself real and credible.

Limitation

Finding

BT's own confirmed positioning, per Netify's independent research, is that a DIY/self-managed model is 'not BT's primary positioning', and the confirmed co-managed model's specific customer-control boundaries should be verified directly rather than assumed [8]

Buyer impact

Buyers wanting a genuinely lightweight, self-administered platform experience should confirm this expectation matches BT's actual delivery model before committing [8]

Best/worst affected buyers

Affects buyers with a strong internal preference for self-directed, minimal-vendor-involvement operation most specifically [8]

Evidence

[8]

Confidence

High (this is Netify's own, directly-stated, independently-researched finding)

Netify View

A specific, important, independently-sourced caution - not necessarily a weakness for buyers wanting fully-managed delivery, but a real, worth-confirming mismatch risk for buyers with the opposite preference.

Procurement watch-out

Finding

BT has offered managed SASE under at least two distinct underlying technology generations in recent years - a VMware-based service launched January 2022, and the current, confirmed Fortinet-based service expanded in late 2025 - buyers researching this vendor's SASE history should confirm which generation any given proposal, reference, or public materials actually describe

Buyer impact

Buyers doing extended, multi-source due diligence should verify they are evaluating current, correctly-dated materials, and confirm the status of any legacy VMware-based deployments directly if relevant to their own situation

Best/worst affected buyers

Most relevant to buyers doing extended research who may encounter older, VMware-era BT SASE references alongside current, Fortinet-era materials

Evidence

Table 1, 12 findings

Confidence

High (both technology generations are directly, primary-sourced confirmed with specific dates)

Netify View

Worth flagging directly and early - Netify should note explicitly to any buyer that BT's current managed SASE offering is Fortinet-based (from late 2025), distinct from an earlier, VMware-based service BT offered from January 2022.

Table 20 - Netify Human Evaluation

First six rows are the mandatory Netify Assessment questions and are answered explicitly here.

Evaluation area

Netify conclusion

Evidence basis

Confidence

Buyer implication

Who is this genuinely best suited for? (mandatory)

Netify conclusion

UK-anchored organisations wanting genuine underlay accountability via BT's confirmed ownership of Openreach; large, multi-country enterprises wanting a single managed contract combining connectivity, hardware, and a choice of SASE platform; and NHS/social-care-adjacent public bodies specifically, given confirmed HSCN accreditation.

Evidence basis

Tables 1, 7, 13, 15

Confidence

High

Buyer implication

Buyers matching this profile can proceed with genuine confidence, backed by real, specific, checkable evidence rather than only generic managed-service marketing claims.

Where does it stand out? (mandatory)

Netify conclusion

Genuine, structural ownership of the UK's dominant last-mile access network via Openreach; confirmed, genuine multi-platform flexibility (Fortinet, Meraki, Versa) within one managed contract; and a real, detailed (if anonymised) case study demonstrating concrete capability for complex, multi-country deployments.

Evidence basis

Tables 7, 12, 18, 19

Confidence

High

Buyer implication

These are the claims Netify can make most confidently and specifically to buyers, each backed by real, checkable, primary-sourced or independently-researched evidence.

Where does it fall behind competitors? (mandatory)

Netify conclusion

No independently-confirmed, SASE-service-specific compliance certifications (ISO 27001, SOC 2, PCI DSS, DORA) were found distinct from BT Group's broader corporate posture; no fully-named customer case study was found; and BT's own confirmed positioning is that fully self-managed delivery is not its primary model.

Evidence basis

Tables 13, 15, 18, 19

Confidence

Medium-High

Buyer implication

Named specifically and evidenced, not a generic hedge - the compliance-certification gap and the fully-managed-by-default positioning specifically should be raised proactively with any relevant buyer.

What implementation challenges should buyers expect? (mandatory)

Netify conclusion

Expect a genuinely low customer-effort deployment for the core, fully-managed path, reinforced by a real, detailed case study describing exactly this experience. Expect to confirm directly which specific underlying vendor platform (Fortinet, Meraki, or Versa) is being proposed, since capability and packaging vary by platform. Expect the commercial conversation to require a direct BT quote from the start, given the confirmed absence of published, first-party pricing.

Evidence basis

Tables 6, 9, 16, 17

Confidence

Medium-High

Buyer implication

Each expectation is traceable to a specific, evidenced finding elsewhere in this profile.

When would Netify recommend it? (mandatory)

Netify conclusion

When a buyer specifically wants genuine underlay/last-mile accountability via BT's confirmed Openreach ownership; when a buyer wants a single managed contract spanning connectivity, hardware, and a choice of SASE platform; or when a buyer is an NHS/social-care-adjacent UK public body specifically, given confirmed HSCN accreditation.

Evidence basis

Synthesis of Tables 7, 12, 13, 15

Confidence

High

Buyer implication

A clear, actionable recommendation trigger set for Netify's comparison tool to apply directly.

When would Netify recommend looking elsewhere? (mandatory)

Netify conclusion

When a buyer needs confirmed, independently-verified, platform-specific compliance certifications (ISO 27001, SOC 2, PCI DSS, DORA); when a buyer specifically wants a fully self-managed, do-it-yourself platform rather than BT's confirmed fully-managed-by-default model; or when a buyer needs a fully-named, quotable customer reference as part of their procurement evidence requirements.

Evidence basis

Synthesis of Tables 13, 15, 18

Confidence

Medium-High

Buyer implication

Each trigger is tied to a specific, evidenced gap rather than a generic 'consider alternatives' hedge.

Questions to ask before recommending it

Netify conclusion

1) Exactly which underlying SASE platform (Fortinet or Meraki) is being proposed for this specific deployment, and why? 2) What does the co-managed RACI split actually look like in practise, with a live portal demonstration? 3) Beyond HSCN, does the specific SASE service itself carry any independently-verified certifications distinct from BT Group's broader corporate posture? 4) Can BT provide a fully-named customer reference, and what is the current status of any legacy VMware-based SASE deployments?

Evidence basis

Synthesis of Tables 6, 12, 13, 18

Confidence

High

Buyer implication

A direct, reusable question set for Netify's advisory conversations with buyers considering BT Managed SASE.

Most credible differentiator

Netify conclusion

Genuine, structural ownership of the UK's dominant last-mile access network via Openreach, combined with confirmed multi-platform flexibility (Fortinet, Meraki, Versa) within a single managed contract - a real, checkable infrastructural advantage no platform-only SASE vendor can replicate.

Evidence basis

Tables 7, 12, 19

Confidence

High

Buyer implication

This is the single sentence Netify's comparison engine could most confidently quote for this vendor specifically, particularly for UK-anchored buyers.

Biggest operational advantage

Netify conclusion

A real, detailed case study directly demonstrates BT's fully-managed delivery model successfully resolving a genuinely challenging scenario - a global, multi-country network transformation the customer could not handle in-house - with confirmed, specific outcomes including network segmentation and centralised visibility.

Evidence basis

Table 9, 18

Confidence

High

Buyer implication

Directly quotable with the specific, real case-study detail for credibility, even without the customer's name disclosed.

Biggest operational concern

Netify conclusion

The combination of no independently-confirmed, SASE-service-specific compliance certifications and the absence of a fully-named customer case study together represent the two most concrete, actionable evidence gaps a buyer should resolve directly before committing, particularly for regulated-industry procurement decisions.

Evidence basis

Tables 13, 18, 19

Confidence

Medium-High

Buyer implication

Netify should proactively flag both specific, evidenced gaps to buyers during the shortlist conversation rather than let either surface as a surprise later.

Deployment reality

Netify conclusion

Genuinely well-evidenced as low-effort for the customer under BT's confirmed fully-managed default model, backed by a real, detailed case study; the confirmed co-managed alternative requires buyers to verify the exact RACI split directly rather than assume equivalent customer control.

Evidence basis

Tables 6, 9, 17, 18

Confidence

High for the fully-managed path specifically; Medium for the co-managed alternative pending direct RACI confirmation

Buyer implication

Present the fully-managed deployment evidence with genuine confidence, backed by real, specific case-study detail, while flagging the co-managed RACI-confirmation need directly for buyers considering that path.

Support/service reality

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Netify conclusion

Genuinely well-evidenced via multiple, independently-corroborated confirmations - 24x7 NOC and SOC/MDR capability, severity SLAs, and change-window processes are all confirmed both by BT's own materials and Netify's independent research - though specific, numeric SLA figures were not found published.

Evidence basis

Table 8

Confidence

Medium-High (structural capability well-confirmed; specific numeric SLA figures are not)

Buyer implication

Present the confirmed, corroborated NOC/SOC/MDR capability with genuine confidence, while requesting specific, numeric SLA figures directly before finalising any support-SLA-sensitive procurement decision.

Reporting reality

Research checked 23 October 2026

Harry's original entry follows, unchanged.

Netify conclusion

Strong specifically for centralised network/security visibility and compliance-relevant logging, reinforced by both BT's own direct materials and a real case study; weaker or unconfirmed on application-performance, DLP-event, and executive-dashboard reporting, none of which were confirmed as distinct, named products in this research pass.

Evidence basis

Table 10

Confidence

Medium-High for centralised visibility and compliance logging; Low for other reporting categories

Buyer implication

Present the centralised-visibility and compliance-logging strengths specifically rather than imply comprehensive reporting maturity across every category.

AI reality

Netify conclusion

A real, direct, primary-sourced confirmation of AI-powered proactive threat detection exists, layered on top of the underlying vendor platform (principally Fortinet); the precise split between BT's own value-add and the underlying platform's native AI capability was not itemised separately, and no single, distinctly-named AI copilot product was confirmed.

Evidence basis

Table 11

Confidence

Medium-High

Buyer implication

Represent the confirmed AI-powered threat-detection capability with genuine confidence, while being clear that the specific technical contribution of BT versus the underlying Fortinet platform wasn't independently itemised in this pass.

Sector fit

Netify conclusion

Financial services is genuinely the best-evidenced sector in this entire profile, combining specific, named product positioning (ZTNA, data residency) with a real, detailed (if anonymised) case study; retail and healthcare/NHS are well-evidenced via specific, named product positioning and accreditation respectively, without individually-named case studies; manufacturing was not assessed due to an absence of evidence.

Evidence basis

Table 14

Confidence

High for financial services; Medium for retail and healthcare; Low for sectors with no evidence

Buyer implication

The confirmed financial-services case study and the confirmed HSCN accreditation are both worth highlighting directly for any buyer in those specific sectors.

Global fit

Netify conclusion

Genuinely the strongest coverage finding in this entire profile is specifically for the United Kingdom, via BT's confirmed ownership of Openreach; international, multi-country capability is confirmed directly via a real case study, though detailed, country-by-country coverage outside the UK was not independently itemised.

Evidence basis

Table 7, 15

Confidence

High for the UK specifically; Medium for confirmed multi-country capability generally; Low for country-level specificity outside the UK

Buyer implication

Present the UK-coverage strength with genuine confidence, while always verifying buyer-specific country/region delivery capability directly with BT for deployments outside the UK.

Commercial reality

Netify conclusion

No pricing exists for this service in any source found in this research pass, explicitly confirmed as quote-based by Netify's own independent research; the confirmed structural commercial model (access, CPE, vendor stack, and service tier combined into one contract) gives buyers real, useful commercial framing even without published figures.

Evidence basis

Table 16

Confidence

Medium (confident about the absence of published pricing, and about the confirmed commercial-model structure)

Buyer implication

Route any budget conversation to a direct BT quote from the very first interaction, using the confirmed commercial-model structure (access plus CPE plus vendor stack plus service tier) to scope the conversation precisely.

Questions Netify still cannot verify

Netify conclusion

Independently-confirmed, SASE-service-specific ISO 27001, SOC 2, PCI DSS, DORA, and NIS2 status; specific, published pricing figures at any tier; named, formal support-tier SLA figures beyond the general confirmed existence of severity SLAs; a fully-named customer case study; and the current status of any legacy VMware-based SASE deployments.

Evidence basis

Synthesis of Tables 8, 13, 16, 18

Confidence

N/A - explicitly unresolved

Buyer implication

This list should drive the next follow-up (a direct BT briefing) before this profile is considered fully closed out, particularly the compliance-certification and named-case-study questions given their direct relevance to regulated-sector and general procurement confidence.

Overall Netify Assessment

Netify conclusion

BT's most credible, best-evidenced strength is genuinely structural rather than a proprietary technology claim: confirmed ownership of Openreach gives it a real, checkable infrastructural advantage over platform-only SASE vendors, reinforced by confirmed, genuine multi-platform flexibility (Fortinet, Meraki, Versa) within a single managed contract. That combination, backed by a real, detailed (if anonymised) case study demonstrating concrete capability for complex, multi-country deployments, makes this a credible shortlist candidate - particularly for UK-anchored organisations, large multi-country enterprises, and NHS/social-care-adjacent public bodies specifically. The profile is honest about real, specific gaps: no independently-confirmed, SASE-service-specific compliance certifications distinct from BT Group's broader corporate posture, no fully-named customer case study, and a confirmed core positioning that fully self-managed delivery is not BT's primary model. This profile is solid enough to support initial shortlist guidance for UK-anchored, large-enterprise, and public-sector buyers specifically, but the flagged compliance-certification gap and the absence of a fully-named case study should both be closed out directly with BT before use in a high-stakes, compliance-sensitive procurement decision.

Evidence basis

Whole profile

Confidence

Medium-High overall

Buyer implication

Recommend direct BT engagement to confirm platform-specific compliance certifications and obtain a fully-named customer reference before this profile supports a high-stakes procurement decision.

Evidence Register

Every source used in this profile, numbered, with a reliability tier (see "Source reliability tiers" below). Each [n] superscript throughout the tables above is a clickable link that jumps to the matching numbered row here - right-click the number and choose "Update Field" if Word doesn't show it as a live link immediately after opening. Sources kept at Tier 4 are NOT relied on for any factual claim in this profile; they're retained here only for audit-trail transparency.

#

Tier

Source title/document

URL

Pub. date

Verified

Confidence / reliability note

1

Tier

Tier 4

Source title/document

Wikipedia - BT Group / Openreach

URL

en.wikipedia.org/wiki/BT_Group

Pub. date

Ongoing (community-maintained)

Verified

22 Jul 2026

Confidence / reliability note

Not used as evidence - community-editable; replaced by primary BT/Openreach sources and independent corroboration for the facts it originally supported

2

Tier

Tier 1

Source title/document

BT Newsroom - press release: BT launches a new managed SASE service powered by Fortinet

URL

newsroom.bt.com/bt-launches-a-new-managed-sase-service-powered-by-fortinet/

Pub. date

27 Nov 2024

Verified

22 Jul 2026

Confidence / reliability note

High

3

Tier

Tier 2

Source title/document

Comms Business - BT launches new managed SASE service (independent trade-press reporting)

URL

commsbusiness.co.uk/content/news/bt-launches-new-managed-sase-service

Pub. date

21 Oct 2025

Verified

22 Jul 2026

Confidence / reliability note

High (named independent trade-press outlet, original reporting)

4

Tier

Tier 2

Source title/document

Computer Weekly - BT unveils managed SASE service (independent trade-press reporting)

URL

computerweekly.com/news/366616338/BT-unveils-managed-SASE-service

Pub. date

Undated (2024-2025)

Verified

22 Jul 2026

Confidence / reliability note

High (named independent trade-press outlet, original reporting)

5

Tier

Tier 1

Source title/document

BT Business - SD-WAN & SASE Solutions overview page

URL

business.bt.com/networks-digital-services/sd-wan-sase/

Pub. date

Undated

Verified

22 Jul 2026

Confidence / reliability note

High

6

Tier

Tier 1

Source title/document

BT Business - Managed SASE Solutions page (sector-specific positioning: retail, financial services, public sector; SASE cloud node architecture)

URL

business.bt.com/networks-digital-services/sd-wan-sase/sase/

Pub. date

Undated

Verified

22 Jul 2026

Confidence / reliability note

High

7

Tier

Tier 3

Source title/document

Netify - Managed Service Providers Comparison 2026 (independent Netify research; BT positioned as largest UK managed network/security provider; multi-platform confirmation: Cisco Meraki, Versa, Fortinet, Meraki SASE; BT Security MDR; HSCN accreditation)

URL

netify.co.uk/managed-service-providers-comparison-2026/

Pub. date

25 Jun 2026

Verified

22 Jul 2026

Confidence / reliability note

Medium-High (Netify's own published, dated, structured comparative research - treated as a credible secondary source consistent with the same evidentiary standard applied to other independent comparison platforms in this profile series)

8

Tier

Tier 3

Source title/document

Netify SASE Marketplace - BT Business / BT Global capability profile (independent Netify research; 40-feature evidence-graded capability card, reviewed 2026-05-22; dual-hub/diverse last-mile design, Openreach-adjacent last mile, owned core, quote-based commercial model)

URL

sase.netify.co.uk/vendors/bt-business

Pub. date

22 May 2026

Verified

22 Jul 2026

Confidence / reliability note

Medium-High (Netify's own published, dated, evidence-graded capability profile - treated as a credible secondary source consistent with the same evidentiary standard applied to other independent comparison platforms in this profile series)

9

Tier

Tier 1

Source title/document

Business Wire (via wire-distribution mirror) - VMware SASE Launched by BT As A Managed Service (historical, 2022 VMware-based managed SASE launch; 150+ PoP global network reference)

URL

markets.financialcontent.com/observerreporter/article/bizwire-2022-1-20-vmware-sase-launched-by-bt-as-a-managed-service

Pub. date

20 Jan 2022

Verified

22 Jul 2026

Confidence / reliability note

High (vendor-issued release, wire-distributed; historical - describes an earlier VMware-based offering distinct from the current, confirmed Fortinet-based managed SASE service)

10

Tier

Tier 3

Source title/document

Umbrex - BT Group Strategy and Business Model (independent company-profile research; FY2024 segment/revenue detail, strategic priorities)

URL

umbrex.com/resources/company-profiles/bt-group-plc/

Pub. date

11 Jun 2026

Verified

22 Jul 2026

Confidence / reliability note

Medium (independent research-aggregator content - corroboration only)

11

Tier

Tier 3

Source title/document

PitchBook - BT Group 2026 Company Profile (market cap, trailing 12-month revenue, Openreach fibre-coverage detail)

URL

pitchbook.com/profiles/company/41913-82

Pub. date

21 Jul 2026

Verified

22 Jul 2026

Confidence / reliability note

Medium (company-data aggregator - corroboration only)

12

Tier

Tier 1

Source title/document

Investegate (RNS regulatory announcement) - BT Group plc: Results for the full year to 31 March 2026 (FY2026 revenue £19.7bn, adjusted EBITDA £8.2bn, profit before tax £1.4bn, capex £5.1bn, fibre-build and NPS detail)

URL

investegate.co.uk/announcement/rns/bt-group--bt.a/results-for-the-full-year-to-31-march-2026/9578811

Pub. date

27 May 2026

Verified

22 Jul 2026

Confidence / reliability note

High (primary, regulatory-filed (RNS) company financial announcement)

13

Tier

Tier 3

Source title/document

ZoomInfo - BT Group Overview & News (segment structure: Global Services, Retail, Wholesale, Openreach; named executives)

URL

zoominfo.com/c/bt-group-plc/18241240

Pub. date

1 month old at verification

Verified

22 Jul 2026

Confidence / reliability note

Medium (aggregator - corroboration only)

14

Tier

Tier 3

Source title/document

Wikipedia - Openreach (used only for facts independently corroborated elsewhere in this pass: 2006 founding, Ofcom/Enterprise Act 2002 regulatory origin, 2023/24 revenue and operating income)

URL

en.wikipedia.org/wiki/Openreach

Pub. date

Ongoing (community-maintained)

Verified

22 Jul 2026

Confidence / reliability note

Medium (used narrowly, only for specific facts cross-checked against other sources in this pass - not relied upon as sole evidence for any claim)

15

Tier

Tier 3

Source title/document

Forbes - BT Group | Company Overview & News (segment structure: Consumer, Enterprise, Global, Openreach, Other)

URL

forbes.com/companies/bt-group/

Pub. date

24 Jun 2026

Verified

22 Jul 2026

Confidence / reliability note

Medium (named, authoritative financial-data provider - corroboration only for the specific segment-structure detail cited)

16

Tier

Tier 3

Source title/document

GlobalData - BT Group Plc Company Profile (managed telecommunications, security, network and secure digital products/services portfolio description)

URL

globaldata.com/company-profile/bt-group-plc/

Pub. date

Undated

Verified

22 Jul 2026

Confidence / reliability note

Medium (company-data aggregator - corroboration only)

17

Tier

Tier 1

Source title/document

BT Business - Financial services SD-WAN case study (Agile Connect + BT Managed Fortinet Firewall; anonymised global financial-services customer)

URL

business.bt.com/insights/case-studies/financial-services-sd-wan/

Pub. date

Undated

Verified

22 Jul 2026

Confidence / reliability note

High (primary BT case study; customer identity anonymised at the customer's own request, per standard practise for this class of content)

Source reliability tiers

Tier 1 - Primary (BT / regulatory registry) -
BT's own site (BT Newsroom, BT Business, BT case studies), plus a primary, regulatory-filed (RNS) BT Group financial announcement. Used freely as evidence.
Tier 2 - Authoritative third-party -
Named, editorially-independent trade-press outlets with original reporting (Comms Business, Computer Weekly). Used freely as evidence.
Tier 3 - Secondary (corroboration only) -
Netify's own dated, structured, independent comparative research (netify.co.uk and sase.netify.co.uk - treated with the same evidentiary standard applied to any other independent comparison platform in this profile series), company-data aggregators (Umbrex, PitchBook, ZoomInfo, Forbes, GlobalData), and Wikipedia's Openreach entry (used narrowly, only for specific facts cross-checked against other sources). Used only to corroborate, never as sole evidence for a claim that materially affects a buyer recommendation.
Tier 4 - Not used as evidence -
Wikipedia's BT Group entry specifically. Not cited as support for any factual claim in this profile; retained in the register only for audit-trail transparency about what was found and consciously not relied on, replaced instead by primary BT sources and independent corroboration.

Reference Architecture / Deployment Diagram Description

Typical BT Managed SASE deployment flow, suitable for later visual production:

  1. (1) At each site, customer-premises equipment (included within BT's confirmed managed commercial model) connects via a customer-selected mix of underlays - BT's own confirmed 'flexibility to mix different connectivity options for each of their sites' - with dual-hub and diverse last-mile designs applied as standard practise for resilience.
  2. (2) Wherever the UK last mile is involved, that connectivity runs over BT's own directly-owned Openreach access network, giving BT genuine, first-party accountability across the entire path rather than depending on a separate, third-party-owned local loop.
  3. (3) Traffic is elastically, dynamically steered by the managed SD-WAN layer (Agile Connect, delivered on Cisco Meraki or Versa) and prioritised to a SASE cloud node, avoiding public internet congestion for prioritised traffic.
  4. (4) At the SASE cloud node, the customer's chosen underlying platform - currently and predominantly Fortinet, with Meraki as a confirmed alternative - delivers firewall-as-a-service, secure web gateway, cloud access security broker, and zero-trust network access, with identity-based ZTNA access confirmed to support data-residency requirements by keeping sensitive traffic within localised data paths for regulated-sector customers specifically.
  5. (5) Network segmentation is applied throughout, confirmed directly via a real customer account, so that a breach in one area does not compromise data in other areas.
  6. (6) BT Security provides round-the-clock monitoring, AI-powered proactive threat detection, and Managed Detection and Response, feeding into BT's own confirmed unified monitoring services and giving customers centralised visibility and control across their entire infrastructure and security posture.
  7. (7) The whole estate is managed by BT by default under a single commercial contract combining access, CPE, and the chosen vendor stack together, with a confirmed co-managed option available for buyers wanting more direct operational involvement, subject to a RACI split that should be confirmed directly rather than assumed.

Source document: BT_ManagedSASE_Profile.docx

Document identity
SHA-256
0489ff6960aec560d4da636b2874baf57e6e168b61e1f8d04ec0179bdb615f2d
Original paragraphs
2138
Original tables
22
Build your shortlist