{"contract_version":"provider-public/1.0.0","page":"https://netify.co.uk/marketplace/","generated_at":"2026-09-02T16:14:23.287Z","last_reviewed":"2026-09-01T20:20:11.364Z","provider_count":30,"providers":[{"slug":"att","name":"AT&T Inc., operating this service via AT&T Business, with managed SASE delivered on named platforms from Cisco and Palo Alto Networks, and a genuinely long-established SD-WAN infrastructure heritage with Juniper Networks","provider_types":["managed_service_provider","carrier_network_provider"],"primary_geographies":[],"summary":"AT&T is one of the largest telecommunications companies in the United States, reporting trailing-twelve-month revenue of approximately $120.7 billion as of Q1 2026, with fixed-line enterprise services (including the SD-WAN and SASE proposition covered in this profile) accounting for roughly 14% of total revenue. AT&T’s SASE strategy is built on two named, current, dated technology partnerships. The first is a distinctive, dated ‘industry first’ claim: independent trade-press coverage confirms AT&T became the first North American service provider to offer Cisco’s single-vendor SASE platform to its business customers, a fully managed service combining SD-WAN, secure service edge observability, automated security workflows, multicloud connectivity, and network management. That same coverage cites Dell’Oro Group data showing single-vendor SASE platform deployments grew 21% year-over-year, materially outpacing the 3% growth seen in multi-vendor SASE platforms - dated market context reinforcing why this specific partnership choice is a meaningful positioning claim rather than a routine vendor announcement. The second named partnership, with Palo Alto Networks, was recently expanded to bring two new managed offerings to market - AT&T Dynamic Defence with Palo Alto Networks and AT&T SASE with Palo Alto Networks - integrating Prisma SD-WAN and Prisma Access into a unified, fully managed SASE stack, with AT&T’s own materials additionally confirming a forward-looking, technically sophisticated claim: a stated path to quantum resilience across both offerings. AT&T’s underlying network-virtualization heritage runs deeper still: a real, detailed case study published directly by Juniper Networks confirms a partnership dating to 2009, describing AT&T’s next-generation SD-WAN service delivering speeds up to 10 Gbps using Juniper virtual routing and universal customer premises equipment (uCPE), building on software-defined networking and network functions virtualization capabilities AT&T introduced as far back as 2016. AT&T frames its broader connectivity and security portfolio under a Network as a Service (NaaS) philosophy that is deliberately embedded within its existing products rather than sold as a separate portfolio. As a current, worth-noting piece of corporate context, AT&T completed its acquisition of substantially all of Lumen Technologies’ Mass Markets fiber business on 2 October 2023, with convergence of that acquired footprint into the AT&T brand confirmed as actively underway (reported at 45% as of the most recent materials reviewed) - a significant, ongoing integration effort worth understanding when evaluating AT&T’s current organisational focus. No fully-named, individually-identified SD-WAN or SASE customer case study was found published directly by AT&T in our research; the most detailed, specific evidence located instead comes from the confirmed Juniper Networks case study describing AT&T’s own infrastructure evolution as a Juniper customer.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:14:53.262Z","profile_url":"https://netify.co.uk/marketplace/att/","record_url":"https://netify.co.uk/api/provider-knowledge/att/"},{"slug":"aryaka","name":"Aryaka Networks, Inc., operating this platform as Aryaka Unified SASE as a Service (formerly branded around WAN-as-a-Service and Aryaka ONE)","provider_types":["technology_vendor"],"primary_geographies":[],"summary":"Aryaka is one of the older, more established names in this category - founded 2009, more than 15 years before ‘SASE’ existed as an analyst-defined term, originally as a WAN optimisation and application-acceleration company before evolving into what it now calls ‘Unified SASE as a Service’. That specific phrase matters: Aryaka positions itself, and is described by independent commentary, as the first company to deliver SASE as a fully managed service rather than a self-managed software platform, built around a distinctive single-pass architecture (OnePASS) running over an owned, global private core network spanning more than 40 points of presence across six continents. The company remains privately held, having raised between $186 million and $264 million across multiple funding rounds depending on the source consulted, with investors including Nexus Venture Partners, Goldman Sachs Growth Equity, and Trinity Ventures; it acquired the German cloud-security company Secucloud in 2021, giving it a Hamburg office alongside its Santa Clara headquarters and Bengaluru and Singapore operations. Shailesh Shukla, formerly a VP/GM at Google Cloud Networking and Cisco, serves as current CEO and Chair of the Board. The evidence base for this vendor is stronger than most in this category on two specific fronts: real, named customer case studies (Albemarle Corporation, a Fortune 1000 chemicals producer, among them) and real, dated, quantified analyst validation - a 2025 Forrester Consulting study found an average 113% ROI with a payback period under six months, and Aryaka was named a G2 Leader for Fall 2025, ranked #1 in the SASE category specifically among more than 80 vendors evaluated. Aryaka also discloses more pricing detail than most vendors in this category, with a March 2023 press release stating entry pricing ‘under $150/site’ for smaller-enterprise offerings - though this figure is now several years old and should be verified as current before being relied on directly. This profile found no confirmation of FedRAMP, SOC 2, or ISO 27001 certification in the sources reviewed, a specific gap worth flagging directly for any buyer with formal compliance-attestation requirements.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:14:49.266Z","profile_url":"https://netify.co.uk/marketplace/aryaka/","record_url":"https://netify.co.uk/api/provider-knowledge/aryaka/"},{"slug":"bt","name":"BT","provider_types":["managed_service_provider","carrier_network_provider"],"primary_geographies":[],"summary":"BT is not a single-platform SASE company, but the UK’s largest telecommunications operator and managed service provider, delivering SASE as one service line within a vastly larger, publicly-listed (LSE: BT.A) group.\n\nBT’s SASE proposition is delivered under its own named managed-connectivity brand, Agile Connect, and is explicitly multi-platform rather than built on a single, proprietary technology stack: BT’s own materials and Netify’s own published research confirm managed SD-WAN delivered on Cisco Meraki and Versa, with managed SASE delivered on Fortinet and Meraki, reinforced by BT’s own Managed Detection and Response service.\n\nBT’s core differentiator is not a proprietary SASE architecture but infrastructural depth: Openreach, BT’s wholly-owned but operationally separate access-network subsidiary (established 2006 under Ofcom/Enterprise Act 2002 undertakings), gives BT direct control over one of the deepest last-mile access estates in the UK market, combined with BT’s own international core network and long-established BT Security division.\n\nCommercially, BT’s SASE offering is confirmed as quote-based with no published enterprise pricing, and buyers should confirm directly which specific underlying vendor platform (Fortinet, Meraki, or otherwise) is being proposed for their specific deployment, since BT’s own positioning is explicit that platform choice and packaging vary by customer.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T18:50:29.009Z","profile_url":"https://netify.co.uk/marketplace/bt/","record_url":"https://netify.co.uk/api/provider-knowledge/bt/"},{"slug":"barracuda-secureedge","name":"Barracuda Networks, Inc., operating this platform as Barracuda SecureEdge (with a dedicated SSE-focused sub-product, Barracuda SecureEdge Access)","provider_types":["technology_vendor"],"primary_geographies":[],"summary":"Barracuda Networks is a long-established cybersecurity company - founded 2003, initially focused on spam and virus firewalls - that has changed ownership twice in the past decade without ever settling into a stable, single corporate structure: it went public in 2013, was taken private by Thoma Bravo in 2018 for $1.6 billion, and was acquired again by KKR in 2022. SecureEdge, launched in 2023, is Barracuda’s single-vendor SASE platform, integrating Secure SD-WAN, Firewall-as-a-Service, ZTNA and Secure Web Gateway, and it now sits within Barracuda’s broader BarracudaONE umbrella alongside the company’s much older, well-established email, data, and application-protection product lines. The platform’s most distinctive architectural choice is its backbone: rather than an owned private network, SecureEdge is deployed directly from the Azure Marketplace and uses the Microsoft Global Network as its WAN backbone instead of MPLS or leased lines - a specific, checkable design decision that differs from vendors building their own private core networks. Barracuda’s positioning is explicitly MSP-first: SecureEdge ships with a multi-tenant management portal, zero-touch remote deployment, and a fixed monthly pricing model built specifically for managed service providers reselling it to their own customers, reinforced by a named, dated partner-of-the-year recognition (CompassMSP, 2024). An independent, editorially-independent review (eSecurity Planet) specifically credits Barracuda with ‘some of the best transparency into the components and licensing in the SASE market’ - a rare compliment in this category, backed by real, specific, if third-party-estimated, component pricing figures rather than a complete commercial black box. The evidence base has real limits worth stating plainly: no independent, organic customer reviews had been collected on a major third-party review platform (PeerSpot) as of the most recent snapshot found in our research, and this profile found no confirmation that SecureEdge itself - as distinct from the underlying cloud hosting infrastructure it runs on - holds direct FedRAMP, ISO 27001, or HIPAA certification.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:14:56.747Z","profile_url":"https://netify.co.uk/marketplace/barracuda-secureedge/","record_url":"https://netify.co.uk/api/provider-knowledge/barracuda-secureedge/"},{"slug":"cato-networks","name":"Cato Networks Ltd. (trading and profile display name: Cato Networks)","provider_types":["technology_vendor"],"primary_geographies":[],"summary":"Cato Networks is frequently scored by us at Netify as being one of the easiest platforms to actually use, and they’re often considered a more integrated offering than most of the competition, which is primarily down to building their SASE solution from the ground up rather than bolting security onto an existing networking product, or the other way round. If you’re looking to collapse a fragmented maze of legacy firewalls, MPLS circuits, and point-product security tools into a single, cloud-native operational plane, Cato is one of the more compelling single-vendor SASE offerings on the market, though its middle-mile-centric architecture and fairly opaque licensing model mean it requires careful commercial scoping before you commit to anything, and that’s worth planning for early rather than discovering halfway through procurement.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:15:00.082Z","profile_url":"https://netify.co.uk/marketplace/cato-networks/","record_url":"https://netify.co.uk/api/provider-knowledge/cato-networks/"},{"slug":"checkpoint","name":"Check Point Software Technologies Ltd. (parent, NASDAQ: CHKP), operating this platform as Check Point SASE Platform (formerly Harmony SASE, formerly Perimeter 81)","provider_types":["technology_vendor"],"primary_geographies":[],"summary":"Check Point’s SASE platform has been through two names in under three years. The underlying technology began life as Perimeter 81, an independent Israeli SSE/ZTNA vendor founded in 2018 that had grown to more than 3,000 customers and a Forrester Zero Trust Wave recognition before Check Point Software Technologies - the much larger, long-established Israeli cybersecurity vendor behind Check Point Firewall-1, founded in 1993 - acquired it for approximately $490 million in a deal announced September 2023. The acquired product was rebranded Harmony SASE, integrated into Check Point’s four-pillar Infinity Architecture (Harmony for users, CloudGuard for cloud, Quantum for network, and the Infinity management layer), and has since been rebranded again to ‘Check Point SASE Platform’ as of the most recent primary materials found in our research. Check Point brings scale and financial stability to this relationship - the parent company reported $2.333 billion in FY2025 revenue with $836 million in GAAP net income, a materially profitable, stable financial position. The platform’s clearest current strength is a credible piece of independent, comparative third-party validation: Miercom, an independent security-testing firm, evaluated Check Point directly against Zscaler, Palo Alto Networks, Cisco and Fortinet across ten real-world enterprise use cases in 2024 and found Check Point led on security efficacy, administrative and user experience, and zero-trust implementation, with a specific, dated malware-blocking figure of 99% against a range as low as 74% for other vendors tested. Compliance is well-documented and specific - SOC 2 Type 2, ISO 27001/27002, GDPR, HIPAA, HITRUST, and alignment with more than 40 CIS Safeguards across 11 of 18 CIS Controls are all confirmed directly by Check Point’s own materials. Commercially, pricing is not published, consistent with the standard pattern in this product category, and independent review data (Gartner Peer Insights specifically) includes a worth-noting caution that per-user licensing costs can outpace comparable VPN alternatives at scale.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:15:03.662Z","profile_url":"https://netify.co.uk/marketplace/checkpoint/","record_url":"https://netify.co.uk/api/provider-knowledge/checkpoint/"},{"slug":"cisco","name":"Cisco Systems, Inc. (trading and profile display name: Cisco; SASE portfolio branded Cisco SASE, spanning Cisco Secure Access, Cisco Catalyst SD-WAN, Meraki SD-WAN and Cisco Secure Connect)","provider_types":["technology_vendor"],"primary_geographies":[],"summary":"Cisco’s own materials describe SASE explicitly as ‘a journey - you can start with SD-WAN or SSE and converge over time’, which is a different pitch to Cato’s, Zscaler’s, Netskope’s or Palo Alto’s single-platform-from-day-one story. In practise, ‘Cisco SASE’ means choosing between Cisco Secure Access (cloud-delivered SSE, evolved from Cisco Umbrella), Cisco Catalyst SD-WAN (the enterprise-grade fabric, formerly Viptela) or Meraki SD-WAN (the simpler, cloud-first option), and Cisco Secure Connect (a turnkey bundle of Secure Access plus Meraki SD-WAN specifically). That breadth is a strength for existing Cisco networking customers - the case-study evidence (Peco Foods, George Sink P.A., Mitchells & Butlers) is credible and specific - and a source of buyer confusion for anyone evaluating ‘Cisco’ as a single SASE product the way they would Zscaler or Netskope. Cisco’s compliance story is solid at FedRAMP Moderate (not High), and its AI investment is current - a February 2026 announcement specifically addressing agentic AI traffic and MCP visibility within SASE is one of the more recent, specific AI announcements to come out of the SASE market.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:15:06.968Z","profile_url":"https://netify.co.uk/marketplace/cisco/","record_url":"https://netify.co.uk/api/provider-knowledge/cisco/"},{"slug":"cloudflare-one","name":"Cloudflare, Inc. (trading and profile display name: Cloudflare; SASE platform branded Cloudflare One, previously known as Cloudflare Zero Trust)","provider_types":["technology_vendor"],"primary_geographies":[],"summary":"Rather than building a security platform and adding network reach, or building a network and adding security, Cloudflare started as one of the internet’s largest content-delivery and DDoS-mitigation networks (founded 2009, public since 2019 on NYSE: NET) and extended that same global infrastructure - every product running in every data centre, not routed to a handful of regional security hubs - into a full SASE platform. That architecture is the platform’s clearest, most defensible claim: Cloudflare states it delivers full SASE from more than 300 cities, which it describes as more than three times the footprint of other SASE vendors, with sub-50-millisecond reach to 95% of the world’s internet-connected population. Independent analyst recognition is real but specific in kind - Cloudflare was named a Visionary (not a Leader) in Gartner’s 2023 Magic Quadrant for Single-Vendor SASE (Cloudflare named a Visionary), was named a Strong Performer in The Forrester Wave™: Zero Trust Platforms, Q3 2023, and was named a Leader in a separate IDC assessment of worldwide edge delivery services - a strong but nuanced picture worth stating precisely rather than rounding up to a generic ‘industry leader’ claim. Compliance is well-documented at the corporate level (ISO 27001 and SOC 2 Type II since 2019, ISO 27701 as one of the first companies in the industry, PCI DSS Level 1) and Cloudflare for Government has held FedRAMP Moderate authorization since 2022, spanning more than 30 US-based data centres running the full authorized stack on a single control plane - a distinctive architecture compared to hyperscalers with only a handful of data centres in their FedRAMP boundary. FedRAMP High authorization was achieved and publicly announced in May 2025. Commercially, this is one of the few vendors in this category with real, published, self-service pricing - a free tier for up to 50 users and a flat $7 per user per month Pay-as-you-go tier with no bandwidth or per-connector charges, confirmed consistently across multiple independent sources - though Enterprise-tier bundled pricing is reported to obscure individual product costs once a buyer moves beyond self-service.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:15:10.219Z","profile_url":"https://netify.co.uk/marketplace/cloudflare-one/","record_url":"https://netify.co.uk/api/provider-knowledge/cloudflare-one/"},{"slug":"colt","name":"Colt Technology Services Group Ltd., delivering managed SD-WAN and SASE under the Colt SASE Gateway brand, built on a confirmed, long-standing Versa Networks partnership, with a secondary, technically-validated Zscaler SSE option","provider_types":["carrier_network_provider"],"primary_geographies":[],"summary":"Colt Technology Services is a long-established, European-anchored network operator, founded in 1992 as City of London Telecommunications and headquartered in London. Since 2015 Colt has been privately owned by Fidelity International (Eight Roads’ current specific role to be reconfirmed), and its network footprint expanded materially through a significant acquisition of Lumen Technologies’ Europe, Middle East and Africa business for $1.8 billion, completed November 2022, reinforcing Colt’s own confirmed network scale of more than 30 countries, more than 50 metropolitan area networks, and more than 32,000 on-net buildings, all delivered over its own named Colt IQ Network platform. There is a significant, recent security incident worth acknowledging upfront: in August 2025, Colt experienced a ransomware cyberattack in which the attacker was confirmed able to access customer data, disrupting services; Colt’s own recovery efforts were confirmed complete by late November 2025. Given that Colt’s core proposition is precisely SD-WAN and SASE security services, this incident is directly, materially relevant to any buyer’s trust assessment. Turning to the product itself, Colt’s SASE and SD-WAN proposition centres on a confirmed, long-standing partnership with Versa Networks, reinforced by a named, dated executive quote from Versa’s own Chief Revenue Officer, Martin Mackay. The resulting Colt SASE Gateway solution combines Versa Secure Web Gateway with Colt SD WAN Remote Access (built on Versa Secure Access), while Colt’s own technical documentation additionally, and specifically, discloses that a Zscaler SSE solution has been separately, technically validated for at least one connectivity option - confirming a second, distinct SASE security platform relationship beyond Versa, albeit with an honestly-disclosed, current limitation that Versa SASE itself was not yet validated for that same specific connectivity configuration as of the most recent technical documentation reviewed. Colt further confirms a named, distinct wireless connectivity partner, Blue Wireless, providing managed cellular (4G/5G) CPE as part of a named ‘Partner IP Access’ product. Real, verbatim Gartner Peer Insights customer reviews confirm quantified deployment experience - one reviewer describes replacing a named previous provider (SFR) across almost 300 network access points - alongside positive commentary on delivery reliability and pricing stability. Colt’s own current materials additionally confirm forward-looking, dated 2026 initiatives, including a Quantum Key Distribution collaboration with Eurofiber and an agentic AI quoting engine developed with Microsoft, plus a fourth consecutive Platinum EcoVadis ESG medal. Colt’s own materials, cross-checked in this pass, confirm ISO 27001 and GDPR compliance, though our research did not locate a primary Colt Trust Centre page with the same level of direct, itemised certificate-scope and audit-date detail this profile generally seeks to confirm.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:15:13.456Z","profile_url":"https://netify.co.uk/marketplace/colt/","record_url":"https://netify.co.uk/api/provider-knowledge/colt/"},{"slug":"comcastbusiness","name":"Comcast Business, delivering managed SD-WAN and SASE built on the acquired Masergy technical foundation, a subsidiary/business segment of Comcast Corporation","provider_types":["managed_service_provider","carrier_network_provider"],"primary_geographies":[],"summary":"Comcast Business’s managed SD-WAN and SASE proposition traces its specialist technical foundation to Masergy, a managed SD-WAN and SASE vendor founded in 2000 in Plano, Texas, which Comcast Business acquired in 2021 to, in the words of Comcast Business’s then-President Bill Stemper, ‘instantly and dramatically amplify our growth in the global enterprise market’. At acquisition, Masergy served more than 1,400 customers across 100 countries and delivered its managed SD-WAN and SASE capability on named technology partnerships with Fortinet and Silver Peak (subsequently acquired by HPE), plus Bitglass for cloud access security broker capability specifically, per independent analyst commentary at the time. Comcast Business itself sits within Comcast Corporation, one of the largest media and telecommunications conglomerates in the United States, which reported total revenue of $121.43 billion and net income of $15.49 billion for full-year 2025; the Business Services Connectivity segment specifically - where this profile’s subject matter sits - contributed $10.24 billion of that total with a confirmed, strong Adjusted EBITDA margin of 55.9% as of the first quarter of 2026. As a piece of current, worth-understanding corporate context, Comcast Corporation is in the process of separating its linear cable television networks into an independent, separately-listed company named Versant; based on the primary materials reviewed in our research, this separation concerns Comcast’s media and cable-networks business specifically, with the Business Services Connectivity segment - including Comcast Business and its SD-WAN/SASE proposition - appearing to remain part of Comcast Corporation, though buyers should confirm this distinction directly given the major, active nature of the broader corporate separation. On the product itself, Comcast Business’s SASE proposition is now framed as a comprehensive, cloud-native offering with AI-enhanced orchestration, and is reinforced by an unusually extensive, sustained, and current body of independent analyst recognition: a Leader in Information Services Group’s (ISG) Provider Lens for Managed SD-WAN Services for the fifth consecutive year, a Leader in SASE for the second consecutive year (elevated from Challenger to Leader within ISG’s own 2025 study specifically), the number-one ranking in Vertical Systems Group’s U.S. Carrier Managed SD-WAN Services leaderboard for the second consecutive year, a named Leader in Frost & Sullivan’s 2024 Managed SD-WAN assessment across three separate named categories, and inclusion in both the 2024 Gartner Magic Quadrant for Global WAN Services and the 2023 Gartner Magic Quadrant for Managed Network Services. A distinctive, technical differentiator: Comcast Business states it was one of the first service providers certified for MEF 3.0 SASE services, with its solution confirmed to meet the MEF 70 SASE Service Attributes and Services global standard - a real, named, industry-standards-body certification distinct from general information-security frameworks. Our research did not locate direct, primary confirmation of Comcast Business’s own SOC 2 or ISO 27001 certification status specifically.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:15:17.005Z","profile_url":"https://netify.co.uk/marketplace/comcastbusiness/","record_url":"https://netify.co.uk/api/provider-knowledge/comcastbusiness/"},{"slug":"ericsson-cradlepoint","name":"Cradlepoint, Inc. - a wholly-owned subsidiary of Telefonaktiebolaget LM Ericsson (NASDAQ: ERIC) - operating this platform as NetCloud SASE (formerly marketed as NetCloud Threat Defence; the underlying company is currently undergoing an active brand transition toward full Ericsson branding as of primary materials dated into 2026)","provider_types":["technology_vendor","carrier_network_provider"],"primary_geographies":[],"summary":"Cradlepoint began in 2006 as an independent Boise, Idaho-based pioneer in cellular-first wireless WAN networking, raised more than $162 million before being acquired outright by Ericsson (NASDAQ: ERIC) in a deal announced September 2020 and closed later that year at an enterprise value of approximately $1.1 billion. That makes this platform’s identity distinctive within this product category: it sits inside one of the world’s largest telecommunications equipment manufacturers rather than a standalone security company or a private-equity-backed challenger, and its architecture reflects that heritage directly - NetCloud SASE is built cellular-first, with confirmed, specific capabilities like traffic steering based on cellular attributes and 5G standalone network slicing for guaranteed bandwidth that have no real equivalent among fixed-line-oriented competitors. The SSE half of the platform traces to Cradlepoint’s April 2023 acquisition of Ericom Software, an Israel-based cloud-security vendor whose zero-trust and browser-isolation technology became the foundation of NetCloud SASE. A specific, current, worth-flagging development: as of primary materials dated into 2026, Ericsson has begun actively transitioning the standalone ‘Cradlepoint’ brand toward full Ericsson branding, described directly in a company blog post as ‘a new chapter’ - buyers researching this vendor under either name should understand both refer to the same underlying platform and organisation. Compliance evidence here is strong: FIPS 140-3 certification is confirmed for select Cradlepoint routers, ISO 27001 was confirmed via a dated 2026 audit disclosure describing 62 controls across 10 IT services with an ‘Unmodified Opinion’ - auditor language consistent with a clean SOC-style attestation - and a specifically-named federal offering, NetCloud Federal, delivers FedRAMP High-level assurance by operating within Axon’s existing FedRAMP High-authorized cloud environment rather than requiring a separate, independent authorization. The platform confirms Remote Browser Isolation as a native, agentless capability - a checkable differentiator worth flagging directly, since this exact capability is not always shipped natively across the wider SASE/SSE category. Named case-study evidence is thinner than the platform’s other evidence areas: rather than narrative customer stories, the strongest available evidence is technographic (confirmed real-world technology usage by named companies including JBT Corporation, a $2 billion manufacturer) and a dated, named industry award (CRN’s 2023 Tech Innovator Award for NetCloud Private Networks).","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:15:20.451Z","profile_url":"https://netify.co.uk/marketplace/ericsson-cradlepoint/","record_url":"https://netify.co.uk/api/provider-knowledge/ericsson-cradlepoint/"},{"slug":"expereo","name":"Expereo International B.V. (trading as Expereo), delivering managed SD-WAN and SASE built on a Global Internet underlay philosophy and a confirmed, named Cato Networks SASE partnership","provider_types":["managed_service_provider","carrier_network_provider"],"primary_geographies":[],"summary":"Rather than owning last-mile or backbone infrastructure directly, Expereo positions itself explicitly as an internet-connectivity aggregation and optimisation specialist, describing itself as a ‘world-leading Managed Network as a Service provider’ built around a ‘Global Internet’ underlay philosophy - the consistent, repeated framing across its own materials is that a strong internet underlay, not owned physical infrastructure, is the essential foundation for effective SD-WAN and SASE. Founded in Amsterdam in 2004, Expereo has passed through a complex, multi-owner private-equity history: acquired by The Carlyle Group in July 2014, sold to Apax Partners in May 2018, and majority-acquired by Vitruvian Partners, a European growth-equity firm, in February 2021; PitchBook’s most recent data additionally names Altaroc Partners and Seven2 as current investors alongside Vitruvian. Under Vitruvian’s ownership, Expereo pursued an active acquisition strategy, including Comsave, Videns IT Services, Brodynt Global Services, and Breeze Networks (completed 2022). On the product side, Expereo launched managed SD-WAN in 2018 via a partnership with Cisco and Viptela, followed in 2019 by expereoOne, a web-based network visibility and management platform that remains central to Expereo’s proposition today - most recently enhanced in February 2026 with a new Digital Case Management capability, launched at CiscoLive Amsterdam. For SASE specifically, Expereo confirmed a direct, named partnership with Cato Networks in July 2022, with a named Expereo executive (Luc van de Leijgraaf, Director Partner Sales) describing the move as combining Expereo’s ‘EDGE service portfolio’ with its ‘Connect and Cloud services’ to secure both underlay and overlay. In 2024, Expereo launched an Enhanced Internet product and became an authorised reseller of Starlink’s Low Earth Orbit satellite services - a distinctive, current capability. Expereo’s own materials consistently and repeatedly claim a substantial global footprint - trusted partner to 60% of Fortune 500 companies, powering enterprise and government sites in more than 190 countries via more than 2,300 partners - a specific, quantified claim reinforced consistently across multiple, independently-dated press releases rather than appearing only once. Compliance evidence is direct and confirmed: Expereo’s own ESG page states plainly, ‘we are proud to be ISO 27001 certified.’ Our research located two real, detailed, named, independently-corroborated customer case studies, both involving different divisions of the same major global group, Kingspan: Kingspan Insulation (90 sites across 28 countries, named executive quote from Liam Waters, Divisional IT Operations Manager) and Kingspan Light, Air + Water (100 sites worldwide, named executive quote from Fergal Moore, Divisional Head of Infrastructure & Cyber Security) - strong, specific, corroborated customer evidence.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:15:23.742Z","profile_url":"https://netify.co.uk/marketplace/expereo/","record_url":"https://netify.co.uk/api/provider-knowledge/expereo/"},{"slug":"forcepoint","name":"Forcepoint LLC (trading and profile display name: Forcepoint; platform branded Forcepoint Data Security Cloud, formerly Forcepoint ONE)","provider_types":["technology_vendor"],"primary_geographies":[],"summary":"Forcepoint’s identity traces back to Websense, founded in 1994, and its whole platform is built around a data-first philosophy rather than a network- or device-first one - the pitch is that policy should follow the data itself, not the network path or the device it happens to be on. That heritage shows up as real, credible analyst recognition specifically for data loss prevention: Frost & Sullivan’s Global DLP Company of the Year for two consecutive years, an IDC MarketScape Leader placement for worldwide DLP in 2025, and a Forrester Wave Strong Performer placement for data security platforms in Q1 2025. Two structural facts are worth understanding precisely before evaluating this vendor for SASE specifically. First, Forcepoint’s government and critical-infrastructure business was sold to TPG in October 2023 and rebranded Everfox in January 2024 - the FedRAMP authorization achieved in 2022 was championed by the team that went with that divestiture, and our research found no confirmation that the current commercial entity’s platform retains an equivalent authorization today, which is an important open question for any regulated-sector buyer. Second, the flagship platform was rebranded from ‘Forcepoint ONE’ to ‘Data Security Cloud’ in 2025, alongside the Getvisibility acquisition (announced April 2025) adding AI-driven data classification - a change that a third-party research source describes as part of a broader strategic step back from full SASE/SSE platform positioning toward a narrower, more data-security-centric one. The underlying SASE-relevant components (SWG, CASB, ZTNA, and the separately-branded FlexEdge Secure SD-WAN) are still actively marketed and were recognised in Gartner Peer Insights’ 2024 SD-WAN Voice of the Customer awards, so this shift should be understood as a change in strategic emphasis rather than a confirmed product withdrawal - but it’s a real, current, worth-flagging signal for anyone evaluating Forcepoint specifically as a full SASE platform rather than a data-security platform with SASE-adjacent components.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:15:27.208Z","profile_url":"https://netify.co.uk/marketplace/forcepoint/","record_url":"https://netify.co.uk/api/provider-knowledge/forcepoint/"},{"slug":"fortinet-fortisase","name":"Fortinet, Inc. (trading and profile display name: Fortinet; SASE product line branded FortiSASE)","provider_types":["technology_vendor"],"primary_geographies":[],"summary":"FortiSASE runs the same FortiOS operating system, and the same single-pass inspection engine, that has powered Fortinet’s physical FortiGate firewalls for over two decades. That’s a meaningfully different starting point from building a SASE platform natively for the cloud from scratch - the practical result is that FortiGate customers get a consistent policy and inspection model whether traffic is inspected on-premises or in a FortiSASE cloud point of presence, and Fortinet’s own commercial materials lean hard into a ‘Security Fabric’ discount for exactly these existing customers. Fortinet is also unusually forthright about its scale: it describes itself as the number-one firewall vendor by unit market share (55% as of fiscal year 2025), and backs that with a claim of ‘significantly lower total cost of ownership than the competition’ directly from its own CEO. The compliance picture is a mixed bag worth understanding precisely - Fortinet has GovRAMP (formerly StateRAMP) authorization at the Moderate impact level for two named services, but as of its own April 2025 announcement was still describing FedRAMP itself as a future intention rather than an achieved authorization, and no FortiSASE-specific FedRAMP Marketplace listing was found in our research. Commercially, FortiSASE pricing is opaque like most of the category, but two independent analyses converge on a distinctive finding: existing FortiGate customers get a documented 20-25% discount on FortiSASE specifically, which is Fortinet’s most concrete, quantifiable competitive argument for its installed base.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:15:30.599Z","profile_url":"https://netify.co.uk/marketplace/fortinet-fortisase/","record_url":"https://netify.co.uk/api/provider-knowledge/fortinet-fortisase/"},{"slug":"gtt","name":"GTT Communications, Inc., delivering managed SD-WAN and SASE under the Secure Connect brand, built on the named GTT Envision orchestration platform and two named technology partnerships: Palo Alto Networks and HPE","provider_types":["hybrid_provider"],"primary_geographies":[],"summary":"GTT Communications is a specialist, purely networking-and-security-focused global provider rather than a diversified telecom conglomerate with mobile, broadband, and media businesses attached. Founded in 1998, listed on the NYSE in 2013, renamed GTT Communications in January 2014, and now headquartered in Arlington, Virginia, GTT operates a global Tier 1 IP backbone spanning more than 600 points of presence and connecting more than 3,500 cities. GTT’s corporate history includes significant, worth-understanding financial complexity: the company’s largest acquisition, Interoute Communications for $2.1 billion in 2018, substantially expanded its European fibre footprint, but was followed by a major divestiture of EXA Infrastructure to I Squared Capital for $2.15 billion, completed in September 2021, and independent trade-press reporting confirms GTT was delisted from the New York Stock Exchange in August 2021 for failing to file quarterly and annual results, followed by a Chapter 11 bankruptcy filing in September 2021 and emergence in December 2022; the company’s shares currently trade over-the-counter under the ticker GTTN. Despite this corporate-financial history, GTT’s underlying operating business generated consolidated revenues of approximately €427.7 million in 2023, with a 2024 target of €600 - 640 million and to win significant new enterprise business - evidenced directly by a real, detailed, extensively-corroborated case study in which Radisson Hotel Group selected GTT Secure Connect (SASE) to secure its global network spanning more than 800 hotels and offices across Asia-Pacific, Europe, the Middle East and Africa, with a named quote from Radisson’s own Senior Vice President and CIO, Adolfo Sanchez. GTT’s SASE and SD-WAN proposition, branded Secure Connect, is delivered via GTT’s own named orchestration platform, GTT Envision (comprising EnvisionCORE, EnvisionEDGE, and EnvisionDX components), and is built on two named, independently-confirmed technology partnerships each described directly as spanning more than a decade: Palo Alto Networks, recently expanded to incorporate single-vendor Prisma SASE, and HPE, recently expanded to add HPE Aruba Central, HPE Networking EdgeConnect SD-WAN, and HPE Networking Security Service Edge. GTT confirms a specifically-named, distinctive technical claim - pioneering the use of Resource Public Key Infrastructure (RPKI) for secure internet routing, described directly as ‘a first among global Tier 1 operators’ - alongside extensive, dated, multi-body analyst recognition: a Leader in Frost & Sullivan’s 2025 Frost Radar for Managed SD-WAN in North America (published November 2025), a Leader in Managed SD-WAN in the UK and Germany by Information Services Group (ISG) for the third consecutive year, and top-tier customer satisfaction ratings across multiple named European markets reported by Whitelane Research. GTT directly confirms holding an ISO 27001:2022 certification for its Information Security Management System, though our research found no direct confirmation of GTT’s own SOC 2 attestation status specifically, despite general SOC 2 content appearing on the same compliance page.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:15:33.929Z","profile_url":"https://netify.co.uk/marketplace/gtt/","record_url":"https://netify.co.uk/api/provider-knowledge/gtt/"},{"slug":"hpe-aruba-edgeconnect","name":"Hewlett Packard Enterprise Company (parent, NYSE: HPE), operating this platform under the HPE Aruba Networking business unit; the converged SASE platform is branded HPE Aruba Networking Unified SASE, combining HPE Aruba Networking EdgeConnect SD-WAN (formerly Silver Peak) and HPE Aruba Networking SSE (formerly Axis Security)","provider_types":["technology_vendor"],"primary_geographies":[],"summary":"HPE Aruba Networking’s SASE platform is a product of acquisition and integration rather than a single, from-scratch build. The SD-WAN engine, EdgeConnect, was built by Silver Peak Systems (founded 2004, first SD-WAN product shipped 2015) and joined HPE’s Aruba business in a $925 million acquisition completed September 2020. The security half of the platform, HPE Aruba Networking SSE, was previously an independent company called Axis Security before its own acquisition and rebrand. And the parent company itself, Hewlett Packard Enterprise, completed an enormous, contested acquisition of its own in July 2025 - a $14 billion purchase of Juniper Networks, cleared only after a Department of Justice antitrust lawsuit and settlement that required HPE to divest its Instant On WLAN business and licence Juniper’s Mist AIOps source code to competitors. That acquisition is directly relevant here: Juniper’s own SASE-relevant products now sit under the same parent company as EdgeConnect, which is an important fact for any buyer thinking that choosing between different vendor logos automatically means diversifying their supplier base. On its own merits, EdgeConnect’s SD-WAN engine has real, sustained, independent recognition - a consistent Leader in Gartner’s Magic Quadrant for WAN Edge Infrastructure in every report up to its discontinuation after 2022 - and the platform’s architecture supports a distinctive dual path: tight, single-vendor integration with HPE’s own SSE, or a confirmed, named best-of-breed approach integrating with third-party security vendors (Zscaler, Cheque Point, Forcepoint, Netskope, Palo Alto Networks and others) via automated, orchestrated IPsec tunnels. HPE’s own compliance programme is broad and well-documented at the corporate level (global ISO 27001 certification across 90+ sites in 40 countries, SOC 1/SOC 2 attestation), and HPE Aruba Networking Central was, per HPE’s own claim, one of the first networking vendors to achieve FedRAMP High authorization for an entire cloud networking platform (achieved January 2022).","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:15:37.451Z","profile_url":"https://netify.co.uk/marketplace/hpe-aruba-edgeconnect/","record_url":"https://netify.co.uk/api/provider-knowledge/hpe-aruba-edgeconnect/"},{"slug":"juniper","name":"Juniper Networks, Inc. (formerly NYSE: JNPR, now a wholly-owned subsidiary of Hewlett Packard Enterprise Company, operating as HPE Juniper Networking); the SASE-relevant products are branded Juniper Secure Edge (SSE) and Juniper AI-Native SD-WAN (powered by Session Smart Routing), unified via Juniper Mist AI and Security Director Cloud","provider_types":["technology_vendor"],"primary_geographies":[],"summary":"Suitability Matrix: Who Should (and Shouldn't) Buy Juniper Secure Edge","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:18:52.652Z","profile_url":"https://netify.co.uk/marketplace/juniper/","record_url":"https://netify.co.uk/api/provider-knowledge/juniper/"},{"slug":"lumen","name":"Lumen Technologies, Inc., delivering managed SD-WAN and SASE on a single, deeply-integrated named technology partnership with Versa Networks","provider_types":["technology_vendor","managed_service_provider","carrier_network_provider"],"primary_geographies":[],"summary":"Lumen Technologies has just completed a corporate transformation - on 21 May 2025, Lumen announced the sale of its Mass Markets fiber-to-the-home business - including its Quantum Fiber consumer brand, serving more than 1 million subscribers across 11 states - to AT&T for $5.75 billion in cash, a transaction that closed on 2 February 2026. Lumen’s own CEO, Kate Johnson, described the deal directly as marking the company’s transformation into ‘a Pure Play Enterprise-Focused Technology Infrastructure Company’, retaining its national, regional, state, and metro fiber backbone specifically to support that enterprise focus while divesting the consumer-facing business entirely. Enterprise services now account for approximately 85-90% of Lumen’s total revenue, which totalled $12.4 billion for full-year 2025, alongside a $1.7 billion net loss and $3.4 billion in Adjusted EBITDA; sale proceeds were used to reduce total debt by $4.8 billion. Lumen’s SD-WAN and SASE proposition - the subject of this profile - is now central to the company’s stated strategic identity, rather than one product line within a much larger, consumer-weighted business. Lumen delivers this proposition on a single, deeply-integrated named technology partnership with Versa Networks, described directly in Lumen’s own documentation as ‘our partner company’ - a close, singular-partner framing rather than a multi-platform strategy. The resulting SASE portfolio includes Versa Secure Private Access (VSPA) for user-centric remote-workforce security, converged SD-WAN and Next-Generation Firewall services, and a specifically-named, dated, independent analyst recognition: Frost & Sullivan’s 2024 Customer Value Leader award for the Global Managed SASE Service Industry. Lumen additionally maintains a specifically-named threat-intelligence organisation, Black Lotus Labs, positioned within a broader Lumen Connected Security ecosystem - a distinctive, named research capability. Compliance evidence is strong and directly confirmed: Lumen’s own Trust Centre page confirms SOC 1, SOC 2, ISO 27001, PCI DSS support (via customer-facing QSA-issued Reports on Compliance), and a NIST Federal Controls Assessment Confirmation Letter, reinforced by a real, independent case study published by accredited assessor Schellman describing Lumen’s own compliance-programme operations directly, including a named, quoted Lumen compliance manager. Our research also located multiple named individual customer testimonials, though buyers should note these are explicitly disclosed by Lumen itself as compensated endorsements rather than fully independent customer voices.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:19:22.385Z","profile_url":"https://netify.co.uk/marketplace/lumen/","record_url":"https://netify.co.uk/api/provider-knowledge/lumen/"},{"slug":"ntt-data","name":"NTT DATA Group Corporation, delivering managed SD-WAN and SASE via a genuinely broad, multi-vendor partner ecosystem, with confirmed named platform partnerships including Palo Alto Networks (Prisma SASE) and Fortinet (Secure SD-WAN)","provider_types":["carrier_network_provider"],"primary_geographies":[],"summary":"NTT DATA is a massive, globally-established IT services and network provider, founded in Japan in 1988 as a spinoff of Nippon Telegraph and Telephone (NTT), and now operating in more than 70 countries with approximately 190,000 employees. A significant, current corporate event is worth understanding first: on 8 May 2025, NTT, Inc. (renamed that same year from Nippon Telegraph and Telephone Corporation) launched a tender offer to acquire full ownership of NTT DATA Group Corporation, its previously partially-owned, publicly-listed subsidiary; the offer, at JPY 4,000 per share (a confirmed 41.5% premium), achieved 81.75% acceptance, and following shareholder approval on 29 August 2025, NTT DATA Group was formally delisted from the Tokyo Stock Exchange on 26 September 2025, becoming a wholly-owned subsidiary of NTT, Inc. Independent reporting values the transaction at approximately ¥2.37 trillion (around $16.5 billion), and notes this follows a similar pattern to NTT’s 2020 acquisition of its NTT Docomo mobile subsidiary. This is directly relevant context for buyers: NTT DATA is now more tightly integrated into its parent telecommunications group than at any point in its recent public-market history, and buyers should understand this recent transition when assessing organisational structure. On the product side, NTT DATA’s managed network and SASE proposition is built on a broad, multi-vendor partner ecosystem - confirmed directly as spanning more than 40 partners across 60 technologies - rather than a single, deep platform relationship. Two named, specific platform partnerships were confirmed directly in our research: Palo Alto Networks Prisma SASE, delivered via a dedicated ‘Managed Campus Networks with Prisma SASE’ product, and Fortinet Secure SD-WAN, confirmed directly as the underlying platform for a real, extensively-detailed, quantified customer deployment. NTT DATA’s own materials confirm substantial owned infrastructure - SD-WAN presence in more than 190 countries, 125,000 kilometres of undersea cable, and 500,000 square metres of data-centre space - reinforced by NTT Group’s own confirmed annual R&D investment of more than $3 billion. Analyst recognition is extensive and sustained: NTT DATA has been named a Leader in Gartner’s Magic Quadrant for Managed Network Services for the third consecutive time (2026), is separately named in Gartner’s Magic Quadrant for Global WAN Services, and holds a Leader position in IDC MarketScape’s Asia/Pacific Managed SD-WAN/SASE Services 2024-2025 Vendor Assessment. Our research located a detailed, quantified, real customer case study: Pick n Pay, a major South African retail chain, deployed Fortinet Secure SD-WAN specifically to maintain store and payment connectivity through South Africa’s well-documented ‘loadshedding’ rolling blackouts, with NTT DATA’s own materials confirming a specific, quantified business outcome - a 1% increase in turnover within the first six months of the solution being active, corroborated consistently across at least two separate NTT DATA publications. Additional named customer references, though less detailed, include Frucor Suntory and CILE (a Belgian water utility, deployed alongside Cisco for IoT/LoRaWAN connectivity specifically). NTT DATA’s own materials directly confirm in-house PCI Qualified Security Assessor capability, and historical corporate records confirm NTT DATA was the first Japanese company to obtain BS 7799 certification (the direct predecessor to ISO 27001) in 2002, though our research did not locate a current, direct, primary confirmation of NTT DATA’s own present-day ISO 27001 or SOC 2 certification status specifically for the SD-WAN/SASE service.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:19:29.946Z","profile_url":"https://netify.co.uk/marketplace/ntt-data/","record_url":"https://netify.co.uk/api/provider-knowledge/ntt-data/"},{"slug":"netskope","name":"Netskope, Inc. (trading and profile display name: Netskope)","provider_types":["technology_vendor"],"primary_geographies":[],"summary":"Netskope sits in an interesting middle ground between a pure security-first platform and a fully networked one: unlike the likes of Zscaler, it has invested in its own converged mesh network (NewEdge) and a purpose-built SD-WAN (Borderless SD-WAN, built on the 2022 Infiot acquisition), so the ‘security company bolting on networking’ story is a few years further along than Zscaler’s; unlike Cato, that network is built on peering and interconnects across 67 regions rather than an owned private backbone. Where Netskope stands out is data-centric SSE - its Cloud Confidence Index covers 85,000+ SaaS and GenAI apps, its DLP heritage runs deep (it was arguably the original CASB/DLP-first vendor in this space), and its compliance evidence is unusually comprehensive, explicitly naming DORA, UK Cyber Essentials and FedRAMP High all from primary sources. Multiple independent pricing analyses flag Netskope’s modular licensing and add-on structure as a source of renewal-time cost surprises, so budget conversations are worth having early and in writing.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:19:26.120Z","profile_url":"https://netify.co.uk/marketplace/netskope/","record_url":"https://netify.co.uk/api/provider-knowledge/netskope/"},{"slug":"opensystems","name":"Open Systems AG, operating this platform as Open Systems SASE Experience (formerly marketed around Secure SD-WAN as a managed security service provider)","provider_types":["technology_vendor","managed_service_provider"],"primary_geographies":[],"summary":"Open Systems founded in 1990 in Basel, Switzerland, more than three decades before the SASE category itself existed, originally as a managed security service provider before evolving its platform into what it now markets as native, managed SASE Experience. The company’s ownership history took a distinctive turn in 2023: after a period under the European private-equity firm EQT, Open Systems was acquired by Swiss Post - Switzerland’s state-backed national postal and logistics institution - a materially different kind of owner from the venture-capital or private-equity structures behind most other vendors in this category. Dennis Monner was appointed CEO in late 2023, following earlier leadership under Daniel Neuhaus. The platform’s defining characteristic, repeated consistently across every source reviewed in our research, is its fully managed operating model delivered through a specifically-named service organisation, Mission Control - staffed exclusively by Level-3 engineers who complete more than 400 hours of additional internal training, providing 24x7 follow-the-sun support with a specific, quantified 8-minute ticket-escalation commitment. This is a well-evidenced vendor by the standards of this category: five real, named customer case studies were found (KEMET, Mammut, SOS Children’s Villages, Mikron, and Altana), several with specific, quantified outcomes - KEMET’s engagement is described as cutting costs by 50%, and Mammut’s WAN replacement was completed in under two months. Compliance evidence includes a confirmed, primary-sourced ISO 27001 certification, and Gartner Peer Insights data shows strong ratings - 4.8 out of 5.0 based on 70 reviews in the Security Service Edge market as of August 2026 reinforced by specific, verbatim customer quotes. A specific, worth-noting transparency point: an independent competitor comparison, citing Open Systems’ own published subprocessor statement, describes several core platform components as delivered through named third-party partners rather than fully in-house - ZTNA through Cyolo Security (Israel) and the SWG antivirus engine through Avira (Germany) - a checkable architectural detail rather than a fully native, single-vendor security stack in every respect.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:19:33.605Z","profile_url":"https://netify.co.uk/marketplace/opensystems/","record_url":"https://netify.co.uk/api/provider-knowledge/opensystems/"},{"slug":"orangebusiness","name":"Orange Business, the enterprise services arm of Orange S.A., delivering managed SD-WAN and SASE via the named Evolution Platform and a genuinely broad, multi-vendor partner ecosystem","provider_types":["carrier_network_provider","integrator"],"primary_geographies":[],"summary":"Orange Business is the enterprise services arm of Orange S.A., one of the largest telecommunications groups in Europe, headquartered in France and listed on Euronext Paris. Orange Business itself traces its lineage to Equant and Global One before being formally established on 1 June 2006, and was renamed from Orange Business Services to Orange Business on 16 February 2023; Frédéric Schepens serves as CEO (appointed July 2024), leading approximately 30,000 employees. Orange S.A.’s own H1 2026 results, reported by CEO Christel Heydemann and CFO Laurent Martinez, describe ‘record H1 2026 results’ at the Group level - revenue of €20.9 billion (up 3.5% year-on-year) and EBITDAaL of €6.1 billion (up 5.0%) - driven substantially by retail services and exceptional growth in Africa and the Middle East. One specific finding is worth being upfront about: Orange’s own H1 2026 disclosure confirms the Orange Business segment specifically declined by 3.1% during this same period, described directly as ‘continu[ing] to be impacted by a challenging market environment’ - a real, current, worth-understanding contrast with the record results posted elsewhere in the Group. Separately, Orange completed full acquisition of MasOrange (the Spanish operator) on 8 June 2026, together reflecting substantial, active corporate expansion at the Group level, alongside net financial debt of €35.7 billion (2.4x EBITDAaL) following the MasOrange transaction. On the product side, Orange Business’s SD-WAN and SASE proposition centres on the Evolution Platform, a named Network-as-a-Service architecture described directly as combining underlay connectivity, SD-WAN, SASE, and cloud connectivity ‘through simple APIs or portal’, with services available self-managed, co-managed, or fully managed. Orange Business maintains a broad, multi-platform SASE partner ecosystem - our research confirmed named, direct partnerships with Palo Alto Networks (Prisma SASE, launched via a confirmed, detailed 2023 initiative combining Prisma Access and Prisma SD-WAN with Orange Business connectivity and Orange Cyberdefense managed security), Fortinet (a confirmed, dedicated partnership integrating Fortinet’s Security-driven Networking into Orange’s own telco cloud infrastructure), and further named references to Netskope and Zscaler as SSE capability partners, reinforced by a current, dated (March 2026) Cisco Catalyst SD-WAN certification for integrated branch security. Orange Cyberdefense, Orange’s in-house security subsidiary, is confirmed to deliver managed security services in 220 countries and territories via more than 3,000 security experts, including more than 100 CISSP-certified consultants and more than 200 ethical hackers, integrating proprietary threat intelligence into Orange’s SASE deployments. Analyst recognition is extensive: ISG has named Orange a Leader across five separate research sectors (managed SD-WAN, SDN transformation services, enterprise network technology and service suppliers, edge technologies and services, and SASE solutions and services), Vertical Systems Group ranked Orange among the top three global providers of carrier-managed SD-WAN services (alongside AT&T and Verizon Business, based specifically on market share outside each provider’s home country), and Orange holds a named, dated (16 March 2026) position in Gartner’s Magic Quadrant for Global WAN Services, alongside a referenced Leader position in IDC MarketScape’s Asia/Pacific Managed SD-WAN/SASE Services assessment. Orange confirms a current, direct ISO/IEC 27001:2022 certification, reinforced by historical confirmation of being the first global ICT provider to achieve certain ISO and ISAE audit standards, with specific, named certified sites (Egypt, India, Rennes in France, and New Delhi). Our research located a real, named, detailed customer deployment: Siemens, a major global industrial conglomerate, deployed global SD-WAN with Orange Business as part of a long-standing partnership and Siemens’ own broader cloud-migration digitisation strategy, with a named Orange executive quote from John Isch, Director, Connectivity Solutions for the Americas.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:19:37.343Z","profile_url":"https://netify.co.uk/marketplace/orangebusiness/","record_url":"https://netify.co.uk/api/provider-knowledge/orangebusiness/"},{"slug":"palo-alto-prisma-sase","name":"Palo Alto Networks, Inc. (trading and profile display name: Palo Alto Networks; SASE product line branded Prisma SASE)","provider_types":["technology_vendor"],"primary_geographies":[],"summary":"Palo Alto Networks isn’t just selling SASE, it’s selling one door into a much larger security estate (NGFWs, Prisma Cloud, Cortex XDR/XSIAM, identity security) that most large enterprises already have some footprint in. That shows up directly in its differentiators: it’s one of the few vendors recognised as a Leader in all three of Gartner’s Single-Vendor SASE, SSE and SD-WAN Magic Quadrants simultaneously, and its ‘platformisation’ commercial strategy rewards multi-product commitment with steep discounts. The architecture itself is coherent - Prisma Access (built cloud-native from 2019) and Prisma SD-WAN (from the 2018 CloudGenix acquisition) share App-ID/User-ID policy and ADEM experience monitoring, all managed through one console, Strata Cloud Manager, that also runs existing on-premises firewalls. Case-study evidence is unusually strong and quantified - Grupo Bimbo’s numbers (insurance coverage doubled, MTTR cut from days to an hour, $100K/month saved in one country) are some of the best-evidenced outcomes available for this platform. The trade-off buyers should go in expecting: Prisma SASE is consistently described, across multiple independent sources, as priced at a premium versus Zscaler and Netskope, and the platform-consolidation pitch works best for buyers already invested in the wider Palo Alto ecosystem rather than those wanting a standalone SASE point solution.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:19:43.120Z","profile_url":"https://netify.co.uk/marketplace/palo-alto-prisma-sase/","record_url":"https://netify.co.uk/api/provider-knowledge/palo-alto-prisma-sase/"},{"slug":"sonicwall-cse","name":"SonicWall Inc., operating this platform as SonicWall Cloud Secure Edge (CSE), formerly Banyan Security prior to SonicWall's January 2024 acquisition","provider_types":["technology_vendor"],"primary_geographies":[],"summary":"SonicWall is one of the oldest names in network security still operating under its own brand - founded 1991 as Sonic Systems, later renamed SonicWall, and shaped by an eventful corporate history: an IPO in 1999, a return to private ownership, acquisition by Dell in 2012, and a $2 billion-plus divestiture from Dell in November 2016 that spun the company out as an independent business jointly owned by private equity firms Francisco Partners and Elliott Management, who remain its owners today. Cloud Secure Edge (CSE), the product this profile covers, has its own separate origin: it began as Banyan Security, an independent SSE vendor, before SonicWall acquired it in January 2023 specifically to round out its SASE offering, with SonicWall’s own president and CEO Mihir Shah framing the deal as extending zero-trust security ‘relied on by leading fortune 100 companies to small businesses’. The platform’s clearest, most concrete differentiator is how deliberately it is positioned to complement - rather than replace - SonicWall’s existing, much older firewall business: CSE shares threat intelligence directly with SonicWall’s Gen 7 and Gen 8 firewalls and Capture ATP, activates from a customer’s existing management portal ‘in clicks’, and bills through the same MySonicWall system alongside a buyer’s existing licenses, explicitly marketed as requiring ‘no rip-and-replace’. Compliance evidence is solid at the primary-source level for SOC 2 specifically - SonicWall’s own official technical documentation confirms SOC 2 Type 2 compliance directly, a stronger form of evidence than the third-party-inferred certifications found for some competitors in this category - with ISO 27001 additionally referenced via an independent reseller source. Case-study evidence is real and specific: a named insurance-technology company (Lemonade) and a dated, detailed 2026 case study describing a Colorado-based MSP (XimpleIT) deploying CSE across law-firm clients following an actual VPN-related security breach. Independent review data shows real, if modest, organic engagement - a 4.1-out-of-5 G2 rating from 10 verified reviews, and a PeerSpot-calculated market mindshare that grew from 0.2% to 1.0% over the year to July 2026 - if still relatively small-scale, third-party validation.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:19:46.844Z","profile_url":"https://netify.co.uk/marketplace/sonicwall-cse/","record_url":"https://netify.co.uk/api/provider-knowledge/sonicwall-cse/"},{"slug":"velocloud","name":"VeloCloud (product/brand name), currently owned and operated by Arista Networks, Inc. (NYSE: ANET); formerly VMware VeloCloud SD-WAN under Broadcom Inc. (2023-2025), and VeloCloud Networks, Inc. prior to that","provider_types":["technology_vendor"],"primary_geographies":[],"summary":"VeloCloud was founded in 2012 as a cloud-delivered SD-WAN pioneer, acquired by VMware in 2017 for approximately $336 million, then came under Broadcom’s ownership when Broadcom completed its roughly $69 billion acquisition of VMware in 2023. Under Broadcom, the product was paired with Symantec’s security stack (Broadcom separately owns Symantec’s enterprise security business) into a single-vendor offering called ‘VMware VeloCloud SASE, secured by Symantec’, announced February 2024. That combination did not last. On June 30, 2025, Arista Networks completed a $310 million cash acquisition of the VeloCloud business from Broadcom - confirmed directly in Arista’s own SEC filings - in a deal structured as an asset-and-talent carve-out that brought over the intellectual property and roughly half of VeloCloud’s approximately 1,000 employees, concentrated in engineering rather than sales and marketing. Critically, the security half of the old Broadcom-era SASE offering did not come along: Arista’s own official product notices confirm that ‘VeloCloud SASE Secured by Symantec’ is being formally end-of-sold, with Technical Assistance Centre support ending June 30, 2026. Arista’s own current, explicit strategy - stated directly by CEO Jayshree Ullal - is to build ‘simple security, encryption, segmentation, firewall’ natively into the SD-WAN edge while leaning on best-of-breed partnerships with established SSE vendors for deeper cloud-delivered security, rather than attempting to own the full SASE stack itself. An independent analyst at Dell’Oro Group has estimated that this leaves Arista covering only 30-40% of the full SASE opportunity as of the deal’s completion, with the remainder deliberately left to partners. This is not a criticism of VeloCloud’s underlying SD-WAN technology, which has a strong, long-standing reputation - it is simply the current, factual state of a vendor that has changed owners three times in under a decade and is, as of this profile’s research, mid-transition on exactly what its own security story will be.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:19:50.425Z","profile_url":"https://netify.co.uk/marketplace/velocloud/","record_url":"https://netify.co.uk/api/provider-knowledge/velocloud/"},{"slug":"verizon","name":"Verizon Communications Inc., operating this service via Verizon Business, with managed SD-WAN and SASE delivered on a choice of six named platforms: Versa Networks, Cisco (cEdge and vEdge), Zscaler (ZIA and ZPA), Palo Alto Networks Prisma Access, Fortinet, and Netskope","provider_types":["managed_service_provider","carrier_network_provider"],"primary_geographies":[],"summary":"Verizon Communications is one of the largest telecommunications companies in the world - generating $133.6 billion in revenue in 2023 (2025 consensus estimates are approximately $134-135 billion) and serving nearly all of the Fortune 500 - and its managed SD-WAN and SASE proposition sits within Verizon Business, itself organised into three named customer groups (Enterprise and Public Sector, Business Markets and Other, and Wholesale). Verizon’s SASE architecture is an extensively multi-platform proposition: its own materials confirm direct integration with Versa, Cisco (cEdge and vEdge), Zscaler (both Zscaler Internet Access and Zscaler Private Access), and Palo Alto Networks Prisma Access, with separate materials additionally confirming named partnerships with Fortinet and Netskope - six distinct, named SASE and SD-WAN technology platforms in total, integrated under Verizon’s own SASE Management umbrella, which unifies network operations centre (NOC) and security operations centre (SOC) functions across whichever underlying platform a customer selects. This breadth of named partnership is reinforced by substantial, dated, independent analyst recognition: Verizon’s own materials confirm being named a Leader in Gartner’s 2023 Magic Quadrant for Global Network Services (which includes WAN Services), extending a multi-year leadership streak, alongside being named a Leader in IDC’s MarketScape for Worldwide Managed SD-WAN/SASE Services (2023), a Leader in the 2022 Omdia Universe for Global IT Security Services, and holding Palo Alto Networks’ Most Trained Partner recognition (2022) - a deep, dated, multi-analyst body of third-party validation. Verizon’s broader managed-network portfolio includes Managed SD Branch, a distinctive product converging LAN, WLAN, SD-WAN and security under one management platform with a specific, named retail-analytics capability (customer dwell times, in-branch customer counts, checkout-line counts), managed via Verizon’s own proprietary IMPACT management ecosystem. Case-study evidence, while consistently anonymised in the sources reviewed, is specific and varied: a global manufacturer protecting sensitive data and streamlining traffic, a large healthcare business optimising security operations via a Verizon SASE deployment, and a detailed federal-agency case study confirming real-time collaboration for more than 20,000 users across 70 US locations under FedRAMP requirements, achieved by teaming directly with Cisco during the FedRAMP authorization process. As a current, worth-noting piece of corporate context, Verizon’s own recent regulatory filings confirm a joint-venture agreement with BT alongside completed acquisitions of Frontier and Starry, reflecting an active, ongoing period of strategic fibre and fixed-wireless expansion.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:19:55.150Z","profile_url":"https://netify.co.uk/marketplace/verizon/","record_url":"https://netify.co.uk/api/provider-knowledge/verizon/"},{"slug":"versa-networks","name":"Versa Networks, Inc. (trading and profile display name: Versa Networks; platform branded VersaONE Universal SASE Platform)","provider_types":["technology_vendor"],"primary_geographies":[],"summary":"Versa Networks built its SASE platform around a single-vendor, single-operating-system architecture from an early starting point - the company was founded in 2012, before the SASE category itself existed, on the thesis that legacy hardware and static WAN architectures were holding enterprises back from the cloud. That heritage shows up directly in VersaONE’s design: one operating system (VOS), one console, one policy engine and one data lake, with a single-pass parallel-processing architecture built to avoid the latency penalty of chaining separate security functions together. Versa remains privately held, backed by a well-known venture roster (Sequoia Capital, Mayfield, BlackRock among others), and is led by CEO Kelly Ahuja, with Kumar Mehta serving as Founder and Chief Development Officer. Commercially, list pricing is not published and no independent third-party pricing analysis surfaced a specific per-user figure in our research, so budget conversations should be routed to a direct quote from the outset.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:19:59.008Z","profile_url":"https://netify.co.uk/marketplace/versa-networks/","record_url":"https://netify.co.uk/api/provider-knowledge/versa-networks/"},{"slug":"virgin-media-o2","name":"Virgin Media O2 Business (brand name for SD-WAN/SASE product materials reviewed in this pass), now structurally part of O2 Daisy following the August 2025 B2B consolidation with Daisy Group","provider_types":["managed_service_provider","carrier_network_provider"],"primary_geographies":[],"summary":"Virgin Media O2 (VMO2) is itself a 50/50 joint venture between Liberty Global and Telefónica, formed in June 2021 from the merger of Virgin Media UK and O2 UK. On 12 May 2025, VMO2 announced it would combine substantially all of its direct business-to-business operations - including Virgin Media O2 Business - with Daisy Group, a long-established, independent UK B2B communications and IT provider founded in 2001. That new, combined entity, branded O2 Daisy, formally launched on 4 August 2025, is majority-owned and consolidated by VMO2 (70%) with Daisy Group holding the remaining 30%, and reports pro forma annual revenue of approximately £1.4 billion. Jo Bertram, formerly Managing Director of Virgin Media O2 Business, became CEO of the combined entity; Daisy Group founder Matthew Riley became Chairman. As of the most recent primary materials reviewed in our research, the SD-WAN and SASE product pages examined operate under the O2 Business brand (the entity formerly known as O2 Daisy, rebranded in April 2026), with Virgin Media O2 Business continuing as a legacy/sub-brand reference, and this profile presents the service under that established, customer-facing name while making the underlying O2 Daisy corporate structure explicit - buyers should confirm directly which corporate entity they are actually contracting with, given how recently this consolidation occurred. On the technology itself, Virgin Media O2 Business’s SASE proposition is built on a specific, named, independently-confirmed partnership with Zscaler, dating to at least February 2021, explicitly combining Zscaler Internet Access and Zscaler Private Access with VMO2’s own managed SD-WAN, MPLS, broadband and 4G/LTE connectivity. This is a materially different technology strategy from a multi-platform integrator model: rather than offering a choice of several named SASE vendors, VMO2’s SASE capability is confirmed as built around one specific, named cloud-security partner. Commercially, VMO2 has introduced a distinctive, named contracting model - the Success Agreement - an outcome-based commercial approach for large enterprise and public-sector customers, explicitly designed to reduce dual-running costs during technology transitions, a departure from traditional, deliverable-based managed-service contracts. Compliance evidence found in our research includes real, if secondary-sourced, confirmation of ISO 27001 and ISO 9001 certification for Virgin Media Business specifically, via named, accredited certification-body case studies, though ISO 27001 certification for Cloud Connect from Virgin Media O2 Business is confirmed via BSI accreditation dated 23/01/2022. No fully-named, individually-identified SD-WAN or SASE customer case study was found in our research.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:20:03.045Z","profile_url":"https://netify.co.uk/marketplace/virgin-media-o2/","record_url":"https://netify.co.uk/api/provider-knowledge/virgin-media-o2/"},{"slug":"vodafone","name":"Vodafone Group plc, operating this service via Vodafone Business, with managed SD-WAN delivered on Arista/VMware VeloCloud and Cisco Meraki platforms, and managed SASE delivered principally on Zscaler, with an expanding Fortinet partnership","provider_types":["managed_service_provider","carrier_network_provider"],"primary_geographies":[],"summary":"Vodafone Group is a vast, multinational telecommunications operator - for the financial year ended 31 March 2024, Vodafone Group reported total revenue of €36.7 billion, with Vodafone Business specifically operating across all of Vodafone’s markets, addressing a claimed €160 billion addressable market, serving 5 million customers, managing 198 million IoT connections (FY24 figure), and contributing 24% of Group service revenue. Against that scale, the managed SD-WAN and SASE proposition examined in this profile is one product line within a much larger enterprise business. Vodafone Business does not build its own proprietary SD-WAN or SASE technology - it delivers a multi-platform proposition, combining Arista/VMware VeloCloud and Cisco Meraki for SD-WAN with Zscaler for SASE-layer security, and has separately, more recently expanded a global partnership with Fortinet specifically to support hybrid-work security as part of a broader Network as a Service (NaaS) platform. A specific, quantified partnership metric worth noting directly: Vodafone’s own materials confirm its VeloCloud partnership dates to 2019 and now spans more than 650 customers globally using over 7,400 edges - real, checkable scale evidence rather than a vague ‘trusted partner’ claim. Vodafone additionally holds Zscaler’s highest partner tier, Zenith Partner status, with Delivery Services and Managed Security Service Provider Advanced Authorisations - a specific, credible signal of technical partnership depth. Vodafone’s own SASE materials confirm a global access-network reach spanning 192 countries via an enhanced internet backbone, and offer buyers an explicit choice between a fully Managed Service (for businesses with no in-house networking team) and a Co-Managed Service (premium support for businesses wanting to retain some in-house control) - a clear, well-differentiated two-tier delivery model. Compliance evidence here is strong: our research located a real, primary, dated (2021) ISO 27001 certificate issued by Lloyd’s Register with explicit scope language naming ‘International Network Connectivity’ within Vodafone Business services directly - materially stronger evidence than an inferred or third-party-only certification. SOC 2 and SOC 3 attestations were also found confirmed, though specifically for Vodafone Business’s Unified Communications product line rather than confirmed as unified with the SD-WAN/SASE service itself. A real, named customer case study was found - Places for People, a major UK housing and property-management organisation, describing a Vodafone-and-Meraki SD-WAN deployment directly - credible, specific customer evidence.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:20:06.531Z","profile_url":"https://netify.co.uk/marketplace/vodafone/","record_url":"https://netify.co.uk/api/provider-knowledge/vodafone/"},{"slug":"zscaler","name":"Zscaler, Inc. (trading and profile display name: Zscaler)","provider_types":["technology_vendor"],"primary_geographies":[],"summary":"Zscaler is the vendor that effectively created the SSE category, and it’s still the one most competitors get measured against when it comes to sheer scale and security depth - the Zero Trust Exchange runs across 150+ data centres, processes over 400 billion transactions a day, and holds FedRAMP High authorisation for ZIA and ZPA (other SASE-class vendors also hold FedRAMP High or equivalent for their own components). If you’re a security-first buyer looking to retire VPN concentrators and stitch SWG, CASB, DLP and ZTNA together under one console, Zscaler is one of the most proven single-vendor routes to get there. Where it’s less straightforward is on the networking side and on price: there’s no owned private backbone underneath it (it leans on internet peering rather than Cato-style middle-mile infrastructure), the SD-WAN/branch story is newer and less mature than the core security stack, and the tiered per-user pricing model can escalate fast once ZDX, workload licensing and Data Protection add-ons come into play - all worth mapping out early rather than discovering at renewal.","dataset_version":"sha256-0f697fc7fc4690bb","reviewed_at":"2026-09-01T20:20:11.364Z","profile_url":"https://netify.co.uk/marketplace/zscaler/","record_url":"https://netify.co.uk/api/provider-knowledge/zscaler/"}]}