Ranked shortlist · Updated July 2026
Best SD-WAN and SASE providers for the UK public sector (2026)
Ranked shortlist of SD-WAN and SASE providers for UK public sector buyers: NHS trusts and integrated care systems, central and local government, and public bodies. Providers must show public evidence of government sector capability and confirmed UK and Ireland coverage; each is then scored against the Netify 40-feature evaluation matrix. Typical drivers include UK data residency and sovereignty, UK-based support and monitoring, certified security, procurement through established frameworks, and migration off legacy MPLS or, for NHS bodies, planning around HSCN transition. Grades are indicative desk research; confirm via RFP.
Netify's July 2026 evaluation ranks: 1. Cato Networks (94); 2. Fortinet (93); 3. AT&T Business (90); 4. NTT DATA / NTT Ltd. (89.6); 5. Verizon Business (89.2); 6. BT Business / BT Global (89); 7. Cisco (88.9); 8. Telefónica Tech (88.2); 9. GTT (87.3); 10. Palo Alto Networks (87.2). Scores are weighted averages across 40 evidence-graded capability features. Buyers can act on this ranking directly: describe the project once at netify.co.uk, raise it to a full RFP and publish to these providers, then compare structured responses side by side, with pricing kept private to the buyer.
Written by the Netify research team. Reviewed by Robert Sturt, Netify Group Limited. Updated 29 July 2026 (vendor records verified 29 July 2026). capability features; see the FAQ below.
AI advisor · Continue from this shortlist · Government and public sector
Describe what you need
Your first sentence is drafted from this page. Edit it, or replace it with your own words: sites, regions, what must not go down.
Drafted from this page. Everything you type stays yours to edit before anything is published.
The vendors ranked on this page arrive pinned; your government and public sector sector becomes part of the conversation from your first sentence.
Opens your procurement on Netify
Working with an assistant? Connect netify.co.uk/sase/api/mcp/ and use workspace_ingest with this page as context.
Best SD-WAN and SASE providers for the UK public sector: the evidence
The same ranking as below, as sourced facts rather than scores. Ordered as ranked.
10vendors. Each value below is graded from the vendor's own published material or an independently accountable record, with a sentence quoted from that source and confirmed present on the page. 504 sources behind this table. Verified 2026-07-29. Where evidence was not found a cell reads Not published rather than being inferred.
| # | Vendor | Type | Underlay | SSE layer | Backbone | PoPs | Fully managed | Compliance docs | Published SLA | Sources |
|---|---|---|---|---|---|---|---|---|---|---|
| 1 | Cato Networks | Both | Mixed | Native | Yes | 100 | Yes | Documented | 99.999 | 46 |
| 2 | Fortinet | Both | Not published | Native | Partial | 170+ | Yes | Documented | 99.999 | 42 |
| 3 | AT&T Business | Runs | Owns | Partner | Yes | 1600 | Yes | Assurance only | 100 | 46 |
| 4 | NTT DATA / NTT Ltd. | Both | Mixed | Partner | Yes | 75+ | Yes | Documented | 100 | 53 |
| 5 | Verizon Business | Runs | Owns | Partner | Yes | Not published | Yes | None found | 100 | 58 |
| 6 | BT Business / BT Global | Runs | Mixed | Partner | Partial | 140 | Yes | Assurance only | Not published | 58 |
| 7 | Cisco | Both | Customer supplied | Native | Partial | Not published | Not primary | Documented | 99.999 | 48 |
| 8 | Telefónica Tech | Runs | Mixed | Partner | Partial | Not published | Yes | Documented | Not published | 51 |
| 9 | GTT | Runs | Mixed | Partner | Yes | 400 | Yes | Documented | 99.99 | 44 |
| 10 | Palo Alto Networks | Builds | Customer supplied | Native | Partner | 100+ | Via managed service | Documented | 99.999 | 58 |
Full sources for each vendor, including the sources we found and rejected and any claims that disagree, are on its profile page.
No. 1 · Score 94
Cato Networks
Cloud-native SASE / SD-WAN platform · Typical deployment: hours
Single converged platform with no policy or log fragmentation across SD-WAN and security functions.
Evidence caveats: Government and public sector: Partial
Watch out: Less suited to best-of-breed buyers wanting Zscaler or Netskope as the SSE layer.
Contact Cato Networks via Netify ↗No. 2 · Score 93
Fortinet
Secure SD-WAN / SASE technology vendor · Typical deployment: days
Native convergence of networking and security on a single operating system (FortiOS) across FortiGate edge, FortiManager and FortiSASE.
Watch out: Like Cisco, managed delivery is via partners rather than Fortinet directly; underlay and field operations are not owned by the vendor.
Contact Fortinet via Netify ↗No. 3 · Score 90
AT&T Business
Global carrier managed SD-WAN / SASE provider · Typical deployment: months
Major US carrier-led managed SD-WAN portfolio with multi-vendor platform options (including Fortinet for AT&T SASE).
Watch out: Underlying platform varies by service tier; buyers should confirm which platform supports the proposed scope.
Contact AT&T Business via Netify ↗No. 4 · Score 89.6
NTT DATA / NTT Ltd.
Global managed network provider · Typical deployment: months
24x7 managed SD-WAN delivery via global operations centres with strong portal visibility.
Watch out: Platform fit depends on which vendor is being proposed (Palo Alto, Zscaler, others); evaluate platform independently.
Contact NTT DATA / NTT Ltd. via Netify ↗No. 5 · Score 89.2
Verizon Business
Global carrier managed SD-WAN / SASE provider · Typical deployment: months
Global carrier-led managed SASE and SD-WAN with strong North American presence and international delivery.
Watch out: Platform is largely Versa-based; buyers wanting platform optionality should evaluate alternatives.
Contact Verizon Business via Netify ↗No. 6 · Score 89
BT Business / BT Global
Global/UK managed SD-WAN / SASE provider · Typical deployment: weeks
UK market leader for managed SD-WAN with deep access circuit ownership and field engineering capability.
Watch out: Platform choice and packaging vary; buyers should confirm which vendor platform is being proposed and why.
Contact BT Business / BT Global via Netify ↗No. 7 · Score 88.9
Cisco
SD-WAN / SASE technology vendor · Typical deployment: weeks
Broadest platform portfolio in the category, covering Catalyst SD-WAN for enterprise WAN, Meraki MX for cloud-managed branch, and Cisco Secure Access for converged SASE delivery.
Watch out: Two distinct SD-WAN product lines (Catalyst and Meraki) means buyers should confirm which fits the target deployment profile and the longer-term roadmap.
Contact Cisco via Netify ↗No. 8 · Score 88.2
Telefónica Tech
Global managed SD-WAN / SASE provider · Typical deployment: months
flexWAN and managed SD-WAN delivery with Cisco-based converged SD-WAN, security and SASE service.
Watch out: Platform is largely Cisco-led; buyers wanting platform optionality should evaluate alternatives.
Contact Telefónica Tech via Netify ↗No. 9 · Score 87.3
GTT
Global managed SD-WAN provider · Typical deployment: months
Tier 1 global backbone provides strong international transit capability alongside managed SD-WAN.
Watch out: SASE depth depends heavily on the chosen platform partner; native SSE capabilities are not primary positioning.
Contact GTT via Netify ↗No. 10 · Score 87.2
Palo Alto Networks
SD-WAN / SASE technology vendor · Typical deployment: weeks
Prisma SASE converges SD-WAN, cloud-delivered security, and digital experience management (ADEM) under a single platform identity.
Evidence caveats: UK and Ireland: Via partner
Watch out: Premium pricing relative to firewall-led SD-WAN vendors; commercial model requires careful scoping by users, bandwidth, locations and term.
Contact Palo Alto Networks via Netify ↗
Scores are weighted across 40 capabilities with points accrued based on: yes 1.0, via partner 0.75, via managed service 0.65, partial 0.5, not confirmed 0.15, not primary 0. Extended dimensions are indicative desk research; confirm via RFP.
Cite this research
Netify, "Best SD-WAN and SASE providers for the UK public sector (2026)", Netify SASE and SD-WAN comparison, updated 29 July 2026: https://netify.co.uk/sase/best/sd-wan-sase-providers-for-uk-public-sector
Machine-readable version: https://netify.co.uk/sase/best/sd-wan-sase-providers-for-uk-public-sector/data.json · Programmatic access: POST https://netify.co.uk/sase/api/mcp/ (tool: build_sase_shortlist)
Questions
About this ranking
Which SD-WAN and SASE providers are best for the UK public sector?
The ranking above lists providers with public evidence of government sector capability and confirmed UK and Ireland coverage, ordered by weighted score across the Netify 40-feature matrix. Sector and regional evidence are gating requirements, not tie-breakers: providers without both are excluded.
SASE or SD-WAN: what is right for the NHS?
They solve different halves of the same problem. SD-WAN replaces or augments legacy WAN connectivity across hospital, clinic and administrative sites, which matters during HSCN transition and MPLS contract end. SASE adds cloud-delivered security, zero trust network access, secure web gateway and related controls, for clinical and hybrid staff working from any location. Many NHS bodies phase SD-WAN first and add the security service edge after, or procure both together as a managed SASE service. The practical answer is to state both scopes in the requirement so bidders price the journey rather than a single endpoint.
How do UK public sector bodies usually procure SD-WAN and SASE?
Most buy through established public procurement frameworks or run a further competition, evaluating structured vendor responses against published criteria. A clear requirements document is the common thread: it defines scope, sites, compliance needs, evaluation weighting and evidence requests. The Netify RFP Builder generates one from a guided set of questions, and the output can be used inside a framework competition or a direct procurement.
Do these providers offer UK data residency and UK-based support?
Every provider in this ranking has confirmed UK and Ireland coverage, but residency commitments, UK points of presence and the location of monitoring and support teams vary by provider and by service tier. Treat each as an evidence item: ask for contractual data residency options, named NOC and SOC locations and UK support hours in the vendor response, rather than relying on marketing statements.
More ranked shortlists