{"page":"https://netify.co.uk/sase/shortlist/","title":"Compare SD-WAN and SASE providers, vendors and managed services","description":"Compare 30 researched SD-WAN and SASE providers across operating model, network and security capability. Build a ranked shortlist, inspect the evidence, compare two providers directly, then hand your requirements to the Netify RFP Builder.","publisher":"Netify Group Limited","contract_version":"governed-shortlist/1.0.0","source_contract_version":"neon-shortlist/2.0.0","provider_contract_version":"provider-match-records/2.0.0","runtime_provider_source":"neon","provider_dataset_versions":["sha256-0f697fc7fc4690bb"],"provider_loaded_at":"2026-09-02T16:29:15.285Z","last_reviewed":"2026-09-01","evidence":{"method":"Each public provider profile is a reviewed projection of the governed provider record. Capability states distinguish supported, partial, partner-delivered, unsupported, unknown and requires-confirmation evidence.","sources_total":828},"faqs":[{"q":"How does the shortlist builder rank vendors?","a":"The Netify shortlist builder ranks each and every provider based on their capabilities to deliver 40 different in-built features, alongside the likes of regional coverage, cloud support, AI capabilities, resilience and deployment speed, all of which is drawn from information we've been able to publicly source or find evidence for."},{"q":"Can I share or save my shortlist?","a":"Yes absolutely, every filter combination is matched to an associated page URL, enabling you to copy a link to take you (or board directors) straight back to the same filtered list again at a later date, as well as being able to download a PDF version or have the ranked list emailed to you."},{"q":"What does Build from requirements do?","a":"Describe your estate in plain language, including site count, regions, security requirements and operating model. Netify maps the description to the same filters and scoring engine used by the manual controls, then explains the resulting shortlist."},{"q":"Is this comparison vendor neutral?","a":"Yes, we don't have a bias to any vendor and use publicly available sources and evidence only, as well as every vendor being scored against the exact same matrix. We must mention that Netify is a BT Authorised Partner and earns commission on some routes to market, however these rankings are not influenced by commercial relationships."},{"q":"How accurate are the extended dimensions?","a":"There are two different levels of evidence here and we would rather be plain about which is which. Eighteen facts per provider were re-sourced on 29 July 2026 from the provider's own published material or an independently accountable record, and each one carries a named source, a reliability tier and a sentence quoted from that source which we then re-checked against the live page: the thirteen capabilities that genuinely separate this market, who owns the underlay, whose security service edge stack it is, whether real compliance documentation exists rather than a general assurance, plus published points of presence and availability SLA. The remaining grades, including regional coverage, cloud support, AI capability and resilience, are still indicative desk research rather than individually sourced, and we say so rather than dress them up. Where we could not evidence something we publish it as unknown with the reason. For anything you are going to sign a contract on, confirm it through a structured RFP, which Netify can create and issue to your shortlisted providers."}],"features":[{"id":"f01_fully_managed_service","number":1,"category":"Service delivery and operating model","name":"Fully managed service","definition":"Provider designs, deploys, monitors, changes, supports and reports on the service.","rfp_question":"Confirm whether your solution/service provides: Fully managed service. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"The provider designs, deploys, monitors, changes, supports and reports on the service end to end, so the customer sets policy and outcomes rather than running day-to-day operations."},{"id":"f02_diy_self_managed_model","number":2,"category":"Service delivery and operating model","name":"DIY / self-managed model","definition":"Customer operates SD-WAN controller, policies, updates and incident response.","rfp_question":"Confirm whether your solution/service provides: DIY / self-managed model. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"The customer's own team operates the platform directly, owning the controller, policies, updates and incident response."},{"id":"f03_co_managed_service","number":3,"category":"Service delivery and operating model","name":"Co-managed service","definition":"Provider runs platform/support while customer retains selected policy or change rights.","rfp_question":"Confirm whether your solution/service provides: Co-managed service. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Responsibility is shared: the provider runs the platform and support while the customer retains selected policy and change rights."},{"id":"f04_multi_tenant_msp_white_label_support","number":4,"category":"Service delivery and operating model","name":"Multi-tenant MSP / white-label support","definition":"Tenant isolation, delegated administration, branded portals, templates and service-provider scale.","rfp_question":"Confirm whether your solution/service provides: Multi-tenant MSP / white-label support. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"The platform supports tenant isolation, delegated administration, branded portals and templates, so managed service providers can operate it for many customers under their own brand."},{"id":"f05_professional_services_and_migration_support","number":5,"category":"Service delivery and operating model","name":"Professional services and migration support","definition":"Discovery, design, pilot, staging, migration runbooks, rollback and training.","rfp_question":"Confirm whether your solution/service provides: Professional services and migration support. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Structured design and migration services are available, covering discovery, pilots, staging, migration runbooks, rollback plans and training."},{"id":"f06_last_mile_circuit_management","number":6,"category":"Service delivery and operating model","name":"Last-mile circuit management","definition":"Sourcing, monitoring and support for broadband, DIA, LTE/5G, MPLS and cross-connects.","rfp_question":"Confirm whether your solution/service provides: Last-mile circuit management. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"The provider sources, monitors and supports the underlay access circuits at each site, across broadband, dedicated internet access, LTE and 5G, MPLS and cross-connects, giving one accountable party for connectivity and overlay together."},{"id":"f07_lifecycle_management","number":7,"category":"Service delivery and operating model","name":"Lifecycle management","definition":"Hardware replacement, firmware upgrades, patching, renewals and EoL planning.","rfp_question":"Confirm whether your solution/service provides: Lifecycle management. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Hardware replacement, firmware upgrades, patching, renewals and end-of-life planning are handled as part of the service."},{"id":"f08_flexible_commercial_model","number":8,"category":"Service delivery and operating model","name":"Flexible commercial model","definition":"Per-site, per-bandwidth, per-user, per-device, consumption, NaaS or bundled pricing.","rfp_question":"Confirm whether your solution/service provides: Flexible commercial model. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Pricing can be structured in more than one way, such as per site, per user, per bandwidth, consumption-based or as NaaS, with terms that adapt to the buyer's estate."},{"id":"f09_encrypted_overlay_fabric","number":9,"category":"Network architecture and transport","name":"Encrypted overlay fabric","definition":"Secure tunnels across broadband, DIA, MPLS, LTE/5G, satellite or private WAN.","rfp_question":"Confirm whether your solution/service provides: Encrypted overlay fabric. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Site and user traffic runs through secure tunnels built over any underlying transport, including broadband, dedicated internet, MPLS, LTE and 5G or satellite, keeping data protected across mixed networks."},{"id":"f10_dynamic_path_selection","number":10,"category":"Network architecture and transport","name":"Dynamic path selection","definition":"Real-time routing based on latency, jitter, packet loss, brownouts, MOS and policy.","rfp_question":"Confirm whether your solution/service provides: Dynamic path selection. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"The platform routes traffic in real time based on measured latency, jitter, packet loss and policy, steering around brownouts without manual intervention."},{"id":"f11_active_active_link_utilisation","number":11,"category":"Network architecture and transport","name":"Active-active link utilisation","definition":"Use multiple links concurrently rather than passive backup only.","rfp_question":"Confirm whether your solution/service provides: Active-active link utilisation. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"All available links carry traffic concurrently rather than one sitting idle as passive backup, increasing usable capacity and smoothing failover."},{"id":"f12_application_aware_routing","number":12,"category":"Network architecture and transport","name":"Application-aware routing","definition":"Identification and routing for SaaS, UCaaS, ERP and custom applications.","rfp_question":"Confirm whether your solution/service provides: Application-aware routing. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Traffic is identified at application level and routed by per-application policy, so business-critical applications such as UCaaS and ERP take priority."},{"id":"f13_qos_and_traffic_shaping","number":13,"category":"Network architecture and transport","name":"QoS and traffic shaping","definition":"Per-application and per-class prioritisation, reservation and policing.","rfp_question":"Confirm whether your solution/service provides: QoS and traffic shaping. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Bandwidth can be prioritised, reserved and policed per application or traffic class, protecting voice, video and critical traffic under congestion."},{"id":"f14_packet_loss_remediation","number":14,"category":"Network architecture and transport","name":"Packet loss remediation","definition":"FEC, packet duplication, jitter buffering, TCP optimisation and WAN optimisation.","rfp_question":"Confirm whether your solution/service provides: Packet loss remediation. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Techniques such as forward error correction, packet duplication, jitter buffering and TCP optimisation repair or mask loss on poor-quality links, keeping real-time applications usable."},{"id":"f15_local_internet_breakout","number":15,"category":"Network architecture and transport","name":"Local internet breakout","definition":"Secure direct internet access from branch sites.","rfp_question":"Confirm whether your solution/service provides: Local internet breakout. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Internet-bound traffic exits securely and directly from the branch rather than being backhauled through a central data centre, reducing latency for cloud and SaaS traffic."},{"id":"f16_mpls_coexistence_and_migration","number":16,"category":"Network architecture and transport","name":"MPLS coexistence and migration","definition":"Hybrid MPLS/internet/cellular during transition.","rfp_question":"Confirm whether your solution/service provides: MPLS coexistence and migration. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Existing MPLS circuits can run alongside internet and cellular transport during a phased migration, so estates move site by site without a risky single cutover."},{"id":"f17_cellular_and_5g_support","number":17,"category":"Network architecture and transport","name":"Cellular and 5G support","definition":"Integrated/external modem, SIM management, signal monitoring and failover.","rfp_question":"Confirm whether your solution/service provides: Cellular and 5G support. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"4G and 5G connections are supported as primary or failover transport, with integrated or external modems, SIM management and signal monitoring."},{"id":"f18_cloud_on_ramp","number":18,"category":"Network architecture and transport","name":"Cloud on-ramp","definition":"Automated/simplified connectivity to AWS, Azure, Google Cloud, Oracle, Equinix, Megaport and SaaS.","rfp_question":"Confirm whether your solution/service provides: Cloud on-ramp. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Connectivity into cloud platforms such as AWS, Microsoft Azure, Google Cloud and Oracle, and interconnect fabrics such as Equinix and Megaport, is automated and simplified rather than hand-built per cloud."},{"id":"f19_public_cloud_gateways","number":19,"category":"Gateway, PoP and backbone design","name":"Public cloud gateways","definition":"Vendor-operated gateways/PoPs for SaaS optimisation, remote access or security enforcement.","rfp_question":"Confirm whether your solution/service provides: Public cloud gateways. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"The vendor operates shared gateways and points of presence that deliver SaaS optimisation, remote access or security enforcement as a cloud service; this measures the vendor's own service infrastructure, distinct from dedicated private PoPs."},{"id":"f20_private_pops_dedicated_pops","number":20,"category":"Gateway, PoP and backbone design","name":"Private PoPs / dedicated PoPs","definition":"Customer-hosted, dedicated or sovereign PoP options.","rfp_question":"Confirm whether your solution/service provides: Private PoPs / dedicated PoPs. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Points of presence can be supplied as customer-hosted, dedicated or sovereign deployments rather than only the provider's shared multi-tenant locations."},{"id":"f21_private_global_backbone","number":21,"category":"Gateway, PoP and backbone design","name":"Private global backbone","definition":"Vendor-owned or controlled backbone between PoPs.","rfp_question":"Confirm whether your solution/service provides: Private global backbone. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Traffic between regions rides a backbone owned or controlled by the vendor rather than the public internet, giving predictable latency and loss between PoPs."},{"id":"f22_regional_breakout_and_data_residency","number":22,"category":"Gateway, PoP and backbone design","name":"Regional breakout and data residency","definition":"Pin traffic to countries, regions or approved inspection locations.","rfp_question":"Confirm whether your solution/service provides: Regional breakout and data residency. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Traffic can be pinned to chosen countries, regions or approved inspection locations, supporting data residency and sovereignty requirements."},{"id":"f23_multi_cloud_transit_fabric","number":23,"category":"Gateway, PoP and backbone design","name":"Multi-cloud transit fabric","definition":"Branch-to-cloud, cloud-to-cloud and user-to-cloud connectivity under common policy.","rfp_question":"Confirm whether your solution/service provides: Multi-cloud transit fabric. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Branch-to-cloud, cloud-to-cloud and user-to-cloud traffic runs under one common policy through the provider's fabric rather than through customer-built interconnects."},{"id":"f24_flexible_edge_form_factors","number":24,"category":"Gateway, PoP and backbone design","name":"Flexible edge form factors","definition":"Physical, virtual, cloud marketplace, container or uCPE.","rfp_question":"Confirm whether your solution/service provides: Flexible edge form factors. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"The edge is available as hardware appliances, virtual machines, cloud marketplace images, containers or uCPE, so each site can use the form that suits it."},{"id":"f25_high_availability_design","number":25,"category":"Gateway, PoP and backbone design","name":"High availability design","definition":"Dual appliances, dual circuits, dual power, HA clustering and gateway redundancy.","rfp_question":"Confirm whether your solution/service provides: High availability design. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Redundant designs are supported across appliances, circuits, power and gateways, with clustering and automatic failover keeping sites connected through failures."},{"id":"f26_sla_backed_service_fabric","number":26,"category":"Gateway, PoP and backbone design","name":"SLA-backed service fabric","definition":"SLA for uptime, response, change handling and possibly latency/jitter/loss.","rfp_question":"Confirm whether your solution/service provides: SLA-backed service fabric. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"The service carries contractual commitments covering uptime, response and change handling, and in some cases latency, jitter and loss, rather than best-effort targets."},{"id":"f27_integrated_next_generation_firewall","number":27,"category":"Security and SASE capability","name":"Integrated next-generation firewall","definition":"Stateful firewall, app control, IPS/IDS, malware inspection and URL filtering.","rfp_question":"Confirm whether your solution/service provides: Integrated next-generation firewall. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Stateful firewalling, application control, intrusion prevention, malware inspection and URL filtering are built into the platform rather than supplied as a separate appliance."},{"id":"f28_full_sase_platform","number":28,"category":"Security and SASE capability","name":"Full SASE platform","definition":"SD-WAN plus SWG, CASB, ZTNA, FWaaS, DLP, RBI, DNS security and threat prevention.","rfp_question":"Confirm whether your solution/service provides: Full SASE platform. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Networking and security converge in one platform, combining SD-WAN with cloud-delivered controls including SWG, CASB, ZTNA, firewall as a service, DLP and threat prevention."},{"id":"f29_sse_ecosystem_integration","number":29,"category":"Security and SASE capability","name":"SSE ecosystem integration","definition":"Interoperation with Zscaler, Netskope, Palo Alto Prisma Access, Cisco Secure Access, Cloudflare etc.","rfp_question":"Confirm whether your solution/service provides: SSE ecosystem integration. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"The platform interoperates with third-party security service edge providers such as Zscaler, Netskope, Palo Alto Prisma Access and Cisco Secure Access, for buyers running a best-of-breed rather than single-vendor stack."},{"id":"f30_zero_trust_network_access","number":30,"category":"Security and SASE capability","name":"Zero Trust Network Access","definition":"Identity and posture-based access to private applications.","rfp_question":"Confirm whether your solution/service provides: Zero Trust Network Access. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Users are connected to specific private applications based on identity and device posture rather than being placed on the network, replacing broad VPN access with least-privilege access."},{"id":"f31_secure_web_gateway","number":31,"category":"Security and SASE capability","name":"Secure web gateway","definition":"URL filtering, SSL inspection, malware scanning and acceptable-use controls.","rfp_question":"Confirm whether your solution/service provides: Secure web gateway. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Web traffic is filtered and inspected, with URL filtering, SSL inspection, malware scanning and acceptable-use controls enforced in the cloud."},{"id":"f32_casb_capability","number":32,"category":"Security and SASE capability","name":"CASB capability","definition":"SaaS discovery, sanctioned/unsanctioned app control and SaaS policy enforcement.","rfp_question":"Confirm whether your solution/service provides: CASB capability. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Cloud access security broker controls provide SaaS discovery, sanctioned and unsanctioned application control and SaaS policy enforcement, including shadow IT visibility."},{"id":"f33_data_loss_prevention","number":33,"category":"Security and SASE capability","name":"Data loss prevention","definition":"Data classification, inspection, blocking, alerting and exception workflow.","rfp_question":"Confirm whether your solution/service provides: Data loss prevention. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Content is classified and inspected for sensitive data, which can be blocked or flagged before it leaves the organisation, with alerting and exception workflows."},{"id":"f34_remote_user_access","number":34,"category":"Security and SASE capability","name":"Remote user access","definition":"Client or clientless access for remote workers, contractors and mobile users.","rfp_question":"Confirm whether your solution/service provides: Remote user access. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Remote workers, contractors and mobile users connect through the same platform and policies as sites, through a lightweight client or clientless browser access."},{"id":"f35_soc_siem_soar_integration","number":35,"category":"Security and SASE capability","name":"SOC/SIEM/SOAR integration","definition":"Syslog, APIs, event export, threat intelligence and workflow integration.","rfp_question":"Confirm whether your solution/service provides: SOC/SIEM/SOAR integration. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Logs, events and threat intelligence export cleanly over syslog and APIs into SIEM, SOAR and security operations tooling, so the service fits an existing detection and response workflow."},{"id":"f36_centralised_orchestration","number":36,"category":"Operations, assurance and automation","name":"Centralised orchestration","definition":"Templates, intent-based policy, zero-touch provisioning and configuration compliance.","rfp_question":"Confirm whether your solution/service provides: Centralised orchestration. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Configuration and policy are managed from a single console using templates, intent-based policy and zero-touch provisioning, with changes pushed network-wide rather than device by device."},{"id":"f37_customer_portal_and_rbac","number":37,"category":"Operations, assurance and automation","name":"Customer portal and RBAC","definition":"Real-time status, role-based access, reporting, tickets and change requests.","rfp_question":"Confirm whether your solution/service provides: Customer portal and RBAC. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"A customer-facing portal provides real-time status, reporting, tickets and change requests, with role-based access so different teams see and change only what they should."},{"id":"f38_observability_and_digital_experience_monitoring","number":38,"category":"Operations, assurance and automation","name":"Observability and digital experience monitoring","definition":"App experience, user experience, device health, SaaS telemetry and path analytics.","rfp_question":"Confirm whether your solution/service provides: Observability and digital experience monitoring. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Application experience, user experience, device health and path analytics are measured end to end, so degradation is visible before tickets are raised."},{"id":"f39_apis_and_automation","number":39,"category":"Operations, assurance and automation","name":"APIs and automation","definition":"REST APIs, Terraform, webhooks, event streaming and ITSM integration.","rfp_question":"Confirm whether your solution/service provides: APIs and automation. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Documented interfaces such as REST APIs, Terraform, webhooks and event streaming allow configuration, reporting and ITSM integration to be automated."},{"id":"f40_managed_service_assurance","number":40,"category":"Operations, assurance and automation","name":"Managed service assurance","definition":"24/7 NOC/SOC, proactive monitoring, incident ownership, RCA, service reviews and change governance.","rfp_question":"Confirm whether your solution/service provides: Managed service assurance. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"The provider's 24/7 NOC and SOC monitor the service proactively, own incidents through to root cause analysis, and run structured service reviews and change governance."}],"vendors":[{"slug":"aryaka","name":"Aryaka","website":"https://www.aryaka.com","category":"technology vendor","product_focus":"AI>Observe, AI>Secure, Aryaka Cyber Threat Research Lab (CTRL), Aryaka Network Access Point (ANAP)","cost_model":"Quote-based managed service; pricing normally depends on sites, bandwidth, regions, security stack and optimisation.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"unknown","f02_diy_self_managed_model":"yes","f03_co_managed_service":"unknown","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"unknown","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"unknown","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"unknown","f31_secure_web_gateway":"unknown","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"unknown","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"yes"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"yes"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"unknown","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"unknown","retail_ecommerce":"not_primary","manufacturing":"unknown","energy_utilities":"unknown","government_public_sector":"unknown","education":"not_primary","transport_logistics":"unknown","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"unknown","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_site","per_bandwidth","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"yes"},"device_posture":"unknown","agent_platforms":{"windows":"unknown","macos":"unknown","ios":"unknown","android":"unknown","linux":"unknown","chromeos":"unknown","agentless":"unknown"},"pop_count":40,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/aryaka/","shortlist_summary":"Aryaka is one of the older, more established names in this category - founded 2009, more than 15 years before ‘SASE’ existed as an analyst-defined term, originally as a WAN optimisation and application-acceleration company before evolving into what it now calls ‘Unified SASE as a Service’. That specific phrase matters: Aryaka positions itself, and is described by independent commentary, as the first company to deliver SASE as a fully managed service rather than a self-managed software platform, built around a distinctive single-pass architecture (OnePASS) running over an owned, global private core network spanning more than 40 points of presence across six continents.","key_differentiators":["Unified SASE delivered as a managed service from end to end, including the private global core network and WAN optimisation.","Strong story for global organisations needing predictable performance between regions without internet variability.","Embedded WAN optimisation differentiates from pure cloud-delivered SASE platforms."],"best_fit_for":["Global enterprises wanting SASE delivered as a fully managed service rather than as DIY platform plus tools.","Buyers who need consistent inter-regional performance for chatty applications.","Organisations preferring a vendor that owns the platform and the managed service rather than coordinating multiple parties."],"watch_outs":["Smaller PoP footprint and partner ecosystem than the hyperscale SASE vendors; coverage must match your geographic profile.","DIY/self-managed model has limited evidence; this is a managed-service-first proposition.","CASB and DLP capabilities have partial public evidence; depth should be confirmed in RFP."],"evidence_coverage_pct":0.275,"last_verified":"2026-09-01","evidence_source_count":26,"independent_evidence_source_count":0},{"slug":"att-business","name":"AT&T Business","website":"https://www.business.att.com/products/sd-wan.html","category":"managed service provider / carrier network provider","product_focus":"AT&T Dynamic Defence with Palo Alto Networks, AT&T Managed SASE with Cisco, AT&T Managed SD-WAN, AT&T Network as a Service (NaaS)","cost_model":"Quote-based managed service; access circuits, security, platform and managed service wrapped into term contract.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"unknown","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"unknown","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"unknown","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"unknown","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"unknown","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"unknown","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"unknown","f30_zero_trust_network_access":"unknown","f31_secure_web_gateway":"unknown","f32_casb_capability":"unknown","f33_data_loss_prevention":"unknown","f34_remote_user_access":"unknown","f35_soc_siem_soar_integration":"unknown","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"unknown"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"unknown","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"unknown","retail_ecommerce":"unknown","manufacturing":"unknown","energy_utilities":"unknown","government_public_sector":"unknown","education":"unknown","transport_logistics":"unknown","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"unknown"},"device_posture":"unknown","agent_platforms":{"windows":"unknown","macos":"unknown","ios":"unknown","android":"unknown","linux":"unknown","chromeos":"unknown","agentless":"unknown"},"pop_count":1600,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/att/","shortlist_summary":"AT&T is one of the largest telecommunications companies in the United States, reporting trailing-twelve-month revenue of approximately $120.7 billion as of Q1 2026, with fixed-line enterprise services (including the SD-WAN and SASE proposition covered in this profile) accounting for roughly 14% of total revenue. AT&T’s SASE strategy is built on two named, current, dated technology partnerships.","key_differentiators":["Major US carrier-led managed SD-WAN portfolio with multi-vendor platform options (including Fortinet for AT&T SASE).","Strong North American underlay ownership with global delivery via international partnerships.","AT&T SASE unifies SD-WAN with network security as a converged managed service."],"best_fit_for":["US-headquartered enterprises wanting integrated carrier-led SD-WAN and SASE.","Buyers wanting Fortinet SASE delivered as a managed service rather than DIY.","Organisations prioritising carrier-grade SLAs and managed service maturity."],"watch_outs":["Underlying platform varies by service tier; buyers should confirm which platform supports the proposed scope.","International delivery depth depends on partnerships outside North America.","Commercial structure typically bundles access, security and platform; line-item costing requires explicit RFP."],"evidence_coverage_pct":0.1,"last_verified":"2026-09-01","evidence_source_count":17,"independent_evidence_source_count":0},{"slug":"barracuda-secureedge","name":"Barracuda SecureEdge","website":"https://netify.co.uk/marketplace/barracuda-secureedge/","category":"technology vendor","product_focus":"Barracuda SecureEdge, Barracuda SecureEdge Access, BarracudaONE, Secure Edge Manager","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"unknown","f02_diy_self_managed_model":"yes","f03_co_managed_service":"unknown","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"unknown","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"unknown","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"unknown","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"unknown","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"unknown","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"unknown","f33_data_loss_prevention":"unknown","f34_remote_user_access":"unknown","f35_soc_siem_soar_integration":"unknown","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"unknown"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"yes","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"unknown","retail_ecommerce":"not_primary","manufacturing":"unknown","energy_utilities":"unknown","government_public_sector":"unknown","education":"not_primary","transport_logistics":"unknown","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"unknown","mid_market":"unknown","small_business":"unknown"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"yes"},"device_posture":"unknown","agent_platforms":{"windows":"unknown","macos":"unknown","ios":"unknown","android":"unknown","linux":"unknown","chromeos":"unknown","agentless":"unknown"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"unknown","uk_support_desk":"unknown","named_tam":"unknown"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/barracuda-secureedge/","shortlist_summary":"Barracuda Networks is a long-established cybersecurity company - founded 2003, initially focused on spam and virus firewalls - that has changed ownership twice in the past decade without ever settling into a stable, single corporate structure: it went public in 2013, was taken private by Thoma Bravo in 2018 for $1.6 billion, and was acquired again by KKR in 2022. SecureEdge, launched in 2023, is Barracuda’s single-vendor SASE platform, integrating Secure SD-WAN, Firewall-as-a-Service, ZTNA and Secure Web Gateway, and it now sits within Barracuda’s broader BarracudaONE umbrella alongside the company’s much older, well-established email, data, and application-protection product lines.","key_differentiators":[],"best_fit_for":[],"watch_outs":[],"evidence_coverage_pct":0.15,"last_verified":"2026-09-01","evidence_source_count":23,"independent_evidence_source_count":0},{"slug":"bt-business","name":"BT","website":"https://business.bt.com/networks-digital-services/sd-wan","category":"managed service provider / carrier network provider","product_focus":"Agile Connect, BT Managed Fortinet Firewall, BT Managed SASE (Fortinet-based), BT Managed SASE (Meraki-based)","cost_model":"Quote-based managed service; includes access, CPE, vendor stack and service tier options.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"unknown","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"unknown","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"unknown","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"unknown","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"unknown","f30_zero_trust_network_access":"unknown","f31_secure_web_gateway":"unknown","f32_casb_capability":"unknown","f33_data_loss_prevention":"unknown","f34_remote_user_access":"unknown","f35_soc_siem_soar_integration":"unknown","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"unknown"},"deployment_speed":"unknown","regions":{"uk_ireland":"yes","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"unknown","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"unknown","retail_ecommerce":"unknown","manufacturing":"not_primary","energy_utilities":"unknown","government_public_sector":"unknown","education":"unknown","transport_logistics":"unknown","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"unknown","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"yes"},"device_posture":"unknown","agent_platforms":{"windows":"unknown","macos":"unknown","ios":"unknown","android":"unknown","linux":"unknown","chromeos":"unknown","agentless":"unknown"},"pop_count":140,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"yes","named_tam":"yes"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/bt/","shortlist_summary":"BT is not a single-platform SASE company, but the UK’s largest telecommunications operator and managed service provider, delivering SASE as one service line within a vastly larger, publicly-listed (LSE: BT.A) group.","key_differentiators":["UK market leader for managed SD-WAN with deep access circuit ownership and field engineering capability.","Multi-vendor platform support (Cisco, VMware/Broadcom, Fortinet, Palo Alto, Meraki) gives buyers platform choice within one managed service.","Strong global SD-WAN and SASE delivery via BT Global for multinational requirements."],"best_fit_for":["UK enterprises wanting a single supplier for SD-WAN platform, access circuits, security and field operations.","Multinational organisations with a UK headquarters needing global delivery via BT Global.","Buyers prioritising underlay accountability and field engineering depth alongside SD-WAN delivery."],"watch_outs":["Platform choice and packaging vary; buyers should confirm which vendor platform is being proposed and why.","DIY/self-managed model is not BT's primary positioning.","Co-managed model and customer control boundaries should be confirmed via RACI and portal demo."],"evidence_coverage_pct":0.15,"last_verified":"2026-09-01","evidence_source_count":16,"independent_evidence_source_count":0},{"slug":"cato-networks","name":"Cato Networks","website":"https://www.catonetworks.com","category":"technology vendor","product_focus":"Cato Browser Extension, Cato Client, Cato DEM, Cato EPP/EDR","cost_model":"Quote-based subscription; typically site/user/bandwidth/security bundle based.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"unknown","f02_diy_self_managed_model":"yes","f03_co_managed_service":"unknown","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"yes","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"partner_integrated","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"yes"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"yes","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"partner_integrated","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"unknown","retail_ecommerce":"unknown","manufacturing":"unknown","energy_utilities":"unknown","government_public_sector":"unknown","education":"unknown","transport_logistics":"unknown","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"yes","small_business":"unknown"},"pricing_units":["per_site","per_user","per_bandwidth","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":100,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/cato-networks/","shortlist_summary":"Cato Networks is frequently scored by us at Netify as being one of the easiest platforms to actually use, and they’re often considered a more integrated offering than most of the competition, which is primarily down to building their SASE solution from the ground up rather than bolting security onto an existing networking product, or the other way round. If you’re looking to collapse a fragmented maze of legacy firewalls, MPLS circuits, and point-product security tools into a single, cloud-native operational plane, Cato is one of the more compelling single-vendor SASE offerings on the market, though its middle-mile-centric architecture and fairly opaque licensing model mean it requires ca...","key_differentiators":["Single converged platform with no policy or log fragmentation across SD-WAN and security functions.","100+ PoP global private backbone reduces internet variability and provides predictable performance for SaaS-heavy traffic.","Strong story for organisations consolidating multiple point solutions onto one operational platform."],"best_fit_for":["Mid-market and enterprise buyers consolidating SD-WAN and SASE on one platform from a single vendor.","Global organisations with SaaS-heavy traffic patterns that benefit from a private backbone.","Teams without dedicated security operations capacity who want a managed SASE experience."],"watch_outs":["Less suited to best-of-breed buyers wanting Zscaler or Netskope as the SSE layer.","Customer does not own the underlay; circuits sourced separately, so multi-supplier coordination remains.","Less mature than incumbents for very large multinational deployments with heavy legacy MPLS estates."],"evidence_coverage_pct":0.65,"last_verified":"2026-09-01","evidence_source_count":40,"independent_evidence_source_count":0},{"slug":"check-point","name":"Check Point","website":"https://www.checkpoint.com/harmony/sase","category":"technology vendor","product_focus":"AI Network Firewall / AI Defence Plane, CASB, Check Point Infinity Architecture, Check Point SASE Platform","cost_model":"Quote-based subscription; Microsoft marketplace listing exists but enterprise deployments normally require quote.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"unknown","f02_diy_self_managed_model":"yes","f03_co_managed_service":"unknown","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"unknown","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"unknown","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"unknown","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"unknown","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"unknown","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"unknown"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"yes","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"unknown","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_primary","government_public_sector":"unknown","education":"not_primary","transport_logistics":"not_primary","professional_services":"unknown","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"unknown","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_user","per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"unknown","android":"unknown","linux":"yes","chromeos":"yes","agentless":"unknown"},"pop_count":80,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/checkpoint/","shortlist_summary":"Check Point’s SASE platform has been through two names in under three years. The underlying technology began life as Perimeter 81, an independent Israeli SSE/ZTNA vendor founded in 2018 that had grown to more than 3,000 customers and a Forrester Zero Trust Wave recognition before Check Point Software Technologies - the much larger, long-established Israeli cybersecurity vendor behind Check Point Firewall-1, founded in 1993 - acquired it for approximately $490 million in a deal announced September 2023.","key_differentiators":["Harmony SASE combines Check Point security heritage with cloud-delivered SASE and optimised SD-WAN performance.","Strong story for organisations already running Check Point firewalls who want to extend into SASE.","Available via Microsoft Azure marketplace for buyers wanting consolidated cloud procurement."],"best_fit_for":["Existing Check Point customers extending firewall investment into SD-WAN and SASE.","Mid-market enterprises consolidating security and SD-WAN under one vendor.","Buyers prioritising security maturity over network-platform maturity."],"watch_outs":["Native SD-WAN capabilities (path selection, QoS, packet loss remediation) have limited public evidence relative to SD-WAN-led vendors.","Smaller SD-WAN deployment footprint than category leaders; validate scale references.","Managed delivery is partner-led."],"evidence_coverage_pct":0.325,"last_verified":"2026-09-01","evidence_source_count":28,"independent_evidence_source_count":0},{"slug":"cisco","name":"Cisco","website":"https://www.cisco.com/site/us/en/solutions/networking/sdwan/index.html","category":"technology vendor","product_focus":"Cisco AI Defence, Cisco Catalyst SD-WAN, Cisco Duo, Cisco ISE","cost_model":"Quote-based subscription/licence + appliance/support; Meraki public SKUs via partners, enterprise pricing varies by platform and term.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"unknown","f02_diy_self_managed_model":"yes","f03_co_managed_service":"unknown","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"yes","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_primary","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"yes"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"not_primary","retail_ecommerce":"not_primary","manufacturing":"unknown","energy_utilities":"not_primary","government_public_sector":"unknown","education":"not_primary","transport_logistics":"not_primary","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_site","per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"unknown","android":"unknown","linux":"yes","chromeos":"yes","agentless":"unknown"},"pop_count":null,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/cisco/","shortlist_summary":"Cisco’s own materials describe SASE explicitly as ‘a journey - you can start with SD-WAN or SSE and converge over time’, which is a different pitch to Cato’s, Zscaler’s, Netskope’s or Palo Alto’s single-platform-from-day-one story. In practise, ‘Cisco SASE’ means choosing between Cisco Secure Access (cloud-delivered SSE, evolved from Cisco Umbrella), Cisco Catalyst SD-WAN (the enterprise-grade fabric, formerly Viptela) or Meraki SD-WAN (the simpler, cloud-first option), and Cisco Secure Connect (a turnkey bundle of Secure Access plus Meraki SD-WAN specifically).","key_differentiators":["Broadest platform portfolio in the category, covering Catalyst SD-WAN for enterprise WAN, Meraki MX for cloud-managed branch, and Cisco Secure Access for converged SASE delivery.","Cloud OnRamp provides automated optimisation paths for Microsoft 365, Salesforce, and major cloud providers, with native integration into the Cisco security stack.","Large global partner and integrator ecosystem reduces delivery risk for buyers wanting managed or co-managed delivery."],"best_fit_for":["Enterprises already standardised on Cisco networking who want platform consistency from LAN through WAN to security.","Multinational organisations needing strong vendor presence across regions and a deep partner channel.","Buyers prioritising single-vendor risk consolidation across networking and security."],"watch_outs":["Two distinct SD-WAN product lines (Catalyst and Meraki) means buyers should confirm which fits the target deployment profile and the longer-term roadmap.","Managed delivery is partner-led rather than first-party, so service quality varies meaningfully by integrator.","Private global backbone is not part of the platform; cloud transport relies on internet and partner gateways."],"evidence_coverage_pct":0.6,"last_verified":"2026-09-01","evidence_source_count":49,"independent_evidence_source_count":0},{"slug":"cloudflare-one","name":"Cloudflare One","website":"https://www.cloudflare.com/sase","category":"technology vendor","product_focus":"AI Gateway / Agents SDK / MCP security, CASB, Cloudflare Access, Cloudflare One","cost_model":"Quote-based enterprise pricing; some Zero Trust user tiers public, Magic WAN enterprise requires quote.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"unknown","f02_diy_self_managed_model":"yes","f03_co_managed_service":"unknown","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"unknown","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"unknown","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"unknown","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"unknown","f28_full_sase_platform":"unknown","f29_sse_ecosystem_integration":"unknown","f30_zero_trust_network_access":"unknown","f31_secure_web_gateway":"unknown","f32_casb_capability":"unknown","f33_data_loss_prevention":"unknown","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"yes"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"yes","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"not_primary","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_primary","government_public_sector":"unknown","education":"not_primary","transport_logistics":"not_primary","professional_services":"unknown","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"unknown","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_user","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"unknown"},"pop_count":300,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/cloudflare-one/","shortlist_summary":"Rather than building a security platform and adding network reach, or building a network and adding security, Cloudflare started as one of the internet’s largest content-delivery and DDoS-mitigation networks (founded 2009, public since 2019 on NYSE: NET) and extended that same global infrastructure - every product running in every data centre, not routed to a handful of regional security hubs - into a full SASE platform. That architecture is the platform’s clearest, most defensible claim: Cloudflare states it delivers full SASE from more than 300 cities, which it describes as more than three times the footprint of other SASE vendors, with sub-50-millisecond reach to 95% of the world’s int...","key_differentiators":["Cloudflare global edge network provides one of the largest PoP footprints in the category for SASE traffic.","Strong Zero Trust and SWG capability inheritance from the wider Cloudflare security platform.","Magic WAN Connector provides simplified branch connectivity into the Cloudflare One platform."],"best_fit_for":["Buyers already using Cloudflare for DDoS protection, CDN or Zero Trust who want to extend into WAN.","Organisations prioritising global PoP coverage and edge performance for SaaS access.","Mid-market buyers attracted to Cloudflare One pricing transparency for Zero Trust user tiers."],"watch_outs":["SD-WAN capabilities (path selection, QoS, packet loss remediation) have limited public evidence compared to SD-WAN-first vendors.","Less mature for very large branch estates with complex underlay requirements.","Managed and co-managed service models are partner-led; this is primarily a self-service platform."],"evidence_coverage_pct":0.175,"last_verified":"2026-09-01","evidence_source_count":47,"independent_evidence_source_count":0},{"slug":"colt-technology-services","name":"Colt Technology Services","website":"https://www.colt.net/products/networking/sd-wan","category":"carrier network provider","product_focus":"Colt SASE Gateway solution, Colt SD WAN, Colt SD WAN Remote Access, Partner IP Access (Blue Wireless)","cost_model":"Quote-based managed service; access, SD-WAN/SASE design, data sovereignty and service options drive pricing.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"unknown","f03_co_managed_service":"unknown","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"unknown","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"unknown","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"unknown","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"unknown","f28_full_sase_platform":"unknown","f29_sse_ecosystem_integration":"unknown","f30_zero_trust_network_access":"unknown","f31_secure_web_gateway":"unknown","f32_casb_capability":"unknown","f33_data_loss_prevention":"unknown","f34_remote_user_access":"unknown","f35_soc_siem_soar_integration":"unknown","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"unknown"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"yes","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"unknown","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"unknown","retail_ecommerce":"unknown","manufacturing":"unknown","energy_utilities":"unknown","government_public_sector":"unknown","education":"unknown","transport_logistics":"unknown","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"unknown"},"device_posture":"unknown","agent_platforms":{"windows":"unknown","macos":"unknown","ios":"unknown","android":"unknown","linux":"unknown","chromeos":"unknown","agentless":"unknown"},"pop_count":null,"sla_availability_pct":99.9,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"yes","named_tam":"yes"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/colt/","shortlist_summary":"Colt Technology Services is a long-established, European-anchored network operator, founded in 1992 as City of London Telecommunications and headquartered in London. Since 2015 Colt has been privately owned by Fidelity International (Eight Roads’ current specific role to be reconfirmed), and its network footprint expanded materially through a significant acquisition of Lumen Technologies’ Europe, Middle East and Africa business for $1.8 billion, completed November 2022, reinforcing Colt’s own confirmed network scale of more than 30 countries, more than 50 metropolitan area networks, and more than 32,000 on-net buildings, all delivered over its own named Colt IQ Network platform.","key_differentiators":["SD-WAN and SASE with strong European data sovereignty positioning.","Managed and co-managed delivery options with management portal access.","Enterprise-grade connectivity heritage with substantial European network ownership."],"best_fit_for":["European enterprises prioritising data residency, sovereignty and regulatory alignment.","Buyers wanting genuine co-managed delivery rather than pure managed or pure DIY.","Organisations consolidating European connectivity with SD-WAN under one provider."],"watch_outs":["Global delivery depth outside Europe is less prominent than the largest global carriers.","CASB and DLP have partial public evidence; SSE platform partner choice should be confirmed.","Underlying SD-WAN platform should be explicitly confirmed in RFP."],"evidence_coverage_pct":0.075,"last_verified":"2026-09-01","evidence_source_count":13,"independent_evidence_source_count":0},{"slug":"comcast-business","name":"Comcast Business","website":"https://business.comcast.com","category":"managed service provider / carrier network provider","product_focus":"Comcast Business CASB, Comcast Business FWaaS, Comcast Business Managed SD-WAN, Comcast Business SASE","cost_model":"Quote-based managed/co-managed service; access, SD-WAN, SASE and SOC/AIOps elements drive cost.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"unknown","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"unknown","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"unknown","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"unknown","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"unknown","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"unknown","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"unknown","f30_zero_trust_network_access":"unknown","f31_secure_web_gateway":"unknown","f32_casb_capability":"unknown","f33_data_loss_prevention":"unknown","f34_remote_user_access":"unknown","f35_soc_siem_soar_integration":"unknown","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"unknown"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"unknown","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"not_primary","retail_ecommerce":"unknown","manufacturing":"unknown","energy_utilities":"unknown","government_public_sector":"unknown","education":"unknown","transport_logistics":"unknown","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"unknown","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"unknown"},"device_posture":"unknown","agent_platforms":{"windows":"unknown","macos":"unknown","ios":"unknown","android":"unknown","linux":"unknown","chromeos":"unknown","agentless":"unknown"},"pop_count":null,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/comcastbusiness/","shortlist_summary":"Comcast Business’s managed SD-WAN and SASE proposition traces its specialist technical foundation to Masergy, a managed SD-WAN and SASE vendor founded in 2000 in Plano, Texas, which Comcast Business acquired in 2021 to, in the words of Comcast Business’s then-President Bill Stemper, ‘instantly and dramatically amplify our growth in the global enterprise market’. At acquisition, Masergy served more than 1,400 customers across 100 countries and delivered its managed SD-WAN and SASE capability on named technology partnerships with Fortinet and Silver Peak (subsequently acquired by HPE), plus Bitglass for cloud access security broker capability specifically, per independent analyst commentary...","key_differentiators":["SASE combining SD-WAN and security available fully managed or co-managed, drawing on Masergy AIOps heritage.","Recognised as a leading managed SD-WAN provider by industry analysts.","Strong North American underlay ownership with international delivery via partners."],"best_fit_for":["North American enterprises wanting managed or co-managed SD-WAN and SASE from a single carrier.","Buyers attracted to the AIOps capabilities inherited from the Masergy acquisition.","Organisations prioritising co-managed delivery with shared operational control."],"watch_outs":["International delivery depth depends on partnerships outside North America.","Underlying platform choice should be confirmed; service depth varies by selected platform.","Commercial model bundles access, SD-WAN, SASE and SOC elements; explicit line-item costing required."],"evidence_coverage_pct":0.1,"last_verified":"2026-09-01","evidence_source_count":11,"independent_evidence_source_count":0},{"slug":"cradlepoint-ericsson","name":"Ericsson Cradlepoint","website":"https://cradlepoint.com","category":"technology vendor / carrier network provider","product_focus":"NetCloud Federal, NetCloud Manager, NetCloud Perimeter, NetCloud Private Networks","cost_model":"Quote-based NetCloud subscriptions + routers/adapters; public hardware pricing may exist through resellers.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"unknown","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"unknown","f06_last_mile_circuit_management":"yes","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"unknown","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"unknown","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"unknown","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"unknown","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"unknown","f32_casb_capability":"unknown","f33_data_loss_prevention":"unknown","f34_remote_user_access":"unknown","f35_soc_siem_soar_integration":"unknown","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"unknown"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"unknown","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"unknown","retail_ecommerce":"unknown","manufacturing":"unknown","energy_utilities":"unknown","government_public_sector":"unknown","education":"unknown","transport_logistics":"unknown","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"unknown","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"yes"},"device_posture":"unknown","agent_platforms":{"windows":"unknown","macos":"unknown","ios":"unknown","android":"unknown","linux":"unknown","chromeos":"unknown","agentless":"unknown"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/ericsson-cradlepoint/","shortlist_summary":"Cradlepoint began in 2006 as an independent Boise, Idaho-based pioneer in cellular-first wireless WAN networking, raised more than $162 million before being acquired outright by Ericsson (NASDAQ: ERIC) in a deal announced September 2020 and closed later that year at an enterprise value of approximately $1.1 billion. That makes this platform’s identity distinctive within this product category: it sits inside one of the world’s largest telecommunications equipment manufacturers rather than a standalone security company or a private-equity-backed challenger, and its architecture reflects that heritage directly - NetCloud SASE is built cellular-first, with confirmed, specific capabilities lik...","key_differentiators":["Wireless-first branch architecture from Ericsson with deep 5G expertise; NetCloud provides cellular-centric SD-WAN management.","Strong story for organisations adopting 5G as a primary access medium rather than as a backup.","Network slicing and private 5G integration roadmap is more credible than competitors lacking cellular heritage."],"best_fit_for":["Distributed enterprises with strong cellular/5G access strategy (retail, logistics, transport, public sector).","Buyers consolidating wireless WAN with traditional fixed-line SD-WAN under one operational tool.","Organisations interested in private 5G integration with branch SD-WAN."],"watch_outs":["SASE story is partner-integrated rather than native; SSE capabilities require validation in RFP.","Cloud on-ramp and multi-cloud transit fabric have limited public evidence relative to dedicated SASE platforms.","Best for cellular-led architectures; less strong as a primary fit for fixed-circuit-heavy estates."],"evidence_coverage_pct":0.175,"last_verified":"2026-09-01","evidence_source_count":21,"independent_evidence_source_count":0},{"slug":"expereo","name":"Expereo","website":"https://netify.co.uk/marketplace/expereo/","category":"managed service provider / carrier network provider","product_focus":"Expereo Enhanced Internet, Expereo Managed SD-WAN, Expereo SD-WAN/SASE with Cato Networks, Starlink (via Expereo, authorised reseller)","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"unknown","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"unknown","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"unknown","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"unknown","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"unknown","f30_zero_trust_network_access":"unknown","f31_secure_web_gateway":"unknown","f32_casb_capability":"unknown","f33_data_loss_prevention":"unknown","f34_remote_user_access":"unknown","f35_soc_siem_soar_integration":"unknown","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"unknown"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"yes","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"unknown","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"unknown","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"unknown","retail_ecommerce":"unknown","manufacturing":"unknown","energy_utilities":"unknown","government_public_sector":"unknown","education":"unknown","transport_logistics":"unknown","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"unknown","small_business":"unknown"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"unknown"},"device_posture":"unknown","agent_platforms":{"windows":"unknown","macos":"unknown","ios":"unknown","android":"unknown","linux":"unknown","chromeos":"unknown","agentless":"unknown"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"unknown","uk_support_desk":"unknown","named_tam":"unknown"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/expereo/","shortlist_summary":"Rather than owning last-mile or backbone infrastructure directly, Expereo positions itself explicitly as an internet-connectivity aggregation and optimisation specialist, describing itself as a ‘world-leading Managed Network as a Service provider’ built around a ‘Global Internet’ underlay philosophy - the consistent, repeated framing across its own materials is that a strong internet underlay, not owned physical infrastructure, is the essential foundation for effective SD-WAN and SASE. Founded in Amsterdam in 2004, Expereo has passed through a complex, multi-owner private-equity history: acquired by The Carlyle Group in July 2014, sold to Apax Partners in May 2018, and majority-acquired b...","key_differentiators":[],"best_fit_for":[],"watch_outs":[],"evidence_coverage_pct":0.225,"last_verified":"2026-09-01","evidence_source_count":18,"independent_evidence_source_count":0},{"slug":"forcepoint","name":"Forcepoint","website":"https://www.forcepoint.com/product/secure-sd-wan","category":"technology vendor","product_focus":"AI Mesh / Getvisibility, ARIA, Field Programmable SASE Logic (FPSL), FlexEdge Secure SD-WAN","cost_model":"Quote-based appliances/software/subscriptions; managed SD-WAN positioned but pricing public transparency limited.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"unknown","f02_diy_self_managed_model":"yes","f03_co_managed_service":"unknown","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"unknown","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"unknown","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"unknown","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"unknown","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"unknown"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"yes","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_primary","financial_services":"not_primary","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_primary","government_public_sector":"unknown","education":"not_primary","transport_logistics":"not_primary","professional_services":"unknown","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"unknown","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"yes"},"device_posture":"unknown","agent_platforms":{"windows":"unknown","macos":"unknown","ios":"unknown","android":"unknown","linux":"unknown","chromeos":"unknown","agentless":"unknown"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/forcepoint/","shortlist_summary":"Forcepoint’s identity traces back to Websense, founded in 1994, and its whole platform is built around a data-first philosophy rather than a network- or device-first one - the pitch is that policy should follow the data itself, not the network path or the device it happens to be on. That heritage shows up as real, credible analyst recognition specifically for data loss prevention: Frost & Sullivan’s Global DLP Company of the Year for two consecutive years, an IDC MarketScape Leader placement for worldwide DLP in 2025, and a Forrester Wave Strong Performer placement for data security platforms in Q1 2025.","key_differentiators":["FlexEdge Secure SD-WAN combines secure SD-WAN with strong DLP and data security heritage from the wider Forcepoint portfolio.","MultiLink resilience and zero-touch deployment with cloud central management.","Strong story for buyers prioritising data security and DLP as a procurement criterion."],"best_fit_for":["Enterprises with strong data protection and DLP requirements (regulated industries, government).","Organisations wanting secure SD-WAN where data security is the primary decision driver.","Buyers consolidating DLP with SD-WAN under one vendor."],"watch_outs":["Smaller SD-WAN market presence than the leading platforms.","Full SASE platform completeness has partial public evidence; SSE module depth should be confirmed.","Managed delivery is partner-led; co-managed and white-label support require partner validation."],"evidence_coverage_pct":0.325,"last_verified":"2026-09-01","evidence_source_count":44,"independent_evidence_source_count":0},{"slug":"fortinet","name":"Fortinet FortiSASE","website":"https://www.fortinet.com/products/sd-wan","category":"technology vendor","product_focus":"Fabric Connectors, FortiClient, FortiGuard AI-Powered Security Services, FortiManager / FortiAnalyzer","cost_model":"Quote-based appliances/subscriptions/support; public reseller pricing exists for hardware but enterprise managed/SASE bundles require quote.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"unknown","f02_diy_self_managed_model":"yes","f03_co_managed_service":"unknown","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"unknown","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"unknown","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"unknown","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"unknown","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"unknown","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"yes"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"yes","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"not_primary","retail_ecommerce":"unknown","manufacturing":"not_primary","energy_utilities":"unknown","government_public_sector":"unknown","education":"unknown","transport_logistics":"not_primary","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"unknown","android":"unknown","linux":"yes","chromeos":"yes","agentless":"unknown"},"pop_count":170,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/fortinet-fortisase/","shortlist_summary":"FortiSASE runs the same FortiOS operating system, and the same single-pass inspection engine, that has powered Fortinet’s physical FortiGate firewalls for over two decades. That’s a meaningfully different starting point from building a SASE platform natively for the cloud from scratch - the practical result is that FortiGate customers get a consistent policy and inspection model whether traffic is inspected on-premises or in a FortiSASE cloud point of presence, and Fortinet’s own commercial materials lean hard into a ‘Security Fabric’ discount for exactly these existing customers.","key_differentiators":["Native convergence of networking and security on a single operating system (FortiOS) across FortiGate edge, FortiManager and FortiSASE.","Strong story for buyers who want secure SD-WAN and SASE delivered from one vendor platform rather than assembled from partner integrations.","Wide appliance range covering everything from small branch to large data centre, with public hardware pricing visible through resellers."],"best_fit_for":["Security-first buyers who want SD-WAN and SASE under a single policy and log domain.","Mid-market and enterprise organisations that already run FortiGate firewalls and want to extend into SD-WAN and cloud-delivered security.","Buyers comparing single-vendor SASE platforms (alongside Cato, Palo Alto, Cisco) for converged operations."],"watch_outs":["Like Cisco, managed delivery is via partners rather than Fortinet directly; underlay and field operations are not owned by the vendor.","Buyers wanting a private global backbone will need to validate FortiSASE PoP coverage against their geographic footprint.","Best-of-breed buyers may prefer integrating FortiGate SD-WAN with a separate SSE platform (Zscaler, Netskope) rather than adopting full FortiSASE."],"evidence_coverage_pct":0.425,"last_verified":"2026-09-01","evidence_source_count":35,"independent_evidence_source_count":0},{"slug":"gtt","name":"GTT","website":"https://www.gtt.net/services/secure-networking/managed-sd-wan","category":"hybrid provider","product_focus":"GTT Envision, GTT Managed SD-WAN, GTT Secure Connect, Secure Connect with HPE (Aruba/EdgeConnect/SSE)","cost_model":"Quote-based managed service; GTT public page answers cost only as consultative/requirement-based.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"unknown","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"yes","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"unknown","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"unknown","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"unknown","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"unknown","f28_full_sase_platform":"unknown","f29_sse_ecosystem_integration":"unknown","f30_zero_trust_network_access":"unknown","f31_secure_web_gateway":"unknown","f32_casb_capability":"unknown","f33_data_loss_prevention":"unknown","f34_remote_user_access":"unknown","f35_soc_siem_soar_integration":"unknown","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"unknown"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"yes","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"unknown","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"unknown","retail_ecommerce":"unknown","manufacturing":"unknown","energy_utilities":"unknown","government_public_sector":"unknown","education":"unknown","transport_logistics":"unknown","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"unknown","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"unknown"},"device_posture":"unknown","agent_platforms":{"windows":"unknown","macos":"unknown","ios":"unknown","android":"unknown","linux":"unknown","chromeos":"unknown","agentless":"unknown"},"pop_count":400,"sla_availability_pct":99.99,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/gtt/","shortlist_summary":"GTT Communications is a specialist, purely networking-and-security-focused global provider rather than a diversified telecom conglomerate with mobile, broadband, and media businesses attached. Founded in 1998, listed on the NYSE in 2013, renamed GTT Communications in January 2014, and now headquartered in Arlington, Virginia, GTT operates a global Tier 1 IP backbone spanning more than 600 points of presence and connecting more than 3,500 cities.","key_differentiators":["Tier 1 global backbone provides strong international transit capability alongside managed SD-WAN.","Vendor-agnostic SD-WAN delivery (multiple platform options) with the Envision management platform.","Recognised as a leader for SASE and managed SD-WAN by industry analysts."],"best_fit_for":["Multinational enterprises needing strong international backbone alongside managed SD-WAN.","Buyers wanting platform flexibility within a managed service.","Organisations consolidating global transit, SD-WAN and SASE under one provider."],"watch_outs":["SASE depth depends heavily on the chosen platform partner; native SSE capabilities are not primary positioning.","Security stack is largely partner-integrated.","Commercial model is consultative; ensure cost lines for managed changes, security and SLAs are explicit."],"evidence_coverage_pct":0.125,"last_verified":"2026-09-01","evidence_source_count":17,"independent_evidence_source_count":0},{"slug":"hpe-aruba","name":"HPE Aruba EdgeConnect","website":"https://www.hpe.com/us/en/aruba-edgeconnect-sd-wan.html","category":"technology vendor","product_focus":"Cloud Intelligence, EdgeConnect Orchestrator, First-Packet iQ, HPE Aruba Networking Central","cost_model":"Quote-based subscription/appliance/support; MSP-managed options available through partners/providers.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"unknown","f02_diy_self_managed_model":"yes","f03_co_managed_service":"unknown","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"unknown","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"unknown","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"unknown","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"yes"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"unknown","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"unknown","retail_ecommerce":"not_primary","manufacturing":"unknown","energy_utilities":"not_primary","government_public_sector":"unknown","education":"unknown","transport_logistics":"not_primary","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"unknown","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"unknown","android":"unknown","linux":"yes","chromeos":"yes","agentless":"unknown"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/hpe-aruba-edgeconnect/","shortlist_summary":"HPE Aruba Networking’s SASE platform is a product of acquisition and integration rather than a single, from-scratch build. The SD-WAN engine, EdgeConnect, was built by Silver Peak Systems (founded 2004, first SD-WAN product shipped 2015) and joined HPE’s Aruba business in a $925 million acquisition completed September 2020.","key_differentiators":["EdgeConnect SD-WAN (acquired with Silver Peak) is positioned as the foundation for single-vendor SASE alongside Aruba SSE.","Strong heritage in WAN optimisation and packet-level performance engineering.","Tight integration with the broader Aruba campus and branch portfolio (LAN, Wi-Fi, NAC) for buyers consolidating end-to-end networking."],"best_fit_for":["Enterprises already running Aruba LAN/Wi-Fi who want WAN and SASE under the same operational tooling.","Buyers prioritising application performance and WAN optimisation in addition to standard SD-WAN routing.","Distributed organisations with branch-heavy footprints where Aruba campus presence is already established."],"watch_outs":["Aruba SSE is newer than the SSE leaders (Zscaler, Netskope); buyers wanting best-of-breed SASE should evaluate the SSE capability set carefully.","Managed delivery is partner-led rather than from HPE directly.","Private global backbone is not vendor-owned; SASE transport uses public cloud gateways."],"evidence_coverage_pct":0.375,"last_verified":"2026-09-01","evidence_source_count":37,"independent_evidence_source_count":0},{"slug":"juniper-networks","name":"Juniper Networks","website":"https://www.juniper.net","category":"technology vendor","product_focus":"Juniper AI-Native SD-WAN, Juniper Mist AI / Marvis AI, Juniper Secure Edge, Managed SD-WAN","cost_model":"Quote-based hardware/subscription/support; managed delivery via partners/providers.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"unknown","f02_diy_self_managed_model":"yes","f03_co_managed_service":"unknown","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"unknown","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"unknown","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"unknown","f31_secure_web_gateway":"yes","f32_casb_capability":"unknown","f33_data_loss_prevention":"unknown","f34_remote_user_access":"unknown","f35_soc_siem_soar_integration":"unknown","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"unknown"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"yes"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"unknown","ai_assistant":"yes","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"unknown","retail_ecommerce":"unknown","manufacturing":"not_primary","energy_utilities":"unknown","government_public_sector":"unknown","education":"not_primary","transport_logistics":"unknown","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"unknown","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"yes"},"device_posture":"unknown","agent_platforms":{"windows":"unknown","macos":"unknown","ios":"unknown","android":"unknown","linux":"unknown","chromeos":"unknown","agentless":"unknown"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/juniper/","shortlist_summary":"Juniper Networks offer Mist AI with WAN Assurance, delivering AI-driven monitoring and troubleshooting at the WAN edge at a depth that few competitors match. Typically shortlisted by organisations where AIOps and network assurance quality are weighted evaluation criteria rather than SD-WAN feature breadth, and worth examining more closely than the overall score might suggest if AI-driven operations is a primary requirement.","key_differentiators":["Mist AI delivers WAN Assurance, providing AI-driven monitoring and troubleshooting at the WAN edge that few competitors match.","Strong story for buyers who want the WAN integrated with Mist-powered Wi-Fi and access network management.","Juniper SRX security platform integration provides native firewall capability for buyers standardised on Juniper."],"best_fit_for":["Enterprises already running Mist for Wi-Fi or access who want unified AI-driven operations across WAN and LAN.","Buyers prioritising observability and AI-assisted incident triage as a primary purchase criterion.","Organisations with strong network engineering capability who can take advantage of WAN Assurance telemetry."],"watch_outs":["SASE story is less mature than the SASE-led vendors; SSE capabilities have limited public evidence relative to category leaders.","Managed delivery is via partners; first-party managed service is not the primary model.","Cloud on-ramp and private backbone capabilities are less prominent than dedicated SASE platforms."],"evidence_coverage_pct":0.25,"last_verified":"2026-09-01","evidence_source_count":28,"independent_evidence_source_count":0},{"slug":"lumen","name":"Lumen","website":"https://www.lumen.com/en-us/services/sd-wan.html","category":"technology vendor / managed service provider / carrier network provider","product_focus":"Black Lotus Labs, Lumen Managed SASE Solutions, Lumen SASE with Versa, Lumen SD-WAN with Versa Networks","cost_model":"Quote-based; Lumen states fully managed or co-managed SD-WAN, with access/network services priced by requirement.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"unknown","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"unknown","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"unknown","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"unknown","f30_zero_trust_network_access":"unknown","f31_secure_web_gateway":"unknown","f32_casb_capability":"unknown","f33_data_loss_prevention":"unknown","f34_remote_user_access":"unknown","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"unknown"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"unknown","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"unknown","retail_ecommerce":"unknown","manufacturing":"unknown","energy_utilities":"unknown","government_public_sector":"unknown","education":"unknown","transport_logistics":"unknown","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"unknown","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"unknown"},"device_posture":"unknown","agent_platforms":{"windows":"unknown","macos":"unknown","ios":"unknown","android":"unknown","linux":"unknown","chromeos":"unknown","agentless":"unknown"},"pop_count":50,"sla_availability_pct":99.99,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/lumen/","shortlist_summary":"Lumen Technologies has just completed a corporate transformation - on 21 May 2025, Lumen announced the sale of its Mass Markets fiber-to-the-home business - including its Quantum Fiber consumer brand, serving more than 1 million subscribers across 11 states - to AT&T for $5.75 billion in cash, a transaction that closed on 2 February 2026. Lumen’s own CEO, Kate Johnson, described the deal directly as marking the company’s transformation into ‘a Pure Play Enterprise-Focused Technology Infrastructure Company’, retaining its national, regional, state, and metro fiber backbone specifically to support that enterprise focus while divesting the consumer-facing business entirely.","key_differentiators":["Fully managed or co-managed SD-WAN with strong NaaS positioning and integrated network services.","Substantial underlay ownership in North America with global reach.","Co-managed model provides operational flexibility for customers wanting selective control."],"best_fit_for":["North American enterprises wanting integrated managed SD-WAN, access and broader network services from one provider.","Buyers attracted to the NaaS consumption model.","Organisations wanting genuine co-managed delivery rather than pure managed or pure DIY."],"watch_outs":["SASE and security capabilities are largely partner-integrated rather than native; the SSE platform choice needs explicit evaluation.","International delivery depth is less prominent than the dedicated global carriers.","Underlying SD-WAN platform should be confirmed; platform choice affects feature set."],"evidence_coverage_pct":0.25,"last_verified":"2026-09-01","evidence_source_count":17,"independent_evidence_source_count":0},{"slug":"netskope","name":"Netskope","website":"https://www.netskope.com","category":"technology vendor","product_focus":"Borderless SD-WAN, Cloud Confidence Index (CCI), Netskope Cloud Exchange (CE), Netskope One","cost_model":"Quote-based subscription; modules commonly priced by users, sites, traffic and security functions.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"unknown","f02_diy_self_managed_model":"yes","f03_co_managed_service":"unknown","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"yes"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"unknown","retail_ecommerce":"not_primary","manufacturing":"unknown","energy_utilities":"unknown","government_public_sector":"unknown","education":"unknown","transport_logistics":"unknown","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"unknown","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"unknown","android":"unknown","linux":"yes","chromeos":"yes","agentless":"unknown"},"pop_count":120,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/netskope/","shortlist_summary":"Netskope sits in an interesting middle ground between a pure security-first platform and a fully networked one: unlike the likes of Zscaler, it has invested in its own converged mesh network (NewEdge) and a purpose-built SD-WAN (Borderless SD-WAN, built on the 2022 Infiot acquisition), so the ‘security company bolting on networking’ story is a few years further along than Zscaler’s; unlike Cato, that network is built on peering and interconnects across 67 regions rather than an owned private backbone. Where Netskope stands out is data-centric SSE - its Cloud Confidence Index covers 85,000+ SaaS and GenAI apps, its DLP heritage runs deep (it was arguably the original CASB/DLP-first vendor...","key_differentiators":["Strong CASB heritage; widely recognised as a leading SSE vendor for SaaS-heavy environments.","Borderless WAN (from the Infiot acquisition) extends Netskope into single-vendor SASE for buyers wanting both layers from one platform.","Detailed SaaS application visibility and policy controls."],"best_fit_for":["Enterprises with deep SaaS adoption where CASB and DLP are top procurement priorities.","Buyers comparing single-vendor SASE platforms after starting with SSE.","Organisations selecting Netskope SSE alongside a separate SD-WAN platform via partner integration."],"watch_outs":["Native SD-WAN (Borderless WAN) is newer than dedicated SD-WAN platforms; validate path selection and QoS depth in RFP.","Managed delivery is partner-led; first-party managed service is limited.","Premium pricing with modular structure; full SASE bundle costs can scale meaningfully with users and traffic."],"evidence_coverage_pct":0.575,"last_verified":"2026-09-01","evidence_source_count":45,"independent_evidence_source_count":0},{"slug":"ntt","name":"NTT DATA","website":"https://www.nttglobal.net/services/sd-wan","category":"carrier network provider","product_focus":"Managed Campus Networks with Prisma SASE, Managed Internet Connectivity, Managed IoT and Network as a Service (NaaS), Managed Network Security","cost_model":"Quote-based managed service; global design/delivery/support, SD-WAN vendor and security stack determine cost.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"unknown","f03_co_managed_service":"unknown","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"unknown","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"unknown","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"unknown","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"unknown","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"unknown","f28_full_sase_platform":"unknown","f29_sse_ecosystem_integration":"unknown","f30_zero_trust_network_access":"unknown","f31_secure_web_gateway":"unknown","f32_casb_capability":"unknown","f33_data_loss_prevention":"unknown","f34_remote_user_access":"unknown","f35_soc_siem_soar_integration":"unknown","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"unknown"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"yes","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"unknown","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"unknown","retail_ecommerce":"unknown","manufacturing":"unknown","energy_utilities":"unknown","government_public_sector":"unknown","education":"unknown","transport_logistics":"unknown","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"unknown"},"device_posture":"unknown","agent_platforms":{"windows":"unknown","macos":"unknown","ios":"unknown","android":"unknown","linux":"unknown","chromeos":"unknown","agentless":"unknown"},"pop_count":75,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/ntt-data/","shortlist_summary":"NTT DATA is a massive, globally-established IT services and network provider, founded in Japan in 1988 as a spinoff of Nippon Telegraph and Telephone (NTT), and now operating in more than 70 countries with approximately 190,000 employees. A significant, current corporate event is worth understanding first: on 8 May 2025, NTT, Inc. (renamed that same year from Nippon Telegraph and Telephone Corporation) launched a tender offer to acquire full ownership of NTT DATA Group Corporation, its previously partially-owned, publicly-listed subsidiary; the offer, at JPY 4,000 per share (a confirmed 41.5% premium), achieved 81.75% acceptance, and following shareholder approval on 29 August 2025, NTT D...","key_differentiators":["24x7 managed SD-WAN delivery via global operations centres with strong portal visibility.","Managed SASE partnership with Palo Alto Networks (Prisma SASE) for buyers wanting that platform under managed service.","Strong global delivery footprint including APAC, EMEA and Americas."],"best_fit_for":["Multinational enterprises wanting truly global managed delivery with consistent operations across regions.","Buyers wanting Prisma SASE consumed as a fully managed service.","Organisations prioritising managed service maturity and global SOC/NOC depth."],"watch_outs":["Platform fit depends on which vendor is being proposed (Palo Alto, Zscaler, others); evaluate platform independently.","Commercial complexity is meaningful at global scale; ensure scope and RACI are explicit.","DIY/self-managed model is not the primary positioning."],"evidence_coverage_pct":0.075,"last_verified":"2026-09-01","evidence_source_count":22,"independent_evidence_source_count":0},{"slug":"opensystems","name":"Open Systems","website":"https://netify.co.uk/marketplace/opensystems/","category":"technology vendor / managed service provider","product_focus":"MDR+ (Managed Detection and Response), Managed SD-WAN / Secure SD-WAN, Managed, Universal SSE, Mission Control","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"unknown","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"unknown","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"unknown","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"unknown","f30_zero_trust_network_access":"unknown","f31_secure_web_gateway":"unknown","f32_casb_capability":"unknown","f33_data_loss_prevention":"unknown","f34_remote_user_access":"unknown","f35_soc_siem_soar_integration":"unknown","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"unknown"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"yes","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"unknown","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"unknown","retail_ecommerce":"unknown","manufacturing":"unknown","energy_utilities":"unknown","government_public_sector":"unknown","education":"unknown","transport_logistics":"unknown","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"unknown","mid_market":"unknown","small_business":"unknown"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"yes"},"device_posture":"unknown","agent_platforms":{"windows":"unknown","macos":"unknown","ios":"unknown","android":"unknown","linux":"unknown","chromeos":"unknown","agentless":"unknown"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"unknown","uk_support_desk":"unknown","named_tam":"unknown"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/opensystems/","shortlist_summary":"Open Systems founded in 1990 in Basel, Switzerland, more than three decades before the SASE category itself existed, originally as a managed security service provider before evolving its platform into what it now markets as native, managed SASE Experience. The company’s ownership history took a distinctive turn in 2023: after a period under the European private-equity firm EQT, Open Systems was acquired by Swiss Post - Switzerland’s state-backed national postal and logistics institution - a materially different kind of owner from the venture-capital or private-equity structures behind most other vendors in this category.","key_differentiators":[],"best_fit_for":[],"watch_outs":[],"evidence_coverage_pct":0.175,"last_verified":"2026-09-01","evidence_source_count":21,"independent_evidence_source_count":0},{"slug":"orange-business","name":"Orange Business","website":"https://www.orange-business.com","category":"carrier network provider / integrator","product_focus":"Orange Business Evolution Platform, Orange Business SASE with Palo Alto Networks Prisma SASE, Orange Business and Fortinet SASE, Orange Cyberdefense Managed SASE","cost_model":"Quote-based managed service; costs driven by access circuits, countries, vendor platform, security services and SLAs.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"unknown","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"unknown","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"unknown","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"unknown","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"unknown","f30_zero_trust_network_access":"unknown","f31_secure_web_gateway":"unknown","f32_casb_capability":"unknown","f33_data_loss_prevention":"unknown","f34_remote_user_access":"unknown","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"unknown"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"yes","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"unknown","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"unknown","retail_ecommerce":"unknown","manufacturing":"unknown","energy_utilities":"unknown","government_public_sector":"unknown","education":"unknown","transport_logistics":"unknown","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"unknown"},"device_posture":"unknown","agent_platforms":{"windows":"unknown","macos":"unknown","ios":"unknown","android":"unknown","linux":"unknown","chromeos":"unknown","agentless":"unknown"},"pop_count":400,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/orangebusiness/","shortlist_summary":"Orange Business is the enterprise services arm of Orange S.A., one of the largest telecommunications groups in Europe, headquartered in France and listed on Euronext Paris. Orange Business itself traces its lineage to Equant and Global One before being formally established on 1 June 2006, and was renamed from Orange Business Services to Orange Business on 16 February 2023; Frédéric Schepens serves as CEO (appointed July 2024), leading approximately 30,000 employees.","key_differentiators":["Global managed network leadership with strong service assurance, NOC depth and field operations.","Multi-vendor managed SD-WAN and SASE delivery (including Palo Alto Networks managed SASE via Orange Cyberdefense).","Strong UK and EMEA presence with established enterprise managed service track record."],"best_fit_for":["Multinational enterprises wanting a single global managed provider for SD-WAN, SASE and access.","Buyers prioritising service ownership, RCA quality and change governance over best-of-breed platform selection.","Organisations needing access circuit sourcing alongside SD-WAN platform delivery."],"watch_outs":["Platform choice depends on which Orange-supported vendor is selected; underlying platform fit and roadmap should be evaluated independently.","Commercial model is bespoke; rate cards and change costs need careful scoping.","DIY/self-managed model is not the primary positioning."],"evidence_coverage_pct":0.175,"last_verified":"2026-09-01","evidence_source_count":20,"independent_evidence_source_count":0},{"slug":"palo-alto-networks","name":"Palo Alto Networks Prisma SASE","website":"https://www.paloaltonetworks.com/sase","category":"technology vendor","product_focus":"ADEM, AI Access Security, Enterprise DLP, Precision AI / Strata Copilot","cost_model":"Quote-based subscriptions; appliance/ION and Prisma Access/SASE licensing typically priced by users, bandwidth, locations and term.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"unknown","f02_diy_self_managed_model":"yes","f03_co_managed_service":"unknown","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"unknown","f06_last_mile_circuit_management":"yes","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"unknown","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"yes"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"unknown","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"not_primary","retail_ecommerce":"unknown","manufacturing":"unknown","energy_utilities":"not_primary","government_public_sector":"unknown","education":"not_primary","transport_logistics":"partial","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"unknown","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_user","per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"unknown","android":"unknown","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":100,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/palo-alto-prisma-sase/","shortlist_summary":"Palo Alto Networks isn’t just selling SASE, it’s selling one door into a much larger security estate (NGFWs, Prisma Cloud, Cortex XDR/XSIAM, identity security) that most large enterprises already have some footprint in. That shows up directly in its differentiators: it’s one of the few vendors recognised as a Leader in all three of Gartner’s Single-Vendor SASE, SSE and SD-WAN Magic Quadrants simultaneously, and its ‘platformisation’ commercial strategy rewards multi-product commitment with steep discounts.","key_differentiators":["Prisma SASE converges SD-WAN, cloud-delivered security, and digital experience management (ADEM) under a single platform identity.","Strong threat intelligence and security capability inheritance from the wider Palo Alto Networks portfolio.","Often selected by buyers consolidating from multiple security vendors onto a single SASE platform."],"best_fit_for":["Enterprises with mature security operations that want SASE built around a leading security platform rather than a security layer on top of an SD-WAN platform.","Buyers consolidating CASB, SWG, ZTNA and FWaaS onto one vendor for unified policy.","Organisations with global SaaS-heavy traffic patterns that benefit from Prisma Access PoP coverage."],"watch_outs":["Premium pricing relative to firewall-led SD-WAN vendors; commercial model requires careful scoping by users, bandwidth, locations and term.","Managed delivery is via partners (Orange Business, NTT, others); first-party managed service is not the primary model.","Private global backbone is not vendor-owned; cloud transport uses internet and Prisma Access PoPs."],"evidence_coverage_pct":0.55,"last_verified":"2026-09-01","evidence_source_count":41,"independent_evidence_source_count":0},{"slug":"sonicwall","name":"SonicWall Cloud Secure Edge","website":"https://www.sonicwall.com","category":"technology vendor","product_focus":"Global Response Intelligent Defence (GRID) Threat Network, Managed Protection Security Suite (MPSS), SAMI, Secure Internet Access","cost_model":"Public hardware/security bundle pricing often available via resellers; managed options partner-dependent.","public_pricing_visibility":"quote_based","value_tier":"budget","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"unknown","f02_diy_self_managed_model":"yes","f03_co_managed_service":"unknown","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"unknown","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"unknown","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"unknown","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"unknown","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"unknown","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"unknown","f28_full_sase_platform":"unknown","f29_sse_ecosystem_integration":"unknown","f30_zero_trust_network_access":"unknown","f31_secure_web_gateway":"unknown","f32_casb_capability":"unknown","f33_data_loss_prevention":"unknown","f34_remote_user_access":"unknown","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"unknown"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"unknown","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"unknown","retail_ecommerce":"unknown","manufacturing":"not_primary","energy_utilities":"unknown","government_public_sector":"unknown","education":"unknown","transport_logistics":"unknown","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"unknown","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"yes"},"device_posture":"unknown","agent_platforms":{"windows":"unknown","macos":"unknown","ios":"unknown","android":"unknown","linux":"unknown","chromeos":"unknown","agentless":"unknown"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/sonicwall-cse/","shortlist_summary":"SonicWall is one of the oldest names in network security still operating under its own brand - founded 1991 as Sonic Systems, later renamed SonicWall, and shaped by an eventful corporate history: an IPO in 1999, a return to private ownership, acquisition by Dell in 2012, and a $2 billion-plus divestiture from Dell in November 2016 that spun the company out as an independent business jointly owned by private equity firms Francisco Partners and Elliott Management, who remain its owners today. Cloud Secure Edge (CSE), the product this profile covers, has its own separate origin: it began as Banyan Security, an independent SSE vendor, before SonicWall acquired it in January 2023 specifically...","key_differentiators":["SD-WAN delivered via existing TZ, NSa and SM firewall appliances; familiar deployment for organisations standardised on SonicWall.","Strong SMB and mid-market positioning with reseller channel and public hardware pricing.","Integrated firewall and SD-WAN avoids separate appliances for smaller branches."],"best_fit_for":["SMB and mid-market organisations already running SonicWall firewalls.","Distributed branch estates where firewall-led SD-WAN is operationally simpler than a separate SD-WAN platform.","Buyers prioritising public pricing visibility and reseller channel options."],"watch_outs":["SASE and SSE capabilities have partial public evidence; depth should be confirmed in RFP.","Less suited to large enterprise multinational deployments requiring private backbone or PoP architectures.","Public cloud gateway and multi-cloud transit fabric capabilities are less prominent than cloud-native SASE vendors."],"evidence_coverage_pct":0.05,"last_verified":"2026-09-01","evidence_source_count":24,"independent_evidence_source_count":0},{"slug":"arista-velocloud","name":"VeloCloud","website":"https://www.arista.com","category":"technology vendor","product_focus":"Arista AVA, Edge Threat Management (ETM), SSE partner integrations, VeloCloud Orchestrator","cost_model":"Quote-based edge subscriptions/appliances/support; managed services commonly delivered by carriers/MSPs.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"unknown","f02_diy_self_managed_model":"yes","f03_co_managed_service":"unknown","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"unknown","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"unknown","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"unknown","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"partner_integrated","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"unknown","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"partner_integrated","f30_zero_trust_network_access":"unknown","f31_secure_web_gateway":"partner_integrated","f32_casb_capability":"partner_integrated","f33_data_loss_prevention":"unknown","f34_remote_user_access":"unknown","f35_soc_siem_soar_integration":"unknown","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"yes","f40_managed_service_assurance":"unknown"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"unknown","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"partner_integrated","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"unknown","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_primary","government_public_sector":"unknown","education":"not_primary","transport_logistics":"not_primary","professional_services":"unknown","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"unknown","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"yes"},"device_posture":"unknown","agent_platforms":{"windows":"unknown","macos":"unknown","ios":"unknown","android":"unknown","linux":"unknown","chromeos":"unknown","agentless":"unknown"},"pop_count":150,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/velocloud/","shortlist_summary":"VeloCloud was founded in 2012 as a cloud-delivered SD-WAN pioneer, acquired by VMware in 2017 for approximately $336 million, then came under Broadcom’s ownership when Broadcom completed its roughly $69 billion acquisition of VMware in 2023. Under Broadcom, the product was paired with Symantec’s security stack (Broadcom separately owns Symantec’s enterprise security business) into a single-vendor offering called ‘VMware VeloCloud SASE, secured by Symantec’, announced February 2024.","key_differentiators":["VeloCloud was an early SD-WAN platform with strong cloud-delivered gateway architecture; now under Arista following the 2025 acquisition.","Multi-tenant design has made VeloCloud common in carrier and MSP managed services.","Application-aware routing and dynamic path selection are mature capabilities with substantial deployment history."],"best_fit_for":["Enterprises consuming VeloCloud through a managed service provider (Vodafone UK, others).","Service providers running multi-tenant SD-WAN at scale.","Buyers comfortable with a platform in transition under new ownership."],"watch_outs":["Platform is mid-transition from VMware/Broadcom to Arista; product roadmap, naming and integration story will evolve.","Security and SASE capabilities are largely partner-integrated rather than native.","Direct enterprise sales motion is less established than legacy vendors; most consumption is via managed providers."],"evidence_coverage_pct":0.25,"last_verified":"2026-09-01","evidence_source_count":24,"independent_evidence_source_count":0},{"slug":"verizon-business","name":"Verizon Business","website":"https://www.verizon.com/business/resources/lp/secure-access-service-edge","category":"managed service provider / carrier network provider","product_focus":"RingCentral (voice/UC integration), Verizon Managed SD Branch, Verizon Managed SD WAN, Verizon SASE Management","cost_model":"Quote-based managed service; typically platform, access, security bundle, sites/users/bandwidth/term.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"unknown","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"unknown","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"unknown","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"unknown","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"unknown","f30_zero_trust_network_access":"unknown","f31_secure_web_gateway":"unknown","f32_casb_capability":"unknown","f33_data_loss_prevention":"unknown","f34_remote_user_access":"unknown","f35_soc_siem_soar_integration":"unknown","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"unknown"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"unknown","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"not_primary","retail_ecommerce":"unknown","manufacturing":"unknown","energy_utilities":"unknown","government_public_sector":"unknown","education":"unknown","transport_logistics":"unknown","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"unknown"},"device_posture":"unknown","agent_platforms":{"windows":"unknown","macos":"unknown","ios":"unknown","android":"unknown","linux":"unknown","chromeos":"unknown","agentless":"unknown"},"pop_count":null,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/verizon/","shortlist_summary":"Verizon Communications is one of the largest telecommunications companies in the world - generating $133.6 billion in revenue in 2023 (2025 consensus estimates are approximately $134-135 billion) and serving nearly all of the Fortune 500 - and its managed SD-WAN and SASE proposition sits within Verizon Business, itself organised into three named customer groups (Enterprise and Public Sector, Business Markets and Other, and Wholesale). Verizon’s SASE architecture is an extensively multi-platform proposition: its own materials confirm direct integration with Versa, Cisco (cEdge and vEdge), Zscaler (both Zscaler Internet Access and Zscaler Private Access), and Palo Alto Networks Prisma Acces...","key_differentiators":["Global carrier-led managed SASE and SD-WAN with strong North American presence and international delivery.","Versa Networks partnership provides multi-tenant SD-WAN platform with security, routing and analytics under managed service.","Established reputation as a SASE managed services leader in industry analyst rankings."],"best_fit_for":["North American and multinational enterprises wanting carrier-led managed SD-WAN and SASE.","Buyers comfortable with Versa as the underlying platform via managed delivery.","Organisations prioritising service maturity and global delivery capability."],"watch_outs":["Platform is largely Versa-based; buyers wanting platform optionality should evaluate alternatives.","Commercial model is bespoke; cost transparency and change governance require careful contracting.","DIY/self-managed model is not the primary positioning."],"evidence_coverage_pct":0.15,"last_verified":"2026-09-01","evidence_source_count":20,"independent_evidence_source_count":0},{"slug":"versa-networks","name":"Versa Networks","website":"https://versa-networks.com","category":"technology vendor","product_focus":"Inbound SSE, Secure Enterprise Browser, VOS, Versa Analytics","cost_model":"Quote-based subscription; MSP/carrier pricing depends on tenant scale, bandwidth, security package and delivery model.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"unknown","f02_diy_self_managed_model":"yes","f03_co_managed_service":"unknown","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"yes","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"unknown","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"unknown"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"unknown","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_primary","financial_services":"not_primary","retail_ecommerce":"unknown","manufacturing":"unknown","energy_utilities":"unknown","government_public_sector":"unknown","education":"not_primary","transport_logistics":"not_primary","professional_services":"unknown","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"unknown","mid_market":"unknown","small_business":"yes"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"unknown"},"pop_count":90,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/versa-networks/","shortlist_summary":"Versa Networks built its SASE platform around a single-vendor, single-operating-system architecture from an early starting point - the company was founded in 2012, before the SASE category itself existed, on the thesis that legacy hardware and static WAN architectures were holding enterprises back from the cloud. That heritage shows up directly in VersaONE’s design: one operating system (VOS), one console, one policy engine and one data lake, with a single-pass parallel-processing architecture built to avoid the latency penalty of chaining separate security functions together.","key_differentiators":["Multi-tenancy from the ground up, making Versa a common choice for service providers and carriers building managed SD-WAN and SASE platforms.","Versa Operating System (VOS) provides a converged networking and security software stack across cloud and on-premises delivery.","Often the underlying platform when buyers select a managed SD-WAN service from a carrier or MSP."],"best_fit_for":["Service providers, carriers and MSPs building white-label managed SD-WAN or SASE services.","Enterprises consuming Versa indirectly through a managed provider (e.g. Verizon, Orange).","Buyers who want platform flexibility across cloud-delivered, on-premises and hybrid delivery models."],"watch_outs":["Less well-known to enterprise buyers as a direct purchase; most enterprise consumption is via service providers.","Buyers should confirm exactly which managed provider is delivering the platform and what the operational RACI looks like.","Brand recognition trails Cisco, Palo Alto and Fortinet in enterprise procurement processes."],"evidence_coverage_pct":0.425,"last_verified":"2026-09-01","evidence_source_count":29,"independent_evidence_source_count":0},{"slug":"virgin-media-o2","name":"Virgin Media O2 Business","website":"https://netify.co.uk/marketplace/virgin-media-o2/","category":"managed service provider / carrier network provider","product_focus":"8x8 Voice for Teams, Cloud Infrastructure as a Service / Platform as a Service, Managed Detection and Response, Success Agreement","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"unknown","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"unknown","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"unknown","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"unknown","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"unknown","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"unknown","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"unknown","f30_zero_trust_network_access":"unknown","f31_secure_web_gateway":"unknown","f32_casb_capability":"unknown","f33_data_loss_prevention":"unknown","f34_remote_user_access":"unknown","f35_soc_siem_soar_integration":"unknown","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"unknown"},"deployment_speed":"unknown","regions":{"uk_ireland":"yes","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"unknown","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"not_primary","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"unknown","government_public_sector":"unknown","education":"unknown","transport_logistics":"unknown","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"unknown","small_business":"unknown"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"unknown"},"device_posture":"unknown","agent_platforms":{"windows":"unknown","macos":"unknown","ios":"unknown","android":"unknown","linux":"unknown","chromeos":"unknown","agentless":"unknown"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"unknown","uk_support_desk":"unknown","named_tam":"unknown"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/virgin-media-o2/","shortlist_summary":"Virgin Media O2 (VMO2) is itself a 50/50 joint venture between Liberty Global and Telefónica, formed in June 2021 from the merger of Virgin Media UK and O2 UK. On 12 May 2025, VMO2 announced it would combine substantially all of its direct business-to-business operations - including Virgin Media O2 Business - with Daisy Group, a long-established, independent UK B2B communications and IT provider founded in 2001.","key_differentiators":[],"best_fit_for":[],"watch_outs":[],"evidence_coverage_pct":0.1,"last_verified":"2026-09-01","evidence_source_count":19,"independent_evidence_source_count":0},{"slug":"vodafone-business","name":"Vodafone Business","website":"https://vb2b.vodafone.com/business/products/fixed-connectivity/sd-wan","category":"managed service provider / carrier network provider","product_focus":"Fortinet-based Secure Networking, Vodafone Business Managed Network Services, Vodafone Business Network as a Service (NaaS), Vodafone Business SASE","cost_model":"Quote-based managed service; carrier access, SD-WAN platform, security services and country coverage determine costs.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"unknown","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"unknown","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"unknown","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"unknown","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"unknown","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"unknown","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"unknown","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"unknown","f30_zero_trust_network_access":"unknown","f31_secure_web_gateway":"unknown","f32_casb_capability":"unknown","f33_data_loss_prevention":"unknown","f34_remote_user_access":"unknown","f35_soc_siem_soar_integration":"unknown","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"unknown","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"yes"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"yes","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"unknown","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"not_primary","retail_ecommerce":"unknown","manufacturing":"not_primary","energy_utilities":"unknown","government_public_sector":"unknown","education":"unknown","transport_logistics":"unknown","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"yes","small_business":"unknown"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"unknown"},"device_posture":"unknown","agent_platforms":{"windows":"unknown","macos":"unknown","ios":"unknown","android":"unknown","linux":"unknown","chromeos":"unknown","agentless":"unknown"},"pop_count":212,"sla_availability_pct":99.99,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"yes","named_tam":"yes"},"logging":{"siem_export":"unknown","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/vodafone/","shortlist_summary":"Vodafone Group is a vast, multinational telecommunications operator - for the financial year ended 31 March 2024, Vodafone Group reported total revenue of €36.7 billion, with Vodafone Business specifically operating across all of Vodafone’s markets, addressing a claimed €160 billion addressable market, serving 5 million customers, managing 198 million IoT connections (FY24 figure), and contributing 24% of Group service revenue. Against that scale, the managed SD-WAN and SASE proposition examined in this profile is one product line within a much larger enterprise business.","key_differentiators":["Strong UK and European market presence with NaaS positioning and integrated mobile/fixed access.","VeloCloud-based managed SD-WAN in the UK with broader Vodafone international footprint.","Tight integration with Vodafone mobile services for buyers prioritising cellular and 5G access."],"best_fit_for":["UK and European enterprises wanting carrier-led SD-WAN with strong mobile and 5G integration.","Buyers consolidating fixed and mobile access alongside SD-WAN platform delivery.","Organisations attracted to the NaaS consumption model."],"watch_outs":["Underlying platform varies by region (VeloCloud in UK, others elsewhere); ensure consistency for multinational deployment.","Security and SASE capabilities are largely partner-integrated.","Commercial structure bundles access, mobile and platform; line-item costing requires explicit RFP."],"evidence_coverage_pct":0.175,"last_verified":"2026-09-01","evidence_source_count":17,"independent_evidence_source_count":0},{"slug":"zscaler","name":"Zscaler","website":"https://www.zscaler.com","category":"technology vendor","product_focus":"AI Security / GenAI Security, Data Fabric for Security, Risk360, Zero Trust Branch","cost_model":"Quote-based subscription; typically per-user/workload/location modules; SD-WAN integrations may add partner/vendor cost.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"unknown","f02_diy_self_managed_model":"yes","f03_co_managed_service":"unknown","f04_multi_tenant_msp_white_label_support":"unknown","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"yes","f07_lifecycle_management":"unknown","f08_flexible_commercial_model":"unknown","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"unknown","f11_active_active_link_utilisation":"unknown","f12_application_aware_routing":"unknown","f13_qos_and_traffic_shaping":"unknown","f14_packet_loss_remediation":"unknown","f15_local_internet_breakout":"unknown","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"unknown","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"unknown","f20_private_pops_dedicated_pops":"unknown","f21_private_global_backbone":"unknown","f22_regional_breakout_and_data_residency":"unknown","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"unknown","f25_high_availability_design":"unknown","f26_sla_backed_service_fabric":"unknown","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"unknown","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"unknown","f37_customer_portal_and_rbac":"unknown","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"unknown","f40_managed_service_assurance":"yes"},"deployment_speed":"unknown","regions":{"uk_ireland":"unknown","europe":"unknown","north_america":"unknown","asia_pacific":"unknown","middle_east_africa":"yes","latin_america":"unknown","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"unknown","alibaba_cloud":"unknown"},"ai_capability":{"ai_driven_operations":"unknown","ai_security_analytics":"yes","ai_assistant":"unknown","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"unknown","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"unknown","financial_services":"not_primary","retail_ecommerce":"unknown","manufacturing":"unknown","energy_utilities":"unknown","government_public_sector":"unknown","education":"unknown","transport_logistics":"unknown","professional_services":"unknown","hospitality_leisure":"unknown"},"organisation_fit":{"large_global_enterprise":"unknown","mid_market":"unknown","small_business":"unknown"},"pricing_units":["per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"unknown","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":160,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/zscaler/","shortlist_summary":"Zscaler is the vendor that effectively created the SSE category, and it’s still the one most competitors get measured against when it comes to sheer scale and security depth - the Zero Trust Exchange runs across 150+ data centres, processes over 400 billion transactions a day, and holds FedRAMP High authorisation for ZIA and ZPA (other SASE-class vendors also hold FedRAMP High or equivalent for their own components). If you’re a security-first buyer looking to retire VPN concentrators and stitch SWG, CASB, DLP and ZTNA together under one console, Zscaler is one of the most proven single-vendor routes to get there.","key_differentiators":["Category leader in SSE with ZIA, ZPA and ZDX; widely adopted as the security layer in best-of-breed SASE architectures.","Strong ecosystem of SD-WAN partners (Cisco, others) for buyers wanting Zscaler security with a separate SD-WAN platform.","Mature Zero Trust platform with substantial enterprise deployment history."],"best_fit_for":["Enterprises selecting best-of-breed SSE alongside a separate SD-WAN platform.","Security-driven SASE strategies where the SSE layer is the primary architectural decision.","Buyers consolidating multiple security point solutions onto a single SSE vendor."],"watch_outs":["Historically SSE-led; native SD-WAN capability is less mature than dedicated SD-WAN platforms (validate path selection, QoS and packet loss in RFP).","Premium pricing; typically per-user/workload/location with security modules adding cost.","Buyers needing one vendor for both SD-WAN and security may prefer a converged platform (Cato, FortiSASE, Prisma)."],"evidence_coverage_pct":0.425,"last_verified":"2026-09-01","evidence_source_count":59,"independent_evidence_source_count":0}],"governed_provider_profiles":[{"comparison_slug":"aryaka","name":"Aryaka","provider_types":["technology vendor"],"summary":"Aryaka is one of the older, more established names in this category - founded 2009, more than 15 years before ‘SASE’ existed as an analyst-defined term, originally as a WAN optimisation and application-acceleration company before evolving into what it now calls ‘Unified SASE as a Service’. That specific phrase matters: Aryaka positions itself, and is described by independent commentary, as the first company to deliver SASE as a fully managed service rather than a self-managed software platform, built around a distinctive single-pass architecture (OnePASS) running over an owned, global private core network spanning more than 40 points of presence across six continents.","reviewed_at":"2026-09-01","products":["AI>Observe","AI>Secure","Aryaka Cyber Threat Research Lab (CTRL)","Aryaka Network Access Point (ANAP)"],"evidence_source_count":26,"url":"https://netify.co.uk/marketplace/aryaka/"},{"comparison_slug":"att-business","name":"AT&T Business","provider_types":["managed service provider","carrier network provider"],"summary":"AT&T is one of the largest telecommunications companies in the United States, reporting trailing-twelve-month revenue of approximately $120.7 billion as of Q1 2026, with fixed-line enterprise services (including the SD-WAN and SASE proposition covered in this profile) accounting for roughly 14% of total revenue. AT&T’s SASE strategy is built on two named, current, dated technology partnerships.","reviewed_at":"2026-09-01","products":["AT&T Dynamic Defence with Palo Alto Networks","AT&T Managed SASE with Cisco","AT&T Managed SD-WAN","AT&T Network as a Service (NaaS)"],"evidence_source_count":17,"url":"https://netify.co.uk/marketplace/att/"},{"comparison_slug":"barracuda-secureedge","name":"Barracuda SecureEdge","provider_types":["technology vendor"],"summary":"Barracuda Networks is a long-established cybersecurity company - founded 2003, initially focused on spam and virus firewalls - that has changed ownership twice in the past decade without ever settling into a stable, single corporate structure: it went public in 2013, was taken private by Thoma Bravo in 2018 for $1.6 billion, and was acquired again by KKR in 2022. SecureEdge, launched in 2023, is Barracuda’s single-vendor SASE platform, integrating Secure SD-WAN, Firewall-as-a-Service, ZTNA and Secure Web Gateway, and it now sits within Barracuda’s broader BarracudaONE umbrella alongside the company’s much older, well-established email, data, and application-protection product lines.","reviewed_at":"2026-09-01","products":["Barracuda SecureEdge","Barracuda SecureEdge Access","BarracudaONE","Secure Edge Manager"],"evidence_source_count":23,"url":"https://netify.co.uk/marketplace/barracuda-secureedge/"},{"comparison_slug":"bt-business","name":"BT","provider_types":["managed service provider","carrier network provider"],"summary":"BT is not a single-platform SASE company, but the UK’s largest telecommunications operator and managed service provider, delivering SASE as one service line within a vastly larger, publicly-listed (LSE: BT.A) group.","reviewed_at":"2026-09-01","products":["Agile Connect","BT Managed Fortinet Firewall","BT Managed SASE (Fortinet-based)","BT Managed SASE (Meraki-based)"],"evidence_source_count":16,"url":"https://netify.co.uk/marketplace/bt/"},{"comparison_slug":"cato-networks","name":"Cato Networks","provider_types":["technology vendor"],"summary":"Cato Networks is frequently scored by us at Netify as being one of the easiest platforms to actually use, and they’re often considered a more integrated offering than most of the competition, which is primarily down to building their SASE solution from the ground up rather than bolting security onto an existing networking product, or the other way round. If you’re looking to collapse a fragmented maze of legacy firewalls, MPLS circuits, and point-product security tools into a single, cloud-native operational plane, Cato is one of the more compelling single-vendor SASE offerings on the market, though its middle-mile-centric architecture and fairly opaque licensing model mean it requires ca...","reviewed_at":"2026-09-01","products":["Cato Browser Extension","Cato Client","Cato DEM","Cato EPP/EDR"],"evidence_source_count":40,"url":"https://netify.co.uk/marketplace/cato-networks/"},{"comparison_slug":"check-point","name":"Check Point","provider_types":["technology vendor"],"summary":"Check Point’s SASE platform has been through two names in under three years. The underlying technology began life as Perimeter 81, an independent Israeli SSE/ZTNA vendor founded in 2018 that had grown to more than 3,000 customers and a Forrester Zero Trust Wave recognition before Check Point Software Technologies - the much larger, long-established Israeli cybersecurity vendor behind Check Point Firewall-1, founded in 1993 - acquired it for approximately $490 million in a deal announced September 2023.","reviewed_at":"2026-09-01","products":["AI Network Firewall / AI Defence Plane","CASB","Check Point Infinity Architecture","Check Point SASE Platform"],"evidence_source_count":28,"url":"https://netify.co.uk/marketplace/checkpoint/"},{"comparison_slug":"cisco","name":"Cisco","provider_types":["technology vendor"],"summary":"Cisco’s own materials describe SASE explicitly as ‘a journey - you can start with SD-WAN or SSE and converge over time’, which is a different pitch to Cato’s, Zscaler’s, Netskope’s or Palo Alto’s single-platform-from-day-one story. In practise, ‘Cisco SASE’ means choosing between Cisco Secure Access (cloud-delivered SSE, evolved from Cisco Umbrella), Cisco Catalyst SD-WAN (the enterprise-grade fabric, formerly Viptela) or Meraki SD-WAN (the simpler, cloud-first option), and Cisco Secure Connect (a turnkey bundle of Secure Access plus Meraki SD-WAN specifically).","reviewed_at":"2026-09-01","products":["Cisco AI Defence","Cisco Catalyst SD-WAN","Cisco Duo","Cisco ISE"],"evidence_source_count":49,"url":"https://netify.co.uk/marketplace/cisco/"},{"comparison_slug":"cloudflare-one","name":"Cloudflare One","provider_types":["technology vendor"],"summary":"Rather than building a security platform and adding network reach, or building a network and adding security, Cloudflare started as one of the internet’s largest content-delivery and DDoS-mitigation networks (founded 2009, public since 2019 on NYSE: NET) and extended that same global infrastructure - every product running in every data centre, not routed to a handful of regional security hubs - into a full SASE platform. That architecture is the platform’s clearest, most defensible claim: Cloudflare states it delivers full SASE from more than 300 cities, which it describes as more than three times the footprint of other SASE vendors, with sub-50-millisecond reach to 95% of the world’s int...","reviewed_at":"2026-09-01","products":["AI Gateway / Agents SDK / MCP security","CASB","Cloudflare Access","Cloudflare One"],"evidence_source_count":47,"url":"https://netify.co.uk/marketplace/cloudflare-one/"},{"comparison_slug":"colt-technology-services","name":"Colt Technology Services","provider_types":["carrier network provider"],"summary":"Colt Technology Services is a long-established, European-anchored network operator, founded in 1992 as City of London Telecommunications and headquartered in London. Since 2015 Colt has been privately owned by Fidelity International (Eight Roads’ current specific role to be reconfirmed), and its network footprint expanded materially through a significant acquisition of Lumen Technologies’ Europe, Middle East and Africa business for $1.8 billion, completed November 2022, reinforcing Colt’s own confirmed network scale of more than 30 countries, more than 50 metropolitan area networks, and more than 32,000 on-net buildings, all delivered over its own named Colt IQ Network platform.","reviewed_at":"2026-09-01","products":["Colt SASE Gateway solution","Colt SD WAN","Colt SD WAN Remote Access","Partner IP Access (Blue Wireless)"],"evidence_source_count":13,"url":"https://netify.co.uk/marketplace/colt/"},{"comparison_slug":"comcast-business","name":"Comcast Business","provider_types":["managed service provider","carrier network provider"],"summary":"Comcast Business’s managed SD-WAN and SASE proposition traces its specialist technical foundation to Masergy, a managed SD-WAN and SASE vendor founded in 2000 in Plano, Texas, which Comcast Business acquired in 2021 to, in the words of Comcast Business’s then-President Bill Stemper, ‘instantly and dramatically amplify our growth in the global enterprise market’. At acquisition, Masergy served more than 1,400 customers across 100 countries and delivered its managed SD-WAN and SASE capability on named technology partnerships with Fortinet and Silver Peak (subsequently acquired by HPE), plus Bitglass for cloud access security broker capability specifically, per independent analyst commentary...","reviewed_at":"2026-09-01","products":["Comcast Business CASB","Comcast Business FWaaS","Comcast Business Managed SD-WAN","Comcast Business SASE"],"evidence_source_count":11,"url":"https://netify.co.uk/marketplace/comcastbusiness/"},{"comparison_slug":"cradlepoint-ericsson","name":"Ericsson Cradlepoint","provider_types":["technology vendor","carrier network provider"],"summary":"Cradlepoint began in 2006 as an independent Boise, Idaho-based pioneer in cellular-first wireless WAN networking, raised more than $162 million before being acquired outright by Ericsson (NASDAQ: ERIC) in a deal announced September 2020 and closed later that year at an enterprise value of approximately $1.1 billion. That makes this platform’s identity distinctive within this product category: it sits inside one of the world’s largest telecommunications equipment manufacturers rather than a standalone security company or a private-equity-backed challenger, and its architecture reflects that heritage directly - NetCloud SASE is built cellular-first, with confirmed, specific capabilities lik...","reviewed_at":"2026-09-01","products":["NetCloud Federal","NetCloud Manager","NetCloud Perimeter","NetCloud Private Networks"],"evidence_source_count":21,"url":"https://netify.co.uk/marketplace/ericsson-cradlepoint/"},{"comparison_slug":"expereo","name":"Expereo","provider_types":["managed service provider","carrier network provider"],"summary":"Rather than owning last-mile or backbone infrastructure directly, Expereo positions itself explicitly as an internet-connectivity aggregation and optimisation specialist, describing itself as a ‘world-leading Managed Network as a Service provider’ built around a ‘Global Internet’ underlay philosophy - the consistent, repeated framing across its own materials is that a strong internet underlay, not owned physical infrastructure, is the essential foundation for effective SD-WAN and SASE. Founded in Amsterdam in 2004, Expereo has passed through a complex, multi-owner private-equity history: acquired by The Carlyle Group in July 2014, sold to Apax Partners in May 2018, and majority-acquired b...","reviewed_at":"2026-09-01","products":["Expereo Enhanced Internet","Expereo Managed SD-WAN","Expereo SD-WAN/SASE with Cato Networks","Starlink (via Expereo","authorised reseller)"],"evidence_source_count":18,"url":"https://netify.co.uk/marketplace/expereo/"},{"comparison_slug":"forcepoint","name":"Forcepoint","provider_types":["technology vendor"],"summary":"Forcepoint’s identity traces back to Websense, founded in 1994, and its whole platform is built around a data-first philosophy rather than a network- or device-first one - the pitch is that policy should follow the data itself, not the network path or the device it happens to be on. That heritage shows up as real, credible analyst recognition specifically for data loss prevention: Frost & Sullivan’s Global DLP Company of the Year for two consecutive years, an IDC MarketScape Leader placement for worldwide DLP in 2025, and a Forrester Wave Strong Performer placement for data security platforms in Q1 2025.","reviewed_at":"2026-09-01","products":["AI Mesh / Getvisibility","ARIA","Field Programmable SASE Logic (FPSL)","FlexEdge Secure SD-WAN"],"evidence_source_count":44,"url":"https://netify.co.uk/marketplace/forcepoint/"},{"comparison_slug":"fortinet","name":"Fortinet FortiSASE","provider_types":["technology vendor"],"summary":"FortiSASE runs the same FortiOS operating system, and the same single-pass inspection engine, that has powered Fortinet’s physical FortiGate firewalls for over two decades. That’s a meaningfully different starting point from building a SASE platform natively for the cloud from scratch - the practical result is that FortiGate customers get a consistent policy and inspection model whether traffic is inspected on-premises or in a FortiSASE cloud point of presence, and Fortinet’s own commercial materials lean hard into a ‘Security Fabric’ discount for exactly these existing customers.","reviewed_at":"2026-09-01","products":["Fabric Connectors","FortiClient","FortiGuard AI-Powered Security Services","FortiManager / FortiAnalyzer"],"evidence_source_count":35,"url":"https://netify.co.uk/marketplace/fortinet-fortisase/"},{"comparison_slug":"gtt","name":"GTT","provider_types":["hybrid provider"],"summary":"GTT Communications is a specialist, purely networking-and-security-focused global provider rather than a diversified telecom conglomerate with mobile, broadband, and media businesses attached. Founded in 1998, listed on the NYSE in 2013, renamed GTT Communications in January 2014, and now headquartered in Arlington, Virginia, GTT operates a global Tier 1 IP backbone spanning more than 600 points of presence and connecting more than 3,500 cities.","reviewed_at":"2026-09-01","products":["GTT Envision","GTT Managed SD-WAN","GTT Secure Connect","Secure Connect with HPE (Aruba/EdgeConnect/SSE)"],"evidence_source_count":17,"url":"https://netify.co.uk/marketplace/gtt/"},{"comparison_slug":"hpe-aruba","name":"HPE Aruba EdgeConnect","provider_types":["technology vendor"],"summary":"HPE Aruba Networking’s SASE platform is a product of acquisition and integration rather than a single, from-scratch build. The SD-WAN engine, EdgeConnect, was built by Silver Peak Systems (founded 2004, first SD-WAN product shipped 2015) and joined HPE’s Aruba business in a $925 million acquisition completed September 2020.","reviewed_at":"2026-09-01","products":["Cloud Intelligence","EdgeConnect Orchestrator","First-Packet iQ","HPE Aruba Networking Central"],"evidence_source_count":37,"url":"https://netify.co.uk/marketplace/hpe-aruba-edgeconnect/"},{"comparison_slug":"juniper-networks","name":"Juniper Networks","provider_types":["technology vendor"],"summary":"Juniper Networks offer Mist AI with WAN Assurance, delivering AI-driven monitoring and troubleshooting at the WAN edge at a depth that few competitors match. Typically shortlisted by organisations where AIOps and network assurance quality are weighted evaluation criteria rather than SD-WAN feature breadth, and worth examining more closely than the overall score might suggest if AI-driven operations is a primary requirement.","reviewed_at":"2026-09-01","products":["Juniper AI-Native SD-WAN","Juniper Mist AI / Marvis AI","Juniper Secure Edge","Managed SD-WAN"],"evidence_source_count":28,"url":"https://netify.co.uk/marketplace/juniper/"},{"comparison_slug":"lumen","name":"Lumen","provider_types":["technology vendor","managed service provider","carrier network provider"],"summary":"Lumen Technologies has just completed a corporate transformation - on 21 May 2025, Lumen announced the sale of its Mass Markets fiber-to-the-home business - including its Quantum Fiber consumer brand, serving more than 1 million subscribers across 11 states - to AT&T for $5.75 billion in cash, a transaction that closed on 2 February 2026. Lumen’s own CEO, Kate Johnson, described the deal directly as marking the company’s transformation into ‘a Pure Play Enterprise-Focused Technology Infrastructure Company’, retaining its national, regional, state, and metro fiber backbone specifically to support that enterprise focus while divesting the consumer-facing business entirely.","reviewed_at":"2026-09-01","products":["Black Lotus Labs","Lumen Managed SASE Solutions","Lumen SASE with Versa","Lumen SD-WAN with Versa Networks"],"evidence_source_count":17,"url":"https://netify.co.uk/marketplace/lumen/"},{"comparison_slug":"netskope","name":"Netskope","provider_types":["technology vendor"],"summary":"Netskope sits in an interesting middle ground between a pure security-first platform and a fully networked one: unlike the likes of Zscaler, it has invested in its own converged mesh network (NewEdge) and a purpose-built SD-WAN (Borderless SD-WAN, built on the 2022 Infiot acquisition), so the ‘security company bolting on networking’ story is a few years further along than Zscaler’s; unlike Cato, that network is built on peering and interconnects across 67 regions rather than an owned private backbone. Where Netskope stands out is data-centric SSE - its Cloud Confidence Index covers 85,000+ SaaS and GenAI apps, its DLP heritage runs deep (it was arguably the original CASB/DLP-first vendor...","reviewed_at":"2026-09-01","products":["Borderless SD-WAN","Cloud Confidence Index (CCI)","Netskope Cloud Exchange (CE)","Netskope One"],"evidence_source_count":45,"url":"https://netify.co.uk/marketplace/netskope/"},{"comparison_slug":"ntt","name":"NTT DATA","provider_types":["carrier network provider"],"summary":"NTT DATA is a massive, globally-established IT services and network provider, founded in Japan in 1988 as a spinoff of Nippon Telegraph and Telephone (NTT), and now operating in more than 70 countries with approximately 190,000 employees. A significant, current corporate event is worth understanding first: on 8 May 2025, NTT, Inc. (renamed that same year from Nippon Telegraph and Telephone Corporation) launched a tender offer to acquire full ownership of NTT DATA Group Corporation, its previously partially-owned, publicly-listed subsidiary; the offer, at JPY 4,000 per share (a confirmed 41.5% premium), achieved 81.75% acceptance, and following shareholder approval on 29 August 2025, NTT D...","reviewed_at":"2026-09-01","products":["Managed Campus Networks with Prisma SASE","Managed Internet Connectivity","Managed IoT and Network as a Service (NaaS)","Managed Network Security"],"evidence_source_count":22,"url":"https://netify.co.uk/marketplace/ntt-data/"},{"comparison_slug":"opensystems","name":"Open Systems","provider_types":["technology vendor","managed service provider"],"summary":"Open Systems founded in 1990 in Basel, Switzerland, more than three decades before the SASE category itself existed, originally as a managed security service provider before evolving its platform into what it now markets as native, managed SASE Experience. The company’s ownership history took a distinctive turn in 2023: after a period under the European private-equity firm EQT, Open Systems was acquired by Swiss Post - Switzerland’s state-backed national postal and logistics institution - a materially different kind of owner from the venture-capital or private-equity structures behind most other vendors in this category.","reviewed_at":"2026-09-01","products":["MDR+ (Managed Detection and Response)","Managed SD-WAN / Secure SD-WAN","Managed","Universal SSE","Mission Control"],"evidence_source_count":21,"url":"https://netify.co.uk/marketplace/opensystems/"},{"comparison_slug":"orange-business","name":"Orange Business","provider_types":["carrier network provider","integrator"],"summary":"Orange Business is the enterprise services arm of Orange S.A., one of the largest telecommunications groups in Europe, headquartered in France and listed on Euronext Paris. Orange Business itself traces its lineage to Equant and Global One before being formally established on 1 June 2006, and was renamed from Orange Business Services to Orange Business on 16 February 2023; Frédéric Schepens serves as CEO (appointed July 2024), leading approximately 30,000 employees.","reviewed_at":"2026-09-01","products":["Orange Business Evolution Platform","Orange Business SASE with Palo Alto Networks Prisma SASE","Orange Business and Fortinet SASE","Orange Cyberdefense Managed SASE"],"evidence_source_count":20,"url":"https://netify.co.uk/marketplace/orangebusiness/"},{"comparison_slug":"palo-alto-networks","name":"Palo Alto Networks Prisma SASE","provider_types":["technology vendor"],"summary":"Palo Alto Networks isn’t just selling SASE, it’s selling one door into a much larger security estate (NGFWs, Prisma Cloud, Cortex XDR/XSIAM, identity security) that most large enterprises already have some footprint in. That shows up directly in its differentiators: it’s one of the few vendors recognised as a Leader in all three of Gartner’s Single-Vendor SASE, SSE and SD-WAN Magic Quadrants simultaneously, and its ‘platformisation’ commercial strategy rewards multi-product commitment with steep discounts.","reviewed_at":"2026-09-01","products":["ADEM","AI Access Security","Enterprise DLP","Precision AI / Strata Copilot"],"evidence_source_count":41,"url":"https://netify.co.uk/marketplace/palo-alto-prisma-sase/"},{"comparison_slug":"sonicwall","name":"SonicWall Cloud Secure Edge","provider_types":["technology vendor"],"summary":"SonicWall is one of the oldest names in network security still operating under its own brand - founded 1991 as Sonic Systems, later renamed SonicWall, and shaped by an eventful corporate history: an IPO in 1999, a return to private ownership, acquisition by Dell in 2012, and a $2 billion-plus divestiture from Dell in November 2016 that spun the company out as an independent business jointly owned by private equity firms Francisco Partners and Elliott Management, who remain its owners today. Cloud Secure Edge (CSE), the product this profile covers, has its own separate origin: it began as Banyan Security, an independent SSE vendor, before SonicWall acquired it in January 2023 specifically...","reviewed_at":"2026-09-01","products":["Global Response Intelligent Defence (GRID) Threat Network","Managed Protection Security Suite (MPSS)","SAMI","Secure Internet Access"],"evidence_source_count":24,"url":"https://netify.co.uk/marketplace/sonicwall-cse/"},{"comparison_slug":"arista-velocloud","name":"VeloCloud","provider_types":["technology vendor"],"summary":"VeloCloud was founded in 2012 as a cloud-delivered SD-WAN pioneer, acquired by VMware in 2017 for approximately $336 million, then came under Broadcom’s ownership when Broadcom completed its roughly $69 billion acquisition of VMware in 2023. Under Broadcom, the product was paired with Symantec’s security stack (Broadcom separately owns Symantec’s enterprise security business) into a single-vendor offering called ‘VMware VeloCloud SASE, secured by Symantec’, announced February 2024.","reviewed_at":"2026-09-01","products":["Arista AVA","Edge Threat Management (ETM)","SSE partner integrations","VeloCloud Orchestrator"],"evidence_source_count":24,"url":"https://netify.co.uk/marketplace/velocloud/"},{"comparison_slug":"verizon-business","name":"Verizon Business","provider_types":["managed service provider","carrier network provider"],"summary":"Verizon Communications is one of the largest telecommunications companies in the world - generating $133.6 billion in revenue in 2023 (2025 consensus estimates are approximately $134-135 billion) and serving nearly all of the Fortune 500 - and its managed SD-WAN and SASE proposition sits within Verizon Business, itself organised into three named customer groups (Enterprise and Public Sector, Business Markets and Other, and Wholesale). Verizon’s SASE architecture is an extensively multi-platform proposition: its own materials confirm direct integration with Versa, Cisco (cEdge and vEdge), Zscaler (both Zscaler Internet Access and Zscaler Private Access), and Palo Alto Networks Prisma Acces...","reviewed_at":"2026-09-01","products":["RingCentral (voice/UC integration)","Verizon Managed SD Branch","Verizon Managed SD WAN","Verizon SASE Management"],"evidence_source_count":20,"url":"https://netify.co.uk/marketplace/verizon/"},{"comparison_slug":"versa-networks","name":"Versa Networks","provider_types":["technology vendor"],"summary":"Versa Networks built its SASE platform around a single-vendor, single-operating-system architecture from an early starting point - the company was founded in 2012, before the SASE category itself existed, on the thesis that legacy hardware and static WAN architectures were holding enterprises back from the cloud. That heritage shows up directly in VersaONE’s design: one operating system (VOS), one console, one policy engine and one data lake, with a single-pass parallel-processing architecture built to avoid the latency penalty of chaining separate security functions together.","reviewed_at":"2026-09-01","products":["Inbound SSE","Secure Enterprise Browser","VOS","Versa Analytics"],"evidence_source_count":29,"url":"https://netify.co.uk/marketplace/versa-networks/"},{"comparison_slug":"virgin-media-o2","name":"Virgin Media O2 Business","provider_types":["managed service provider","carrier network provider"],"summary":"Virgin Media O2 (VMO2) is itself a 50/50 joint venture between Liberty Global and Telefónica, formed in June 2021 from the merger of Virgin Media UK and O2 UK. On 12 May 2025, VMO2 announced it would combine substantially all of its direct business-to-business operations - including Virgin Media O2 Business - with Daisy Group, a long-established, independent UK B2B communications and IT provider founded in 2001.","reviewed_at":"2026-09-01","products":["8x8 Voice for Teams","Cloud Infrastructure as a Service / Platform as a Service","Managed Detection and Response","Success Agreement"],"evidence_source_count":19,"url":"https://netify.co.uk/marketplace/virgin-media-o2/"},{"comparison_slug":"vodafone-business","name":"Vodafone Business","provider_types":["managed service provider","carrier network provider"],"summary":"Vodafone Group is a vast, multinational telecommunications operator - for the financial year ended 31 March 2024, Vodafone Group reported total revenue of €36.7 billion, with Vodafone Business specifically operating across all of Vodafone’s markets, addressing a claimed €160 billion addressable market, serving 5 million customers, managing 198 million IoT connections (FY24 figure), and contributing 24% of Group service revenue. Against that scale, the managed SD-WAN and SASE proposition examined in this profile is one product line within a much larger enterprise business.","reviewed_at":"2026-09-01","products":["Fortinet-based Secure Networking","Vodafone Business Managed Network Services","Vodafone Business Network as a Service (NaaS)","Vodafone Business SASE"],"evidence_source_count":17,"url":"https://netify.co.uk/marketplace/vodafone/"},{"comparison_slug":"zscaler","name":"Zscaler","provider_types":["technology vendor"],"summary":"Zscaler is the vendor that effectively created the SSE category, and it’s still the one most competitors get measured against when it comes to sheer scale and security depth - the Zero Trust Exchange runs across 150+ data centres, processes over 400 billion transactions a day, and holds FedRAMP High authorisation for ZIA and ZPA (other SASE-class vendors also hold FedRAMP High or equivalent for their own components). If you’re a security-first buyer looking to retire VPN concentrators and stitch SWG, CASB, DLP and ZTNA together under one console, Zscaler is one of the most proven single-vendor routes to get there.","reviewed_at":"2026-09-01","products":["AI Security / GenAI Security","Data Fabric for Security","Risk360","Zero Trust Branch"],"evidence_source_count":59,"url":"https://netify.co.uk/marketplace/zscaler/"}],"top_providers_at_balanced_setting":[{"slug":"cato-networks","name":"Cato Networks","rank":1,"score":69.6,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Cato Networks meets every stated requirement with a weighted capability score of 69.6. Single converged platform with no policy or log fragmentation across SD-WAN and security functions.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based subscription; typically site/user/bandwidth/security bundle based.","key_differentiators":["Single converged platform with no policy or log fragmentation across SD-WAN and security functions.","100+ PoP global private backbone reduces internet variability and provides predictable performance for SaaS-heavy traffic.","Strong story for organisations consolidating multiple point solutions onto one operational platform."],"best_fit_for":["Mid-market and enterprise buyers consolidating SD-WAN and SASE on one platform from a single vendor.","Global organisations with SaaS-heavy traffic patterns that benefit from a private backbone.","Teams without dedicated security operations capacity who want a managed SASE experience."],"watch_outs":["Less suited to best-of-breed buyers wanting Zscaler or Netskope as the SSE layer.","Customer does not own the underlay; circuits sourced separately, so multi-supplier coordination remains.","Less mature than incumbents for very large multinational deployments with heavy legacy MPLS estates."],"evidence_coverage_pct":0.65,"evidence_source_count":40,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.catonetworks.com","marketplace_url":"https://netify.co.uk/marketplace/cato-networks/","shortlist_summary":"Cato Networks is frequently scored by us at Netify as being one of the easiest platforms to actually use, and they’re often considered a more integrated offering than most of the competition, which is primarily down to building their SASE solution from the ground up rather than bolting security onto an existing networking product, or the other way round. If you’re looking to collapse a fragmented maze of legacy firewalls, MPLS circuits, and point-product security tools into a single, cloud-native operational plane, Cato is one of the more compelling single-vendor SASE offerings on the market, though its middle-mile-centric architecture and fairly opaque licensing model mean it requires ca...","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"netskope","name":"Netskope","rank":2,"score":63.9,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Netskope meets every stated requirement with a weighted capability score of 63.9. Strong CASB heritage; widely recognised as a leading SSE vendor for SaaS-heavy environments.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based subscription; modules commonly priced by users, sites, traffic and security functions.","key_differentiators":["Strong CASB heritage; widely recognised as a leading SSE vendor for SaaS-heavy environments.","Borderless WAN (from the Infiot acquisition) extends Netskope into single-vendor SASE for buyers wanting both layers from one platform.","Detailed SaaS application visibility and policy controls."],"best_fit_for":["Enterprises with deep SaaS adoption where CASB and DLP are top procurement priorities.","Buyers comparing single-vendor SASE platforms after starting with SSE.","Organisations selecting Netskope SSE alongside a separate SD-WAN platform via partner integration."],"watch_outs":["Native SD-WAN (Borderless WAN) is newer than dedicated SD-WAN platforms; validate path selection and QoS depth in RFP.","Managed delivery is partner-led; first-party managed service is limited.","Premium pricing with modular structure; full SASE bundle costs can scale meaningfully with users and traffic."],"evidence_coverage_pct":0.575,"evidence_source_count":45,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.netskope.com","marketplace_url":"https://netify.co.uk/marketplace/netskope/","shortlist_summary":"Netskope sits in an interesting middle ground between a pure security-first platform and a fully networked one: unlike the likes of Zscaler, it has invested in its own converged mesh network (NewEdge) and a purpose-built SD-WAN (Borderless SD-WAN, built on the 2022 Infiot acquisition), so the ‘security company bolting on networking’ story is a few years further along than Zscaler’s; unlike Cato, that network is built on peering and interconnects across 67 regions rather than an owned private backbone. Where Netskope stands out is data-centric SSE - its Cloud Confidence Index covers 85,000+ SaaS and GenAI apps, its DLP heritage runs deep (it was arguably the original CASB/DLP-first vendor...","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"cisco","name":"Cisco","rank":3,"score":63.5,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Cisco meets every stated requirement with a weighted capability score of 63.5. Broadest platform portfolio in the category, covering Catalyst SD-WAN for enterprise WAN, Meraki MX for cloud-managed branch, and Cisco Secure Access for converged SASE delivery.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based subscription/licence + appliance/support; Meraki public SKUs via partners, enterprise pricing varies by platform and term.","key_differentiators":["Broadest platform portfolio in the category, covering Catalyst SD-WAN for enterprise WAN, Meraki MX for cloud-managed branch, and Cisco Secure Access for converged SASE delivery.","Cloud OnRamp provides automated optimisation paths for Microsoft 365, Salesforce, and major cloud providers, with native integration into the Cisco security stack.","Large global partner and integrator ecosystem reduces delivery risk for buyers wanting managed or co-managed delivery."],"best_fit_for":["Enterprises already standardised on Cisco networking who want platform consistency from LAN through WAN to security.","Multinational organisations needing strong vendor presence across regions and a deep partner channel.","Buyers prioritising single-vendor risk consolidation across networking and security."],"watch_outs":["Two distinct SD-WAN product lines (Catalyst and Meraki) means buyers should confirm which fits the target deployment profile and the longer-term roadmap.","Managed delivery is partner-led rather than first-party, so service quality varies meaningfully by integrator.","Private global backbone is not part of the platform; cloud transport relies on internet and partner gateways."],"evidence_coverage_pct":0.6,"evidence_source_count":49,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.cisco.com/site/us/en/solutions/networking/sdwan/index.html","marketplace_url":"https://netify.co.uk/marketplace/cisco/","shortlist_summary":"Cisco’s own materials describe SASE explicitly as ‘a journey - you can start with SD-WAN or SSE and converge over time’, which is a different pitch to Cato’s, Zscaler’s, Netskope’s or Palo Alto’s single-platform-from-day-one story. In practise, ‘Cisco SASE’ means choosing between Cisco Secure Access (cloud-delivered SSE, evolved from Cisco Umbrella), Cisco Catalyst SD-WAN (the enterprise-grade fabric, formerly Viptela) or Meraki SD-WAN (the simpler, cloud-first option), and Cisco Secure Connect (a turnkey bundle of Secure Access plus Meraki SD-WAN specifically).","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"palo-alto-networks","name":"Palo Alto Networks Prisma SASE","rank":4,"score":61.7,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Palo Alto Networks Prisma SASE meets every stated requirement with a weighted capability score of 61.7. Prisma SASE converges SD-WAN, cloud-delivered security, and digital experience management (ADEM) under a single platform identity.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based subscriptions; appliance/ION and Prisma Access/SASE licensing typically priced by users, bandwidth, locations and term.","key_differentiators":["Prisma SASE converges SD-WAN, cloud-delivered security, and digital experience management (ADEM) under a single platform identity.","Strong threat intelligence and security capability inheritance from the wider Palo Alto Networks portfolio.","Often selected by buyers consolidating from multiple security vendors onto a single SASE platform."],"best_fit_for":["Enterprises with mature security operations that want SASE built around a leading security platform rather than a security layer on top of an SD-WAN platform.","Buyers consolidating CASB, SWG, ZTNA and FWaaS onto one vendor for unified policy.","Organisations with global SaaS-heavy traffic patterns that benefit from Prisma Access PoP coverage."],"watch_outs":["Premium pricing relative to firewall-led SD-WAN vendors; commercial model requires careful scoping by users, bandwidth, locations and term.","Managed delivery is via partners (Orange Business, NTT, others); first-party managed service is not the primary model.","Private global backbone is not vendor-owned; cloud transport uses internet and Prisma Access PoPs."],"evidence_coverage_pct":0.55,"evidence_source_count":41,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.paloaltonetworks.com/sase","marketplace_url":"https://netify.co.uk/marketplace/palo-alto-prisma-sase/","shortlist_summary":"Palo Alto Networks isn’t just selling SASE, it’s selling one door into a much larger security estate (NGFWs, Prisma Cloud, Cortex XDR/XSIAM, identity security) that most large enterprises already have some footprint in. That shows up directly in its differentiators: it’s one of the few vendors recognised as a Leader in all three of Gartner’s Single-Vendor SASE, SSE and SD-WAN Magic Quadrants simultaneously, and its ‘platformisation’ commercial strategy rewards multi-product commitment with steep discounts.","value_tier":"premium","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"versa-networks","name":"Versa Networks","rank":5,"score":51.1,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Versa Networks meets every stated requirement with a weighted capability score of 51.1. Multi-tenancy from the ground up, making Versa a common choice for service providers and carriers building managed SD-WAN and SASE platforms.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based subscription; MSP/carrier pricing depends on tenant scale, bandwidth, security package and delivery model.","key_differentiators":["Multi-tenancy from the ground up, making Versa a common choice for service providers and carriers building managed SD-WAN and SASE platforms.","Versa Operating System (VOS) provides a converged networking and security software stack across cloud and on-premises delivery.","Often the underlying platform when buyers select a managed SD-WAN service from a carrier or MSP."],"best_fit_for":["Service providers, carriers and MSPs building white-label managed SD-WAN or SASE services.","Enterprises consuming Versa indirectly through a managed provider (e.g. Verizon, Orange).","Buyers who want platform flexibility across cloud-delivered, on-premises and hybrid delivery models."],"watch_outs":["Less well-known to enterprise buyers as a direct purchase; most enterprise consumption is via service providers.","Buyers should confirm exactly which managed provider is delivering the platform and what the operational RACI looks like.","Brand recognition trails Cisco, Palo Alto and Fortinet in enterprise procurement processes."],"evidence_coverage_pct":0.425,"evidence_source_count":29,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://versa-networks.com","marketplace_url":"https://netify.co.uk/marketplace/versa-networks/","shortlist_summary":"Versa Networks built its SASE platform around a single-vendor, single-operating-system architecture from an early starting point - the company was founded in 2012, before the SASE category itself existed, on the thesis that legacy hardware and static WAN architectures were holding enterprises back from the cloud. That heritage shows up directly in VersaONE’s design: one operating system (VOS), one console, one policy engine and one data lake, with a single-pass parallel-processing architecture built to avoid the latency penalty of chaining separate security functions together.","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"zscaler","name":"Zscaler","rank":6,"score":51.1,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Zscaler meets every stated requirement with a weighted capability score of 51.1. Category leader in SSE with ZIA, ZPA and ZDX; widely adopted as the security layer in best-of-breed SASE architectures.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based subscription; typically per-user/workload/location modules; SD-WAN integrations may add partner/vendor cost.","key_differentiators":["Category leader in SSE with ZIA, ZPA and ZDX; widely adopted as the security layer in best-of-breed SASE architectures.","Strong ecosystem of SD-WAN partners (Cisco, others) for buyers wanting Zscaler security with a separate SD-WAN platform.","Mature Zero Trust platform with substantial enterprise deployment history."],"best_fit_for":["Enterprises selecting best-of-breed SSE alongside a separate SD-WAN platform.","Security-driven SASE strategies where the SSE layer is the primary architectural decision.","Buyers consolidating multiple security point solutions onto a single SSE vendor."],"watch_outs":["Historically SSE-led; native SD-WAN capability is less mature than dedicated SD-WAN platforms (validate path selection, QoS and packet loss in RFP).","Premium pricing; typically per-user/workload/location with security modules adding cost.","Buyers needing one vendor for both SD-WAN and security may prefer a converged platform (Cato, FortiSASE, Prisma)."],"evidence_coverage_pct":0.425,"evidence_source_count":59,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.zscaler.com","marketplace_url":"https://netify.co.uk/marketplace/zscaler/","shortlist_summary":"Zscaler is the vendor that effectively created the SSE category, and it’s still the one most competitors get measured against when it comes to sheer scale and security depth - the Zero Trust Exchange runs across 150+ data centres, processes over 400 billion transactions a day, and holds FedRAMP High authorisation for ZIA and ZPA (other SASE-class vendors also hold FedRAMP High or equivalent for their own components). If you’re a security-first buyer looking to retire VPN concentrators and stitch SWG, CASB, DLP and ZTNA together under one console, Zscaler is one of the most proven single-vendor routes to get there.","value_tier":"premium","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"fortinet","name":"Fortinet FortiSASE","rank":7,"score":49.9,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Fortinet FortiSASE meets every stated requirement with a weighted capability score of 49.9. Native convergence of networking and security on a single operating system (FortiOS) across FortiGate edge, FortiManager and FortiSASE.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based appliances/subscriptions/support; public reseller pricing exists for hardware but enterprise managed/SASE bundles require quote.","key_differentiators":["Native convergence of networking and security on a single operating system (FortiOS) across FortiGate edge, FortiManager and FortiSASE.","Strong story for buyers who want secure SD-WAN and SASE delivered from one vendor platform rather than assembled from partner integrations.","Wide appliance range covering everything from small branch to large data centre, with public hardware pricing visible through resellers."],"best_fit_for":["Security-first buyers who want SD-WAN and SASE under a single policy and log domain.","Mid-market and enterprise organisations that already run FortiGate firewalls and want to extend into SD-WAN and cloud-delivered security.","Buyers comparing single-vendor SASE platforms (alongside Cato, Palo Alto, Cisco) for converged operations."],"watch_outs":["Like Cisco, managed delivery is via partners rather than Fortinet directly; underlay and field operations are not owned by the vendor.","Buyers wanting a private global backbone will need to validate FortiSASE PoP coverage against their geographic footprint.","Best-of-breed buyers may prefer integrating FortiGate SD-WAN with a separate SSE platform (Zscaler, Netskope) rather than adopting full FortiSASE."],"evidence_coverage_pct":0.425,"evidence_source_count":35,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.fortinet.com/products/sd-wan","marketplace_url":"https://netify.co.uk/marketplace/fortinet-fortisase/","shortlist_summary":"FortiSASE runs the same FortiOS operating system, and the same single-pass inspection engine, that has powered Fortinet’s physical FortiGate firewalls for over two decades. That’s a meaningfully different starting point from building a SASE platform natively for the cloud from scratch - the practical result is that FortiGate customers get a consistent policy and inspection model whether traffic is inspected on-premises or in a FortiSASE cloud point of presence, and Fortinet’s own commercial materials lean hard into a ‘Security Fabric’ discount for exactly these existing customers.","value_tier":"value","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"hpe-aruba","name":"HPE Aruba EdgeConnect","rank":8,"score":46.9,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"HPE Aruba EdgeConnect meets every stated requirement with a weighted capability score of 46.9. EdgeConnect SD-WAN (acquired with Silver Peak) is positioned as the foundation for single-vendor SASE alongside Aruba SSE.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based subscription/appliance/support; MSP-managed options available through partners/providers.","key_differentiators":["EdgeConnect SD-WAN (acquired with Silver Peak) is positioned as the foundation for single-vendor SASE alongside Aruba SSE.","Strong heritage in WAN optimisation and packet-level performance engineering.","Tight integration with the broader Aruba campus and branch portfolio (LAN, Wi-Fi, NAC) for buyers consolidating end-to-end networking."],"best_fit_for":["Enterprises already running Aruba LAN/Wi-Fi who want WAN and SASE under the same operational tooling.","Buyers prioritising application performance and WAN optimisation in addition to standard SD-WAN routing.","Distributed organisations with branch-heavy footprints where Aruba campus presence is already established."],"watch_outs":["Aruba SSE is newer than the SSE leaders (Zscaler, Netskope); buyers wanting best-of-breed SASE should evaluate the SSE capability set carefully.","Managed delivery is partner-led rather than from HPE directly.","Private global backbone is not vendor-owned; SASE transport uses public cloud gateways."],"evidence_coverage_pct":0.375,"evidence_source_count":37,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.hpe.com/us/en/aruba-edgeconnect-sd-wan.html","marketplace_url":"https://netify.co.uk/marketplace/hpe-aruba-edgeconnect/","shortlist_summary":"HPE Aruba Networking’s SASE platform is a product of acquisition and integration rather than a single, from-scratch build. The SD-WAN engine, EdgeConnect, was built by Silver Peak Systems (founded 2004, first SD-WAN product shipped 2015) and joined HPE’s Aruba business in a $925 million acquisition completed September 2020.","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"check-point","name":"Check Point","rank":9,"score":42.6,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Check Point meets every stated requirement with a weighted capability score of 42.6. Harmony SASE combines Check Point security heritage with cloud-delivered SASE and optimised SD-WAN performance.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based subscription; Microsoft marketplace listing exists but enterprise deployments normally require quote.","key_differentiators":["Harmony SASE combines Check Point security heritage with cloud-delivered SASE and optimised SD-WAN performance.","Strong story for organisations already running Check Point firewalls who want to extend into SASE.","Available via Microsoft Azure marketplace for buyers wanting consolidated cloud procurement."],"best_fit_for":["Existing Check Point customers extending firewall investment into SD-WAN and SASE.","Mid-market enterprises consolidating security and SD-WAN under one vendor.","Buyers prioritising security maturity over network-platform maturity."],"watch_outs":["Native SD-WAN capabilities (path selection, QoS, packet loss remediation) have limited public evidence relative to SD-WAN-led vendors.","Smaller SD-WAN deployment footprint than category leaders; validate scale references.","Managed delivery is partner-led."],"evidence_coverage_pct":0.325,"evidence_source_count":28,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.checkpoint.com/harmony/sase","marketplace_url":"https://netify.co.uk/marketplace/checkpoint/","shortlist_summary":"Check Point’s SASE platform has been through two names in under three years. The underlying technology began life as Perimeter 81, an independent Israeli SSE/ZTNA vendor founded in 2018 that had grown to more than 3,000 customers and a Forrester Zero Trust Wave recognition before Check Point Software Technologies - the much larger, long-established Israeli cybersecurity vendor behind Check Point Firewall-1, founded in 1993 - acquired it for approximately $490 million in a deal announced September 2023.","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"forcepoint","name":"Forcepoint","rank":10,"score":42.6,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Forcepoint meets every stated requirement with a weighted capability score of 42.6. FlexEdge Secure SD-WAN combines secure SD-WAN with strong DLP and data security heritage from the wider Forcepoint portfolio.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based appliances/software/subscriptions; managed SD-WAN positioned but pricing public transparency limited.","key_differentiators":["FlexEdge Secure SD-WAN combines secure SD-WAN with strong DLP and data security heritage from the wider Forcepoint portfolio.","MultiLink resilience and zero-touch deployment with cloud central management.","Strong story for buyers prioritising data security and DLP as a procurement criterion."],"best_fit_for":["Enterprises with strong data protection and DLP requirements (regulated industries, government).","Organisations wanting secure SD-WAN where data security is the primary decision driver.","Buyers consolidating DLP with SD-WAN under one vendor."],"watch_outs":["Smaller SD-WAN market presence than the leading platforms.","Full SASE platform completeness has partial public evidence; SSE module depth should be confirmed.","Managed delivery is partner-led; co-managed and white-label support require partner validation."],"evidence_coverage_pct":0.325,"evidence_source_count":44,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.forcepoint.com/product/secure-sd-wan","marketplace_url":"https://netify.co.uk/marketplace/forcepoint/","shortlist_summary":"Forcepoint’s identity traces back to Websense, founded in 1994, and its whole platform is built around a data-first philosophy rather than a network- or device-first one - the pitch is that policy should follow the data itself, not the network path or the device it happens to be on. That heritage shows up as real, credible analyst recognition specifically for data loss prevention: Frost & Sullivan’s Global DLP Company of the Year for two consecutive years, an IDC MarketScape Leader placement for worldwide DLP in 2025, and a Forrester Wave Strong Performer placement for data security platforms in Q1 2025.","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."}],"default_shortlist":{"input":{"service_model":"any","required_features":[],"preferred_features":[],"required_regions":[],"preferred_regions":[],"required_clouds":[],"ai_requirements":[],"disaster_recovery_required":false,"max_deployment_speed":"any","weight_preset":"balanced","shortlist_size":30,"uk_provider_only":false,"sector":null,"organisation_size":"any","intent":"none"},"criteria_summary":"Scoring profile: balanced.","considered":30,"excluded":0,"shortlist":[{"slug":"cato-networks","name":"Cato Networks","rank":1,"score":69.6,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Cato Networks meets every stated requirement with a weighted capability score of 69.6. Single converged platform with no policy or log fragmentation across SD-WAN and security functions.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based subscription; typically site/user/bandwidth/security bundle based.","key_differentiators":["Single converged platform with no policy or log fragmentation across SD-WAN and security functions.","100+ PoP global private backbone reduces internet variability and provides predictable performance for SaaS-heavy traffic.","Strong story for organisations consolidating multiple point solutions onto one operational platform."],"best_fit_for":["Mid-market and enterprise buyers consolidating SD-WAN and SASE on one platform from a single vendor.","Global organisations with SaaS-heavy traffic patterns that benefit from a private backbone.","Teams without dedicated security operations capacity who want a managed SASE experience."],"watch_outs":["Less suited to best-of-breed buyers wanting Zscaler or Netskope as the SSE layer.","Customer does not own the underlay; circuits sourced separately, so multi-supplier coordination remains.","Less mature than incumbents for very large multinational deployments with heavy legacy MPLS estates."],"evidence_coverage_pct":0.65,"evidence_source_count":40,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.catonetworks.com","marketplace_url":"https://netify.co.uk/marketplace/cato-networks/","shortlist_summary":"Cato Networks is frequently scored by us at Netify as being one of the easiest platforms to actually use, and they’re often considered a more integrated offering than most of the competition, which is primarily down to building their SASE solution from the ground up rather than bolting security onto an existing networking product, or the other way round. If you’re looking to collapse a fragmented maze of legacy firewalls, MPLS circuits, and point-product security tools into a single, cloud-native operational plane, Cato is one of the more compelling single-vendor SASE offerings on the market, though its middle-mile-centric architecture and fairly opaque licensing model mean it requires ca...","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"netskope","name":"Netskope","rank":2,"score":63.9,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Netskope meets every stated requirement with a weighted capability score of 63.9. Strong CASB heritage; widely recognised as a leading SSE vendor for SaaS-heavy environments.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based subscription; modules commonly priced by users, sites, traffic and security functions.","key_differentiators":["Strong CASB heritage; widely recognised as a leading SSE vendor for SaaS-heavy environments.","Borderless WAN (from the Infiot acquisition) extends Netskope into single-vendor SASE for buyers wanting both layers from one platform.","Detailed SaaS application visibility and policy controls."],"best_fit_for":["Enterprises with deep SaaS adoption where CASB and DLP are top procurement priorities.","Buyers comparing single-vendor SASE platforms after starting with SSE.","Organisations selecting Netskope SSE alongside a separate SD-WAN platform via partner integration."],"watch_outs":["Native SD-WAN (Borderless WAN) is newer than dedicated SD-WAN platforms; validate path selection and QoS depth in RFP.","Managed delivery is partner-led; first-party managed service is limited.","Premium pricing with modular structure; full SASE bundle costs can scale meaningfully with users and traffic."],"evidence_coverage_pct":0.575,"evidence_source_count":45,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.netskope.com","marketplace_url":"https://netify.co.uk/marketplace/netskope/","shortlist_summary":"Netskope sits in an interesting middle ground between a pure security-first platform and a fully networked one: unlike the likes of Zscaler, it has invested in its own converged mesh network (NewEdge) and a purpose-built SD-WAN (Borderless SD-WAN, built on the 2022 Infiot acquisition), so the ‘security company bolting on networking’ story is a few years further along than Zscaler’s; unlike Cato, that network is built on peering and interconnects across 67 regions rather than an owned private backbone. Where Netskope stands out is data-centric SSE - its Cloud Confidence Index covers 85,000+ SaaS and GenAI apps, its DLP heritage runs deep (it was arguably the original CASB/DLP-first vendor...","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"cisco","name":"Cisco","rank":3,"score":63.5,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Cisco meets every stated requirement with a weighted capability score of 63.5. Broadest platform portfolio in the category, covering Catalyst SD-WAN for enterprise WAN, Meraki MX for cloud-managed branch, and Cisco Secure Access for converged SASE delivery.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based subscription/licence + appliance/support; Meraki public SKUs via partners, enterprise pricing varies by platform and term.","key_differentiators":["Broadest platform portfolio in the category, covering Catalyst SD-WAN for enterprise WAN, Meraki MX for cloud-managed branch, and Cisco Secure Access for converged SASE delivery.","Cloud OnRamp provides automated optimisation paths for Microsoft 365, Salesforce, and major cloud providers, with native integration into the Cisco security stack.","Large global partner and integrator ecosystem reduces delivery risk for buyers wanting managed or co-managed delivery."],"best_fit_for":["Enterprises already standardised on Cisco networking who want platform consistency from LAN through WAN to security.","Multinational organisations needing strong vendor presence across regions and a deep partner channel.","Buyers prioritising single-vendor risk consolidation across networking and security."],"watch_outs":["Two distinct SD-WAN product lines (Catalyst and Meraki) means buyers should confirm which fits the target deployment profile and the longer-term roadmap.","Managed delivery is partner-led rather than first-party, so service quality varies meaningfully by integrator.","Private global backbone is not part of the platform; cloud transport relies on internet and partner gateways."],"evidence_coverage_pct":0.6,"evidence_source_count":49,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.cisco.com/site/us/en/solutions/networking/sdwan/index.html","marketplace_url":"https://netify.co.uk/marketplace/cisco/","shortlist_summary":"Cisco’s own materials describe SASE explicitly as ‘a journey - you can start with SD-WAN or SSE and converge over time’, which is a different pitch to Cato’s, Zscaler’s, Netskope’s or Palo Alto’s single-platform-from-day-one story. In practise, ‘Cisco SASE’ means choosing between Cisco Secure Access (cloud-delivered SSE, evolved from Cisco Umbrella), Cisco Catalyst SD-WAN (the enterprise-grade fabric, formerly Viptela) or Meraki SD-WAN (the simpler, cloud-first option), and Cisco Secure Connect (a turnkey bundle of Secure Access plus Meraki SD-WAN specifically).","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"palo-alto-networks","name":"Palo Alto Networks Prisma SASE","rank":4,"score":61.7,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Palo Alto Networks Prisma SASE meets every stated requirement with a weighted capability score of 61.7. Prisma SASE converges SD-WAN, cloud-delivered security, and digital experience management (ADEM) under a single platform identity.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based subscriptions; appliance/ION and Prisma Access/SASE licensing typically priced by users, bandwidth, locations and term.","key_differentiators":["Prisma SASE converges SD-WAN, cloud-delivered security, and digital experience management (ADEM) under a single platform identity.","Strong threat intelligence and security capability inheritance from the wider Palo Alto Networks portfolio.","Often selected by buyers consolidating from multiple security vendors onto a single SASE platform."],"best_fit_for":["Enterprises with mature security operations that want SASE built around a leading security platform rather than a security layer on top of an SD-WAN platform.","Buyers consolidating CASB, SWG, ZTNA and FWaaS onto one vendor for unified policy.","Organisations with global SaaS-heavy traffic patterns that benefit from Prisma Access PoP coverage."],"watch_outs":["Premium pricing relative to firewall-led SD-WAN vendors; commercial model requires careful scoping by users, bandwidth, locations and term.","Managed delivery is via partners (Orange Business, NTT, others); first-party managed service is not the primary model.","Private global backbone is not vendor-owned; cloud transport uses internet and Prisma Access PoPs."],"evidence_coverage_pct":0.55,"evidence_source_count":41,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.paloaltonetworks.com/sase","marketplace_url":"https://netify.co.uk/marketplace/palo-alto-prisma-sase/","shortlist_summary":"Palo Alto Networks isn’t just selling SASE, it’s selling one door into a much larger security estate (NGFWs, Prisma Cloud, Cortex XDR/XSIAM, identity security) that most large enterprises already have some footprint in. That shows up directly in its differentiators: it’s one of the few vendors recognised as a Leader in all three of Gartner’s Single-Vendor SASE, SSE and SD-WAN Magic Quadrants simultaneously, and its ‘platformisation’ commercial strategy rewards multi-product commitment with steep discounts.","value_tier":"premium","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"versa-networks","name":"Versa Networks","rank":5,"score":51.1,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Versa Networks meets every stated requirement with a weighted capability score of 51.1. Multi-tenancy from the ground up, making Versa a common choice for service providers and carriers building managed SD-WAN and SASE platforms.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based subscription; MSP/carrier pricing depends on tenant scale, bandwidth, security package and delivery model.","key_differentiators":["Multi-tenancy from the ground up, making Versa a common choice for service providers and carriers building managed SD-WAN and SASE platforms.","Versa Operating System (VOS) provides a converged networking and security software stack across cloud and on-premises delivery.","Often the underlying platform when buyers select a managed SD-WAN service from a carrier or MSP."],"best_fit_for":["Service providers, carriers and MSPs building white-label managed SD-WAN or SASE services.","Enterprises consuming Versa indirectly through a managed provider (e.g. Verizon, Orange).","Buyers who want platform flexibility across cloud-delivered, on-premises and hybrid delivery models."],"watch_outs":["Less well-known to enterprise buyers as a direct purchase; most enterprise consumption is via service providers.","Buyers should confirm exactly which managed provider is delivering the platform and what the operational RACI looks like.","Brand recognition trails Cisco, Palo Alto and Fortinet in enterprise procurement processes."],"evidence_coverage_pct":0.425,"evidence_source_count":29,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://versa-networks.com","marketplace_url":"https://netify.co.uk/marketplace/versa-networks/","shortlist_summary":"Versa Networks built its SASE platform around a single-vendor, single-operating-system architecture from an early starting point - the company was founded in 2012, before the SASE category itself existed, on the thesis that legacy hardware and static WAN architectures were holding enterprises back from the cloud. That heritage shows up directly in VersaONE’s design: one operating system (VOS), one console, one policy engine and one data lake, with a single-pass parallel-processing architecture built to avoid the latency penalty of chaining separate security functions together.","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"zscaler","name":"Zscaler","rank":6,"score":51.1,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Zscaler meets every stated requirement with a weighted capability score of 51.1. Category leader in SSE with ZIA, ZPA and ZDX; widely adopted as the security layer in best-of-breed SASE architectures.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based subscription; typically per-user/workload/location modules; SD-WAN integrations may add partner/vendor cost.","key_differentiators":["Category leader in SSE with ZIA, ZPA and ZDX; widely adopted as the security layer in best-of-breed SASE architectures.","Strong ecosystem of SD-WAN partners (Cisco, others) for buyers wanting Zscaler security with a separate SD-WAN platform.","Mature Zero Trust platform with substantial enterprise deployment history."],"best_fit_for":["Enterprises selecting best-of-breed SSE alongside a separate SD-WAN platform.","Security-driven SASE strategies where the SSE layer is the primary architectural decision.","Buyers consolidating multiple security point solutions onto a single SSE vendor."],"watch_outs":["Historically SSE-led; native SD-WAN capability is less mature than dedicated SD-WAN platforms (validate path selection, QoS and packet loss in RFP).","Premium pricing; typically per-user/workload/location with security modules adding cost.","Buyers needing one vendor for both SD-WAN and security may prefer a converged platform (Cato, FortiSASE, Prisma)."],"evidence_coverage_pct":0.425,"evidence_source_count":59,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.zscaler.com","marketplace_url":"https://netify.co.uk/marketplace/zscaler/","shortlist_summary":"Zscaler is the vendor that effectively created the SSE category, and it’s still the one most competitors get measured against when it comes to sheer scale and security depth - the Zero Trust Exchange runs across 150+ data centres, processes over 400 billion transactions a day, and holds FedRAMP High authorisation for ZIA and ZPA (other SASE-class vendors also hold FedRAMP High or equivalent for their own components). If you’re a security-first buyer looking to retire VPN concentrators and stitch SWG, CASB, DLP and ZTNA together under one console, Zscaler is one of the most proven single-vendor routes to get there.","value_tier":"premium","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"fortinet","name":"Fortinet FortiSASE","rank":7,"score":49.9,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Fortinet FortiSASE meets every stated requirement with a weighted capability score of 49.9. Native convergence of networking and security on a single operating system (FortiOS) across FortiGate edge, FortiManager and FortiSASE.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based appliances/subscriptions/support; public reseller pricing exists for hardware but enterprise managed/SASE bundles require quote.","key_differentiators":["Native convergence of networking and security on a single operating system (FortiOS) across FortiGate edge, FortiManager and FortiSASE.","Strong story for buyers who want secure SD-WAN and SASE delivered from one vendor platform rather than assembled from partner integrations.","Wide appliance range covering everything from small branch to large data centre, with public hardware pricing visible through resellers."],"best_fit_for":["Security-first buyers who want SD-WAN and SASE under a single policy and log domain.","Mid-market and enterprise organisations that already run FortiGate firewalls and want to extend into SD-WAN and cloud-delivered security.","Buyers comparing single-vendor SASE platforms (alongside Cato, Palo Alto, Cisco) for converged operations."],"watch_outs":["Like Cisco, managed delivery is via partners rather than Fortinet directly; underlay and field operations are not owned by the vendor.","Buyers wanting a private global backbone will need to validate FortiSASE PoP coverage against their geographic footprint.","Best-of-breed buyers may prefer integrating FortiGate SD-WAN with a separate SSE platform (Zscaler, Netskope) rather than adopting full FortiSASE."],"evidence_coverage_pct":0.425,"evidence_source_count":35,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.fortinet.com/products/sd-wan","marketplace_url":"https://netify.co.uk/marketplace/fortinet-fortisase/","shortlist_summary":"FortiSASE runs the same FortiOS operating system, and the same single-pass inspection engine, that has powered Fortinet’s physical FortiGate firewalls for over two decades. That’s a meaningfully different starting point from building a SASE platform natively for the cloud from scratch - the practical result is that FortiGate customers get a consistent policy and inspection model whether traffic is inspected on-premises or in a FortiSASE cloud point of presence, and Fortinet’s own commercial materials lean hard into a ‘Security Fabric’ discount for exactly these existing customers.","value_tier":"value","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"hpe-aruba","name":"HPE Aruba EdgeConnect","rank":8,"score":46.9,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"HPE Aruba EdgeConnect meets every stated requirement with a weighted capability score of 46.9. EdgeConnect SD-WAN (acquired with Silver Peak) is positioned as the foundation for single-vendor SASE alongside Aruba SSE.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based subscription/appliance/support; MSP-managed options available through partners/providers.","key_differentiators":["EdgeConnect SD-WAN (acquired with Silver Peak) is positioned as the foundation for single-vendor SASE alongside Aruba SSE.","Strong heritage in WAN optimisation and packet-level performance engineering.","Tight integration with the broader Aruba campus and branch portfolio (LAN, Wi-Fi, NAC) for buyers consolidating end-to-end networking."],"best_fit_for":["Enterprises already running Aruba LAN/Wi-Fi who want WAN and SASE under the same operational tooling.","Buyers prioritising application performance and WAN optimisation in addition to standard SD-WAN routing.","Distributed organisations with branch-heavy footprints where Aruba campus presence is already established."],"watch_outs":["Aruba SSE is newer than the SSE leaders (Zscaler, Netskope); buyers wanting best-of-breed SASE should evaluate the SSE capability set carefully.","Managed delivery is partner-led rather than from HPE directly.","Private global backbone is not vendor-owned; SASE transport uses public cloud gateways."],"evidence_coverage_pct":0.375,"evidence_source_count":37,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.hpe.com/us/en/aruba-edgeconnect-sd-wan.html","marketplace_url":"https://netify.co.uk/marketplace/hpe-aruba-edgeconnect/","shortlist_summary":"HPE Aruba Networking’s SASE platform is a product of acquisition and integration rather than a single, from-scratch build. The SD-WAN engine, EdgeConnect, was built by Silver Peak Systems (founded 2004, first SD-WAN product shipped 2015) and joined HPE’s Aruba business in a $925 million acquisition completed September 2020.","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"check-point","name":"Check Point","rank":9,"score":42.6,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Check Point meets every stated requirement with a weighted capability score of 42.6. Harmony SASE combines Check Point security heritage with cloud-delivered SASE and optimised SD-WAN performance.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based subscription; Microsoft marketplace listing exists but enterprise deployments normally require quote.","key_differentiators":["Harmony SASE combines Check Point security heritage with cloud-delivered SASE and optimised SD-WAN performance.","Strong story for organisations already running Check Point firewalls who want to extend into SASE.","Available via Microsoft Azure marketplace for buyers wanting consolidated cloud procurement."],"best_fit_for":["Existing Check Point customers extending firewall investment into SD-WAN and SASE.","Mid-market enterprises consolidating security and SD-WAN under one vendor.","Buyers prioritising security maturity over network-platform maturity."],"watch_outs":["Native SD-WAN capabilities (path selection, QoS, packet loss remediation) have limited public evidence relative to SD-WAN-led vendors.","Smaller SD-WAN deployment footprint than category leaders; validate scale references.","Managed delivery is partner-led."],"evidence_coverage_pct":0.325,"evidence_source_count":28,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.checkpoint.com/harmony/sase","marketplace_url":"https://netify.co.uk/marketplace/checkpoint/","shortlist_summary":"Check Point’s SASE platform has been through two names in under three years. The underlying technology began life as Perimeter 81, an independent Israeli SSE/ZTNA vendor founded in 2018 that had grown to more than 3,000 customers and a Forrester Zero Trust Wave recognition before Check Point Software Technologies - the much larger, long-established Israeli cybersecurity vendor behind Check Point Firewall-1, founded in 1993 - acquired it for approximately $490 million in a deal announced September 2023.","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"forcepoint","name":"Forcepoint","rank":10,"score":42.6,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Forcepoint meets every stated requirement with a weighted capability score of 42.6. FlexEdge Secure SD-WAN combines secure SD-WAN with strong DLP and data security heritage from the wider Forcepoint portfolio.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based appliances/software/subscriptions; managed SD-WAN positioned but pricing public transparency limited.","key_differentiators":["FlexEdge Secure SD-WAN combines secure SD-WAN with strong DLP and data security heritage from the wider Forcepoint portfolio.","MultiLink resilience and zero-touch deployment with cloud central management.","Strong story for buyers prioritising data security and DLP as a procurement criterion."],"best_fit_for":["Enterprises with strong data protection and DLP requirements (regulated industries, government).","Organisations wanting secure SD-WAN where data security is the primary decision driver.","Buyers consolidating DLP with SD-WAN under one vendor."],"watch_outs":["Smaller SD-WAN market presence than the leading platforms.","Full SASE platform completeness has partial public evidence; SSE module depth should be confirmed.","Managed delivery is partner-led; co-managed and white-label support require partner validation."],"evidence_coverage_pct":0.325,"evidence_source_count":44,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.forcepoint.com/product/secure-sd-wan","marketplace_url":"https://netify.co.uk/marketplace/forcepoint/","shortlist_summary":"Forcepoint’s identity traces back to Websense, founded in 1994, and its whole platform is built around a data-first philosophy rather than a network- or device-first one - the pitch is that policy should follow the data itself, not the network path or the device it happens to be on. That heritage shows up as real, credible analyst recognition specifically for data loss prevention: Frost & Sullivan’s Global DLP Company of the Year for two consecutive years, an IDC MarketScape Leader placement for worldwide DLP in 2025, and a Forrester Wave Strong Performer placement for data security platforms in Q1 2025.","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"aryaka","name":"Aryaka","rank":11,"score":37.1,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Aryaka meets every stated requirement with a weighted capability score of 37.1. Unified SASE delivered as a managed service from end to end, including the private global core network and WAN optimisation.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based managed service; pricing normally depends on sites, bandwidth, regions, security stack and optimisation.","key_differentiators":["Unified SASE delivered as a managed service from end to end, including the private global core network and WAN optimisation.","Strong story for global organisations needing predictable performance between regions without internet variability.","Embedded WAN optimisation differentiates from pure cloud-delivered SASE platforms."],"best_fit_for":["Global enterprises wanting SASE delivered as a fully managed service rather than as DIY platform plus tools.","Buyers who need consistent inter-regional performance for chatty applications.","Organisations preferring a vendor that owns the platform and the managed service rather than coordinating multiple parties."],"watch_outs":["Smaller PoP footprint and partner ecosystem than the hyperscale SASE vendors; coverage must match your geographic profile.","DIY/self-managed model has limited evidence; this is a managed-service-first proposition.","CASB and DLP capabilities have partial public evidence; depth should be confirmed in RFP."],"evidence_coverage_pct":0.275,"evidence_source_count":26,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.aryaka.com","marketplace_url":"https://netify.co.uk/marketplace/aryaka/","shortlist_summary":"Aryaka is one of the older, more established names in this category - founded 2009, more than 15 years before ‘SASE’ existed as an analyst-defined term, originally as a WAN optimisation and application-acceleration company before evolving into what it now calls ‘Unified SASE as a Service’. That specific phrase matters: Aryaka positions itself, and is described by independent commentary, as the first company to deliver SASE as a fully managed service rather than a self-managed software platform, built around a distinctive single-pass architecture (OnePASS) running over an owned, global private core network spanning more than 40 points of presence across six continents.","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"juniper-networks","name":"Juniper Networks","rank":12,"score":35,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Juniper Networks meets every stated requirement with a weighted capability score of 35. Mist AI delivers WAN Assurance, providing AI-driven monitoring and troubleshooting at the WAN edge that few competitors match.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based hardware/subscription/support; managed delivery via partners/providers.","key_differentiators":["Mist AI delivers WAN Assurance, providing AI-driven monitoring and troubleshooting at the WAN edge that few competitors match.","Strong story for buyers who want the WAN integrated with Mist-powered Wi-Fi and access network management.","Juniper SRX security platform integration provides native firewall capability for buyers standardised on Juniper."],"best_fit_for":["Enterprises already running Mist for Wi-Fi or access who want unified AI-driven operations across WAN and LAN.","Buyers prioritising observability and AI-assisted incident triage as a primary purchase criterion.","Organisations with strong network engineering capability who can take advantage of WAN Assurance telemetry."],"watch_outs":["SASE story is less mature than the SASE-led vendors; SSE capabilities have limited public evidence relative to category leaders.","Managed delivery is via partners; first-party managed service is not the primary model.","Cloud on-ramp and private backbone capabilities are less prominent than dedicated SASE platforms."],"evidence_coverage_pct":0.25,"evidence_source_count":28,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.juniper.net","marketplace_url":"https://netify.co.uk/marketplace/juniper/","shortlist_summary":"Juniper Networks offer Mist AI with WAN Assurance, delivering AI-driven monitoring and troubleshooting at the WAN edge at a depth that few competitors match. Typically shortlisted by organisations where AIOps and network assurance quality are weighted evaluation criteria rather than SD-WAN feature breadth, and worth examining more closely than the overall score might suggest if AI-driven operations is a primary requirement.","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"lumen","name":"Lumen","rank":13,"score":35,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Lumen meets every stated requirement with a weighted capability score of 35. Fully managed or co-managed SD-WAN with strong NaaS positioning and integrated network services.","category":"technology vendor / managed service provider / carrier network provider","deployment_speed":"unknown","cost_model":"Quote-based; Lumen states fully managed or co-managed SD-WAN, with access/network services priced by requirement.","key_differentiators":["Fully managed or co-managed SD-WAN with strong NaaS positioning and integrated network services.","Substantial underlay ownership in North America with global reach.","Co-managed model provides operational flexibility for customers wanting selective control."],"best_fit_for":["North American enterprises wanting integrated managed SD-WAN, access and broader network services from one provider.","Buyers attracted to the NaaS consumption model.","Organisations wanting genuine co-managed delivery rather than pure managed or pure DIY."],"watch_outs":["SASE and security capabilities are largely partner-integrated rather than native; the SSE platform choice needs explicit evaluation.","International delivery depth is less prominent than the dedicated global carriers.","Underlying SD-WAN platform should be confirmed; platform choice affects feature set."],"evidence_coverage_pct":0.25,"evidence_source_count":17,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.lumen.com/en-us/services/sd-wan.html","marketplace_url":"https://netify.co.uk/marketplace/lumen/","shortlist_summary":"Lumen Technologies has just completed a corporate transformation - on 21 May 2025, Lumen announced the sale of its Mass Markets fiber-to-the-home business - including its Quantum Fiber consumer brand, serving more than 1 million subscribers across 11 states - to AT&T for $5.75 billion in cash, a transaction that closed on 2 February 2026. Lumen’s own CEO, Kate Johnson, described the deal directly as marking the company’s transformation into ‘a Pure Play Enterprise-Focused Technology Infrastructure Company’, retaining its national, regional, state, and metro fiber backbone specifically to support that enterprise focus while divesting the consumer-facing business entirely.","value_tier":"premium","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"arista-velocloud","name":"VeloCloud","rank":14,"score":32.5,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"VeloCloud meets every stated requirement with a weighted capability score of 32.5. VeloCloud was an early SD-WAN platform with strong cloud-delivered gateway architecture; now under Arista following the 2025 acquisition.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based edge subscriptions/appliances/support; managed services commonly delivered by carriers/MSPs.","key_differentiators":["VeloCloud was an early SD-WAN platform with strong cloud-delivered gateway architecture; now under Arista following the 2025 acquisition.","Multi-tenant design has made VeloCloud common in carrier and MSP managed services.","Application-aware routing and dynamic path selection are mature capabilities with substantial deployment history."],"best_fit_for":["Enterprises consuming VeloCloud through a managed service provider (Vodafone UK, others).","Service providers running multi-tenant SD-WAN at scale.","Buyers comfortable with a platform in transition under new ownership."],"watch_outs":["Platform is mid-transition from VMware/Broadcom to Arista; product roadmap, naming and integration story will evolve.","Security and SASE capabilities are largely partner-integrated rather than native.","Direct enterprise sales motion is less established than legacy vendors; most consumption is via managed providers."],"evidence_coverage_pct":0.25,"evidence_source_count":24,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.arista.com","marketplace_url":"https://netify.co.uk/marketplace/velocloud/","shortlist_summary":"VeloCloud was founded in 2012 as a cloud-delivered SD-WAN pioneer, acquired by VMware in 2017 for approximately $336 million, then came under Broadcom’s ownership when Broadcom completed its roughly $69 billion acquisition of VMware in 2023. Under Broadcom, the product was paired with Symantec’s security stack (Broadcom separately owns Symantec’s enterprise security business) into a single-vendor offering called ‘VMware VeloCloud SASE, secured by Symantec’, announced February 2024.","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"expereo","name":"Expereo","rank":15,"score":32.3,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Expereo meets every stated requirement with a weighted capability score of 32.3. ","category":"managed service provider / carrier network provider","deployment_speed":"unknown","cost_model":"Confirm commercial model through RFP.","key_differentiators":[],"best_fit_for":[],"watch_outs":[],"evidence_coverage_pct":0.225,"evidence_source_count":18,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://netify.co.uk/marketplace/expereo/","marketplace_url":"https://netify.co.uk/marketplace/expereo/","shortlist_summary":"Rather than owning last-mile or backbone infrastructure directly, Expereo positions itself explicitly as an internet-connectivity aggregation and optimisation specialist, describing itself as a ‘world-leading Managed Network as a Service provider’ built around a ‘Global Internet’ underlay philosophy - the consistent, repeated framing across its own materials is that a strong internet underlay, not owned physical infrastructure, is the essential foundation for effective SD-WAN and SASE. Founded in Amsterdam in 2004, Expereo has passed through a complex, multi-owner private-equity history: acquired by The Carlyle Group in July 2014, sold to Apax Partners in May 2018, and majority-acquired b...","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"cloudflare-one","name":"Cloudflare One","rank":16,"score":29.9,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Cloudflare One meets every stated requirement with a weighted capability score of 29.9. Cloudflare global edge network provides one of the largest PoP footprints in the category for SASE traffic.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Quote-based enterprise pricing; some Zero Trust user tiers public, Magic WAN enterprise requires quote.","key_differentiators":["Cloudflare global edge network provides one of the largest PoP footprints in the category for SASE traffic.","Strong Zero Trust and SWG capability inheritance from the wider Cloudflare security platform.","Magic WAN Connector provides simplified branch connectivity into the Cloudflare One platform."],"best_fit_for":["Buyers already using Cloudflare for DDoS protection, CDN or Zero Trust who want to extend into WAN.","Organisations prioritising global PoP coverage and edge performance for SaaS access.","Mid-market buyers attracted to Cloudflare One pricing transparency for Zero Trust user tiers."],"watch_outs":["SD-WAN capabilities (path selection, QoS, packet loss remediation) have limited public evidence compared to SD-WAN-first vendors.","Less mature for very large branch estates with complex underlay requirements.","Managed and co-managed service models are partner-led; this is primarily a self-service platform."],"evidence_coverage_pct":0.175,"evidence_source_count":47,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.cloudflare.com/sase","marketplace_url":"https://netify.co.uk/marketplace/cloudflare-one/","shortlist_summary":"Rather than building a security platform and adding network reach, or building a network and adding security, Cloudflare started as one of the internet’s largest content-delivery and DDoS-mitigation networks (founded 2009, public since 2019 on NYSE: NET) and extended that same global infrastructure - every product running in every data centre, not routed to a handful of regional security hubs - into a full SASE platform. That architecture is the platform’s clearest, most defensible claim: Cloudflare states it delivers full SASE from more than 300 cities, which it describes as more than three times the footprint of other SASE vendors, with sub-50-millisecond reach to 95% of the world’s int...","value_tier":"value","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"cradlepoint-ericsson","name":"Ericsson Cradlepoint","rank":17,"score":28.6,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Ericsson Cradlepoint meets every stated requirement with a weighted capability score of 28.6. Wireless-first branch architecture from Ericsson with deep 5G expertise; NetCloud provides cellular-centric SD-WAN management.","category":"technology vendor / carrier network provider","deployment_speed":"unknown","cost_model":"Quote-based NetCloud subscriptions + routers/adapters; public hardware pricing may exist through resellers.","key_differentiators":["Wireless-first branch architecture from Ericsson with deep 5G expertise; NetCloud provides cellular-centric SD-WAN management.","Strong story for organisations adopting 5G as a primary access medium rather than as a backup.","Network slicing and private 5G integration roadmap is more credible than competitors lacking cellular heritage."],"best_fit_for":["Distributed enterprises with strong cellular/5G access strategy (retail, logistics, transport, public sector).","Buyers consolidating wireless WAN with traditional fixed-line SD-WAN under one operational tool.","Organisations interested in private 5G integration with branch SD-WAN."],"watch_outs":["SASE story is partner-integrated rather than native; SSE capabilities require validation in RFP.","Cloud on-ramp and multi-cloud transit fabric have limited public evidence relative to dedicated SASE platforms.","Best for cellular-led architectures; less strong as a primary fit for fixed-circuit-heavy estates."],"evidence_coverage_pct":0.175,"evidence_source_count":21,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://cradlepoint.com","marketplace_url":"https://netify.co.uk/marketplace/ericsson-cradlepoint/","shortlist_summary":"Cradlepoint began in 2006 as an independent Boise, Idaho-based pioneer in cellular-first wireless WAN networking, raised more than $162 million before being acquired outright by Ericsson (NASDAQ: ERIC) in a deal announced September 2020 and closed later that year at an enterprise value of approximately $1.1 billion. That makes this platform’s identity distinctive within this product category: it sits inside one of the world’s largest telecommunications equipment manufacturers rather than a standalone security company or a private-equity-backed challenger, and its architecture reflects that heritage directly - NetCloud SASE is built cellular-first, with confirmed, specific capabilities lik...","value_tier":"value","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"opensystems","name":"Open Systems","rank":18,"score":28.6,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Open Systems meets every stated requirement with a weighted capability score of 28.6. ","category":"technology vendor / managed service provider","deployment_speed":"unknown","cost_model":"Confirm commercial model through RFP.","key_differentiators":[],"best_fit_for":[],"watch_outs":[],"evidence_coverage_pct":0.175,"evidence_source_count":21,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://netify.co.uk/marketplace/opensystems/","marketplace_url":"https://netify.co.uk/marketplace/opensystems/","shortlist_summary":"Open Systems founded in 1990 in Basel, Switzerland, more than three decades before the SASE category itself existed, originally as a managed security service provider before evolving its platform into what it now markets as native, managed SASE Experience. The company’s ownership history took a distinctive turn in 2023: after a period under the European private-equity firm EQT, Open Systems was acquired by Swiss Post - Switzerland’s state-backed national postal and logistics institution - a materially different kind of owner from the venture-capital or private-equity structures behind most other vendors in this category.","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"orange-business","name":"Orange Business","rank":19,"score":28.6,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Orange Business meets every stated requirement with a weighted capability score of 28.6. Global managed network leadership with strong service assurance, NOC depth and field operations.","category":"carrier network provider / integrator","deployment_speed":"unknown","cost_model":"Quote-based managed service; costs driven by access circuits, countries, vendor platform, security services and SLAs.","key_differentiators":["Global managed network leadership with strong service assurance, NOC depth and field operations.","Multi-vendor managed SD-WAN and SASE delivery (including Palo Alto Networks managed SASE via Orange Cyberdefense).","Strong UK and EMEA presence with established enterprise managed service track record."],"best_fit_for":["Multinational enterprises wanting a single global managed provider for SD-WAN, SASE and access.","Buyers prioritising service ownership, RCA quality and change governance over best-of-breed platform selection.","Organisations needing access circuit sourcing alongside SD-WAN platform delivery."],"watch_outs":["Platform choice depends on which Orange-supported vendor is selected; underlying platform fit and roadmap should be evaluated independently.","Commercial model is bespoke; rate cards and change costs need careful scoping.","DIY/self-managed model is not the primary positioning."],"evidence_coverage_pct":0.175,"evidence_source_count":20,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.orange-business.com","marketplace_url":"https://netify.co.uk/marketplace/orangebusiness/","shortlist_summary":"Orange Business is the enterprise services arm of Orange S.A., one of the largest telecommunications groups in Europe, headquartered in France and listed on Euronext Paris. Orange Business itself traces its lineage to Equant and Global One before being formally established on 1 June 2006, and was renamed from Orange Business Services to Orange Business on 16 February 2023; Frédéric Schepens serves as CEO (appointed July 2024), leading approximately 30,000 employees.","value_tier":"premium","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"vodafone-business","name":"Vodafone Business","rank":20,"score":28,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Vodafone Business meets every stated requirement with a weighted capability score of 28. Strong UK and European market presence with NaaS positioning and integrated mobile/fixed access.","category":"managed service provider / carrier network provider","deployment_speed":"unknown","cost_model":"Quote-based managed service; carrier access, SD-WAN platform, security services and country coverage determine costs.","key_differentiators":["Strong UK and European market presence with NaaS positioning and integrated mobile/fixed access.","VeloCloud-based managed SD-WAN in the UK with broader Vodafone international footprint.","Tight integration with Vodafone mobile services for buyers prioritising cellular and 5G access."],"best_fit_for":["UK and European enterprises wanting carrier-led SD-WAN with strong mobile and 5G integration.","Buyers consolidating fixed and mobile access alongside SD-WAN platform delivery.","Organisations attracted to the NaaS consumption model."],"watch_outs":["Underlying platform varies by region (VeloCloud in UK, others elsewhere); ensure consistency for multinational deployment.","Security and SASE capabilities are largely partner-integrated.","Commercial structure bundles access, mobile and platform; line-item costing requires explicit RFP."],"evidence_coverage_pct":0.175,"evidence_source_count":17,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://vb2b.vodafone.com/business/products/fixed-connectivity/sd-wan","marketplace_url":"https://netify.co.uk/marketplace/vodafone/","shortlist_summary":"Vodafone Group is a vast, multinational telecommunications operator - for the financial year ended 31 March 2024, Vodafone Group reported total revenue of €36.7 billion, with Vodafone Business specifically operating across all of Vodafone’s markets, addressing a claimed €160 billion addressable market, serving 5 million customers, managing 198 million IoT connections (FY24 figure), and contributing 24% of Group service revenue. Against that scale, the managed SD-WAN and SASE proposition examined in this profile is one product line within a much larger enterprise business.","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"barracuda-secureedge","name":"Barracuda SecureEdge","rank":21,"score":26.5,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Barracuda SecureEdge meets every stated requirement with a weighted capability score of 26.5. ","category":"technology vendor","deployment_speed":"unknown","cost_model":"Confirm commercial model through RFP.","key_differentiators":[],"best_fit_for":[],"watch_outs":[],"evidence_coverage_pct":0.15,"evidence_source_count":23,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://netify.co.uk/marketplace/barracuda-secureedge/","marketplace_url":"https://netify.co.uk/marketplace/barracuda-secureedge/","shortlist_summary":"Barracuda Networks is a long-established cybersecurity company - founded 2003, initially focused on spam and virus firewalls - that has changed ownership twice in the past decade without ever settling into a stable, single corporate structure: it went public in 2013, was taken private by Thoma Bravo in 2018 for $1.6 billion, and was acquired again by KKR in 2022. SecureEdge, launched in 2023, is Barracuda’s single-vendor SASE platform, integrating Secure SD-WAN, Firewall-as-a-Service, ZTNA and Secure Web Gateway, and it now sits within Barracuda’s broader BarracudaONE umbrella alongside the company’s much older, well-established email, data, and application-protection product lines.","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"bt-business","name":"BT","rank":22,"score":26.5,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"BT meets every stated requirement with a weighted capability score of 26.5. UK market leader for managed SD-WAN with deep access circuit ownership and field engineering capability.","category":"managed service provider / carrier network provider","deployment_speed":"unknown","cost_model":"Quote-based managed service; includes access, CPE, vendor stack and service tier options.","key_differentiators":["UK market leader for managed SD-WAN with deep access circuit ownership and field engineering capability.","Multi-vendor platform support (Cisco, VMware/Broadcom, Fortinet, Palo Alto, Meraki) gives buyers platform choice within one managed service.","Strong global SD-WAN and SASE delivery via BT Global for multinational requirements."],"best_fit_for":["UK enterprises wanting a single supplier for SD-WAN platform, access circuits, security and field operations.","Multinational organisations with a UK headquarters needing global delivery via BT Global.","Buyers prioritising underlay accountability and field engineering depth alongside SD-WAN delivery."],"watch_outs":["Platform choice and packaging vary; buyers should confirm which vendor platform is being proposed and why.","DIY/self-managed model is not BT's primary positioning.","Co-managed model and customer control boundaries should be confirmed via RACI and portal demo."],"evidence_coverage_pct":0.15,"evidence_source_count":16,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://business.bt.com/networks-digital-services/sd-wan","marketplace_url":"https://netify.co.uk/marketplace/bt/","shortlist_summary":"BT is not a single-platform SASE company, but the UK’s largest telecommunications operator and managed service provider, delivering SASE as one service line within a vastly larger, publicly-listed (LSE: BT.A) group.","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"verizon-business","name":"Verizon Business","rank":23,"score":25.9,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Verizon Business meets every stated requirement with a weighted capability score of 25.9. Global carrier-led managed SASE and SD-WAN with strong North American presence and international delivery.","category":"managed service provider / carrier network provider","deployment_speed":"unknown","cost_model":"Quote-based managed service; typically platform, access, security bundle, sites/users/bandwidth/term.","key_differentiators":["Global carrier-led managed SASE and SD-WAN with strong North American presence and international delivery.","Versa Networks partnership provides multi-tenant SD-WAN platform with security, routing and analytics under managed service.","Established reputation as a SASE managed services leader in industry analyst rankings."],"best_fit_for":["North American and multinational enterprises wanting carrier-led managed SD-WAN and SASE.","Buyers comfortable with Versa as the underlying platform via managed delivery.","Organisations prioritising service maturity and global delivery capability."],"watch_outs":["Platform is largely Versa-based; buyers wanting platform optionality should evaluate alternatives.","Commercial model is bespoke; cost transparency and change governance require careful contracting.","DIY/self-managed model is not the primary positioning."],"evidence_coverage_pct":0.15,"evidence_source_count":20,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.verizon.com/business/resources/lp/secure-access-service-edge","marketplace_url":"https://netify.co.uk/marketplace/verizon/","shortlist_summary":"Verizon Communications is one of the largest telecommunications companies in the world - generating $133.6 billion in revenue in 2023 (2025 consensus estimates are approximately $134-135 billion) and serving nearly all of the Fortune 500 - and its managed SD-WAN and SASE proposition sits within Verizon Business, itself organised into three named customer groups (Enterprise and Public Sector, Business Markets and Other, and Wholesale). Verizon’s SASE architecture is an extensively multi-platform proposition: its own materials confirm direct integration with Versa, Cisco (cEdge and vEdge), Zscaler (both Zscaler Internet Access and Zscaler Private Access), and Palo Alto Networks Prisma Acces...","value_tier":"premium","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"gtt","name":"GTT","rank":24,"score":25.6,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"GTT meets every stated requirement with a weighted capability score of 25.6. Tier 1 global backbone provides strong international transit capability alongside managed SD-WAN.","category":"hybrid provider","deployment_speed":"unknown","cost_model":"Quote-based managed service; GTT public page answers cost only as consultative/requirement-based.","key_differentiators":["Tier 1 global backbone provides strong international transit capability alongside managed SD-WAN.","Vendor-agnostic SD-WAN delivery (multiple platform options) with the Envision management platform.","Recognised as a leader for SASE and managed SD-WAN by industry analysts."],"best_fit_for":["Multinational enterprises needing strong international backbone alongside managed SD-WAN.","Buyers wanting platform flexibility within a managed service.","Organisations consolidating global transit, SD-WAN and SASE under one provider."],"watch_outs":["SASE depth depends heavily on the chosen platform partner; native SSE capabilities are not primary positioning.","Security stack is largely partner-integrated.","Commercial model is consultative; ensure cost lines for managed changes, security and SLAs are explicit."],"evidence_coverage_pct":0.125,"evidence_source_count":17,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.gtt.net/services/secure-networking/managed-sd-wan","marketplace_url":"https://netify.co.uk/marketplace/gtt/","shortlist_summary":"GTT Communications is a specialist, purely networking-and-security-focused global provider rather than a diversified telecom conglomerate with mobile, broadband, and media businesses attached. Founded in 1998, listed on the NYSE in 2013, renamed GTT Communications in January 2014, and now headquartered in Arlington, Virginia, GTT operates a global Tier 1 IP backbone spanning more than 600 points of presence and connecting more than 3,500 cities.","value_tier":"value","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"comcast-business","name":"Comcast Business","rank":25,"score":22.3,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Comcast Business meets every stated requirement with a weighted capability score of 22.3. SASE combining SD-WAN and security available fully managed or co-managed, drawing on Masergy AIOps heritage.","category":"managed service provider / carrier network provider","deployment_speed":"unknown","cost_model":"Quote-based managed/co-managed service; access, SD-WAN, SASE and SOC/AIOps elements drive cost.","key_differentiators":["SASE combining SD-WAN and security available fully managed or co-managed, drawing on Masergy AIOps heritage.","Recognised as a leading managed SD-WAN provider by industry analysts.","Strong North American underlay ownership with international delivery via partners."],"best_fit_for":["North American enterprises wanting managed or co-managed SD-WAN and SASE from a single carrier.","Buyers attracted to the AIOps capabilities inherited from the Masergy acquisition.","Organisations prioritising co-managed delivery with shared operational control."],"watch_outs":["International delivery depth depends on partnerships outside North America.","Underlying platform choice should be confirmed; service depth varies by selected platform.","Commercial model bundles access, SD-WAN, SASE and SOC elements; explicit line-item costing required."],"evidence_coverage_pct":0.1,"evidence_source_count":11,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://business.comcast.com","marketplace_url":"https://netify.co.uk/marketplace/comcastbusiness/","shortlist_summary":"Comcast Business’s managed SD-WAN and SASE proposition traces its specialist technical foundation to Masergy, a managed SD-WAN and SASE vendor founded in 2000 in Plano, Texas, which Comcast Business acquired in 2021 to, in the words of Comcast Business’s then-President Bill Stemper, ‘instantly and dramatically amplify our growth in the global enterprise market’. At acquisition, Masergy served more than 1,400 customers across 100 countries and delivered its managed SD-WAN and SASE capability on named technology partnerships with Fortinet and Silver Peak (subsequently acquired by HPE), plus Bitglass for cloud access security broker capability specifically, per independent analyst commentary...","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"virgin-media-o2","name":"Virgin Media O2 Business","rank":26,"score":22.3,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Virgin Media O2 Business meets every stated requirement with a weighted capability score of 22.3. ","category":"managed service provider / carrier network provider","deployment_speed":"unknown","cost_model":"Confirm commercial model through RFP.","key_differentiators":[],"best_fit_for":[],"watch_outs":[],"evidence_coverage_pct":0.1,"evidence_source_count":19,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://netify.co.uk/marketplace/virgin-media-o2/","marketplace_url":"https://netify.co.uk/marketplace/virgin-media-o2/","shortlist_summary":"Virgin Media O2 (VMO2) is itself a 50/50 joint venture between Liberty Global and Telefónica, formed in June 2021 from the merger of Virgin Media UK and O2 UK. On 12 May 2025, VMO2 announced it would combine substantially all of its direct business-to-business operations - including Virgin Media O2 Business - with Daisy Group, a long-established, independent UK B2B communications and IT provider founded in 2001.","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"att-business","name":"AT&T Business","rank":27,"score":21.6,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"AT&T Business meets every stated requirement with a weighted capability score of 21.6. Major US carrier-led managed SD-WAN portfolio with multi-vendor platform options (including Fortinet for AT&T SASE).","category":"managed service provider / carrier network provider","deployment_speed":"unknown","cost_model":"Quote-based managed service; access circuits, security, platform and managed service wrapped into term contract.","key_differentiators":["Major US carrier-led managed SD-WAN portfolio with multi-vendor platform options (including Fortinet for AT&T SASE).","Strong North American underlay ownership with global delivery via international partnerships.","AT&T SASE unifies SD-WAN with network security as a converged managed service."],"best_fit_for":["US-headquartered enterprises wanting integrated carrier-led SD-WAN and SASE.","Buyers wanting Fortinet SASE delivered as a managed service rather than DIY.","Organisations prioritising carrier-grade SLAs and managed service maturity."],"watch_outs":["Underlying platform varies by service tier; buyers should confirm which platform supports the proposed scope.","International delivery depth depends on partnerships outside North America.","Commercial structure typically bundles access, security and platform; line-item costing requires explicit RFP."],"evidence_coverage_pct":0.1,"evidence_source_count":17,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.business.att.com/products/sd-wan.html","marketplace_url":"https://netify.co.uk/marketplace/att/","shortlist_summary":"AT&T is one of the largest telecommunications companies in the United States, reporting trailing-twelve-month revenue of approximately $120.7 billion as of Q1 2026, with fixed-line enterprise services (including the SD-WAN and SASE proposition covered in this profile) accounting for roughly 14% of total revenue. AT&T’s SASE strategy is built on two named, current, dated technology partnerships.","value_tier":"premium","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"colt-technology-services","name":"Colt Technology Services","rank":28,"score":21.4,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"Colt Technology Services meets every stated requirement with a weighted capability score of 21.4. SD-WAN and SASE with strong European data sovereignty positioning.","category":"carrier network provider","deployment_speed":"unknown","cost_model":"Quote-based managed service; access, SD-WAN/SASE design, data sovereignty and service options drive pricing.","key_differentiators":["SD-WAN and SASE with strong European data sovereignty positioning.","Managed and co-managed delivery options with management portal access.","Enterprise-grade connectivity heritage with substantial European network ownership."],"best_fit_for":["European enterprises prioritising data residency, sovereignty and regulatory alignment.","Buyers wanting genuine co-managed delivery rather than pure managed or pure DIY.","Organisations consolidating European connectivity with SD-WAN under one provider."],"watch_outs":["Global delivery depth outside Europe is less prominent than the largest global carriers.","CASB and DLP have partial public evidence; SSE platform partner choice should be confirmed.","Underlying SD-WAN platform should be explicitly confirmed in RFP."],"evidence_coverage_pct":0.075,"evidence_source_count":13,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.colt.net/products/networking/sd-wan","marketplace_url":"https://netify.co.uk/marketplace/colt/","shortlist_summary":"Colt Technology Services is a long-established, European-anchored network operator, founded in 1992 as City of London Telecommunications and headquartered in London. Since 2015 Colt has been privately owned by Fidelity International (Eight Roads’ current specific role to be reconfirmed), and its network footprint expanded materially through a significant acquisition of Lumen Technologies’ Europe, Middle East and Africa business for $1.8 billion, completed November 2022, reinforcing Colt’s own confirmed network scale of more than 30 countries, more than 50 metropolitan area networks, and more than 32,000 on-net buildings, all delivered over its own named Colt IQ Network platform.","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"ntt","name":"NTT DATA","rank":29,"score":21.4,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"NTT DATA meets every stated requirement with a weighted capability score of 21.4. 24x7 managed SD-WAN delivery via global operations centres with strong portal visibility.","category":"carrier network provider","deployment_speed":"unknown","cost_model":"Quote-based managed service; global design/delivery/support, SD-WAN vendor and security stack determine cost.","key_differentiators":["24x7 managed SD-WAN delivery via global operations centres with strong portal visibility.","Managed SASE partnership with Palo Alto Networks (Prisma SASE) for buyers wanting that platform under managed service.","Strong global delivery footprint including APAC, EMEA and Americas."],"best_fit_for":["Multinational enterprises wanting truly global managed delivery with consistent operations across regions.","Buyers wanting Prisma SASE consumed as a fully managed service.","Organisations prioritising managed service maturity and global SOC/NOC depth."],"watch_outs":["Platform fit depends on which vendor is being proposed (Palo Alto, Zscaler, others); evaluate platform independently.","Commercial complexity is meaningful at global scale; ensure scope and RACI are explicit.","DIY/self-managed model is not the primary positioning."],"evidence_coverage_pct":0.075,"evidence_source_count":22,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.nttglobal.net/services/sd-wan","marketplace_url":"https://netify.co.uk/marketplace/ntt-data/","shortlist_summary":"NTT DATA is a massive, globally-established IT services and network provider, founded in Japan in 1988 as a spinoff of Nippon Telegraph and Telephone (NTT), and now operating in more than 70 countries with approximately 190,000 employees. A significant, current corporate event is worth understanding first: on 8 May 2025, NTT, Inc. (renamed that same year from Nippon Telegraph and Telephone Corporation) launched a tender offer to acquire full ownership of NTT DATA Group Corporation, its previously partially-owned, publicly-listed subsidiary; the offer, at JPY 4,000 per share (a confirmed 41.5% premium), achieved 81.75% acceptance, and following shareholder approval on 29 August 2025, NTT D...","value_tier":"premium","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."},{"slug":"sonicwall","name":"SonicWall Cloud Secure Edge","rank":30,"score":19.3,"eligible":true,"gating_failures":[],"matched_requirements":[],"gaps":[],"summary":"SonicWall Cloud Secure Edge meets every stated requirement with a weighted capability score of 19.3. SD-WAN delivered via existing TZ, NSa and SM firewall appliances; familiar deployment for organisations standardised on SonicWall.","category":"technology vendor","deployment_speed":"unknown","cost_model":"Public hardware/security bundle pricing often available via resellers; managed options partner-dependent.","key_differentiators":["SD-WAN delivered via existing TZ, NSa and SM firewall appliances; familiar deployment for organisations standardised on SonicWall.","Strong SMB and mid-market positioning with reseller channel and public hardware pricing.","Integrated firewall and SD-WAN avoids separate appliances for smaller branches."],"best_fit_for":["SMB and mid-market organisations already running SonicWall firewalls.","Distributed branch estates where firewall-led SD-WAN is operationally simpler than a separate SD-WAN platform.","Buyers prioritising public pricing visibility and reseller channel options."],"watch_outs":["SASE and SSE capabilities have partial public evidence; depth should be confirmed in RFP.","Less suited to large enterprise multinational deployments requiring private backbone or PoP architectures.","Public cloud gateway and multi-cloud transit fabric capabilities are less prominent than cloud-native SASE vendors."],"evidence_coverage_pct":0.05,"evidence_source_count":24,"independent_evidence_source_count":0,"last_verified":"2026-09-01","website":"https://www.sonicwall.com","marketplace_url":"https://netify.co.uk/marketplace/sonicwall-cse/","shortlist_summary":"SonicWall is one of the oldest names in network security still operating under its own brand - founded 1991 as Sonic Systems, later renamed SonicWall, and shaped by an eventful corporate history: an IPO in 1999, a return to private ownership, acquisition by Dell in 2012, and a $2 billion-plus divestiture from Dell in November 2016 that spun the company out as an independent business jointly owned by private equity firms Francisco Partners and Elliott Management, who remain its owners today. Cloud Secure Edge (CSE), the product this profile covers, has its own separate origin: it began as Banyan Security, an independent SSE vendor, before SonicWall acquired it in January 2023 specifically...","value_tier":"budget","uk_delivery":"global_managed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record."}],"near_misses":[],"generated_at":"2026-09-02T16:29:15.827Z","methodology_note":"Scores are weighted across 40 capabilities with points accrued based on: yes 1.0, via partner 0.75, via managed service 0.65, partial 0.5, not confirmed 0.15, not primary 0. Extended dimensions are indicative desk research; confirm via RFP."},"interactiveSurfaces":[{"id":"shortlist-builder","kind":"filter-ui","url":"https://netify.co.uk/sase/shortlist/","description":"Interactive shortlist builder. Filter state is encoded in URL query parameters, so any scenario URL is shareable and citable.","backingTool":"build_sase_shortlist","inputs":"service_model, required_features, preferred_features, required_regions, required_clouds, ai_requirements, disaster_recovery_required, max_deployment_speed, weight_preset, shortlist_size"},{"id":"mcp-server","kind":"mcp","url":"https://netify.co.uk/sase/api/mcp","description":"JSON-RPC 2.0 MCP server. tools/list returns available tools; tools/call executes build_sase_shortlist, list_sase_vendors or get_sase_vendor_profile."},{"id":"comparison-workspace","kind":"agentic-comparison-ui","url":"https://netify.co.uk/sase/shortlist/?compare=bt-business,vodafone-business&question=Which+provider+best+fits+this+project","contract":"provider-comparison/1.0.0","description":"Select two providers, calculate their deterministic evidence comparison and ask contextual follow-up questions. The compare query parameter accepts two comma-separated vendor slugs.","backingTool":"compare_vendors"}],"distributions":{"json":"https://netify.co.uk/sase/shortlist/data.json","csv":"https://netify.co.uk/sase/shortlist/data.csv"}}