{"page":"https://netify.co.uk/sase/shortlist/","title":"Compare SD-WAN and SASE providers for UK businesses","description":"Compare 30 researched SD-WAN and SASE providers across operating model, network and security capability. 19 technology vendors; 4 UK carriers; 9 managed service providers; overlapping categories counted in each type.","publisher":"Netify Group Limited","license":"https://creativecommons.org/licenses/by/4.0/","contract_version":"governed-shortlist/1.0.0","market_view_contract_version":"shortlist-market-view/2.0.0","source_contract_version":"neon-shortlist/2.0.0","provider_contract_version":"provider-match-records/2.0.0","runtime_provider_source":"neon","provider_dataset_versions":["sha256-0f697fc7fc4690bb"],"provider_loaded_at":"2026-10-15T11:21:37.555Z","generated_at":"2026-10-15T11:21:37.555Z","last_reviewed":"2026-10-10T00:00:00Z","evidence":{"research_completeness_method":"Research completeness counts graded fields across the published capability framework. Supported, partial, partner-delivered, managed-service dependent and not-primary grades count as reviewed. Unconfirmed or missing fields do not. This measures research completeness, not provider quality, suitability or the number of supported capabilities.","source_count_unit":"record references, not unique URLs","method":"Each public provider profile is a reviewed projection of the governed provider record. Capability states distinguish supported, partial, partner-delivered, unsupported, not-confirmed and requires-confirmation evidence.","sources_total":1331},"buyer_decisions":[{"id":"managed","title":"You want someone to run the service","feature":"f01_fully_managed_service","question":"Ask who owns monitoring, policy changes, incident response and escalation, and which tasks remain with your team.","providers":[{"slug":"aryaka","name":"Aryaka","grade":"yes","evidence_date":"2026-09-19T00:00:00.000Z","source_url":"https://www.aryaka.com/unified-sase-platform/"},{"slug":"att-business","name":"AT&T Business","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"bt-business","name":"BT","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"check-point","name":"Check Point","grade":"partial","evidence_date":"2026-07-29","source_url":"https://www.checkpoint.com/services/managed-security/managed-firewall/"},{"slug":"colt-technology-services","name":"Colt Technology Services","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"comcast-business","name":"Comcast Business","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"cradlepoint-ericsson","name":"Ericsson Cradlepoint","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"expereo","name":"Expereo","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"fortinet","name":"Fortinet FortiSASE","grade":"yes","evidence_date":"2026-07-29","source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/managed-fortigate-svc.pdf"},{"slug":"gtt","name":"GTT","grade":"yes","evidence_date":"2026-07-29","source_url":"https://www.gtt.net/services/secure-networking/managed-sd-wan/"},{"slug":"juniper-networks","name":"Juniper Networks","grade":"partial","evidence_date":"2026-07-29","source_url":"https://www.juniper.net/us/en/services.html"},{"slug":"lumen","name":"Lumen","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"ntt","name":"NTT DATA","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"opensystems","name":"Open Systems","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"orange-business","name":"Orange Business","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"arista-velocloud","name":"VeloCloud","grade":"partner_integrated","evidence_date":"2026-07-29","source_url":"https://www.arista.com/assets/data/pdf/VeloCloud-SD-WAN-Data-Sheet.pdf"},{"slug":"verizon-business","name":"Verizon Business","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"versa-networks","name":"Versa Networks","grade":"partial","evidence_date":"2026-07-29","source_url":"https://versa-networks.com/documents/solution-briefs/versa-sase.pdf"},{"slug":"virgin-media-o2","name":"Virgin Media O2 Business","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"vodafone-business","name":"Vodafone Business","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"zscaler","name":"Zscaler","grade":"partial","evidence_date":"2026-07-29","source_url":"https://www.zscaler.com/partners/service-providers"}]},{"id":"self-managed","title":"Your team wants to run the platform","feature":"f02_diy_self_managed_model","question":"Check operating skills, deployment support, licensing and whether connectivity and security services are separate purchases.","providers":[{"slug":"aryaka","name":"Aryaka","grade":"yes","evidence_date":"2026-10-01T00:00:00Z","source_url":"https://www.aryaka.com/use-cases/network-and-security-convergence/"},{"slug":"barracuda-secureedge","name":"Barracuda SecureEdge","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"cato-networks","name":"Cato Networks","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"check-point","name":"Check Point","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"cisco","name":"Cisco","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"cloudflare-one","name":"Cloudflare One","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"cradlepoint-ericsson","name":"Ericsson Cradlepoint","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"forcepoint","name":"Forcepoint","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"fortinet","name":"Fortinet FortiSASE","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"gtt","name":"GTT","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"hpe-aruba","name":"HPE Aruba EdgeConnect","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"juniper-networks","name":"Juniper Networks","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"lumen","name":"Lumen","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"netskope","name":"Netskope","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"opensystems","name":"Open Systems","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"palo-alto-networks","name":"Palo Alto Networks Prisma SASE","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"sonicwall","name":"SonicWall Cloud Secure Edge","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"arista-velocloud","name":"VeloCloud","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"versa-networks","name":"Versa Networks","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"zscaler","name":"Zscaler","grade":"yes","evidence_date":"2026-09-01","source_url":null}]},{"id":"sase","title":"You need networking and security together","feature":"f28_full_sase_platform","question":"Confirm the SD-WAN component, remote-user security, inspection locations and any separate partner contracts or licences.","providers":[{"slug":"aryaka","name":"Aryaka","grade":"partial","evidence_date":"2026-09-01","source_url":null},{"slug":"att-business","name":"AT&T Business","grade":"partner_integrated","evidence_date":"2026-09-01","source_url":null},{"slug":"barracuda-secureedge","name":"Barracuda SecureEdge","grade":"partial","evidence_date":"2026-09-01","source_url":null},{"slug":"bt-business","name":"BT","grade":"yes","evidence_date":"2026-07-22T00:00:00.000Z","source_url":"https://business.bt.com/networks-digital-services/sd-wan-sase/"},{"slug":"cato-networks","name":"Cato Networks","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"check-point","name":"Check Point","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"cisco","name":"Cisco","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"colt-technology-services","name":"Colt Technology Services","grade":"yes","evidence_date":"2026-07-22T00:00:00.000Z","source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/"},{"slug":"comcast-business","name":"Comcast Business","grade":"yes","evidence_date":"2026-07-22T00:00:00.000Z","source_url":"https://business.comcast.com/enterprise/products-services/secure-networking/sase"},{"slug":"cradlepoint-ericsson","name":"Ericsson Cradlepoint","grade":"partial","evidence_date":"2026-09-01","source_url":null},{"slug":"expereo","name":"Expereo","grade":"partial","evidence_date":"2026-09-01","source_url":null},{"slug":"forcepoint","name":"Forcepoint","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"fortinet","name":"Fortinet FortiSASE","grade":"partial","evidence_date":"2026-09-01","source_url":null},{"slug":"gtt","name":"GTT","grade":"partial","evidence_date":"2026-09-01","source_url":null},{"slug":"hpe-aruba","name":"HPE Aruba EdgeConnect","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"juniper-networks","name":"Juniper Networks","grade":"partial","evidence_date":"2026-07-22T00:00:00.000Z","source_url":"https://juniper.net/us/en/solutions/secure-ai-native-edge.html"},{"slug":"lumen","name":"Lumen","grade":"yes","evidence_date":"2026-07-22T00:00:00.000Z","source_url":"https://lumen.com/en-us/services/sase-versa.html"},{"slug":"netskope","name":"Netskope","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"ntt","name":"NTT DATA","grade":"partial","evidence_date":"2026-09-01","source_url":null},{"slug":"opensystems","name":"Open Systems","grade":"partial","evidence_date":"2026-09-01","source_url":null},{"slug":"orange-business","name":"Orange Business","grade":"partial","evidence_date":"2026-09-01","source_url":null},{"slug":"palo-alto-networks","name":"Palo Alto Networks Prisma SASE","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"arista-velocloud","name":"VeloCloud","grade":"partial","evidence_date":"2026-09-01","source_url":null},{"slug":"verizon-business","name":"Verizon Business","grade":"partner_integrated","evidence_date":"2026-09-01","source_url":null},{"slug":"versa-networks","name":"Versa Networks","grade":"yes","evidence_date":"2026-09-01","source_url":null},{"slug":"virgin-media-o2","name":"Virgin Media O2 Business","grade":"partial","evidence_date":"2026-09-01","source_url":null},{"slug":"vodafone-business","name":"Vodafone Business","grade":"partial","evidence_date":"2026-09-01","source_url":null},{"slug":"zscaler","name":"Zscaler","grade":"yes","evidence_date":"2026-09-01","source_url":null}]}],"faqs":[{"q":"Which SD-WAN providers deliver nationwide in the UK?","a":"Nationwide delivery cannot be established from a UK address or contracting entity. The current records identify 5 providers with UK entity evidence (BT, Cato Networks, Colt Technology Services, Virgin Media O2 Business, Vodafone Business). Confirm availability at each site, access circuits, resilience, installation lead times and the contracting service before selection. Entity evidence is separate from site serviceability. Latest research evidence date: 2026-10-10."},{"q":"Which SASE vendors are UK-headquartered or contract through a UK entity?","a":"5 providers with UK entity and full SASE platform evidence: BT, Cato Networks, Colt Technology Services, Virgin Media O2 Business (partial), Vodafone Business (partial); reviewed on 2026-10-10."},{"q":"Which providers are managed service providers rather than technology vendors?","a":"9 managed service providers: AT&T Business, BT, Comcast Business, Expereo, Lumen, Open Systems, Verizon Business, Virgin Media O2 Business, Vodafone Business; 19 technology vendors: Aryaka, Barracuda SecureEdge, Cato Networks, Check Point, Cisco, Cloudflare One, Ericsson Cradlepoint, Forcepoint, Fortinet FortiSASE, HPE Aruba EdgeConnect, Juniper Networks, Lumen, Netskope, Open Systems, Palo Alto Networks Prisma SASE, SonicWall Cloud Secure Edge, VeloCloud, Versa Networks, Zscaler; overlapping categories counted in each type; reviewed on 2026-10-10."},{"q":"Which providers have sector evidence for Healthcare?","a":"2 with public evidence: Fortinet FortiSASE, HPE Aruba EdgeConnect; 2 with partial evidence: Lumen, Verizon Business; reviewed on 2026-10-10."},{"q":"Which providers have sector evidence for Financial services?","a":"5 with public evidence: BT, Colt Technology Services, HPE Aruba EdgeConnect, Netskope, SonicWall Cloud Secure Edge; 0 with partial evidence: no current confirmed records; this does not mean no providers offer the service; reviewed on 2026-10-10."},{"q":"Which providers have sector evidence for Retail and e-commerce?","a":"5 with public evidence: Cato Networks, NTT DATA, Open Systems, Palo Alto Networks Prisma SASE, Zscaler; 1 with partial evidence: Versa Networks; reviewed on 2026-10-10."},{"q":"Which providers have sector evidence for Manufacturing?","a":"8 with public evidence: Aryaka, Cisco, Expereo, HPE Aruba EdgeConnect, Open Systems, Orange Business, Palo Alto Networks Prisma SASE, Zscaler; 2 with partial evidence: Verizon Business, Versa Networks; reviewed on 2026-10-10."},{"q":"Which providers have sector evidence for Energy and utilities?","a":"2 with public evidence: Versa Networks, Zscaler; 0 with partial evidence: no current confirmed records; this does not mean no providers offer the service; reviewed on 2026-10-10."},{"q":"Which providers have sector evidence for Government and public sector?","a":"1 with public evidence: Zscaler; 0 with partial evidence: no current confirmed records; this does not mean no providers offer the service; reviewed on 2026-10-10."},{"q":"Which providers have sector evidence for Education?","a":"0 with public evidence: no current confirmed records; this does not mean no providers offer the service; 2 with partial evidence: Cato Networks, Fortinet FortiSASE; reviewed on 2026-10-10."},{"q":"Which providers have sector evidence for Transport and logistics?","a":"1 with public evidence: Fortinet FortiSASE; 1 with partial evidence: Aryaka; reviewed on 2026-10-10."},{"q":"Which providers have sector evidence for Professional services?","a":"3 with public evidence: Cisco, HPE Aruba EdgeConnect, Netskope; 1 with partial evidence: SonicWall Cloud Secure Edge; reviewed on 2026-10-10."},{"q":"Which providers have sector evidence for Hospitality and leisure?","a":"4 with public evidence: Cisco, Fortinet FortiSASE, GTT, HPE Aruba EdgeConnect; 0 with partial evidence: no current confirmed records; this does not mean no providers offer the service; reviewed on 2026-10-10."},{"q":"How does SD-WAN relate to SASE?","a":"SD-WAN provides the connectivity component of SASE. Define the network, security, access and management requirements together."},{"q":"How does a UK business get comparable proposals from these providers?","a":"Netify reviews your brief, confirms the providers you approve and coordinates requests for written proposals. We agree the response timetable with you before outreach, track replies and report declines or missing responses so you can decide the next step."}],"uk_buyer_guidance":{"situations":[{"id":"uk-sites","label":"UK sites only","guidance":"Compare site connectivity, backup connections, migration support and who manages each location. Ask suppliers to confirm coverage at your actual addresses."},{"id":"uk-international","label":"UK headquarters with overseas offices","guidance":"Compare UK and overseas delivery, local connectivity, support hours and escalation ownership. Confirm each country and site separately."},{"id":"uk-cloud-workforce","label":"UK workforce using cloud applications","guidance":"Compare remote access, identity integration, application performance and security management. Confirm where traffic is inspected and logs are stored."}],"provider_roles":[{"role":"Technology vendor","description":"Provides the networking or security platform. Confirm whether deployment and ongoing management come from the vendor, your IT team or a delivery partner."},{"role":"Carrier / connectivity provider","description":"Provides network connectivity and may also offer SD-WAN or SASE. Confirm the platform, circuit responsibilities and service management included in the proposal."},{"role":"Managed service provider","description":"Operates an agreed service using its own or partner technology. Confirm which platform, support tasks and service levels are included."}],"notice":"Buying guidance only. A situation does not certify coverage, filter providers or change evidence grades."},"features":[{"id":"f01_fully_managed_service","number":1,"category":"Service delivery and operating model","name":"Fully managed service","definition":"Provider designs, deploys, monitors, changes, supports and reports on the service.","rfp_question":"Confirm whether your solution/service provides: Fully managed service. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"The provider designs, deploys, monitors, changes, supports and reports on the service end to end, so the customer sets policy and outcomes rather than running day-to-day operations."},{"id":"f02_diy_self_managed_model","number":2,"category":"Service delivery and operating model","name":"DIY / self-managed model","definition":"Customer operates SD-WAN controller, policies, updates and incident response.","rfp_question":"Confirm whether your solution/service provides: DIY / self-managed model. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"The customer's own team operates the platform directly, owning the controller, policies, updates and incident response."},{"id":"f03_co_managed_service","number":3,"category":"Service delivery and operating model","name":"Co-managed service","definition":"Provider runs platform/support while customer retains selected policy or change rights.","rfp_question":"Confirm whether your solution/service provides: Co-managed service. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Responsibility is shared: the provider runs the platform and support while the customer retains selected policy and change rights."},{"id":"f04_multi_tenant_msp_white_label_support","number":4,"category":"Service delivery and operating model","name":"Multi-tenant MSP / white-label support","definition":"Tenant isolation, delegated administration, branded portals, templates and service-provider scale.","rfp_question":"Confirm whether your solution/service provides: Multi-tenant MSP / white-label support. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"The platform supports tenant isolation, delegated administration, branded portals and templates, so managed service providers can operate it for many customers under their own brand."},{"id":"f05_professional_services_and_migration_support","number":5,"category":"Service delivery and operating model","name":"Professional services and migration support","definition":"Discovery, design, pilot, staging, migration runbooks, rollback and training.","rfp_question":"Confirm whether your solution/service provides: Professional services and migration support. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Structured design and migration services are available, covering discovery, pilots, staging, migration runbooks, rollback plans and training."},{"id":"f06_last_mile_circuit_management","number":6,"category":"Service delivery and operating model","name":"Last-mile circuit management","definition":"Sourcing, monitoring and support for broadband, DIA, LTE/5G, MPLS and cross-connects.","rfp_question":"Confirm whether your solution/service provides: Last-mile circuit management. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"The provider sources, monitors and supports the underlay access circuits at each site, across broadband, dedicated internet access, LTE and 5G, MPLS and cross-connects, giving one accountable party for connectivity and overlay together."},{"id":"f07_lifecycle_management","number":7,"category":"Service delivery and operating model","name":"Lifecycle management","definition":"Hardware replacement, firmware upgrades, patching, renewals and EoL planning.","rfp_question":"Confirm whether your solution/service provides: Lifecycle management. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Hardware replacement, firmware upgrades, patching, renewals and end-of-life planning are handled as part of the service."},{"id":"f08_flexible_commercial_model","number":8,"category":"Service delivery and operating model","name":"Flexible commercial model","definition":"Per-site, per-bandwidth, per-user, per-device, consumption, NaaS or bundled pricing.","rfp_question":"Confirm whether your solution/service provides: Flexible commercial model. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Pricing can be structured in more than one way, such as per site, per user, per bandwidth, consumption-based or as NaaS, with terms that adapt to the buyer's estate."},{"id":"f09_encrypted_overlay_fabric","number":9,"category":"Network architecture and transport","name":"Encrypted overlay fabric","definition":"Secure tunnels across broadband, DIA, MPLS, LTE/5G, satellite or private WAN.","rfp_question":"Confirm whether your solution/service provides: Encrypted overlay fabric. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Site and user traffic runs through secure tunnels built over any underlying transport, including broadband, dedicated internet, MPLS, LTE and 5G or satellite, keeping data protected across mixed networks."},{"id":"f10_dynamic_path_selection","number":10,"category":"Network architecture and transport","name":"Dynamic path selection","definition":"Real-time routing based on latency, jitter, packet loss, brownouts, MOS and policy.","rfp_question":"Confirm whether your solution/service provides: Dynamic path selection. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"The platform routes traffic in real time based on measured latency, jitter, packet loss and policy, steering around brownouts without manual intervention."},{"id":"f11_active_active_link_utilisation","number":11,"category":"Network architecture and transport","name":"Active-active link utilisation","definition":"Use multiple links concurrently rather than passive backup only.","rfp_question":"Confirm whether your solution/service provides: Active-active link utilisation. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"All available links carry traffic concurrently rather than one sitting idle as passive backup, increasing usable capacity and smoothing failover."},{"id":"f12_application_aware_routing","number":12,"category":"Network architecture and transport","name":"Application-aware routing","definition":"Identification and routing for SaaS, UCaaS, ERP and custom applications.","rfp_question":"Confirm whether your solution/service provides: Application-aware routing. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Traffic is identified at application level and routed by per-application policy, so business-critical applications such as UCaaS and ERP take priority."},{"id":"f13_qos_and_traffic_shaping","number":13,"category":"Network architecture and transport","name":"QoS and traffic shaping","definition":"Per-application and per-class prioritisation, reservation and policing.","rfp_question":"Confirm whether your solution/service provides: QoS and traffic shaping. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Bandwidth can be prioritised, reserved and policed per application or traffic class, protecting voice, video and critical traffic under congestion."},{"id":"f14_packet_loss_remediation","number":14,"category":"Network architecture and transport","name":"Packet loss remediation","definition":"FEC, packet duplication, jitter buffering, TCP optimisation and WAN optimisation.","rfp_question":"Confirm whether your solution/service provides: Packet loss remediation. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Techniques such as forward error correction, packet duplication, jitter buffering and TCP optimisation repair or mask loss on poor-quality links, keeping real-time applications usable."},{"id":"f15_local_internet_breakout","number":15,"category":"Network architecture and transport","name":"Local internet breakout","definition":"Secure direct internet access from branch sites.","rfp_question":"Confirm whether your solution/service provides: Local internet breakout. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Internet-bound traffic exits securely and directly from the branch rather than being backhauled through a central data centre, reducing latency for cloud and SaaS traffic."},{"id":"f16_mpls_coexistence_and_migration","number":16,"category":"Network architecture and transport","name":"MPLS coexistence and migration","definition":"Hybrid MPLS/internet/cellular during transition.","rfp_question":"Confirm whether your solution/service provides: MPLS coexistence and migration. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Existing MPLS circuits can run alongside internet and cellular transport during a phased migration, so estates move site by site without a risky single cutover."},{"id":"f17_cellular_and_5g_support","number":17,"category":"Network architecture and transport","name":"Cellular and 5G support","definition":"Integrated/external modem, SIM management, signal monitoring and failover.","rfp_question":"Confirm whether your solution/service provides: Cellular and 5G support. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"4G and 5G connections are supported as primary or failover transport, with integrated or external modems, SIM management and signal monitoring."},{"id":"f18_cloud_on_ramp","number":18,"category":"Network architecture and transport","name":"Cloud on-ramp","definition":"Automated/simplified connectivity to AWS, Azure, Google Cloud, Oracle, Equinix, Megaport and SaaS.","rfp_question":"Confirm whether your solution/service provides: Cloud on-ramp. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Connectivity into cloud platforms such as AWS, Microsoft Azure, Google Cloud and Oracle, and interconnect fabrics such as Equinix and Megaport, is automated and simplified rather than hand-built per cloud."},{"id":"f19_public_cloud_gateways","number":19,"category":"Gateway, PoP and backbone design","name":"Public cloud gateways","definition":"Vendor-operated gateways/PoPs for SaaS optimisation, remote access or security enforcement.","rfp_question":"Confirm whether your solution/service provides: Public cloud gateways. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"The vendor operates shared gateways and points of presence that deliver SaaS optimisation, remote access or security enforcement as a cloud service; this measures the vendor's own service infrastructure, distinct from dedicated private PoPs."},{"id":"f20_private_pops_dedicated_pops","number":20,"category":"Gateway, PoP and backbone design","name":"Private PoPs / dedicated PoPs","definition":"Customer-hosted, dedicated or sovereign PoP options.","rfp_question":"Confirm whether your solution/service provides: Private PoPs / dedicated PoPs. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Points of presence can be supplied as customer-hosted, dedicated or sovereign deployments rather than only the provider's shared multi-tenant locations."},{"id":"f21_private_global_backbone","number":21,"category":"Gateway, PoP and backbone design","name":"Private global backbone","definition":"Vendor-owned or controlled backbone between PoPs.","rfp_question":"Confirm whether your solution/service provides: Private global backbone. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Traffic between regions rides a backbone owned or controlled by the vendor rather than the public internet, giving predictable latency and loss between PoPs."},{"id":"f22_regional_breakout_and_data_residency","number":22,"category":"Gateway, PoP and backbone design","name":"Regional breakout and data residency","definition":"Pin traffic to countries, regions or approved inspection locations.","rfp_question":"Confirm whether your solution/service provides: Regional breakout and data residency. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Traffic can be pinned to chosen countries, regions or approved inspection locations, supporting data residency and sovereignty requirements."},{"id":"f23_multi_cloud_transit_fabric","number":23,"category":"Gateway, PoP and backbone design","name":"Multi-cloud transit fabric","definition":"Branch-to-cloud, cloud-to-cloud and user-to-cloud connectivity under common policy.","rfp_question":"Confirm whether your solution/service provides: Multi-cloud transit fabric. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Branch-to-cloud, cloud-to-cloud and user-to-cloud traffic runs under one common policy through the provider's fabric rather than through customer-built interconnects."},{"id":"f24_flexible_edge_form_factors","number":24,"category":"Gateway, PoP and backbone design","name":"Flexible edge form factors","definition":"Physical, virtual, cloud marketplace, container or uCPE.","rfp_question":"Confirm whether your solution/service provides: Flexible edge form factors. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"The edge is available as hardware appliances, virtual machines, cloud marketplace images, containers or uCPE, so each site can use the form that suits it."},{"id":"f25_high_availability_design","number":25,"category":"Gateway, PoP and backbone design","name":"High availability design","definition":"Dual appliances, dual circuits, dual power, HA clustering and gateway redundancy.","rfp_question":"Confirm whether your solution/service provides: High availability design. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Redundant designs are supported across appliances, circuits, power and gateways, with clustering and automatic failover keeping sites connected through failures."},{"id":"f26_sla_backed_service_fabric","number":26,"category":"Gateway, PoP and backbone design","name":"SLA-backed service fabric","definition":"SLA for uptime, response, change handling and possibly latency/jitter/loss.","rfp_question":"Confirm whether your solution/service provides: SLA-backed service fabric. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"The service carries contractual commitments covering uptime, response and change handling, and in some cases latency, jitter and loss, rather than best-effort targets."},{"id":"f27_integrated_next_generation_firewall","number":27,"category":"Security and SASE capability","name":"Integrated next-generation firewall","definition":"Stateful firewall, app control, IPS/IDS, malware inspection and URL filtering.","rfp_question":"Confirm whether your solution/service provides: Integrated next-generation firewall. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Stateful firewalling, application control, intrusion prevention, malware inspection and URL filtering are built into the platform rather than supplied as a separate appliance."},{"id":"f28_full_sase_platform","number":28,"category":"Security and SASE capability","name":"Full SASE platform","definition":"SD-WAN plus SWG, CASB, ZTNA, FWaaS, DLP, RBI, DNS security and threat prevention.","rfp_question":"Confirm whether your solution/service provides: Full SASE platform. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Networking and security converge in one platform, combining SD-WAN with cloud-delivered controls including SWG, CASB, ZTNA, firewall as a service, DLP and threat prevention."},{"id":"f29_sse_ecosystem_integration","number":29,"category":"Security and SASE capability","name":"SSE ecosystem integration","definition":"Interoperation with Zscaler, Netskope, Palo Alto Prisma Access, Cisco Secure Access, Cloudflare etc.","rfp_question":"Confirm whether your solution/service provides: SSE ecosystem integration. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"The platform interoperates with third-party security service edge providers such as Zscaler, Netskope, Palo Alto Prisma Access and Cisco Secure Access, for buyers running a best-of-breed rather than single-vendor stack."},{"id":"f30_zero_trust_network_access","number":30,"category":"Security and SASE capability","name":"Zero Trust Network Access","definition":"Identity and posture-based access to private applications.","rfp_question":"Confirm whether your solution/service provides: Zero Trust Network Access. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Users are connected to specific private applications based on identity and device posture rather than being placed on the network, replacing broad VPN access with least-privilege access."},{"id":"f31_secure_web_gateway","number":31,"category":"Security and SASE capability","name":"Secure web gateway","definition":"URL filtering, SSL inspection, malware scanning and acceptable-use controls.","rfp_question":"Confirm whether your solution/service provides: Secure web gateway. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Web traffic is filtered and inspected, with URL filtering, SSL inspection, malware scanning and acceptable-use controls enforced in the cloud."},{"id":"f32_casb_capability","number":32,"category":"Security and SASE capability","name":"CASB capability","definition":"SaaS discovery, sanctioned/unsanctioned app control and SaaS policy enforcement.","rfp_question":"Confirm whether your solution/service provides: CASB capability. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Cloud access security broker controls provide SaaS discovery, sanctioned and unsanctioned application control and SaaS policy enforcement, including shadow IT visibility."},{"id":"f33_data_loss_prevention","number":33,"category":"Security and SASE capability","name":"Data loss prevention","definition":"Data classification, inspection, blocking, alerting and exception workflow.","rfp_question":"Confirm whether your solution/service provides: Data loss prevention. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Content is classified and inspected for sensitive data, which can be blocked or flagged before it leaves the organisation, with alerting and exception workflows."},{"id":"f34_remote_user_access","number":34,"category":"Security and SASE capability","name":"Remote user access","definition":"Client or clientless access for remote workers, contractors and mobile users.","rfp_question":"Confirm whether your solution/service provides: Remote user access. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Remote workers, contractors and mobile users connect through the same platform and policies as sites, through a lightweight client or clientless browser access."},{"id":"f35_soc_siem_soar_integration","number":35,"category":"Security and SASE capability","name":"SOC/SIEM/SOAR integration","definition":"Syslog, APIs, event export, threat intelligence and workflow integration.","rfp_question":"Confirm whether your solution/service provides: SOC/SIEM/SOAR integration. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Logs, events and threat intelligence export cleanly over syslog and APIs into SIEM, SOAR and security operations tooling, so the service fits an existing detection and response workflow."},{"id":"f36_centralised_orchestration","number":36,"category":"Operations, assurance and automation","name":"Centralised orchestration","definition":"Templates, intent-based policy, zero-touch provisioning and configuration compliance.","rfp_question":"Confirm whether your solution/service provides: Centralised orchestration. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Configuration and policy are managed from a single console using templates, intent-based policy and zero-touch provisioning, with changes pushed network-wide rather than device by device."},{"id":"f37_customer_portal_and_rbac","number":37,"category":"Operations, assurance and automation","name":"Customer portal and RBAC","definition":"Real-time status, role-based access, reporting, tickets and change requests.","rfp_question":"Confirm whether your solution/service provides: Customer portal and RBAC. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"A customer-facing portal provides real-time status, reporting, tickets and change requests, with role-based access so different teams see and change only what they should."},{"id":"f38_observability_and_digital_experience_monitoring","number":38,"category":"Operations, assurance and automation","name":"Observability and digital experience monitoring","definition":"App experience, user experience, device health, SaaS telemetry and path analytics.","rfp_question":"Confirm whether your solution/service provides: Observability and digital experience monitoring. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Application experience, user experience, device health and path analytics are measured end to end, so degradation is visible before tickets are raised."},{"id":"f39_apis_and_automation","number":39,"category":"Operations, assurance and automation","name":"APIs and automation","definition":"REST APIs, Terraform, webhooks, event streaming and ITSM integration.","rfp_question":"Confirm whether your solution/service provides: APIs and automation. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"Documented interfaces such as REST APIs, Terraform, webhooks and event streaming allow configuration, reporting and ITSM integration to be automated."},{"id":"f40_managed_service_assurance","number":40,"category":"Operations, assurance and automation","name":"Managed service assurance","definition":"24/7 NOC/SOC, proactive monitoring, incident ownership, RCA, service reviews and change governance.","rfp_question":"Confirm whether your solution/service provides: Managed service assurance. Include delivery model, limitations, geography and dependencies.","rfp_evidence_requested":"Product documentation, architecture diagram, service description, RACI, portal screenshot, sample report, SLA or contract extract.","description":"The provider's 24/7 NOC and SOC monitor the service proactively, own incidents through to root cause analysis, and run structured service reviews and change governance."}],"entity":{"h1":"Compare SD-WAN and SASE providers for UK businesses","counts":{"providers":30,"technology_vendors":19,"uk_carriers":4,"managed_service_providers":9},"count_sentence":"Compare 30 researched SD-WAN and SASE providers across operating model, network and security capability. 19 technology vendors; 4 UK carriers; 9 managed service providers; overlapping categories counted in each type.","uk_sentence":"5 UK-headquartered or UK-entity providers; 25 UK entity statuses not yet reviewed; latest UK entity evidence review 2026-10-01. UK entity evidence does not establish availability at individual sites.","market_structure_sentence":"","desk_sentence":"","reviewer":{"name":"","role":"","reviewed_at":""},"reviewed_at":"2026-10-10T00:00:00Z"},"vendors":[{"slug":"lumen","name":"Lumen","website":"https://www.lumen.com/en-us/services/sd-wan.html","category":"technology vendor / managed service provider / carrier network provider","product_focus":"Black Lotus Labs, Lumen Managed SASE Solutions, Lumen SASE with Versa, Lumen SD-WAN with Versa Networks","cost_model":"Quote-based; Lumen states fully managed or co-managed SD-WAN, with access/network services priced by requirement.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"partner_integrated","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"partner_integrated","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"partial","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":50,"sla_availability_pct":99.99,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/lumen/","shortlist_summary":"Lumen Technologies has just completed a corporate transformation - on 21 May 2025, Lumen announced the sale of its Mass Markets fiber-to-the-home business - including its Quantum Fiber consumer brand, serving more than 1 million subscribers across 11 states - to AT&T for $5.75 billion in cash, a transaction that closed on 2 February 2026. Lumen’s own CEO, Kate Johnson, described the deal directly as marking the company’s transformation into ‘a Pure Play Enterprise-Focused Technology Infrastructure Company’, retaining its national, regional, state, and metro fiber backbone specifically to support that enterprise focus while divesting the consumer-facing business entirely.","key_differentiators":["Fully managed or co-managed SD-WAN with strong NaaS positioning and integrated network services.","Substantial underlay ownership in North America with global reach.","Co-managed model provides operational flexibility for customers wanting selective control."],"best_fit_for":["North American enterprises wanting integrated managed SD-WAN, access and broader network services from one provider.","Buyers attracted to the NaaS consumption model.","Organisations wanting genuine co-managed delivery rather than pure managed or pure DIY."],"watch_outs":["SASE and security capabilities are largely partner-integrated rather than native; the SSE platform choice needs explicit evaluation.","International delivery depth is less prominent than the dedicated global carriers.","Underlying SD-WAN platform should be confirmed; platform choice affects feature set."],"evidence_coverage_pct":0.65,"last_verified":"2026-09-01","evidence_source_count":31,"capability_evidence":{"f07_lifecycle_management":{"source_url":"https://assets.lumen.com/is/content/Lumen/SD-WAN___Managed_Equipment_Service_Guide","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Lifecycle management – notification of end of sale/end of support. The same service guide lists CPE break/fix (RMA) warranty support for failed devices and processing of return material authorisation replacement requests, plus patch management for all hardware and software. The SD-WAN service schedule states that during the initial service term purchased CPE is eligible for the Managed Device Replacement Service Level in the Lumen Service Level Agreement, so replacement is contractual rather than best effort."},"f10_dynamic_path_selection":{"source_url":"https://lumen.com/en-us/services/sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Route traffic over the most efficient connection for high performance' [3]"},"f12_application_aware_routing":{"source_url":"https://lumen.com/en-us/services/sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Route traffic over the most efficient connection for high performance, and update routing and security rules in real time as network needs change' [3]"},"f13_qos_and_traffic_shaping":{"source_url":"https://docs.lumen.com/readiness/products/sd-wan-versa/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'the ability to intelligently use lower cost Internet connections to achieve MPLS-like QoS' [2]"},"f17_cellular_and_5g_support":{"source_url":"https://lumen.com/en-us/services/sdwan-versa-networks.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name as a supported WAN underlay ('4G/LTE') [5]"},"f18_cloud_on_ramp":{"source_url":"https://docs.lumen.com/readiness/products/sd-wan-versa/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the confirmed 'physical and virtual customer-premises equipment (CPE)' architecture description [2]"},"f19_public_cloud_gateways":{"source_url":"https://ir.lumen.com/news/news-details/2024/Lumen-and-Versa-Expand-Partnership-to-Deliver-a-Sovereign-SASE-Solution/default.aspx","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The Sovereign SASE solution is deployed on dedicated SASE gateways in Lumen's global points of presence (PoPs) or on customer premises, based on the customer's preference and needs. The PoPs are Lumen's own, which is what this field measures, and the SASE product page advertises 50+ low-latency edge nodes in key metro areas. The security software running in them is Versa or Fortinet technology, which does not change the ownership of the infrastructure. One complication is recorded in conflicts: the SASE service guide also describes an option delivered through a global network of VMware SASE points of presence, which would be partner_integrated rather than Lumen-owned."},"f20_private_pops_dedicated_pops":{"source_url":"https://assets.lumen.com/is/content/Lumen/sd-wan-service-schedule?Creativeid=914be424-577f-4a0d-97cd-3c9c00a783e4","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The Lumen SD-WAN with Versa Networks network Controllers are hosted within Lumen facilities, but can also be deployed as private infrastructure in a customer provided environment for an additional charge. Reinforced by the dated May 2024 Versa Sovereign SASE press release, which states the solution is deployed on dedicated SASE gateways in Lumen's global PoPs or on customer premises based on the customer's preference and needs. Customer-hosted, dedicated and sovereign options are therefore documented, not only shared multi-tenant locations."},"f21_private_global_backbone":{"source_url":"https://ir.lumen.com/news/news-details/2024/Lumen-and-Versa-Expand-Partnership-to-Deliver-a-Sovereign-SASE-Solution/default.aspx","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Black Lotus Labs, Lumen's threat research team, leverages its unique visibility into Lumen's global internet backbone using ML algorithms to generate threat intelligence Lumen owns and operates its own global backbone, which is the substance of this field. Confidence is medium rather than high for two reasons: the clearest wording found is incidental to a threat intelligence sentence, and the most explicit owned-fibre statement found, that Lumen operates the largest ultra-low-loss intercity fiber network in North America, is scoped to North America. No page reviewed states as a product property that inter-region SASE or SD-WAN traffic rides the Lumen backbone rather than the public internet."},"f24_flexible_edge_form_factors":{"source_url":"https://lumen.com/en-us/services/sase-versa.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - a named, sized CPE device tier ('Extra Small CPE Device') is confirmed directly as part of Lumen's disclosed pricing structure [4]"},"f25_high_availability_design":{"source_url":"https://lumen.com/en-us/services/sdwan-versa-networks.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - the confirmed service wrapper includes 'appliance/circuit monitoring' and '24/7 support for the entire WAN solution' [5]"},"f26_sla_backed_service_fabric":{"source_url":"https://assets.lumen.com/is/content/Lumen/lumen-service-level-agreementpdf?Creativeid=dc0beb0f-83c4-46d5-8684-85af0333edbe","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Lumen offers Service Availability Service Levels for Qualifying Services based on the following Availability Tiers. The published Lumen Service Level Agreement names Lumen SD-WAN Service with Versa Networks, Lumen SD-WAN Service with Cisco Meraki and Lumen SASE Solutions as qualifying services, and carries availability tiers, a four hour incident response commitment, managed device replacement targets, and regional latency, jitter and packet delivery objectives. These are credit-bearing contractual commitments rather than best-effort targets."},"f27_integrated_next_generation_firewall":{"source_url":"https://assets.lumen.com/is/content/Lumen/sase-solutions-service-guide?Creativeid=4af4755b-f89d-476b-a0b7-879ea4015615","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Next Generation Firewall (NGFW) is available as a service license with Fortinet and is powered by FortiOS The firewall function is Fortinet technology licensed and operated by Lumen, so partner_integrated rather than yes. The same guide describes anti-malware, web filtering and firewall, intrusion detection and prevention (IDS/IPS) within the unified threat management set, and the SD-WAN service schedule describes a Security Upgrade providing a set of firewall, web filtering and intrusion prevention. The function is integrated into the delivered platform, but the technology belongs to another vendor."},"f28_full_sase_platform":{"source_url":"https://lumen.com/en-us/services/sase-versa.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a named product - Versa Secure Private Access (VSPA) 'secure remote workforces at the edge with user-centric' access [4]"},"f30_zero_trust_network_access":{"source_url":"https://lumen.com/en-us/services/sase-versa.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a named product - Versa Secure Private Access (VSPA) 'secure remote workforces at the edge with user-centric' access [4]"},"f31_secure_web_gateway":{"source_url":"https://lumen.com/en-us/services/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly as part of the SSE capability list - 'Secure Web Gateway (SWG)' named explicitly [6]"},"f32_casb_capability":{"source_url":"https://lumen.com/en-us/services/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Cloud Access Security Broker (CASB)' named explicitly as SSE-compatible [6] Specific inline-versus-API-mode technical detail not itemised"},"f33_data_loss_prevention":{"source_url":"https://assets.lumen.com/is/content/Lumen/sase-solutions-service-guide?Creativeid=4af4755b-f89d-476b-a0b7-879ea4015615","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"intrusion detection and prevention (IDS/IPS), and data loss prevention DLP is listed on the Lumen SASE product page as one of the Security Service Edge services alongside NGFW, SWG, ZTNA and CASB, and appears in the SASE service guide within the Fortinet-powered feature set, so it is another vendor's engine operated by Lumen. No Lumen page reviewed describes content classification detail, blocking versus flagging behaviour, alerting or exception workflows, so confidence is medium on the depth of the capability rather than on its presence."},"f40_managed_service_assurance":{"source_url":"https://assets.lumen.com/is/content/Lumen/SD-WAN___Managed_Equipment_Service_Guide","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Lumen resources are available 24x7 for support. Graded partial for two reasons. First, the SD-WAN and Managed Equipment service guide evidences 24x7x365 performance management by Lumen skilled operations engineers and continuous network monitoring, which covers the NOC half, but the SASE service guide states that the Pro-Managed service does not include security operations center services, so the SOC half is not part of the standard managed wrap. Second, no source reviewed documents ownership of incidents through to root cause analysis, structured service reviews or change governance as contractual elements; those terms were searched for in both service guides and the service schedule and not found."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:6d66149079a3a4ab68cf17eb","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"yes","transport_logistics":"partial","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"global_managed","curated_uk_basis":"No UK HQ (US); UK delivery is largely via partners following the EMEA divestment to Colt.","sector_review_queue":[{"sector":"financial_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced via a real, named individual testimonial | Not assessed in specific technical detail for this sector beyond the confirmed general testimonial | Not assessed for sector-specific frameworks, though the confirmed comprehensive PCI DSS support (Table 13) is directly relevant | Mahendra Verma, VP and Sr. Network Engineering Manager, Horizon Bank - named individual, named company, direct positive quote on service responsiveness | N/A | The testimonial is disclosed directly by Lumen as a compensated endorsement | A real, named banking-sector customer reference - genuinely credible, specific evidence, reinforced by Lumen's own confirmed, comprehensive PCI DSS support relevant to this exact sector, tempered by the confirmed compensated-endorsement disclosure.","named_evidence":"Mahendra Verma, VP and Sr. Network Engineering Manager, Horizon Bank - named individual, named company, direct positive quote on service responsiveness","evidence_source_ids":["evidence:lumen:17"]},{"sector":"healthcare","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, though not individually-named, customer account | Confirmed DIA (Dedicated Internet Access) and SASE solutions directly improving 'telehealth capabilities' specifically named | HIPAA not confirmed (Table 13) | An anonymous (within the specific snippet reviewed) customer account confirming replacement of aging MPLS/SD-WAN with modern DIA and SASE, directly citing improved 'telehealth capabilities' | N/A | The customer's individual name was not extracted in this specific research pass; the confirmed HIPAA gap remains a specific, worth-flagging limitation | A real, specific, primary-sourced account directly naming telehealth as an improved capability - genuinely concrete evidence for this sector-adjacent use case, even without full individual attribution confirmed in this pass.","named_evidence":"An anonymous (within the specific snippet reviewed) customer account confirming replacement of aging MPLS/SD-WAN with modern DIA and SASE, directly citing improved 'telehealth capabilities'","evidence_source_ids":["evidence:lumen:17"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced via a real, named individual testimonial | Confirmed SASE and EWAS (Enterprise Wide Area Services) capabilities directly relevant to distributed manufacturing operations | Not assessed for sector-specific frameworks | Jeff Pinkerton, VP of IT, Berridge Manufacturing Co. - named individual, named company, direct quote on SASE/EWAS implementation responsiveness | N/A | The testimonial is disclosed directly by Lumen as a compensated endorsement | A real, named, individually-attributable customer reference - genuinely stronger evidence than an anonymised case study, tempered by the confirmed compensated-endorsement disclosure.","named_evidence":"Jeff Pinkerton, VP of IT, Berridge Manufacturing Co. - named individual, named company, direct quote on SASE/EWAS implementation responsiveness","evidence_source_ids":["evidence:lumen:17"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"healthcare":false,"manufacturing":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://lumen.com/en-us/resources/customer-success-stories.html","https://www.lumen.com/en-hk/resources/customer-stories/flux.html"],"qualification":"Recovered Lumen testimonial identifies Valley Cities Behavioral Health Care replacing MPLS/SD-WAN with DIA and SASE. Correct anonymous attribution; compensated supplier-published endorsement. Berridge testimonial explicitly says SASE and EWAS will work together once implementation is complete. It is not evidence of a completed outcome. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"healthcare":"partial","manufacturing":"not_confirmed"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":1,"research_metrics":{"supported":23,"partial":1,"partner_delivered":2,"managed_service_dependent":0,"not_primary":0,"unconfirmed":14,"total":40,"reviewed":26,"completeness_percent":65,"completeness":0.65},"proven_evidence_count":23,"response_panel":null,"best_for":"Healthcare (partial evidence); both","best_for_fields":{"sectors_yes":[],"sectors_partial":["Healthcare"],"regions":[],"size":[],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"versa-networks","name":"Versa Networks","website":"https://versa-networks.com","category":"technology vendor","product_focus":"Inbound SSE, Secure Enterprise Browser, VOS, Versa Analytics","cost_model":"Quote-based subscription; MSP/carrier pricing depends on tenant scale, bandwidth, security package and delivery model.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"partial","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_primary","financial_services":"not_primary","retail_ecommerce":"partial","manufacturing":"partial","energy_utilities":"yes","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"not_primary","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"yes"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":90,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/versa-networks/","shortlist_summary":"Versa Networks built its SASE platform around a single-vendor, single-operating-system architecture from an early starting point - the company was founded in 2012, before the SASE category itself existed, on the thesis that legacy hardware and static WAN architectures were holding enterprises back from the cloud. That heritage shows up directly in VersaONE’s design: one operating system (VOS), one console, one policy engine and one data lake, with a single-pass parallel-processing architecture built to avoid the latency penalty of chaining separate security functions together.","key_differentiators":["Multi-tenancy from the ground up, making Versa a common choice for service providers and carriers building managed SD-WAN and SASE platforms.","Versa Operating System (VOS) provides a converged networking and security software stack across cloud and on-premises delivery.","Often the underlying platform when buyers select a managed SD-WAN service from a carrier or MSP."],"best_fit_for":["Service providers, carriers and MSPs building white-label managed SD-WAN or SASE services.","Enterprises consuming Versa indirectly through a managed provider (e.g. Verizon, Orange).","Buyers who want platform flexibility across cloud-delivered, on-premises and hybrid delivery models."],"watch_outs":["Less well-known to enterprise buyers as a direct purchase; most enterprise consumption is via service providers.","Buyers should confirm exactly which managed provider is delivering the platform and what the operational RACI looks like.","Brand recognition trails Cisco, Palo Alto and Fortinet in enterprise procurement processes."],"evidence_coverage_pct":0.65,"last_verified":"2026-09-01","evidence_source_count":51,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://versa-networks.com/documents/solution-briefs/versa-sase.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"In this model Versa NOC is responsible for managing and maintaining Versa SASE, while the customer IT team is responsible for management and monitoring of the CPEs. Versa does operate a NOC and a hosted, managed head-end and gateway service under its own SLA, so part of the estate is genuinely run by Versa. But its own solution brief places CPE management with the customer IT team in that model, and the alternative model places configuration management and monitoring with a Service Provider. End-to-end design, deploy, change, support and report by Versa itself for the whole service is not evidenced, so partial rather than yes."},"f03_co_managed_service":{"source_url":"https://versa-networks.com/documents/solution-briefs/versa-sase.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"In this model Versa NOC is responsible for managing and maintaining Versa SASE, while the customer IT team is responsible for management and monitoring of the CPEs. This is a textbook split of responsibility: Versa runs the platform and the customer retains CPE operations. Concerto's provider-level and tenant-level roles document the same shared model in the tooling."},"f07_lifecycle_management":{"source_url":"https://versa-networks.com/documents/datasheets/versa-networks-hosted-and-managed-head-end.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Head-end server hardware OS and security patch upgrades and updates For the hosted head-end, Versa documents software upgrades of Director, Analytics, Controller, Concerto and VMS plus OS and security patching, which is lifecycle handled as part of the service. Separately, hardware documentation covers a two-year limited warranty, next-business-day and same-business-day advance replacement, DOA handling and an end-of-life policy. Graded partial rather than yes because branch CPE firmware upgrades and renewals in a typical Versa deployment sit with the customer or the service provider partner, and hardware replacement coverage is a purchased support tier rather than something evidenced as included in the service by default."},"f12_application_aware_routing":{"source_url":"https://versa-networks.com/news/2018/versa-networks-present-adobe-sd-wan-use-case-onug-fall-2018.php","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, per-application SLA-based routing confirmed specifically via the Adobe deployment [19]"},"f17_cellular_and_5g_support":{"source_url":"https://docs.versa-networks.com/Secure_SD-WAN/01_Configuration_from_Director/Common_Configuration/Configure_WWAN","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The term WWAN interfaces refers to LTE, 4G, and 5G interfaces. Documentation covers LTE, 4G and 5G on a VOS WAN port, SIM activation and operator ID checks, and radio quality monitoring via RSRP, RSRQ, RSSI and SINR with banded signal states. It is documented as usable where a branch has no wired connection and alongside wired links, so both primary and failover roles are covered. On the source page the words WWAN interfaces are italicised; the italics add no characters to the rendered text."},"f18_cloud_on_ramp":{"source_url":"https://docs.versa-networks.com/Integrations_and_Solutions/Integrations/Endpoint_Detection_and_Response/Integrate_Versa_SASE_with_CrowdStrike_Falcon","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native - confirmed explicitly for AWS-hosted VOS deployment, described as 'cloud edge deployment such as AWS running VOS' [24]"},"f19_public_cloud_gateways":{"source_url":"https://docs.versa-networks.com/Security_Service_Edge_(SSE)/Configuration_from_Director/Ecosystem/Versa_SASE_Ecosystem","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Versa Cloud Gateways (VCGs) are Versa SASE Gateways which are deployed in Point of Presence (PoP) locations around the world. These are Versa's own gateways running Versa's own VOS software, not a third party's PoPs resold under Versa's name, so yes rather than partner_integrated. They deliver secure internet access, ZTNA, threat protection and DLP as a cloud service, and the SASE client selects the VCG offering lowest latency."},"f20_private_pops_dedicated_pops":{"source_url":"https://versa-networks.com/products/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Versa SASE is delivered via the cloud, on-premises, or as a blended combination of both Versa markets Private SASE and Sovereign SASE as distinct deployment models alongside the shared cloud. Network World, a named-author dated source, reports that Sovereign SASE runs entirely on customer-controlled infrastructure with the customer choosing its own compute, on-premises or in a private cloud. Confidence is medium rather than high because the Sovereign SASE product page itself would not render without JavaScript, so the strongest Tier 1 statement of the claim could not be read directly."},"f21_private_global_backbone":{"source_url":"https://docs.versa-networks.com/Security_Service_Edge_(SSE)/Configuration_from_Director/Ecosystem/Versa_SASE_Ecosystem","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Versa SD-WAN Traffic Engineered network which uses multiple global and regional providers for the underlay. Inter-gateway traffic rides a Versa-controlled traffic-engineered overlay that selects paths on least end-to-end latency and loss, and each VCG is connected to multiple global and multiple regional service providers with peering relationships. But the underlay is explicitly other carriers' capacity, not fibre or circuits owned by Versa. Graded partial: the control plane and path selection are Versa's, the physical backbone is not."},"f24_flexible_edge_form_factors":{"source_url":"https://docs.versa-networks.com/Integrations_and_Solutions/Integrations/Endpoint_Detection_and_Response/Integrate_Versa_SASE_with_CrowdStrike_Falcon","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native - Versa-certified white-box routers (third-party hardware running VOS) confirmed specifically via the Adobe deployment account; branch edge devices, cloud edge deployment, and on-premises appliances all confirmed as supported form factors [24]"},"f25_high_availability_design":{"source_url":"https://versa-networks.com/customers/case-studies/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed at a specific, quantified level via the Adobe case study - 'four-nines of availability for critical services' was an explicit deployment requirement Versa was chosen to meet [18]"},"f26_sla_backed_service_fabric":{"source_url":"https://versa-networks.com/documents/Versa-Hosted-SASE-SLA.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"target Uptime average of 99.999% (\"Uptime SLA Percentage\") measured monthly A published, dated SLA document covering Versa Hosted and Managed Secure Services Edge Gateways, with a tiered service-credit table running from 2 days of credit for uptime below 99.999% up to 24 days below 98.0%, plus a security processing latency commitment of 10ms without TLS inspection and 50ms with anti-virus, malware detection and IPS with TLS decryption. Contractual rather than best-effort, including a two calendar day claim window."},"f33_data_loss_prevention":{"source_url":"https://docs.versa-networks.com/Security_Service_Edge_(SSE)/Configuration_from_Concerto/Configure_Data_Loss_Prevention_in_Concerto","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Data loss prevention (DLP) is a set of tools and processes for detecting and preventing data breaches, cyber exfiltration, and unwanted destruction of sensitive data. Native to the platform and configured from Concerto. Content passing through the organisation's ports and protocols is scanned against match rules, with enforcement actions of Alert, Allow, Block, Reject, Quarantine, Encrypt, Redact or Tokenize, and all actions reported to Versa Analytics for review. Documentation also covers offline DLP, DLP data exfiltration policies and applying Microsoft MIP sensitivity labels."},"f35_soc_siem_soar_integration":{"source_url":"https://docs.versa-networks.com/Integrations_and_Solutions/Integrations/SIEM/Versa_Analytics_and_CrowdStrike_NG-SIEM_Integration","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed and well-evidenced via Versa Analytics' specific, itemised log-type list (flow logs, SD-WAN path and bandwidth usage, CGNAT, DHCP, DNS, SASE-web monitoring, secure access, traffic conditioning, URL filtering, and IDP logs) and confirmed export to CrowdStrike Falcon Next-Gen SIEM [26] Not confirmed"},"f36_centralised_orchestration":{"source_url":"https://versa-networks.com/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via a named practitioner review describing the console's 'ZTP (zero touch provisioning)' capability speeding up implementation [7]"},"f40_managed_service_assurance":{"source_url":"https://versa-networks.com/documents/datasheets/versa-premier-service.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Versa will provide Root-Cause Analysis for customer-reported P1 issues. The NOC half is evidenced: 24x7 monitoring of head-end alarms and application health, a Versa NOC responsible for managing and maintaining Versa SASE, formal root cause analysis on P1 incidents, and scheduled periodic or quarterly customer review meetings. What I did not find on any page I read is a 24x7 SOC performing proactive security monitoring on the customer's behalf, nor a documented change governance process. Graded partial on that gap. Note also that the Premier Service datasheet carries a 2020 copyright."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:05460064bfddb49a73b78910","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"partial","manufacturing":"partial","energy_utilities":"partial","government_public_sector":"partial","education":"partial","transport_logistics":"partial","professional_services":"partial","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). Delivered in the UK through carrier and MSP partners building managed services on Versa.","sector_review_queue":[{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | SASE-ready architecture, TCO reduction relevant to distributed manufacturing operations | Not assessed | A Global-200 pharmaceutical manufacturing company, described as achieving a SASE-ready architecture and TCO savings | Not itemised in detail beyond the Global-200 scale reference | Single case reference, anonymised (described by scale/category rather than named) | A real, credible, if anonymised, large-scale manufacturing reference - worth a direct follow-up to get the specific customer name and quantified outcomes if Netify needs a fully named case study for this sector.","named_evidence":"A Global-200 pharmaceutical manufacturing company, described as achieving a SASE-ready architecture and TCO savings","evidence_source_ids":["evidence:versa-networks:18"]},{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Multi-site security and cloud migration relevant to utility operations | Not assessed | Lambton Area Water Supply Systems (Ontario, Canada) - deployed Versa SASE to secure remote and headquarter offices while migrating sensitive data to cloud environments; a named practitioner quote from a General Manager, Information Systems in Energy and Utilities also references one-touch edge deployment | Named, specific Canadian utility customer | Single named case study, plus one further anonymised named-role quote | A genuinely credible, named, specific utility-sector customer (Lambton Area Water Supply Systems), reinforced by a second, separate energy-and-utilities-specific practitioner quote - reasonably solid sector evidence.","named_evidence":"Lambton Area Water Supply Systems (Ontario, Canada) - deployed Versa SASE to secure remote and headquarter offices while migrating sensitive data to cloud environments; a named practitioner quote from a General Manager, Information Systems in Energy and Utilities also references one-touch edge deployment","evidence_source_ids":["evidence:versa-networks:7","evidence:versa-networks:18"]},{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | SD-WAN/branch capability, cost-reduction focus | Not assessed | A top global retailer (600+ store locations) reporting improved cost savings and reduced operational overhead; a primary food retailer with multiple brands increasing store locations while reducing TCO; a named F100 retailer reclaiming $4M in previously wasted spend | Large-scale, multi-brand deployment evidenced directly | US-centric framing in the sources reviewed; specific named retailers not identified by name (described by category/scale instead) | Genuinely well-evidenced by scale and count (three separate retail-sector references), even though the specific retailer names weren't disclosed in the sources reviewed - a real, if anonymised, sector-fit signal.","named_evidence":"A top global retailer (600+ store locations) reporting improved cost savings and reduced operational overhead; a primary food retailer with multiple brands increasing store locations while reducing TCO; a named F100 retailer reclaiming $4M in previously wasted spend","evidence_source_ids":["evidence:versa-networks:18","evidence:versa-networks:22","evidence:versa-networks:25"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"energy_utilities":false,"manufacturing":false,"retail_ecommerce":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://versa-networks.com/customers/case-studies/","https://versa-networks.com/","https://aitranslatewpml.versa-networks.com/customers/case-studies/","https://versa-networks.com/lp/sase-cost-savings/"],"qualification":"Versa case index expressly identifies Lambton Area Water Supply Systems deploying SASE for remote offices and cloud data. Canadian utility case only. Versa identifies an anonymous Global-200 pharmaceutical manufacturer using Secure SD-WAN. Retain anonymous evidence, not a named reference. Versa documents an unnamed retailer with over 600 stores using Secure SD-WAN. Do not describe this as named customer proof. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"energy_utilities":"yes","manufacturing":"partial","retail_ecommerce":"partial"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":2,"research_metrics":{"supported":22,"partial":4,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":14,"total":40,"reviewed":26,"completeness_percent":65,"completeness":0.65},"proven_evidence_count":22,"response_panel":null,"best_for":"Energy and utilities; Retail and e-commerce (partial evidence); Manufacturing (partial evidence); Small business; platform","best_for_fields":{"sectors_yes":["Energy and utilities"],"sectors_partial":["Retail and e-commerce","Manufacturing"],"regions":[],"size":["Small business"],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"cato-networks","name":"Cato Networks","website":"https://www.catonetworks.com","category":"technology vendor","product_focus":"Cato Browser Extension, Cato Client, Cato DEM, Cato EPP/EDR","cost_model":"Quote-based subscription; typically site/user/bandwidth/security bundle based.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_entity","uk_basis":"The Cato Master Service Agreement, section 1.4, lists this UK contracting party. The entity identified in the buyer’s order determines the actual counterparty; this does not establish site coverage or managed-service scope.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"partner_integrated","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"yes","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"partial","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"yes","small_business":"not_confirmed"},"pricing_units":["per_site","per_user","per_bandwidth","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":100,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/cato-networks/","shortlist_summary":"Cato Networks is frequently scored by us at Netify as being one of the easiest platforms to actually use, and they’re often considered a more integrated offering than most of the competition, which is primarily down to building their SASE solution from the ground up rather than bolting security onto an existing networking product, or the other way round.","key_differentiators":["Single converged platform with no policy or log fragmentation across SD-WAN and security functions.","100+ PoP global private backbone reduces internet variability and provides predictable performance for SaaS-heavy traffic.","Strong story for organisations consolidating multiple point solutions onto one operational platform."],"best_fit_for":["Mid-market and enterprise buyers consolidating SD-WAN and SASE on one platform from a single vendor.","Global organisations with SaaS-heavy traffic patterns that benefit from a private backbone.","Teams without dedicated security operations capacity who want a managed SASE experience."],"watch_outs":["Less suited to best-of-breed buyers wanting Zscaler or Netskope as the SSE layer.","Customer does not own the underlay; circuits sourced separately, so multi-supplier coordination remains.","Less mature than incumbents for very large multinational deployments with heavy legacy MPLS estates."],"evidence_coverage_pct":0.6,"last_verified":"2026-09-01","evidence_source_count":62,"capability_evidence":{"f13_qos_and_traffic_shaping":{"source_url":"https://support.catonetworks.com/hc/en-us/articles/7790698733341","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native - Network Rules let admins assign a bandwidth-priority QoS tier to business-critical traffic, alongside acceleration/optimisation and transport-path settings, confirmed directly in Cato's admin documentation. [46]"},"f14_packet_loss_remediation":{"source_url":"https://support.catonetworks.com/hc/en-us/articles/360001868837","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native - packet duplication for packet loss mitigation, confirmed directly in Cato's own documentation: TCP packets duplicated across active links, UDP packets duplicated across active or standby links. [44] [45] [46]"},"f17_cellular_and_5g_support":{"source_url":"https://support.catonetworks.com/hc/en-us/articles/16308182518173-X1600-Cellular-Connectivity-Troubleshooting","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Socket X1600 now has a hardware version that supports Cellular (LTE/5G) connections Cato's own Learning Center documents integrated LTE/5G on the X1600 Socket, dual SIM management (\"By default, SIM Slot 1 is the active one, while Slot 2 is standby.\") and signal monitoring via RSSI, RSRP, SINR and RSRQ. The platform page corroborates transport choice: \"Customers can choose any mix of fiber, cable, xDSL, and cellular connections.\" All three definition elements (transport, SIM management, signal monitoring) are met."},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://catonetworks.com/platform/digital-experience-monitoring-dem/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Confirmed - DEM's AI-powered engines correlate real-user monitoring and synthetic probing [16] Requires DEM licence"},"f11_active_active_link_utilisation":{"source_url":"https://knowledge.catonetworks.com/docs/hardware","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"Cato Socket WAN links support active/active operation. Link design and policy must be configured for the deployment."},"f25_high_availability_design":{"source_url":"https://knowledge.catonetworks.com/docs/hardware","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"WAN redundancy and optional Socket redundancy are documented. HA Sockets require their own licences; resilience depends on the deployed design."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:0b8c3f42d28c71efefe6ed68","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"partial","education":"yes","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (Israel and US). Delivers in the UK from London and Manchester PoPs; contract direct or through UK partners including Netify routes.","sector_review_queue":[{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit (best-evidenced sector) | Zero-touch branch provisioning, backbone performance, DEM | PCI-DSS Level 1 | Ulta Beauty (large-scale, phased, near-zero-touch, 99.99% cutover success, 10 stores/night); Opkalla-documented jewelry retailer (24 stores, MSP cost reduction) | Backbone/PoP density matters most for geographically distributed store estates | Case evidence is US-centric; UK/EU retail-specific case studies not found in this pass | This is genuinely Cato's best-evidenced sector - Netify can cite the Ulta Beauty story with confidence given it's a named, detailed, metric-rich case study.","named_evidence":"Ulta Beauty (large-scale, phased, near-zero-touch, 99.99% cutover success, 10 stores/night); Opkalla-documented jewelry retailer (24 stores, MSP cost reduction)","evidence_source_ids":["evidence:cato-networks:24","evidence:cato-networks:25"]},{"sector":"education","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Referenced in a customer quote ('reorganize our entire security portfolio... for our students, professors, and administrators') | General SASE consolidation value referenced qualitatively | Not assessed | One qualitative customer quote found (unnamed institution) on catonetworks.com/platform/ | N/A | Quote-level evidence only, not a structured case study with metrics | Treat as a weak signal only - a single unattributed quote is not the same standard of evidence as the Ulta Beauty case study; do not over-weight it.","named_evidence":"One qualitative customer quote found (unnamed institution) on catonetworks.com/platform/","evidence_source_ids":["evidence:cato-networks:9"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"retail_ecommerce":false,"education":false},"reviewed_at":"2026-09-30T15:50:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.catonetworks.com/customers/ulta-beauty-reinvents-network-deliver-seamless-retail-experience/","https://www.catonetworks.com/customers/waseda-university-achieves-universal-secure-remote-learning-and-jumpstarts-digital-transformation-with-cato/"],"qualification":"Ulta Beauty primary case documents a SASE-led cloud SD-WAN transition and staged store rollout. Do not imply the three-year rollout is complete. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation. Waseda University primary case documents Cato secure remote learning in Japan via GlobalDots. Replacement named education evidence; does not validate the original anonymous quotation or UK education suitability.","sectors":{"retail_ecommerce":"yes","education":"partial"},"regions":{}}},"uk_evidence":{"entity":{"status":"evidenced","name":"Cato Networks (UK) Limited","source_urls":["https://www.catonetworks.com/msa/"],"checked_at":"2026-10-01T00:00:00Z","review_due":"2026-12-30T00:00:00Z","qualification":"The Cato Master Service Agreement, section 1.4, lists this UK contracting party. The entity identified in the buyer’s order determines the actual counterparty; this does not establish site coverage or managed-service scope."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":3,"research_metrics":{"supported":24,"partial":0,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":16,"total":40,"reviewed":24,"completeness_percent":60,"completeness":0.6},"proven_evidence_count":24,"response_panel":null,"best_for":"Retail and e-commerce; Education (partial evidence); Large global enterprise; Mid-market; platform","best_for_fields":{"sectors_yes":["Retail and e-commerce"],"sectors_partial":["Education"],"regions":[],"size":["Large global enterprise","Mid-market"],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"uk_entity","label":"UK contracting entity","source_urls":["https://www.catonetworks.com/msa/"],"reviewed_at":"2026-10-01T00:00:00Z","qualification":"The Cato Master Service Agreement, section 1.4, lists this UK contracting party. The entity identified in the buyer’s order determines the actual counterparty; this does not establish site coverage or managed-service scope."}},{"slug":"netskope","name":"Netskope","website":"https://www.netskope.com","category":"technology vendor","product_focus":"Borderless SD-WAN, Cloud Confidence Index (CCI), Netskope Cloud Exchange (CE), Netskope One","cost_model":"Quote-based subscription; modules commonly priced by users, sites, traffic and security functions.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"partial","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"yes","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"yes","retail_ecommerce":"not_primary","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"yes","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":120,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/netskope/","shortlist_summary":"Netskope sits in an interesting middle ground between a pure security-first platform and a fully networked one: unlike the likes of Zscaler, it has invested in its own converged mesh network (NewEdge) and a purpose-built SD-WAN (Borderless SD-WAN, built on the 2022 Infiot acquisition), so the ‘security company bolting on networking’ story is a few years further along than Zscaler’s; unlike Cato, that network is built on peering and interconnects across 67 regions rather than an owned private backbone.","key_differentiators":["Strong CASB heritage; widely recognised as a leading SSE vendor for SaaS-heavy environments.","Borderless WAN (from the Infiot acquisition) extends Netskope into single-vendor SASE for buyers wanting both layers from one platform.","Detailed SaaS application visibility and policy controls."],"best_fit_for":["Enterprises with deep SaaS adoption where CASB and DLP are top procurement priorities.","Buyers comparing single-vendor SASE platforms after starting with SSE.","Organisations selecting Netskope SSE alongside a separate SD-WAN platform via partner integration."],"watch_outs":["Native SD-WAN (Borderless WAN) is newer than dedicated SD-WAN platforms; validate path selection and QoS depth in RFP.","Fully managed service: not confirmed. Confirm who will operate the service and whether management is supplied directly or through a partner.","Premium pricing with modular structure; full SASE bundle costs can scale meaningfully with users and traffic."],"evidence_coverage_pct":0.6,"last_verified":"2026-09-01","evidence_source_count":66,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.netskope.com/press-releases/netskope-enables-msps-to-generate-revenue-faster-with-launch-of-new-catalyst-msp-sp-program-and-netskope-partner-orchestrator","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"A self-service multi-tenant orchestrator for the full SASE and AI product suite that quickly provisions production-ready customer environments. Multi-tenant provisioning and delegated administration across unlimited partner tiers are documented in the June 2026 Catalyst announcement and corroborated by ChannelE2E. Branded or white-label partner portals and reusable customer templates were not evidenced on any page read, so graded partial rather than yes."},"f07_lifecycle_management":{"source_url":"https://www.netskope.com/wp-content/uploads/2022/07/2025-06-Netskope-One-SD-WAN-DS-607-9.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"simple one-click RMA, customized applications The SD-WAN datasheet documents zero-touch activation and one-click hardware RMA, and the platform is cloud-managed from a single console. No page read states that firmware upgrades, patching, renewals or end-of-life planning are performed as part of the service, so graded partial rather than yes."},"f17_cellular_and_5g_support":{"source_url":"https://www.netskope.com/products/wireless-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Reliable, high-performance 5G connectivity for primary, backup, or active-active links delivers sub-second brownout/blackout protection. 5G Standalone is supported as primary, backup or active-active transport. eSIM with on-gateway LPAd covers SIM management, the Converged Gateway carries built-in 4G/5G with Netskope Zero Trust SIM across 400+ networks, and digital experience management reports cellular signal strength and quality."},"f26_sla_backed_service_fabric":{"source_url":"https://www.netskope.com/press-releases/netskope-sets-new-industry-benchmarks-for-cloud-security-performance","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Netskope launches an industry-first SLA committing to less than 50 ms of latency for processing encrypted traffic Contractual commitments cover uptime and availability at five nines plus latency for both decrypted and non-decrypted traffic. The NewEdge datasheet repeats industry-best SLAs for availability and latency. Support response-time and change-handling commitments sit in Support Terms, which were not reachable in this task."},"f40_managed_service_assurance":{"source_url":"https://www.netskope.com/netskope-technical-support","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"We are a global team and operate 24/7/365 Netskope runs a global support organisation on a 24/7/365 basis at Premium and Premium Plus tiers, with technical account management and a focused technical support engineer at Premium Plus. No page read describes a Netskope NOC or SOC proactively monitoring the customer service, owning incidents through to root cause analysis, or running structured service reviews and change governance, so graded partial."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:922007c7966bdb60d5b68da6","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). UK NewEdge presence; delivered direct or via UK security MSPs.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | DLP, CASB for insider-risk and data-loss use cases | Not assessed | JLL (real estate/professional services), MinterEllisonRuddWatts (law firm) | N/A | Two named case studies, reasonably detailed | A genuinely well-evidenced sector for Netskope specifically - two independent, named, detailed case studies covering related professional-services use cases (insider risk, fast SSE rollout).","named_evidence":"JLL (real estate/professional services), MinterEllisonRuddWatts (law firm)","evidence_source_ids":["evidence:netskope:31","evidence:netskope:32"]},{"sector":"financial_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | DLP, CASB, PCI DSS v4.0.1 certification | PCI DSS v4.0.1 explicitly certified; DORA explicitly named on the Compliance Centre | CARE Ratings (credit rating agency, India) | N/A | Single named case study, though the PCI-DSS and DORA compliance evidence is genuinely strong | The best-evidenced sector-compliance combination across all three vendors profiled so far - explicit PCI-DSS and DORA naming, plus a real financial-services case study.","named_evidence":"CARE Ratings (credit rating agency, India)","evidence_source_ids":["evidence:netskope:15","evidence:netskope:30"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"financial_services":false,"professional_services":false},"reviewed_at":"2026-09-30T15:30:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.netskope.com/resources/case-studies/care-ratings","https://www.netskope.com/resources/case-studies/jll","https://www.netskope.com/fr/blog/explaining-the-importance-of-netskopes-recent-expansion-of-newedge-in-the-uk","https://www.netskope.com/wp-content/uploads/2022/12/2025-03-NewEdge-DS-333-11.pdf"],"qualification":"CARE Ratings case confirms Netskope CASB, SWG and Private Access deployment at an Indian rating agency. SSE evidence, not proof of SD-WAN. JLL and MinterEllisonRuddWatts primary cases describe SSE/secure remote access in professional services. No UK delivery inference. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation. Netskope documents UK NewEdge infrastructure; 2025 map names London, Manchester and Dublin. This is cloud security/network presence, not evidence of last-mile circuits, UK contracting entity or an approved managed service for these sites.","sectors":{"financial_services":"yes","professional_services":"yes"},"regions":{"uk_ireland":"partial"}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"partial","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":4,"research_metrics":{"supported":21,"partial":3,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":16,"total":40,"reviewed":24,"completeness_percent":60,"completeness":0.6},"proven_evidence_count":21,"response_panel":null,"best_for":"Financial services; Professional services; platform","best_for_fields":{"sectors_yes":["Financial services","Professional services"],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"palo-alto-networks","name":"Palo Alto Networks Prisma SASE","website":"https://www.paloaltonetworks.com/sase","category":"technology vendor","product_focus":"ADEM, AI Access Security, Enterprise DLP, Precision AI / Strata Copilot","cost_model":"Quote-based subscriptions; appliance/ION and Prisma Access/SASE licensing typically priced by users, bandwidth, locations and term.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"not_confirmed","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"partner_integrated","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"yes","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_confirmed","professional_services":"not_primary","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":100,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/palo-alto-prisma-sase/","shortlist_summary":"Palo Alto Networks isn’t just selling SASE, it’s selling one door into a much larger security estate (NGFWs, Prisma Cloud, Cortex XDR/XSIAM, identity security) that most large enterprises already have some footprint in. That shows up directly in its differentiators: it’s one of the few vendors recognised as a Leader in all three of Gartner’s Single-Vendor SASE, SSE and SD-WAN Magic Quadrants simultaneously, and its ‘platformisation’ commercial strategy rewards multi-product commitment with steep discounts.","key_differentiators":["Prisma SASE converges SD-WAN, cloud-delivered security, and digital experience management (ADEM) under a single platform identity.","Strong threat intelligence and security capability inheritance from the wider Palo Alto Networks portfolio.","Often selected by buyers consolidating from multiple security vendors onto a single SASE platform."],"best_fit_for":["Enterprises with mature security operations that want SASE built around a leading security platform rather than a security layer on top of an SD-WAN platform.","Buyers consolidating CASB, SWG, ZTNA and FWaaS onto one vendor for unified policy.","Organisations with global SaaS-heavy traffic patterns that benefit from Prisma Access PoP coverage."],"watch_outs":["Premium pricing relative to firewall-led SD-WAN vendors; commercial model requires careful scoping by users, bandwidth, locations and term.","Managed delivery is via partners (Orange Business, NTT, others); first-party managed service is not the primary model.","Private global backbone is not vendor-owned; cloud transport uses internet and Prisma Access PoPs."],"evidence_coverage_pct":0.6,"last_verified":"2026-09-01","evidence_source_count":65,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.paloaltonetworks.com/sase/managed-sase","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"MSPs can securely delegate responsibilities while ensuring only authorized users can read or modify critical security configurations. Hierarchical multitenancy and granular role-based delegated administration are evidenced on the Managed SASE page (source 6) and the 2022 MSP press release (source 14), which describes a cloud-based management portal with hierarchical multitenancy using granular role-based access control. Graded partial rather than yes because no evidence of branded or white-label portals and service templates carrying the MSP's own brand was found on the pages reviewed; the Prisma SASE for MSPs datasheet (source 18) is gated and returned no usable text."},"f07_lifecycle_management":{"source_url":"https://docs.paloaltonetworks.com/prisma-access/administration/sase-private-location","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Palo Alto Networks manages sizing, content versioning, monitoring, upgrades, and security subscriptions. For the cloud service and for SASE Private Location, Palo Alto Networks handles sizing, content versioning, upgrades and security subscriptions as part of the service. Graded partial because hardware replacement and RMA, ION appliance firmware handling, renewals and end-of-life planning were not evidenced: the Support Policies page (source 19) is a link index that returned no substantive text, and no RMA or end-of-life policy document was read in this task."},"f19_public_cloud_gateways":{"source_url":"https://docs.paloaltonetworks.com/prisma-access/administration/prisma-access-overview","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"With Prisma Access, Palo Alto Networks deploys and manages the security infrastructure globally to secure your remote networks and mobile users. The PoPs are Palo Alto Networks' own service, sold under its own brand and covered by its own SLA, so this is yes rather than partner_integrated. Recorded for transparency: the compute those PoPs run on is rented from GCP and AWS (source 11), which is a hosting arrangement rather than reselling another vendor's SASE gateway service."},"f20_private_pops_dedicated_pops":{"source_url":"https://docs.paloaltonetworks.com/prisma-access/administration/sase-private-location","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"SASE Private Location enables you to deploy Prisma Access services within your own infrastructure. SASE Private Location is a customer-hosted deployment of Prisma Access services on the customer's own hypervisor and ISP links, with Palo Alto Networks retaining backend management. Corroborated by the sovereignty blog (source 12), which states that for organisations with the most stringent data residency requirements Palo Alto offers SASE Private Location. Colo-Connect (source 9) is a different thing: private connectivity into the shared cloud, not a dedicated PoP."},"f21_private_global_backbone":{"source_url":"https://www.paloaltonetworks.com/blog/sase/the-architecture-behind-prisma-sase-99999-uptime/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Prisma SASE leverages the infrastructure of major hyperscale providers such as Google Cloud Platform (GCP) and Amazon Web Services (AWS). Inter-region transport rides the backbones of Google Cloud and AWS rather than a network owned or controlled by Palo Alto Networks. The same post adds that Prisma SASE benefits from private peering connections between tier 1 cloud providers and other public cloud platforms, SaaS networks and ISPs, which again describes third-party peering. Colo-Connect (source 9) uses GCP interconnect technology, reinforcing the same conclusion. No evidence of Palo Alto-owned fibre, wavelengths or core routing was found."},"f26_sla_backed_service_fabric":{"source_url":"https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/datasheets/support/prisma-access-service-sla.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"If, during any calendar month, the Service availability falls below 99.999%, Customer can submit a claim for credit The published SLA is contractual with service credits and covers three separate measures: service availability at 99.999%, a Monthly Security Processing Latency Percentage at 99.99% and a Monthly SaaS Application Latency Percentage at 99.99%, with credits scaling to 100% where availability falls below 98%. That goes beyond best-effort targets. Support response times and change handling commitments were not evidenced in the SLA text reviewed."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:c7cf7997ec576a63c92818da","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"partial","professional_services":"yes","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). UK Prisma Access presence; delivered direct or via UK partners and carriers.","sector_review_queue":[{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Cost reduction and productivity capabilities relevant to a 'changing market' retail context | Not assessed for sector-specific frameworks | Westfield (shopping centre/retail property operator) | N/A | Single case study; less quantified in the source snippet reviewed than Grupo Bimbo specifically | Westfield is a genuine, named retail-sector customer - weaker in detail than Cato's Ulta Beauty or Zscaler's AutoNation, but a real evidence point rather than a total gap.","named_evidence":"Westfield (shopping centre/retail property operator)","evidence_source_ids":["evidence:palo-alto-prisma-sase:23"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | IoT/OT security, Zero Trust for OT devices, Cortex XDR forensics | Not assessed for sector-specific frameworks | Grupo Bimbo (200+ bakery plants, 35 countries), Colgate-Palmolive (unified IT/OT security) | Global multi-country deployment evidenced via Grupo Bimbo specifically | US-centric/global-brand case evidence; UK/EU manufacturing-specific case studies not found in this pass | By a clear margin the best-evidenced sector across all four vendors profiled - Grupo Bimbo alone provides more quantified, credible manufacturing/OT evidence than any single case study found for the other three vendors.","named_evidence":"Grupo Bimbo (200+ bakery plants, 35 countries), Colgate-Palmolive (unified IT/OT security)","evidence_source_ids":["evidence:palo-alto-prisma-sase:25","evidence:palo-alto-prisma-sase:27"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"manufacturing":false,"retail_ecommerce":false,"transport_logistics":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://paloaltonetworks.com/customers/colgate-palmolive-powers-secure-manufacturing-with-palo-alto-networks","https://paloaltonetworks.com/customers/grupo-bimbo-protects-its-global-connected-supply-chain-with-palo-alto-networks","https://paloaltonetworks.com/customers/westfield-responds-rapidly-to-a-changing-market-with-prisma-sase"],"qualification":"Colgate primary case explicitly identifies Prisma SD-WAN and Prisma Access at a manufacturer. Bimbo corroborates manufacturing security, not a separate logistics sector. Westfield primary case documents Prisma SASE for mall operations and retail access. Evidence relates to a mall operator, not every retail format. Grupo Bimbo is a bakery manufacturer. Its connected supply chain does not make it an independent transport/logistics customer. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"manufacturing":"yes","retail_ecommerce":"yes","transport_logistics":"not_confirmed"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":5,"research_metrics":{"supported":21,"partial":2,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":16,"total":40,"reviewed":24,"completeness_percent":60,"completeness":0.6},"proven_evidence_count":21,"response_panel":null,"best_for":"Retail and e-commerce; Manufacturing; platform","best_for_fields":{"sectors_yes":["Retail and e-commerce","Manufacturing"],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"cisco","name":"Cisco","website":"https://www.cisco.com/site/us/en/solutions/networking/sdwan/index.html","category":"technology vendor","product_focus":"Cisco AI Defence, Cisco Catalyst SD-WAN, Cisco Duo, Cisco ISE","cost_model":"Quote-based subscription/licence + appliance/support; Meraki public SKUs via partners, enterprise pricing varies by platform and term.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"yes","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_primary","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"partial","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"partial","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"not_primary","manufacturing":"yes","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"yes","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/cisco/","shortlist_summary":"Cisco’s own materials describe SASE explicitly as ‘a journey - you can start with SD-WAN or SSE and converge over time’, which is a different pitch to Cato’s, Zscaler’s, Netskope’s or Palo Alto’s single-platform-from-day-one story. In practise, ‘Cisco SASE’ means choosing between Cisco Secure Access (cloud-delivered SSE, evolved from Cisco Umbrella), Cisco Catalyst SD-WAN (the enterprise-grade fabric, formerly Viptela) or Meraki SD-WAN (the simpler, cloud-first option), and Cisco Secure Connect (a turnkey bundle of Secure Access plus Meraki SD-WAN specifically).","key_differentiators":["Broadest platform portfolio in the category, covering Catalyst SD-WAN for enterprise WAN, Meraki MX for cloud-managed branch, and Cisco Secure Access for converged SASE delivery.","Cloud OnRamp provides automated optimisation paths for Microsoft 365, Salesforce, and major cloud providers, with native integration into the Cisco security stack.","Large global partner and integrator ecosystem reduces delivery risk for buyers wanting managed or co-managed delivery."],"best_fit_for":["Enterprises already standardised on Cisco networking who want platform consistency from LAN through WAN to security.","Multinational organisations needing strong vendor presence across regions and a deep partner channel.","Buyers prioritising single-vendor risk consolidation across networking and security."],"watch_outs":["Two distinct SD-WAN product lines (Catalyst and Meraki) means buyers should confirm which fits the target deployment profile and the longer-term roadmap.","Managed delivery is partner-led rather than first-party, so service quality varies meaningfully by integrator.","Private global backbone is not part of the platform; cloud transport relies on internet and partner gateways."],"evidence_coverage_pct":0.575,"last_verified":"2026-09-01","evidence_source_count":66,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://documentation.meraki.com/Platform_Management/Managed_Service_Provider_Resources/Dashboard_Branding_for_MSPs","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Managed Service Providers (MSPs) can now take advantage of custom branding options within the Cisco Meraki Dashboard. All four elements of the definition are evidenced. Branded portals from the Meraki dashboard branding documentation, which also states \"Any logos that are applied to Dashboard should be the logo of the MSP and not of the end customer.\" Tenant isolation and delegated administration from multi-organisation management, corroborated on the Secure Access datasheet: \"Large enterprise customers can manage multiple organizations (orgs) through a single user interface, with central access and license management.\" Branding is configured per organisation and can be cloned to new organisations as a template."},"f14_packet_loss_remediation":{"source_url":"https://investor.cisco.com/news/news-details/2026/Cisco-Redefines-Security-for-the-Agentic-Era-with-AI-Defence-Expansion-and-AI-Aware-SASE/default.aspx","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, specifically confirmed in the AI-traffic context - the February 2026 AI-aware SASE announcement explicitly names 'packet duplication' as an AI traffic optimization technique [25]"},"f19_public_cloud_gateways":{"source_url":"https://documentation.meraki.com/CiscoPlusSecureConnect/Cisco___Secure_Connect_Pre-configuration_Checklist/Data_Centers","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Cisco Secure Connect services operate in the Cisco Umbrella global cloud architecture which is network of data centers located throughout the world interconnected with a high speed, low latency backbone. Yes rather than partner_integrated. This is Cisco's own service infrastructure, not a third party's PoPs that Cisco resells: Cisco owns and operates the Umbrella global cloud architecture, publishes its data centre list, and enforces security and delivers remote access from it. Corroborated by the Umbrella global network page, \"The Cisco Umbrella global cloud architecture serves more than 30,000 customers daily in 190+ countries.\" AWS, Azure and GCP connectivity was disregarded as it does not meet the definition."},"f21_private_global_backbone":{"source_url":"https://documentation.meraki.com/CiscoPlusSecureConnect/Cisco___Secure_Connect_Pre-configuration_Checklist/Data_Centers","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Cisco Secure Connect services operate in the Cisco Umbrella global cloud architecture which is network of data centers located throughout the world interconnected with a high speed, low latency backbone. Partial rather than yes. A global, not national, footprint is clearly evidenced and the documentation states the data centres are interconnected by a backbone. What is not evidenced is the ownership or control test in the definition: no page reviewed states that Cisco owns or controls that backbone rather than buying transit or leased capacity. The Umbrella global cloud architecture page instead emphasises internet peering and anycast, \"Umbrella peers directly with more than 1000 organizations\", which points towards an internet-peering-centric design. Graded partial on the ownership gap. See conflicts."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:3e7b3c72170a8c6cadaf8368","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). Extensive UK channel; Catalyst and Meraki widely delivered as UK managed services.","sector_review_queue":[{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | Distributed-facility SD-WAN and security consolidation; ThousandEyes for multi-site assurance | Not assessed for sector-specific frameworks | Peco Foods (poultry processing, 7,500+ employees, 20 facilities across the Southeast US) | Multi-facility deployment evidenced directly | US-centric case evidence; single company rather than the multi-country breadth of Palo Alto's Grupo Bimbo evidence | A genuinely credible, named, quoted manufacturing case study - not as expansive as Grupo Bimbo's 35-country story, but solid, specific evidence (a 200% user-experience improvement, named IT manager) for a real distributed-facility food-processing operation.","named_evidence":"Peco Foods (poultry processing, 7,500+ employees, 20 facilities across the Southeast US)","evidence_source_ids":["evidence:cisco:31","evidence:cisco:32","evidence:cisco:34","evidence:cisco:35","evidence:cisco:37"]},{"sector":"healthcare","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Cloud-first, hardware-light deployment relevant to multi-site hospitality operators | Not assessed | Mitchells & Butlers (UK pub/restaurant operator) | UK-based customer specifically - directly relevant to Netify's UK-focused work | Single case study | Genuinely useful for Netify specifically: this is the only UK-named customer found across all five vendor profiles produced so far, evidenced by a named Head of Technology and Support quote about cloud-first infrastructure alignment.","named_evidence":"Mitchells & Butlers (UK pub/restaurant operator)","evidence_source_ids":["evidence:cisco:31"]},{"sector":"hospitality_leisure","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Cloud-first, hardware-light deployment relevant to multi-site hospitality operators | Not assessed | Mitchells & Butlers (UK pub/restaurant operator) | UK-based customer specifically - directly relevant to Netify's UK-focused work | Single case study | Genuinely useful for Netify specifically: this is the only UK-named customer found across all five vendor profiles produced so far, evidenced by a named Head of Technology and Support quote about cloud-first infrastructure alignment.","named_evidence":"Mitchells & Butlers (UK pub/restaurant operator)","evidence_source_ids":["evidence:cisco:31"]},{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Fast, low-complexity deployment relevant to smaller professional-services firms specifically | Not assessed | George Sink, P.A. (law firm) | N/A | Single case study, though genuinely specific and quotable (2-hour deployment, named CIO) | A real, credible, if narrow, professional-services proof point - the 2-hour deployment claim specifically is one of the standout pieces of evidence in this entire profile.","named_evidence":"George Sink, P.A. (law firm)","evidence_source_ids":["evidence:cisco:31"]},{"sector":"government_public_sector","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | FedRAMP Moderate across Secure Access, ThousandEyes, Duo and Catalyst SD-WAN together | FedRAMP Moderate (multiple named components) | Indiana Office of Technology (ThousandEyes specifically, not confirmed for the full Secure Access stack) | Coherent multi-component FedRAMP story, capped at Moderate | Weaker than Zscaler's or Palo Alto's FedRAMP High/DoD IL evidence | A genuinely multi-product, coherent public-sector compliance story, though it caps out at a lower assurance level (Moderate) than two of the other four vendors profiled - a specific, worth-stating nuance.","named_evidence":"Indiana Office of Technology (ThousandEyes specifically, not confirmed for the full Secure Access stack)","evidence_source_ids":["evidence:cisco:16","evidence:cisco:17","evidence:cisco:21"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"professional_services":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.cisco.com/c/dam/en/us/products/security/secure-access/customer-highlight-peco-foods.pdf","https://www.cisco.com/site/us/en/about/case-studies-customer-stories/mitchells-butlers.html","https://cisco.com/site/us/en/solutions/secure-access-service-edge-sase/index.html","https://www.cisco.com/c/en/us/products/collateral/plus-as-a-service/george-sink-law-customer-cs.pdf"],"qualification":"Peco Foods is identified as food manufacturing with a Cisco SASE deployment. Manufacturing evidence is US-based. The separate Mitchells and Butlers case documents UK hospitality SASE and Meraki SD-WAN. Regional coverage remains partial: it does not establish coverage of every UK/Ireland site or a contracting entity. Neither case certifies compliance or suitability for a particular estate. Recovered Cisco George Sink PDF: Secure Connect deployed in a law firm; SD-WAN expansion described as a next step. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"manufacturing":"yes","hospitality_leisure":"yes","professional_services":"yes"},"regions":{"uk_ireland":"partial"}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"partial","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":6,"research_metrics":{"supported":21,"partial":1,"partner_delivered":0,"managed_service_dependent":0,"not_primary":1,"unconfirmed":17,"total":40,"reviewed":23,"completeness_percent":58,"completeness":0.575},"proven_evidence_count":21,"response_panel":null,"best_for":"Manufacturing; Professional services; Hospitality and leisure; Large global enterprise; platform","best_for_fields":{"sectors_yes":["Manufacturing","Professional services","Hospitality and leisure"],"sectors_partial":[],"regions":[],"size":["Large global enterprise"],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"check-point","name":"Check Point","website":"https://www.checkpoint.com/harmony/sase","category":"technology vendor","product_focus":"AI Network Firewall / AI Defence Plane, CASB, Check Point Infinity Architecture, Check Point SASE Platform","cost_model":"Quote-based subscription; Microsoft marketplace listing exists but enterprise deployments normally require quote.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"partial","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"not_confirmed","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":80,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/checkpoint/","shortlist_summary":"Check Point’s SASE platform has been through two names in under three years. The underlying technology began life as Perimeter 81, an independent Israeli SSE/ZTNA vendor founded in 2018 that had grown to more than 3,000 customers and a Forrester Zero Trust Wave recognition before Check Point Software Technologies - the much larger, long-established Israeli cybersecurity vendor behind Check Point Firewall-1, founded in 1993 - acquired it for approximately $490 million in a deal announced September 2023.","key_differentiators":["Harmony SASE combines Check Point security heritage with cloud-delivered SASE and optimised SD-WAN performance.","Strong story for organisations already running Check Point firewalls who want to extend into SASE.","Available via Microsoft Azure marketplace for buyers wanting consolidated cloud procurement."],"best_fit_for":["Existing Check Point customers extending firewall investment into SD-WAN and SASE.","Mid-market enterprises consolidating security and SD-WAN under one vendor.","Buyers prioritising security maturity over network-platform maturity."],"watch_outs":["Dynamic path selection: not confirmed; QoS and traffic shaping: not confirmed; Packet loss remediation: not confirmed. Confirm the exact SD-WAN product and required branch behaviour.","Smaller SD-WAN deployment footprint than category leaders; validate scale references.","Managed delivery is partner-led."],"evidence_coverage_pct":0.55,"last_verified":"2026-09-01","evidence_source_count":44,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.checkpoint.com/services/managed-security/managed-firewall/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Managed Firewall Services with 24/7 monitoring, policy management, tuning, patching, upgrades, incident handling, and expert support for Check Point and third-party NGFWs. Check Point sells first-party managed services covering firewall, EDR, vulnerability management and Microsoft 365, with 24/7 monitoring, policy management and incident handling. I did not find a page describing Check Point itself designing, deploying, changing and reporting on the SASE service end to end for the customer, so partial rather than yes. The Managed Firewall as a Service page (register 20) could not be read."},"f03_co_managed_service":{"source_url":"https://www.checkpoint.com/services/managed-security/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Delivering co-managed services with partners and customers for optimal protection through unified collaboration and robust security strategies. Check Point explicitly frames its managed security offer as co-managed, with its experts acting as an extension of the customer team while the customer retains its own operations."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.checkpoint.com/partners/mssp-program/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Leverage true multi-tenancy, a wide range of security services, and full API integration to streamline customer management and accelerate service delivery. Multi-tenant architecture, delegated multi-customer management through one portal and API integration are all stated on the MSSP programme page. I found no statement of branded or white-label portals under the MSP's own brand, which the definition requires, so partial rather than yes."},"f05_professional_services_and_migration_support":{"source_url":"https://www.checkpoint.com/services/professional-services/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"As your security infrastructure becomes more complicated, our Professional Services team can assist you with your security design, deployment, operation, and optimization needs. The same page lists a Jumpstart Program, Maestro Deployment, SmartOptimize, Gateway Health Check and Lifecycle Management Services, and states delivery covers adding new features and layers while ensuring smooth migrations and scheduled updates. Training programmes are listed separately. Explicit runbook and rollback wording was not found."},"f07_lifecycle_management":{"source_url":"https://www.checkpoint.com/support-services/support-plans/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Check Point shall use commercially reasonable efforts to ship the replacement hardware on the same business day, however, shipment my occur on the next business day if required for operational reasons. Support programmes include RMA hardware replacement with same business day shipment and onsite delivery options, plus Latest Hot Fixes & Service Packs and Major Upgrades & Enhancements on every tier, and Lifecycle Management Services is a named professional service. This is a purchased support or services contract rather than something bundled into every subscription. The dedicated lifecycle management page (register 15) could not be read. The quote reproduces the page's own typo."},"f17_cellular_and_5g_support":{"source_url":"https://www.checkpoint.com/harmony/sase/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Sub-second failover to any WAN link: MPLS, 5G, broadband 5G is named as a supported WAN failover transport for SD-WAN, and the NGFW page notes a Wi-Fi 5G option on small business appliances and 1 GbE & 5G wireless secure connectivity on industrial appliances. I found no statement covering SIM management or signal monitoring, which the definition requires, so partial. The Quantum SD-WAN page (register 14) could not be read."},"f19_public_cloud_gateways":{"source_url":"https://www.checkpoint.com/harmony/sase/private-access/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our high-performance network provides fast delivery between corporate sites worldwide thanks to multiple tier-1 links at each point-of-presence (PoP), reserved bandwidth, and peering agreements. Check Point operates its own PoP and data centre estate for SASE internet access, private access and SaaS security, described as 80+ to 85+ global data centres depending on the page. This is Check Point's own infrastructure rather than a resold third party edge, so yes rather than partner_integrated."},"f21_private_global_backbone":{"source_url":"https://www.checkpoint.com/harmony/sase/private-access/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our high-performance network provides fast delivery between corporate sites worldwide thanks to multiple tier-1 links at each point-of-presence (PoP), reserved bandwidth, and peering agreements. The heading above this text is Global Private Backbone, and the SASE overview separately states Private Access delivers high performance with a full mesh global private backbone. The backbone is global rather than national. Check Point describes it as built on purchased tier-1 links, reserved bandwidth and peering rather than fibre it owns, so it is a controlled overlay backbone rather than owned infrastructure."},"f26_sla_backed_service_fabric":{"source_url":"https://www.checkpoint.com/support-services/support-plans/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Get advanced access to our large, self-service knowledge base and a committed 30-minute response time to issues with level one severity. Check Point publishes contractual support SLAs with per-severity response times (30 minutes for Severity 1 across all tiers), 7x24 coverage on Premium and above, and named SLA documents including the Check Point Direct Support Program Service Level Agreement. I found no published availability, latency, jitter or loss commitment for the SASE cloud service, so partial rather than yes."},"f27_integrated_next_generation_firewall":{"source_url":"https://checkpoint.com/harmony/sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, via the confirmed FWaaS capability [24] [28]"},"f33_data_loss_prevention":{"source_url":"https://www.checkpoint.com/harmony/sase/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Inline and API-based enforcement with Application Control for 10,000+ cloud apps, tenant restrictions, DLP, and Threat Prevention powered by ThreatCloud AI The same pages state AI-powered data classification with 800+ predefined data types, and the Internet Access page cites in-browser data loss prevention. Content classification and inline enforcement are clearly evidenced. Explicit alerting and exception workflow detail was not found on the pages read."},"f35_soc_siem_soar_integration":{"source_url":"https://sase.checkpoint.com/solutions/compliance/soc-2","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine technical specificity as part of the platform's SOC 2 Type 2 compliance architecture - 'monitor system activity, view system configuration changes and assign user access controls', with audit trails covering 'the modification, addition, or removal of key system components' [18] Not confirmed"},"f40_managed_service_assurance":{"source_url":"https://www.checkpoint.com/services/managed-security/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our 24/7 global service team will be there whenever and wherever you need them to help make sure your organization is always protected. 24/7 coverage, incident handling and NOC and SOC oriented managed services are stated, and the services pages claim 99% of threats responded to within 1 hour. I found no statement of provider-owned root cause analysis, structured service reviews or change governance, so partial. The Managed Detection and Response page (register 19) could not be read."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:745e1446fdf98dad45f0b532","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"partial","professional_services":"partial","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (Israel/US). Harmony SASE UK presence; delivered via UK security partners.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"requires_confirmation","qualification":"Unknown - not assessed, no case study found, though the platform's confirmed strong, independent review base spans real, named-role practitioners describing use across multiple industries generally | Not assessed in detail by sector | Not assessed | Named-role reviews confirmed generally (e.g. 'Manager, IT Security and Risk Management' at a company with $250M-500M revenue, per Gartner Peer Insights), though not sector-specific to professional services | N/A | General practitioner reviews exist; a sector-specific case study does not | Real, credible, named-role user evidence exists at a general level (Table 9, 11), though not itemised by professional-services sector specifically.","named_evidence":"Named-role reviews confirmed generally (e.g. 'Manager, IT Security and Risk Management' at a company with $250M-500M revenue, per Gartner Peer Insights), though not sector-specific to professional services","evidence_source_ids":["evidence:checkpoint:23"]}],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":7,"research_metrics":{"supported":17,"partial":5,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":18,"total":40,"reviewed":22,"completeness_percent":55,"completeness":0.55},"proven_evidence_count":17,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"att-business","name":"AT&T Business","website":"https://www.business.att.com/products/sd-wan.html","category":"managed service provider / carrier network provider","product_focus":"AT&T Dynamic Defence with Palo Alto Networks, AT&T Managed SASE with Cisco, AT&T Managed SD-WAN, AT&T Network as a Service (NaaS)","cost_model":"Quote-based managed service; access circuits, security, platform and managed service wrapped into term contract.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"partial","f27_integrated_next_generation_firewall":"partner_integrated","f28_full_sase_platform":"partner_integrated","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":1600,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/att/","shortlist_summary":"AT&T is one of the largest telecommunications companies in the United States, reporting trailing-twelve-month revenue of approximately $120.7 billion as of Q1 2026, with fixed-line enterprise services (including the SD-WAN and SASE proposition covered in this profile) accounting for roughly 14% of total revenue. AT&T’s SASE strategy is built on two named, current, dated technology partnerships.","key_differentiators":["Major US carrier-led managed SD-WAN portfolio with multi-vendor platform options (including Fortinet for AT&T SASE).","Strong North American underlay ownership with global delivery via international partnerships.","AT&T SASE unifies SD-WAN with network security as a converged managed service."],"best_fit_for":["US-headquartered enterprises wanting integrated carrier-led SD-WAN and SASE.","Buyers wanting Fortinet SASE delivered as a managed service rather than DIY.","Organisations prioritising carrier-grade SLAs and managed service maturity."],"watch_outs":["Underlying platform varies by service tier; buyers should confirm which platform supports the proposed scope.","International delivery depth depends on partnerships outside North America.","Commercial structure typically bundles access, security and platform; line-item costing requires explicit RFP."],"evidence_coverage_pct":0.525,"last_verified":"2026-09-01","evidence_source_count":29,"capability_evidence":{"f05_professional_services_and_migration_support":{"source_url":"https://www.business.att.com/content/dam/attbusiness/briefs/sd-wan-product-brief.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Engineers also support initial installations and LAN migrations and create and fine-tune business policies. The Managed SD-WAN product brief also states \"AT&T supports the entire continuum of the customer lifecycle from design and delivery to ongoing network management.\" and assigns \"Dedicated resources are assigned to each implementation, including project managers\". Discovery, pilots, staging, runbooks and rollback plans are not itemised in the material reviewed, so the grade rests on the design, installation and LAN migration wording."},"f07_lifecycle_management":{"source_url":"https://www.business.att.com/categories/att-managed-services.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"With comprehensive support and maintenance included, your systems and connectivity services stay smooth and efficient. Maintenance is stated to be included in AT&T managed services, and the FlexWare brief covers AT&T managed universal CPE. No AT&T page reviewed names hardware replacement, firmware upgrades, patching, renewals or end-of-life planning. The words \"maintenance\", \"replacement\" and \"firmware\" do not appear in the Managed SD-WAN product brief, and \"lifecycle\" does not appear on the managed services category page. Graded partial on that gap."},"f10_dynamic_path_selection":{"source_url":"https://business.att.com/products/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Intelligent network routing and optimization with SD-WAN' and 'Improve performance, reliability, and reduce latency with intelligent routing and local breakout capabilities' [4]"},"f12_application_aware_routing":{"source_url":"https://business.att.com/products/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Intelligent network routing and optimization with SD-WAN' named as a core managed-service capability [4]"},"f15_local_internet_breakout":{"source_url":"https://business.att.com/products/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'local breakout capabilities' named specifically alongside intelligent routing [4]"},"f17_cellular_and_5g_support":{"source_url":"https://www.business.att.com/content/dam/attbusiness/briefs/att-sase-branch-with-fortinet-solution-brief.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Moving to a more distributed cloud connectivity model means you can use widely available, low-cost options for connectivity such as broadband, 4G/LTE, and 5G. The Fortinet brief also states \"Fortinet extenders provide an LTE-based backup WAN connection. They can also serve as a primary connection to kiosks, retail pop-up stores, small branch offices, point of sale systems, and other locations.\", which covers both primary and failover use. AT&T is itself the mobile network operator. SIM management and signal monitoring were not evidenced on the pages read; the attempted AT&T managed wireless WAN PDF returned unreadable binary."},"f18_cloud_on_ramp":{"source_url":"https://business.att.com/categories/network-as-a-service.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Support multiple clouds by creating an integrated network that brings together your data centres, public clouds, and private clouds in a hybrid environment' and confirmed 'multicloud connectivity' named directly for the Cisco-based offering [2] [8] Specific, named hyperscaler cloud on-ramp partnerships weren't itemised by name"},"f23_multi_cloud_transit_fabric":{"source_url":"https://business.att.com/categories/network-as-a-service.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Support multiple clouds by creating an integrated network that brings together your data centres, public clouds, and private clouds in a hybrid environment' and confirmed 'multicloud connectivity' named directly for the Cisco-based offering [2] [8] Specific, named hyperscaler cloud on-ramp partnerships weren't itemised by name"},"f25_high_availability_design":{"source_url":"https://business.att.com/content/dam/attbusiness/briefs/next-generation-networking-use-case.pdf","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - AT&T's own use-case materials confirm 'SLAs for equipment availability' as a standard commercial commitment [17]"},"f26_sla_backed_service_fabric":{"source_url":"https://www.business.att.com/products/dedicated-internet.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"AT&T Dedicated Internet access is perfect for businesses that require the fastest speeds available and protection from outages with world-class Service Level Agreements (SLAs) supported by 24/7 active monitoring. Contractual SLAs with service credits are published for the underlying AT&T Dedicated Internet access service, and the SLA credit quick guide points to the ADI Service Guide for the objectives. No SLA covering the managed SD-WAN or SASE service itself was reachable: the AT&T Service Guide Library at serviceguidenew.att.com could not be fetched, and the strings \"SLA\" and \"service level agreement\" do not appear in the Managed SD-WAN product brief or the Palo Alto Networks SASE brief. Graded partial for that reason."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.business.att.com/content/dam/attbusiness/briefs/att-sase-branch-with-fortinet-solution-brief.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"AT&T Business next-generation firewalls with Fortinet enable one of the fastest application steering methods in the industry. Fortinet technology, branded and managed by AT&T. The same brief lists \"SSL/TLS inspection and threat protection for visibility and prevention against malware.\", \"Web filtering service to enforce internet security and reduce complexity.\" and \"Complete threat protection anti-virus, and intrusion prevention system (IPS)\", so the full NGFW feature set is present but is another vendor's. The FlexWare brief confirms multi-vendor sourcing: \"Supports a variety of secure virtual firewall vendor designs, including Palo Alto, Fortinet, and Juniper.\""},"f30_zero_trust_network_access":{"source_url":"https://business.att.com/products/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Helps ensure that only the right team members have access to the right apps, no matter where they access the network' and 'enforce strict identity verification regardless of location' [4]"},"f31_secure_web_gateway":{"source_url":"https://business.att.com/products/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as part of both named SASE architecture descriptions (Cisco and Palo Alto Networks-based) [4] Capability specifics depend on which underlying platform (Cisco or Palo Alto) is proposed"},"f32_casb_capability":{"source_url":"https://business.att.com/learn/articles/sase-vs-sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name as a core SASE architecture component in AT&T's own materials [7] Specific inline-versus-API-mode technical detail not itemised per platform"},"f36_centralised_orchestration":{"source_url":"https://business.att.com/categories/network-as-a-service.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'Software-defined networking (SDN) and network function virtualization (NFV) technologies enable zero-touch provisioning and seamlessly automate service changes' [8]"},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://business.att.com/products/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Enhanced observability and reporting from the edge to the cloud' is named specifically as a core managed-services capability [4] A distinctly-branded DEM product name wasn't itemised"},"f40_managed_service_assurance":{"source_url":"https://www.business.att.com/content/dam/attbusiness/briefs/att-sase-branch-with-fortinet-solution-brief.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Dedicated experts at the AT&T SNOC use rich SD-WAN analytics to help you fine-tune your business and security policies to improve user experiences. AT&T evidences a security network operations centre and round-the-clock proactive monitoring: \"With 24/7/365 proactive and reactive support, businesses can ensure continuous monitoring and troubleshooting across their connectivity solutions, including managed IT services, SD-WAN, and business Wi-Fi solutions.\" and \"At completion of installation, customers experience a world-class tiered support model available 24/7 to manage their global solution.\" No page reviewed evidences root cause analysis ownership, structured service reviews or change governance, and the AT&T SOC page proved to be about SOC optimisation consulting rather than a managed SOC. Graded partial on those gaps."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:64f133e38f967549cea8daf5","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"not_confirmed","hospitality_leisure":"yes"},"curated_uk_delivery":"global_managed","curated_uk_basis":"No UK HQ (US). UK sites served through AT&T's global managed network and partners, not UK-native infrastructure.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":8,"research_metrics":{"supported":15,"partial":3,"partner_delivered":3,"managed_service_dependent":0,"not_primary":0,"unconfirmed":19,"total":40,"reviewed":21,"completeness_percent":53,"completeness":0.525},"proven_evidence_count":15,"response_panel":null,"best_for":"Sector evidence not yet reviewed; Large global enterprise; managed","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":["Large global enterprise"],"service_model":"managed","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"aryaka","name":"Aryaka","website":"https://www.aryaka.com","category":"technology vendor","product_focus":"AI>Observe, AI>Secure, Aryaka Cyber Threat Research Lab (CTRL), Aryaka Network Access Point (ANAP)","cost_model":"Quote-based managed service; pricing normally depends on sites, bandwidth, regions, security stack and optimisation.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"partial","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"yes"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_primary","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"partial","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","per_bandwidth","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":40,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/aryaka/","shortlist_summary":"Aryaka is one of the older, more established names in this category - founded 2009, more than 15 years before ‘SASE’ existed as an analyst-defined term, originally as a WAN optimisation and application-acceleration company before evolving into what it now calls ‘Unified SASE as a Service’. That specific phrase matters: Aryaka positions itself, and is described by independent commentary, as the first company to deliver SASE as a fully managed service rather than a self-managed software platform, built around a distinctive single-pass architecture (OnePASS) running over an owned, global private core network spanning more than 40 points of presence across six continents.","key_differentiators":["Unified SASE delivered as a managed service from end to end, including the private global core network and WAN optimisation.","Strong story for global organisations needing predictable performance between regions without internet variability.","Embedded WAN optimisation differentiates from pure cloud-delivered SASE platforms."],"best_fit_for":["Global enterprises wanting SASE delivered as a fully managed service rather than as DIY platform plus tools.","Buyers who need consistent inter-regional performance for chatty applications.","Organisations preferring a vendor that owns the platform and the managed service rather than coordinating multiple parties."],"watch_outs":["Smaller PoP footprint and partner ecosystem than the hyperscale SASE vendors; coverage must match your geographic profile.","DIY / self-managed model: supported. Confirm which operating tasks your team retains and what Aryaka operates.","CASB capability: supported; Data loss prevention: supported. Confirm inspection modes, licences and policy depth in the proposal."],"evidence_coverage_pct":0.5,"last_verified":"2026-09-01","evidence_source_count":46,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.aryaka.com/datasheet/smartmanage-datasheet/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Utilizes the Aryaka Network Management and Control (ANMC) system for scalable, multi-tenant automation and orchestration Multi-tenant orchestration is confirmed at platform level, the partner programme names Managed Service Providers and System Integrators as a partner category, and co-management can be delegated to an Aryaka partner. However I found no vendor statement about white-label or partner-branded portals, delegated administration roles or tenant templates on the partners page or elsewhere, so this falls short of the full definition."},"f17_cellular_and_5g_support":{"source_url":"https://www.aryaka.com/last-mile-connectivity/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka provides truly global last mile services including wireline and 4G/5G wireless connectivity 4G and 5G are confirmed as supported and procurable last mile transport. Graded partial rather than yes because the ANAP appliance datasheet contains no mention of LTE, 5G, cellular, SIM or modem, and the High Availability datasheet describes redundancy only as dual ISP links, so integrated modem, SIM management and signal monitoring are not evidenced in the sources reviewed."},"f19_public_cloud_gateways":{"source_url":"https://www.aryaka.com/products-and-services/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka Secure Remote Access provides integrated, managed VPN as a service connecting users to the nearest Aryaka POP. The gateways are Aryaka's own infrastructure, not a resold third party's. Corroborated by \"a global private network interconnected in a mesh service fabric of over 40 Points of Presence (PoPs) across the globe\" and by the NGFW being hosted on the ANAP and on Aryaka's POP, so SaaS acceleration, remote access and security enforcement all run on vendor operated PoPs."},"f24_flexible_edge_form_factors":{"source_url":"https://aryaka.com/unified-sase-platform/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity - the Aryaka Network Access Point (ANAP), included as part of the service rather than sold as separate hardware [9]"},"f25_high_availability_design":{"source_url":"https://www.aryaka.com/unified-sase-platform/","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"ANAP high-availability configurations are available; validate appliance, circuit and implementation requirements for each site."},"f26_sla_backed_service_fabric":{"source_url":"https://www.aryaka.com/datasheet/smartmanage-datasheet/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Operates 24x7x365 to maintain industry-leading SLAs for uptime, latency, jitter and packet loss globally. Aryaka publishes a full SLA document with per service uptime targets (\"Uptime of 99.999%\" for PrivateCore, NGFW-SWG, PrivateAccess and RemoteUser, and Internet Breakout), a target of \"Packet Loss of less than 0.1%\", per minute probing, monthly measurement and graduated service credits of 5, 10 and 20 percent of Link Service Fees. That is contractual rather than best effort."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.aryaka.com/datasheet/ngfw-swg-solution/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka has built a dedicated security stack on top of our Software Defined Wide Area Network (SD-WAN) architecture The NGFW-SWG is Aryaka authored and runs on both the ANAP and Aryaka POPs, with IPS, anti-malware, application control via inline CASB and DPI, and URL filtering that \"Protects users from accessing malicious URLs using reputation scores for more than 32 billion URLs.\" Note that a separate optional SmartSecure Hosted VM Firewall Service is partner technology (\"The first technology partner providing the NGFW functionality is Palo Alto Networks with its VM series of virtualized NGFWs.\") and the Services Description and Terms references a Check Point EULA, so a partner_integrated firewall option exists alongside the native one. The integrated platform firewall itself is native."},"f31_secure_web_gateway":{"source_url":"https://aryaka.com/sase/sase-architecture/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as part of the unified single-pass stack [6]"},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://aryaka.com/case-study/electronics-company/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, well-evidenced via the confirmed 'greatly improved network performance' customer testimony and the platform's confirmed application-acceleration heritage [22] Not confirmed"},"f40_managed_service_assurance":{"source_url":"https://www.aryaka.com/datasheet/global-connectivity-solution/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka operates its own 24/7 NOC (Network Operations Center) to manage, orchestrate, and monitor all traffic The 24/7 NOC half of the definition is well evidenced: Aryaka runs its own NOCs \"24x7x365 to maintain industry-leading SLAs for uptime, latency, jitter and packet loss globally\", provides \"24x7 proactive Link Monitoring and management of Customer's procured last mile links\" and \"24x7 health monitoring and handle incident management issues related to the ZTNA Gateways\". Graded partial because the Services Description and Terms explicitly excludes a managed SOC from at least one offering: \"managed SOC (Security Operation Center) are not part of the scope of the Managed Firewall Service offering, and Customer is solely responsible for these functions.\" No published evidence found for root cause analysis commitments or structured service review and change governance."},"f02_diy_self_managed_model":{"source_url":"https://www.aryaka.com/use-cases/network-and-security-convergence/","reviewed_at":"2026-10-01T00:00:00Z","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka explicitly offers fully managed, co-managed and self-managed delivery. Confirm the buyer’s retained tasks and service scope; self-management is not evidence of a standalone appliance purchase."},"f01_fully_managed_service":{"source_url":"https://www.aryaka.com/unified-sase-platform/","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"Aryaka-managed delivery is an available service model; scope and responsibilities must be agreed in the service contract."},"f03_co_managed_service":{"source_url":"https://www.aryaka.com/unified-sase-platform/","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"Co-managed delivery is offered; confirm the division of responsibilities with Aryaka or its delivery partner."},"f21_private_global_backbone":{"source_url":"https://www.aryaka.com/unified-sase-platform/","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"Aryaka documents a global private network. This does not establish private last-mile access, every-country coverage or a site-specific SLA."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:be96a103e360c6122afebb8d","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"partial","financial_services":"yes","retail_ecommerce":"partial","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). UK PoP on the private core; managed-service delivery into the UK.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, if smaller-scale, named customer example | SD-WAN reliability and application performance directly relevant | Not assessed for sector-specific frameworks | KAWO (a named social-media start-up customer, described as benefiting from reliable network performance for global users) | N/A | A smaller-scale customer example relative to the strong manufacturing-sector evidence | A real, named customer example exists for this general sector category, though at a smaller scale than the strongest evidence found for manufacturing.","named_evidence":"KAWO (a named social-media start-up customer, described as benefiting from reliable network performance for global users)","evidence_source_ids":["evidence:aryaka:20"]},{"sector":"transport_logistics","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced at a general level | Multi-site, multi-cloud connectivity plausibly relevant | Not assessed for sector-specific frameworks | Confirmed directly as a served sector generally: 'customers span... transportation, logistics... industries with complex multi-site, multi-cloud network requirements' | N/A | General sector confirmation exists without a named individual customer example | A real, primary-sourced confirmation of sector fit, though without a named individual customer example to reinforce it directly.","named_evidence":"Confirmed directly as a served sector generally: 'customers span... transportation, logistics... industries with complex multi-site, multi-cloud network requirements'","evidence_source_ids":["evidence:aryaka:16"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | SD-WAN reliability, multi-site connectivity, and managed operations directly relevant to distributed manufacturing operations | Not assessed for sector-specific frameworks | A named Fortune 1000 chemicals/materials producer (Albemarle Corporation); a detailed, technically specific (if company-name-anonymised) semiconductor-manufacturing case study benchmarked against Cato and VeloCloud; confirmed directly as a served sector generally ('customers span manufacturing... industries') | Global - the named/detailed case studies span facilities in more than 100 countries (Albemarle) and multiple Asia-Pacific/North American sites (the semiconductor case) | The semiconductor case study's company name was withheld | Genuinely the best-evidenced sector in this entire profile - a real, named, large public company (Albemarle) plus a detailed, technically specific anonymised case study together give this sector exceptionally strong, concrete evidence.","named_evidence":"A named Fortune 1000 chemicals/materials producer (Albemarle Corporation); a detailed, technically specific (if company-name-anonymised) semiconductor-manufacturing case study benchmarked against Cato and VeloCloud; confirmed directly as a served sector generally ('customers span manufacturing... industries')","evidence_source_ids":["evidence:aryaka:16","evidence:aryaka:23","evidence:aryaka:24"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"transport_logistics":false},"reviewed_at":"2026-09-30T15:50:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.aryaka.com/case-study/albemarle/","https://www.aryaka.com/solution-brief/regional-network/","https://www.aryaka.com/press/cloud-first-managed-sd-wan-and-sase-pioneer-aryaka-activates-eu-friendly-dublin-services-pop-to-address-growing-customer-demand/","https://www.aryaka.com/docs/Transitex-Case-Study-2020.pdf"],"qualification":"Published manufacturing customer evidence for managed global WAN and last-mile services. Does not establish UK ten-site commercial fit or current supplier availability.  Transitex freight/logistics primary case documents Aryaka SmartSecure Remote Access through Cloud365 for China connectivity. Supports logistics experience with qualification; not proof of full branch SD-WAN, current UK delivery or the original generic claim.","sectors":{"manufacturing":"yes","transport_logistics":"partial"},"regions":{"uk_ireland":"partial"}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"partial","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":9,"research_metrics":{"supported":16,"partial":4,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":20,"total":40,"reviewed":20,"completeness_percent":50,"completeness":0.5},"proven_evidence_count":16,"response_panel":null,"best_for":"Manufacturing; Transport and logistics (partial evidence); both","best_for_fields":{"sectors_yes":["Manufacturing"],"sectors_partial":["Transport and logistics"],"regions":[],"size":[],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"fortinet","name":"Fortinet FortiSASE","website":"https://www.fortinet.com/products/sd-wan","category":"technology vendor","product_focus":"Fabric Connectors, FortiClient, FortiGuard AI-Powered Security Services, FortiManager / FortiAnalyzer","cost_model":"Quote-based appliances/subscriptions/support; public reseller pricing exists for hardware but enterprise managed/SASE bundles require quote.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"partner_integrated","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"yes","financial_services":"not_primary","retail_ecommerce":"not_confirmed","manufacturing":"not_primary","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"partial","transport_logistics":"yes","professional_services":"not_primary","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":170,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/fortinet-fortisase/","shortlist_summary":"FortiSASE runs the same FortiOS operating system, and the same single-pass inspection engine, that has powered Fortinet’s physical FortiGate firewalls for over two decades. That’s a meaningfully different starting point from building a SASE platform natively for the cloud from scratch - the practical result is that FortiGate customers get a consistent policy and inspection model whether traffic is inspected on-premises or in a FortiSASE cloud point of presence, and Fortinet’s own commercial materials lean hard into a ‘Security Fabric’ discount for exactly these existing customers.","key_differentiators":["Native convergence of networking and security on a single operating system (FortiOS) across FortiGate edge, FortiManager and FortiSASE.","Strong story for buyers who want secure SD-WAN and SASE delivered from one vendor platform rather than assembled from partner integrations.","Wide appliance range covering everything from small branch to large data centre, with public hardware pricing visible through resellers."],"best_fit_for":["Security-first buyers who want SD-WAN and SASE under a single policy and log domain.","Mid-market and enterprise organisations that already run FortiGate firewalls and want to extend into SD-WAN and cloud-delivered security.","Buyers comparing single-vendor SASE platforms (alongside Cato, Palo Alto, Cisco) for converged operations."],"watch_outs":["Like Cisco, managed delivery is via partners rather than Fortinet directly; underlay and field operations are not owned by the vendor.","Buyers wanting a private global backbone will need to validate FortiSASE PoP coverage against their geographic footprint.","Best-of-breed buyers may prefer integrating FortiGate SD-WAN with a separate SSE platform (Zscaler, Netskope) rather than adopting full FortiSASE."],"evidence_coverage_pct":0.5,"last_verified":"2026-09-01","evidence_source_count":60,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/managed-fortigate-svc.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Ensure FortiGates, FortiAPs, FortiSwitches and FortiExtenders are quickly and correctly deployed, configured to best practices Fortinet itself operates Managed FortiGate Service (MFGS), in which Fortinet NOC staff carry out deployment, configuration, provisioning and ongoing change management. The solution page adds \"Deployment, configuration, provisioning, and regular changes\" and \"Evaluate, implement, and verify configuration changes\". Note that this is a managed wrap around Fortinet's own appliances rather than an end-to-end managed WAN including circuits; most fully managed Fortinet SD-WAN in the market is delivered by carrier and MSSP partners rather than by Fortinet."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortisase.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The portal offers centralized multi-tenant management and configuration capabilities, enabling MSSPs to efficiently deploy and manage SASE services across their client base. Tenant isolation and delegated administration are evidenced: the FortiSASE datasheet describes an MSSP Portal, and the service provider page states \"Fortinet solutions are multi-tenant from the ground up, enabling MSPs and MSSPs to isolate and manage multiple customer networks from a single administrative console.\" Graded partial rather than yes because no page reviewed evidences branded or white-label portals for the MSP's own brand, and because the FortiSASE MSSP architecture guide qualifies the model by saying each customer gets a separate isolated instance. See conflicts."},"f07_lifecycle_management":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/managed-fortigate-svc.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Let MFGS experts handle your firmware upgrades to maximize effectiveness and minimize risk Firmware upgrade and patching are handled as part of Managed FortiGate Service, which also states \"Automatically trigger patching for vulnerabilities with a severity rating of medium or higher\". The FortiCare support page covers hardware replacement (\"Meet your availability requirements with our Priority RMA Services.\") and describes \"comprehensive lifecycle services\". Explicit end-of-life planning and renewals handling as part of the service were not found."},"f09_encrypted_overlay_fabric":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortinet_secure_sdwan.pdf","reviewed_at":"2026-10-01","review_due":"2026-12-30T00:00:00Z","qualification":"Fortinet documents IPsec tunnel configuration for its SD-WAN overlay. FortiGate Secure SD-WAN supports an IPsec overlay. This is a configurable platform capability; it does not establish a managed service or a deployment-specific throughput/SLA."},"f17_cellular_and_5g_support":{"source_url":"https://www.fortinet.com/products/extender","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"FortiExtender cellular gateways and routers provide secure 5G/LTE connectivity for any deployment. FortiExtender is Fortinet's own product line. The page also states \"Easily provision 5G or LTE wireless WAN, high availability, and failover, as well as out-of-band management (OOB) and private 5G/LTE.\" and \"FortiExtender 5G/LTE Wireless WAN gateways come equipped with Dual SIM and Dual Modem capabilities for fast failover and active/active cellular connectivity.\" covering dual SIM and both primary and failover transport. Signal quality is addressed by \"FortiExtender cellular gateways and routers ensure optimal signal reception, minimal attenuation, and the best experience.\""},"f26_sla_backed_service_fabric":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortisase.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Fortinet delivers 99.999% SLA with latency guarantee for security inspection, which is possible because of global reach with hundreds of security PoPs. Contractual rather than best-effort. Fortinet's own G-Cloud 14 FortiSASE service definition sets out availability tiers (Management Portal 99.99%, Individual Security POPs 99.99%, Overall service in high availability configuration 99.999%) and commits that \"FortiSASE cloud platform is managed by Fortinet on a twenty-four (24) hours a day by seven (7) days a week basis and is monitored for hardware availability, service capacity, and network resource utilization.\" Support response commitments come via \"24 x 7 FortiCare Technical Support\". A latency commitment is claimed alongside uptime. Change handling commitments were not found in the SLA text reviewed."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.fortinet.com/products/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Secure SD-WAN, SSE, zero trust, wireless controller, LTE/5G gateway, and FortiGuard AI-Powered Security Services have the same OS, policy engine, and management plane. Native, not partner_integrated. Fortinet authors FortiOS and the FortiGate NGFW itself, and the SD-WAN function is a feature of the same operating system rather than a bolt-on appliance. The FortiSASE datasheet confirms the cloud-delivered equivalent: \"FortiSASE FWaaS is a cloud-based service that provides hyperscale, next-generation firewall (NGFW) capabilities, including web filtering, advanced threat protection (ATP), intrusion prevention system (IPS), and Domain Name System (DNS) security.\" Stateful firewalling, application control, IPS, malware inspection and URL filtering are all in-platform."},"f33_data_loss_prevention":{"source_url":"https://www.fortinet.com/products/sase","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The FortiSASE DLP feature supports advanced data matching techniques, including pattern recognition and contextual analysis, to effectively prevent accidental data breaches. Native Fortinet capability. The FortiSASE datasheet adds \"Identify, monitor, and protect organization data at rest and in motion. DLP engine backed by FortiGuard AI feeds with over thousands of pre-defined data patterns, updated to protect from day zero.\" and \"DLP allows businesses to identify sensitive information across multiple cloud-based systems, prevent the accidental sharing of data, and monitor and protect data.\" Classification, inspection and blocking are evidenced. Alerting workflows and formal exception or override workflows were not found on the pages reviewed."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:ed65a89afeb5f9b44f4405ca","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"not_confirmed","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). Strong UK channel and FortiSASE PoPs; widely delivered as a UK managed service by BT, Vodafone and UK MSPs.","sector_review_queue":[{"sector":"healthcare","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | Distributed-site SD-WAN and cloud security consolidation at genuine global scale | Not assessed | A named global hospitality operator (4,000+ locations, 325,000+ employees, $19.4B gross annual revenue) reporting a 60% efficiency improvement for network and security teams; separately, IHG Hotels & Resorts is referenced as boosting IT efficiency 'close to 60%' with Fortinet Secure SD-WAN, which may be the same underlying customer story | Global, multi-location deployment evidenced directly at scale | The two hospitality references may describe the same underlying deployment rather than two independent proof points - worth confirming directly rather than double-counting as separate evidence | Genuinely the best-evidenced sector for Fortinet in this profile - specific, large, checkable scale figures (4,000+ locations, 325,000+ employees) and a consistent, repeated 60% efficiency figure across multiple Fortinet materials.","named_evidence":"A named global hospitality operator (4,000+ locations, 325,000+ employees, $19.4B gross annual revenue) reporting a 60% efficiency improvement for network and security teams; separately, IHG Hotels & Resorts is referenced as boosting IT efficiency 'close to 60%' with Fortinet Secure SD-WAN, which may be the same underlying customer story","evidence_source_ids":["evidence:fortinet-fortisase:19","evidence:fortinet-fortisase:21"]},{"sector":"hospitality_leisure","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | Distributed-site SD-WAN and cloud security consolidation at genuine global scale | Not assessed | A named global hospitality operator (4,000+ locations, 325,000+ employees, $19.4B gross annual revenue) reporting a 60% efficiency improvement for network and security teams; separately, IHG Hotels & Resorts is referenced as boosting IT efficiency 'close to 60%' with Fortinet Secure SD-WAN, which may be the same underlying customer story | Global, multi-location deployment evidenced directly at scale | The two hospitality references may describe the same underlying deployment rather than two independent proof points - worth confirming directly rather than double-counting as separate evidence | Genuinely the best-evidenced sector for Fortinet in this profile - specific, large, checkable scale figures (4,000+ locations, 325,000+ employees) and a consistent, repeated 60% efficiency figure across multiple Fortinet materials.","named_evidence":"A named global hospitality operator (4,000+ locations, 325,000+ employees, $19.4B gross annual revenue) reporting a 60% efficiency improvement for network and security teams; separately, IHG Hotels & Resorts is referenced as boosting IT efficiency 'close to 60%' with Fortinet Secure SD-WAN, which may be the same underlying customer story","evidence_source_ids":["evidence:fortinet-fortisase:19","evidence:fortinet-fortisase:21"]},{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Unknown - not assessed in detail, though Fortinet's own customer-story index references a power grid operator by category (not named) deploying a Fortinet SecOps solution for zero-day protection and IT/OT convergence | IT/OT convergence relevant per the referenced use case | Not assessed | Referenced but not independently detailed (unnamed power grid operator) | N/A | Reference exists but wasn't followed up to a named, detailed case study in this pass | A real, relevant use case is referenced in Fortinet's own materials but wasn't independently verified to the same depth as the hospitality or education evidence in this pass.","named_evidence":"Referenced but not independently detailed (unnamed power grid operator)","evidence_source_ids":["evidence:fortinet-fortisase:26"]},{"sector":"education","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | Large-scale, phased deployment (Secure SD-WAN, then NAC, then FortiSASE) at genuine scale | Not assessed for sector-specific frameworks | A named top-five-largest US school district, 375,000+ students and staff | Single-country (US) evidence; UK/EU education-specific case studies not found in this pass | No case-study limitations beyond the single-country evidence noted | A genuinely large, well-evidenced, named-scale customer story - one of the strongest sector-fit findings in this profile, given both the scale (375K+) and the specific, credible multi-stage adoption narrative.","named_evidence":"A named top-five-largest US school district, 375,000+ students and staff","evidence_source_ids":["evidence:fortinet-fortisase:26","evidence:fortinet-fortisase:27"]},{"sector":"transport_logistics","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_supported","qualification":"Unknown - not assessed, no case study found in this pass, though Fortinet's own customer-story index separately references an airport operator and a major bank's remote-ATM/5G deployment | Not assessed in detail | Not assessed | Referenced but not independently detailed in this pass (airport operator, bank ATM network) | N/A | Named but under-detailed references exist and weren't followed up individually in this research pass | A specific, worth-flagging follow-up opportunity - Fortinet's own materials reference relevant transport/financial-infrastructure customers that weren't fully explored in this pass.","named_evidence":"Referenced but not independently detailed in this pass (airport operator, bank ATM network)","evidence_source_ids":["evidence:fortinet-fortisase:26"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"education":false,"healthcare":false,"transport_logistics":false,"hospitality_leisure":false},"reviewed_at":"2026-09-30T15:45:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://fortinet.com/blog/customer-stories","https://fortinet.com/content/dam/fortinet/assets/ebook/eb-sase-customer-stories.pdf","https://www.fortinet.com/customers/the-guidance-center","https://www.fortinet.com/customers/indigo-airlines","https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","https://www.fortinet.com/content/dam/fortinet/assets/case-studies/cs-ihg.pdf"],"qualification":"Fortinet SASE customer-stories PDF page 10 documents an unnamed US school district with 375,000-plus users. Anonymous case only. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation. The Guidance Center is a California mental-health provider using FortiSASE, NOT an NHS organisation. IndiGo documents Secure SD-WAN at airport counters in India. UK Fortinet delivery is evidenced through BT managed service terms; it is partner-dependent, not a commitment from Fortinet or coverage of all UK/Ireland addresses. Recovered IHG primary PDF identifies 4,000 Secure SD-WAN locations and a global MSSP-delivered rollout. UK headquarters do not prove coverage of a particular UK estate. Savings and efficiency figures are forecasts, not measured completed outcomes.","sectors":{"education":"partial","healthcare":"yes","transport_logistics":"yes","hospitality_leisure":"yes"},"regions":{"uk_ireland":"partner_integrated"}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"partner_integrated","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":10,"research_metrics":{"supported":18,"partial":2,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":20,"total":40,"reviewed":20,"completeness_percent":50,"completeness":0.5},"proven_evidence_count":18,"response_panel":null,"best_for":"Healthcare; Transport and logistics; Hospitality and leisure; Education (partial evidence); Large global enterprise; both","best_for_fields":{"sectors_yes":["Healthcare","Transport and logistics","Hospitality and leisure"],"sectors_partial":["Education"],"regions":[],"size":["Large global enterprise"],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"juniper-networks","name":"Juniper Networks","website":"https://www.juniper.net","category":"technology vendor","product_focus":"Juniper AI-Native SD-WAN, Juniper Mist AI / Marvis AI, Juniper Secure Edge, Managed SD-WAN","cost_model":"Quote-based hardware/subscription/support; managed delivery via partners/providers.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"partial","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"partial","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"yes"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"yes","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_primary","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/juniper/","shortlist_summary":"Juniper Networks offer Mist AI with WAN Assurance, delivering AI-driven monitoring and troubleshooting at the WAN edge at a depth that few competitors match. Typically shortlisted by organisations where AIOps and network assurance quality are weighted evaluation criteria rather than SD-WAN feature breadth, and worth examining more closely than the overall score might suggest if AI-driven operations is a primary requirement.","key_differentiators":["Mist AI delivers WAN Assurance, providing AI-driven monitoring and troubleshooting at the WAN edge that few competitors match.","Strong story for buyers who want the WAN integrated with Mist-powered Wi-Fi and access network management.","Juniper SRX security platform integration provides native firewall capability for buyers standardised on Juniper."],"best_fit_for":["Enterprises already running Mist for Wi-Fi or access who want unified AI-driven operations across WAN and LAN.","Buyers prioritising observability and AI-assisted incident triage as a primary purchase criterion.","Organisations with strong network engineering capability who can take advantage of WAN Assurance telemetry."],"watch_outs":["Full SASE platform: partial evidence; CASB capability: not confirmed; Data loss prevention: not confirmed. Confirm the networking and SSE products and whether separate contracts or operators are required.","Managed delivery is via partners; first-party managed service is not the primary model.","Cloud on-ramp and private backbone capabilities are less prominent than dedicated SASE platforms."],"evidence_coverage_pct":0.475,"last_verified":"2026-09-01","evidence_source_count":40,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.juniper.net/us/en/services.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our highly trained experts, backed by AI-Native and automated insights, can help you design, deploy, and proactively manage your network to deliver seamless experiences for all. Juniper Services offers design, deployment and proactive management assistance, but the Juniper pages reviewed position end-to-end managed SD-WAN/SASE as something MSPs and service providers deliver using Juniper technology rather than something Juniper operates itself. The managed SD-WAN page is written to MSPs as the operator. No Juniper page reviewed described Juniper owning day-to-day operations, change execution and service reporting for a customer end to end. Graded partial rather than yes for that reason."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.juniper.net/us/en/solutions/sd-wan/managed-sd-wan.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"engineered specifically for forward-thinking MSPs ready to scale Juniper explicitly targets MSPs with its managed SD-WAN proposition, which is why this is not graded unknown. However none of the three specific tests in the definition were evidenced on pages reviewed: tenant isolation, delegated administration and branded (white-label) portals are not described. The Juniper Mist MSP dashboard documentation URL attempted returned HTTP 404, so multi-tenant administration could not be verified in this task."},"f07_lifecycle_management":{"source_url":"https://www.juniper.net/us/en/services.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Achieve simplicity and reliability at scale across your wired, wireless, and SD-WAN environments with AI-Native operations and support from Juniper Services, using AI for a comprehensive, proactive approach across the full network life cycle. Juniper claims a full network life cycle approach through Juniper Services. The specific components in the definition (hardware replacement/RMA, firmware upgrades, patching, renewals and end-of-life planning handled as part of the service) were not individually evidenced; the technical services page that would carry them returned HTTP 404 on attempt. Graded partial on that basis."},"f10_dynamic_path_selection":{"source_url":"https://juniper.net/content/dam/www/assets/white-papers/us/en/routers/ai-driven-sd-wan-secures-todays-cloud-era-networks.pdf","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via the platform's core, service-based routing architecture - 'sessions are delivered based on identity and context to relevant parties based on real-time policies' [10]"},"f18_cloud_on_ramp":{"source_url":"https://juniper.net/us/en/customers/ambifox-case-study.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a real, named customer deployment spanning two distinct named hyperscalers [25]"},"f19_public_cloud_gateways":{"source_url":"https://www.juniper.net/us/en/solutions/sase.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"full-stack Security Service Edge (SSE) and SD-WAN capabilities that leverage the power of the cloud to optimize both the network and the security experience Juniper operates its own cloud-delivered SSE (Juniper Secure Edge, managed by Juniper Security Director Cloud), so this is Juniper's own service infrastructure rather than a third party's resold platform. Graded partial not yes because no page reviewed named the gateway or PoP locations, the number of locations, or which capabilities (SaaS optimisation, remote access, security enforcement) are enforced at Juniper-operated PoPs. Attempts to reach the Juniper Secure Edge product page redirected to an HPE store page that returned Product Not Found, and the Secure Edge documentation guide URLs returned 404/403."},"f23_multi_cloud_transit_fabric":{"source_url":"https://juniper.net/us/en/customers/ambifox-case-study.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a real, named customer deployment spanning two distinct named hyperscalers [25]"},"f24_flexible_edge_form_factors":{"source_url":"https://juniper.net/us/en/products/routers/session-smart-router.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as genuinely flexible - the Session Smart Router runs as a software-based solution on dedicated Juniper SSR-series hardware, white-box customer-premises equipment, data-centre network servers, or the public cloud [14]"},"f27_integrated_next_generation_firewall":{"source_url":"https://juniper.net/us/en/solutions/sd-wan/managed-sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and confirmed with specific technical detail [15]"},"f28_full_sase_platform":{"source_url":"https://juniper.net/us/en/solutions/secure-ai-native-edge.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Partially confirmed - Universal Zero Trust Network Access (UZTNA) is explicitly described by Juniper's own materials as setting 'the vision for Juniper's view of... UZTNA to address customer needs in the future', a stated roadmap direction rather than a confirmed, fully-realised, currently-shipping capability [11] [17] Explicitly framed as a future-facing vision in Juniper's own primary materials"},"f30_zero_trust_network_access":{"source_url":"https://juniper.net/us/en/solutions/secure-ai-native-edge.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Partially confirmed - Universal Zero Trust Network Access (UZTNA) is explicitly described by Juniper's own materials as setting 'the vision for Juniper's view of... UZTNA to address customer needs in the future', a stated roadmap direction rather than a confirmed, fully-realised, currently-shipping capability [11] [17] Explicitly framed as a future-facing vision in Juniper's own primary materials"},"f36_centralised_orchestration":{"source_url":"https://juniper.net/us/en/customers/ambifox-case-study.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - the platform 'supports zero-touch installation and provisioning for fast setup and administration-with no site visits', evidenced via a real, named customer deployment [25]"},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://juniper.net/content/dam/www/assets/white-papers/us/en/routers/session-smart-routing-how-it-works.pdf","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, via the confirmed SLE architecture (Table 3, 10) [13] Technical depth beyond the named SLE capability itself not itemised in full"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:6302afddee37a3625fa05be4","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US, now HPE). UK channel and delivery via partners and MSPs.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":11,"research_metrics":{"supported":13,"partial":6,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":21,"total":40,"reviewed":19,"completeness_percent":48,"completeness":0.475},"proven_evidence_count":13,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"orange-business","name":"Orange Business","website":"https://www.orange-business.com","category":"carrier network provider / integrator","product_focus":"Orange Business Evolution Platform, Orange Business SASE with Palo Alto Networks Prisma SASE, Orange Business and Fortinet SASE, Orange Cyberdefense Managed SASE","cost_model":"Quote-based managed service; costs driven by access circuits, countries, vendor platform, security services and SLAs.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"partner_integrated","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"yes"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":400,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/orangebusiness/","shortlist_summary":"Orange Business is the enterprise services arm of Orange S.A., one of the largest telecommunications groups in Europe, headquartered in France and listed on Euronext Paris. Orange Business itself traces its lineage to Equant and Global One before being formally established on 1 June 2006, and was renamed from Orange Business Services to Orange Business on 16 February 2023; Frédéric Schepens serves as CEO (appointed July 2024), leading approximately 30,000 employees.","key_differentiators":["Global managed network leadership with strong service assurance, NOC depth and field operations.","Multi-vendor managed SD-WAN and SASE delivery (including Palo Alto Networks managed SASE via Orange Cyberdefense).","Strong UK and EMEA presence with established enterprise managed service track record."],"best_fit_for":["Multinational enterprises wanting a single global managed provider for SD-WAN, SASE and access.","Buyers prioritising service ownership, RCA quality and change governance over best-of-breed platform selection.","Organisations needing access circuit sourcing alongside SD-WAN platform delivery."],"watch_outs":["Platform choice depends on which Orange-supported vendor is selected; underlying platform fit and roadmap should be evaluated independently.","Commercial model is bespoke; rate cards and change costs need careful scoping.","DIY/self-managed model is not the primary positioning."],"evidence_coverage_pct":0.475,"last_verified":"2026-09-01","evidence_source_count":36,"capability_evidence":{"f07_lifecycle_management":{"source_url":"https://www.orange-business.com/en/solutions/internet-networks/flexible-sd-wan-international","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our Service Level Agreements (SLAs) guarantee 100% site availability and quick issue resolution within five hours. Break-fix and repair commitments are documented (five hour issue resolution on Flexible SD-WAN, \"4-hour guaranteed time to repair (GTTR)\" on Galerie, \"5 hour Guaranteed Time To Repair\" on Business VPN), and Orange performs on-site installation. No page reviewed states that firmware upgrades, patching, licence renewals or end-of-life planning are included in the service, so this is graded partial rather than yes."},"f10_dynamic_path_selection":{"source_url":"https://documentation.evolutionplatform.orange-business.com/docs/services/networking/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'adaptive routing mechanisms' and 'centralized controllers to direct network traffic in an intelligent and efficient manner'"},"f12_application_aware_routing":{"source_url":"https://documentation.evolutionplatform.orange-business.com/docs/services/networking/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'centralized controllers to direct network traffic in an intelligent and efficient manner... to make the most of your network resources'"},"f13_qos_and_traffic_shaping":{"source_url":"https://documentation.evolutionplatform.orange-business.com/docs/services/networking/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'dynamic bandwidth management' named explicitly"},"f17_cellular_and_5g_support":{"source_url":"https://orange-business.com/en/products/categories/internet-and-networks","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'wireless options' named explicitly as a supported underlay type"},"f18_cloud_on_ramp":{"source_url":"https://documentation.evolutionplatform.orange-business.com/docs/services/networking/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'SD-WAN also simplifies cloud connectivity, seamlessly integrating your cloud services with your network' Specific, named hyperscaler cloud on-ramp partnerships weren't itemised by name"},"f19_public_cloud_gateways":{"source_url":"https://www.orange-business.com/en/solutions/internet-networks/business-vpn-internet","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Orange Business has invested in 16 global Internet gateways on five continents. These are Orange's own gateways, not a third party's: \"These distributed Internet gateways break traffic out closer to the user to eliminate the latency caused by the long physical distances between the user, the gateway and the destination web site.\" Orange also publishes \"400 Points of Presence globally\" and operates the Galerie cloud gateway service. Caveat: the security enforcement running in the SASE PoPs is partner technology (Palo Alto Networks, Fortinet), so the gateway estate is Orange's own but the security stack inside it is not."},"f21_private_global_backbone":{"source_url":"https://www.orange-business.com/en/solutions/network-solutions","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Orange Business uses its own network to create the digital services of tomorrow. Corroborated by the Galerie statement that \"Your sites, traffic and data are not exposed to the public Internet\", by the network solutions page claim \"#1 Global voice and data network\", by \"400 Points of Presence globally\" and by \"global reach covering 220 countries and territories\". This is a genuinely international backbone rather than a single-country network."},"f23_multi_cloud_transit_fabric":{"source_url":"https://documentation.evolutionplatform.orange-business.com/docs/services/networking/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'SD-WAN also simplifies cloud connectivity, seamlessly integrating your cloud services with your network' Specific, named hyperscaler cloud on-ramp partnerships weren't itemised by name"},"f26_sla_backed_service_fabric":{"source_url":"https://www.orange-business.com/en/solutions/internet-networks/flexible-sd-wan-international","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our Service Level Agreements (SLAs) guarantee 100% site availability and quick issue resolution within five hours. Availability and time-to-repair commitments are published across Flexible SD-WAN, Business VPN (\"99.95% site availability\" and \"5 hour Guaranteed Time To Repair\") and Galerie (\"Orange Business commits to 100% Galerie availability and 4-hour guaranteed time to repair (GTTR)\"). Latency, jitter and loss commitments and change-handling SLAs were not found on the pages reviewed."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.orange-business.com/en/solutions/security/secure-gateway","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Secure Gateway consists of a new-generation firewall at the heart of the service The firewall function is present but the technology belongs to third parties Orange resells and manages. The Secure Gateway page names Fortinet and Palo Alto as its partners, the Fortinet partner page states \"Orange Business has chosen Fortinet Secure SD-WAN to enhance the Flexible SD-WAN offering, providing clients of all sizes worldwide with a security-focused solution\", and the Palo Alto press release names \"Prisma® SASE (Prisma Access + Prisma SD-WAN)\". Orange authors the management and service wrapper, not the firewall engine, hence partner_integrated rather than yes."},"f31_secure_web_gateway":{"source_url":"https://orange-business.com/en/news-and-events/articles/orange-powers-digital-trust-sase-sd-wan-strategies","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'augmenting industry-leading SSE capabilities from partners such as Netskope, Palo Alto, Zscaler, and Fortinet' Specific platform-by-platform packaging detail not itemised"},"f40_managed_service_assurance":{"source_url":"https://www.orange-business.com/en/solutions/security/secure-gateway","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Personalized services fully managed and supervised by our experts 24x7 Corroborated by \"Managed Firewall is ISO 20000 certified, and our SOCs are 27001 certified\" on the same page, by \"24/7/365 continuous monitoring of security systems worldwide\" and \"3,000+ multi-skilled cybersecurity experts\" on the Belgian SASE page, and by \"6 Major Service Centers covering all continents\" on the network solutions page. Round-the-clock NOC and SOC monitoring is well evidenced; formal root cause analysis ownership and structured service review or change governance are not explicitly stated on the pages reviewed, hence medium confidence."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:6d1e16776f3ed56135779cac","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"partial","education":"partial","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_entity","curated_uk_basis":"UK contracting entity (Orange Business UK) of a French parent, with UK delivery.","sector_review_queue":[{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, genuinely the best-evidenced sector in this entire profile | Confirmed global SD-WAN deployment directly supporting a genuinely major industrial conglomerate's broader cloud-migration and digitisation strategy | Not assessed for sector-specific frameworks | Siemens - named, major global industrial conglomerate, named Orange executive quote (John Isch, Director, Connectivity Solutions for the Americas), confirmed as a long-standing partnership | Global, implied via Siemens' own confirmed global operations | The confirmed case study is dated (2022); current-state deployment specifics weren't independently re-confirmed | A real, named, individually-attributable customer reference - genuinely strong evidence of large-enterprise deployment capability, reinforced by a named executive quote describing a long-standing, strategic partnership.","named_evidence":"Siemens - named, major global industrial conglomerate, named Orange executive quote (John Isch, Director, Connectivity Solutions for the Americas), confirmed as a long-standing partnership","evidence_source_ids":[]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"manufacturing":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.orange-business.com/en/press/orange-business-services-delivers-flexible-sd-wan-siemens-worldwide-majority-corporate"],"qualification":"Recovered Orange Siemens release confirms Cisco-based Flexible SD-WAN at corporate locations. No manufacturing-OT suitability or UK quote inference. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"manufacturing":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":12,"research_metrics":{"supported":16,"partial":2,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":21,"total":40,"reviewed":19,"completeness_percent":48,"completeness":0.475},"proven_evidence_count":16,"response_panel":null,"best_for":"Manufacturing; Large global enterprise; managed","best_for_fields":{"sectors_yes":["Manufacturing"],"sectors_partial":[],"regions":[],"size":["Large global enterprise"],"service_model":"managed","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"bt-business","name":"BT","website":"https://business.bt.com/networks-digital-services/sd-wan","category":"managed service provider / carrier network provider","product_focus":"Agile Connect, BT Managed Fortinet Firewall, BT Managed SASE (Fortinet-based), BT Managed SASE (Meraki-based)","cost_model":"Quote-based managed service; includes access, CPE, vendor stack and service tier options.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_hq","uk_basis":"BT Group plc is headquartered at 1 Braham Street, London; UK managed SD-WAN is published by BT Business.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"partial","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"partner_integrated","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"partial","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"partner_integrated","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"partial","f38_observability_and_digital_experience_monitoring":"partial","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"yes","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"yes","retail_ecommerce":"not_confirmed","manufacturing":"not_primary","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":140,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"yes","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/bt/","shortlist_summary":"BT is not a single-platform SASE company, but the UK’s largest telecommunications operator and managed service provider, delivering SASE as one service line within a vastly larger, publicly-listed (LSE: BT.A) group.","key_differentiators":["UK market leader for managed SD-WAN with deep access circuit ownership and field engineering capability.","Multi-vendor platform support (Cisco, VMware/Broadcom, Fortinet, Palo Alto, Meraki) gives buyers platform choice within one managed service.","Strong global SD-WAN and SASE delivery via BT Global for multinational requirements."],"best_fit_for":["UK enterprises wanting a single supplier for SD-WAN platform, access circuits, security and field operations.","Multinational organisations with a UK headquarters needing global delivery via BT Global.","Buyers prioritising underlay accountability and field engineering depth alongside SD-WAN delivery."],"watch_outs":["Platform choice and packaging vary; buyers should confirm which vendor platform is being proposed and why.","DIY/self-managed model is not BT's primary positioning.","Co-managed model and customer control boundaries should be confirmed via RACI and portal demo."],"evidence_coverage_pct":0.45,"last_verified":"2026-09-01","evidence_source_count":30,"capability_evidence":{"f09_encrypted_overlay_fabric":{"source_url":"https://business.bt.com/content/dam/bt-business/pdfs/networks-cloud-digital-services/sd-wan/bt-secure-sd-wan-datasheet.pdf","reviewed_at":"2026-10-01","review_due":"2026-12-30T00:00:00Z","qualification":"BT describes an accelerated IPsec overlay in its managed Fortinet Secure SD-WAN service. BT Secure SD-WAN uses Fortinet IPsec tunnels between branches, data centres and cloud. This evidence applies to that service option; confirm the platform, scope and throughput in the proposal."},"f10_dynamic_path_selection":{"source_url":"https://business.bt.com/networks-digital-services/sd-wan-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'elastic SD-WAN' dynamically steers traffic, and 'traffic is prioritised from your devices to the SASE cloud node, avoiding public internet congestion' [5] [6]"},"f17_cellular_and_5g_support":{"source_url":"https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Active-Active Mobile Data Access is only available over 5G where 5G is available to you. 5G and 4G are contractually defined transport, with a fallback ladder: the annex defines Mobile Network as a 5G or 4G communication network, 4G where 5G is not available and 3G where 4G is not available. SIM management is covered both ways, with a Customer Managed Mobile Data Access option where the customer provides the SIM. Two caveats worth carrying: Part B limits BT-provided Mobile Data Access to UK sites only, and BT explicitly disclaims mobile network degradation, congestion and interference. Signal monitoring specifically is not evidenced."},"f19_public_cloud_gateways":{"source_url":"https://business.bt.com/content/dam/bt-business/pdfs/terms-and-conditions/service-schedules/BT-fortinet-SD-WAN-service-schedule-part-B-31-01-2025-v3.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The service is only available with the FortiSASE PoPs plus selected PoPs. This is the key ownership call. The cloud security enforcement points are Fortinet's FortiSASE PoPs, not BT infrastructure, so partner_integrated rather than yes. Computer Weekly (Tier 2, named author, dated) confirms the SSE functions of firewall as a service, secure web gateway, CASB and ZTNA come from Fortinet technology. Do not confuse this with BT's Global Fabric PoPs, which BT does operate itself but which are a cloud interconnect fabric rather than a SaaS optimisation or security enforcement gateway service."},"f21_private_global_backbone":{"source_url":"https://newsroom.bt.com/bts-global-fabric-goes-live-with-customer-traffic/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Global Fabric will be available to customers internationally via 140 PoPs hosted in the world's top cloud locations located in 40 countries. Graded partial, and the reason matters. BT clearly operates a genuinely global, BT-controlled PoP footprint across 40 countries and markets it as deterministic in contrast to the public internet, which is more than a single-country network. What I could not evidence from any Tier 1 or Tier 2 source is that BT owns the inter-region fibre between those PoPs. Analysys Mason (Tier 3, so it cannot carry a grade) states the opposite, that Global Fabric rides partner fibre networks. That unresolved gap between control of the platform and ownership of the transmission caps this at partial. Recorded in conflicts. Note also that Global Fabric is a separate product from the Fortinet SD-WAN/SASE service and the schedules do not place SASE traffic on it."},"f27_integrated_next_generation_firewall":{"source_url":"https://newsroom.bt.com/bt-launches-a-new-managed-sase-service-powered-by-fortinet/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Fortinet Next-Generation Firewalls provide enterprise security at any edge, and at any scale on all WAN and LAN traffic as it passes through. The NGFW is Fortinet's technology that BT bundles and manages, so partner_integrated by definition even though it is tightly integrated into BT's managed service. The Managed Fortinet annex refers to 'Fortinet Security Options' configured against agreed design with applicable licence subscriptions, confirming a licensed third-party stack. The functional elements are evidenced: the Managed Cisco SD-WAN annex documents URL filtering by whitelist, blacklist, category and reputation, and Computer Weekly confirms firewall as a service alongside SWG, CASB and ZTNA. BT also offers Palo Alto Prisma and VMware variants, so the underlying firewall vendor varies by build."},"f28_full_sase_platform":{"source_url":"https://business.bt.com/networks-digital-services/sd-wan-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine sector-specific detail - explicitly named for financial services as 'secure, identity-based access through ZTNA' supporting data residency [5] [6]"},"f30_zero_trust_network_access":{"source_url":"https://business.bt.com/networks-digital-services/sd-wan-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine sector-specific detail - explicitly named for financial services as 'secure, identity-based access through ZTNA' supporting data residency [5] [6]"},"f31_secure_web_gateway":{"source_url":"https://newsroom.bt.com/bt-launches-a-new-managed-sase-service-powered-by-fortinet/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as part of the current, Fortinet-based managed SASE expansion [2] Capability specifics depend on which underlying platform (Fortinet vs. Meraki) is proposed"},"f32_casb_capability":{"source_url":"https://business.bt.com/networks-digital-services/sd-wan-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine sector-specific detail - explicitly named for retail, combined with elastic SD-WAN 'to dynamically steer traffic and safeguard payment and customer data' [5] [6] Specific inline-versus-API-mode technical detail not itemised"},"f12_application_aware_routing":{"source_url":"https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"Fortinet annex clause 2.5 documents application-aware routing. BT implements agreed categories; two enabling links optimise operation."},"f24_flexible_edge_form_factors":{"source_url":"https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"Physical and virtual SD-WAN devices are documented. Cloud deployment and customer-provided devices depend on the order and compatibility."},"f11_active_active_link_utilisation":{"grade":"partial","source_url":"https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"Active-active mobile access is an optional 5G service. This does not establish active-active operation across all access types."},"f37_customer_portal_and_rbac":{"grade":"partial","source_url":"https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"Customer monitoring and reporting portals are documented in clauses 2.3 and 2.8. Granular role-based permissions remain unconfirmed."},"f38_observability_and_digital_experience_monitoring":{"grade":"partial","source_url":"https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"The portal exposes application performance, flows and troubleshooting. These findings do not establish a full digital experience monitoring service."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:59b8c21f282ae65477c1c3f8","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"partial","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"not_confirmed","transport_logistics":"yes","professional_services":"partial","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"uk_hq","curated_uk_basis":"UK headquartered (BT Group). UK contract holder with owned UK access, UK NOC and SOC, and named UK support.","sector_review_queue":[{"sector":"financial_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | ZTNA-based identity-first access, data-residency support via localised traffic paths, and a real, detailed (anonymised) case study directly in this sector | PCI DSS and DORA not independently confirmed (Table 13), though data residency is confirmed directly for this sector specifically | A real, detailed, primary-sourced (anonymised) global financial-services customer case study, describing Agile Connect plus BT Managed Fortinet Firewall deployment | Multi-country deployment confirmed directly in the case study | The named certification gaps (PCI DSS, DORA) are worth flagging directly for this specific sector | Genuinely the best-evidenced sector in this entire profile - both specific, named sector-relevant product positioning (ZTNA, data residency) and a real, detailed case study exist together, even without the customer's name disclosed.","named_evidence":"A real, detailed, primary-sourced (anonymised) global financial-services customer case study, describing Agile Connect plus BT Managed Fortinet Firewall deployment","evidence_source_ids":["evidence:bt:6","evidence:bt:17"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{},"reviewed_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://business.bt.com/insights/case-studies/financial-services-sd-wan/","https://business.bt.com/networks-digital-services/sd-wan-sase/sase/","https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","https://www.bt.com/about/contact-bt","https://find-and-update.company-information.service.gov.uk/company/04190816","https://business.bt.com/networks-digital-services/sd-wan/"],"qualification":"BT documents managed Agile Connect SD-WAN and Fortinet Firewall for a global banking organisation. Does not verify DORA/PCI compliance or a manufacturing deployment.  BT publishes UK managed SASE infrastructure and a Managed Fortinet SD-WAN annex defining Territory as UK. This establishes UK offering, not every UK or Irish address, a specific contracting arrangement or Netify response commitment. Combined UK/Ireland region stays partial. UK review update (supersedes earlier UK-region qualification): UK headquarters and a published UK SD-WAN offering are confirmed. This is not a quote, site serviceability check or confirmation of the legal entity signing a particular order. The combined UK/Ireland yes flag records UK delivery evidence; Irish coverage must be checked separately.","sectors":{"financial_services":"yes"},"regions":{"uk_ireland":"yes"}}},"uk_evidence":{"entity":{"status":"evidenced","name":null,"source_urls":["https://business.bt.com/insights/case-studies/financial-services-sd-wan/","https://business.bt.com/networks-digital-services/sd-wan-sase/sase/","https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","https://www.bt.com/about/contact-bt","https://find-and-update.company-information.service.gov.uk/company/04190816","https://business.bt.com/networks-digital-services/sd-wan/"],"checked_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","qualification":"BT Group plc is headquartered at 1 Braham Street, London; UK managed SD-WAN is published by BT Business."},"regional_delivery":{"status":"yes","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":13,"research_metrics":{"supported":11,"partial":4,"partner_delivered":3,"managed_service_dependent":0,"not_primary":0,"unconfirmed":22,"total":40,"reviewed":18,"completeness_percent":45,"completeness":0.45},"proven_evidence_count":11,"response_panel":null,"best_for":"Financial services; UK and Ireland; managed","best_for_fields":{"sectors_yes":["Financial services"],"sectors_partial":[],"regions":["UK and Ireland"],"size":[],"service_model":"managed","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"uk_hq","label":"UK headquartered","source_urls":["https://business.bt.com/insights/case-studies/financial-services-sd-wan/","https://business.bt.com/networks-digital-services/sd-wan-sase/sase/","https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","https://www.bt.com/about/contact-bt","https://find-and-update.company-information.service.gov.uk/company/04190816","https://business.bt.com/networks-digital-services/sd-wan/"],"reviewed_at":"2026-09-30T19:56:00Z","qualification":"BT Group plc is headquartered at 1 Braham Street, London; UK managed SD-WAN is published by BT Business."}},{"slug":"forcepoint","name":"Forcepoint","website":"https://www.forcepoint.com/product/secure-sd-wan","category":"technology vendor","product_focus":"AI Mesh / Getvisibility, ARIA, Field Programmable SASE Logic (FPSL), FlexEdge Secure SD-WAN","cost_model":"Quote-based appliances/software/subscriptions; managed SD-WAN positioned but pricing public transparency limited.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"partial","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"partial","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"yes","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_primary","financial_services":"not_primary","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"not_primary","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/forcepoint/","shortlist_summary":"Forcepoint’s identity traces back to Websense, founded in 1994, and its whole platform is built around a data-first philosophy rather than a network- or device-first one - the pitch is that policy should follow the data itself, not the network path or the device it happens to be on. That heritage shows up as real, credible analyst recognition specifically for data loss prevention: Frost & Sullivan’s Global DLP Company of the Year for two consecutive years, an IDC MarketScape Leader placement for worldwide DLP in 2025, and a Forrester Wave Strong Performer placement for data security platforms in Q1 2025.","key_differentiators":["FlexEdge Secure SD-WAN combines secure SD-WAN with strong DLP and data security heritage from the wider Forcepoint portfolio.","MultiLink resilience and zero-touch deployment with cloud central management.","Strong story for buyers prioritising data security and DLP as a procurement criterion."],"best_fit_for":["Enterprises with strong data protection and DLP requirements (regulated industries, government).","Organisations wanting secure SD-WAN where data security is the primary decision driver.","Buyers consolidating DLP with SD-WAN under one vendor."],"watch_outs":["Smaller SD-WAN market presence than the leading platforms.","Full SASE platform: supported. Confirm the included networking and security products, licences and service scope.","Managed delivery is partner-led; co-managed and white-label support require partner validation."],"evidence_coverage_pct":0.45,"last_verified":"2026-09-01","evidence_source_count":61,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.forcepoint.com/resources/datasheets/flexedge-secure-sd-wan-manager","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Forcepoint Administrative Domain License enables multiple customer environments to be managed through a single management server. The SD-WAN Manager datasheet evidences tenant isolation and delegated administration: it also states 'Allows division of the environment into isolated configuration domains' and names MSSPs directly. Graded partial rather than yes because no evidence of branded or white-label portals was found on any page reviewed, and the partner programme page contains no MSP, MSSP, white label or multi-tenant terms."},"f05_professional_services_and_migration_support":{"source_url":"https://www.forcepoint.com/services/implementation-packages","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Resources and deliverables aligned to your deployment needs and timeline Packaged implementation services and consulting are published, and the Cybersecurity Services page lists 'Implementation Packages for our award-winning products' and 'Data Security Consulting customized to your organization's needs'. Graded partial because the pages reviewed do not describe discovery, pilots, staging, migration runbooks or rollback plans."},"f07_lifecycle_management":{"source_url":"https://www.forcepoint.com/resources/datasheets/forcepoint-technical-support-offerings","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Next Generation Firewall (NGFW) appliances (both N and S-series) now have RMA support included Hardware replacement is included in the support contract, with an option to 'upgrade to next business day or same day RMA service'. The SD-WAN Manager datasheet adds 'Upgrades and dynamic update packages for managed devices can be automatically downloaded' and 'Remote Upgrades One-click fail-safe remote upgrade of the managed engines'. Graded partial because upgrades and patching are customer-executed platform features rather than work performed for the customer as part of a service, and no end-of-life planning service was found."},"f17_cellular_and_5g_support":{"source_url":"https://www.forcepoint.com/resources/datasheets/forcepoint-ngfw-120-series-appliance","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"For LTE without Wi-Fi, Forcepoint offers the 120L model with LTE support and 125L model with LTE/5G support. The 120 Series datasheet also states 'Optional Wi-Fi and LTE/5G connectivity' and lists supported LTE and 5G NR band tables, so integrated cellular is a shipped hardware capability. SIM management and signal monitoring specifics were not located in the pages reviewed."},"f26_sla_backed_service_fabric":{"source_url":"https://www.forcepoint.com/resources/datasheets/forcepoint-technical-support-offerings","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"24/7 availability for your most critical issues. The Technical Support Offerings datasheet publishes tiered severity response targets ('Severity 1 1 hour' for Essential, 'Severity 1 45 minutes' for Enhanced, 'Severity 1 30 minutes' for Enterprise) and states 'Severity 1 issues use a follow-the-sun approach; Forcepoint technicians are always available'. Graded partial because these are support response commitments only: no uptime percentage, and no latency, jitter, loss or change handling commitments were found in the pages reviewed."},"f32_casb_capability":{"source_url":"https://forcepoint.com/sites/default/files/resources/brochures/whitepaper_forcepoint_one_differentiation_en_0_0_0_0_0.pdf","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed explicitly alongside inline modes [10]"},"f33_data_loss_prevention":{"source_url":"https://forcepoint.com/use-case/incident-and-breach-response","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed - Forcepoint DLP provides 'continuous monitoring' across data at rest, in use, and in transit, per Forcepoint's own materials and independent analyst recognition [36]"},"f34_remote_user_access":{"source_url":"https://forcepoint.com/sites/default/files/resources/brochures/whitepaper_forcepoint_one_differentiation_en_0_0_0_0_0.pdf","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via the CASB/SWG gateway architecture supporting unmanaged devices without requiring an agent [10]"},"f36_centralised_orchestration":{"source_url":"https://cyberdefensemagazine.com/innovator-spotlight-forcepoints-data-security-cloud-redefining-data-protection-in-the-ai-era/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Confirmed as part of ARIA's function - assists in 'creating, refining, and enforcing data protection policies' [25] Same as above"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:e03c3fdaf8448bdd3558a0fd","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"partial","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). UK delivery via security partners; government and defence heritage suits UK public sector.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":14,"research_metrics":{"supported":14,"partial":4,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":22,"total":40,"reviewed":18,"completeness_percent":45,"completeness":0.45},"proven_evidence_count":14,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"gtt","name":"GTT","website":"https://www.gtt.net/services/secure-networking/managed-sd-wan","category":"hybrid provider","product_focus":"GTT Envision, GTT Managed SD-WAN, GTT Secure Connect, Secure Connect with HPE (Aruba/EdgeConnect/SSE)","cost_model":"Quote-based managed service; GTT public page answers cost only as consultative/requirement-based.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"yes","f33_data_loss_prevention":"partner_integrated","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"yes","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":400,"sla_availability_pct":99.99,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/gtt/","shortlist_summary":"GTT Communications is a specialist, purely networking-and-security-focused global provider rather than a diversified telecom conglomerate with mobile, broadband, and media businesses attached. Founded in 1998, listed on the NYSE in 2013, renamed GTT Communications in January 2014, and now headquartered in Arlington, Virginia, GTT operates a global Tier 1 IP backbone spanning more than 600 points of presence and connecting more than 3,500 cities.","key_differentiators":["Tier 1 global backbone provides strong international transit capability alongside managed SD-WAN.","Vendor-agnostic SD-WAN delivery (multiple platform options) with the Envision management platform.","Recognised as a leader for SASE and managed SD-WAN by industry analysts."],"best_fit_for":["Multinational enterprises needing strong international backbone alongside managed SD-WAN.","Buyers wanting platform flexibility within a managed service.","Organisations consolidating global transit, SD-WAN and SASE under one provider."],"watch_outs":["SASE depth depends heavily on the chosen platform partner; native SSE capabilities are not primary positioning.","Security stack is largely partner-integrated.","Commercial model is consultative; ensure cost lines for managed changes, security and SLAs are explicit."],"evidence_coverage_pct":0.45,"last_verified":"2026-09-01","evidence_source_count":37,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.gtt.net/services/secure-networking/managed-sd-wan/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"We manage the underlay (network) and the cloud-based overlay (SD-WAN) as a unified service GTT positions Managed SD-WAN as an end to end managed service covering circuit installation, hardware delivery, zero touch provisioning and 24/7/365 proactive monitoring under one bill and one support team. Corroborated by the GTT SD-WAN datasheet (register 18, Tier 3 host) which states GTT experts design, implement, install and optimise the service."},"f07_lifecycle_management":{"source_url":"https://www.gtt.net/envision/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Lifecycle operations for SD-WAN/SASE, internet, voice, cloud connect, plus performance tuning and change control GTT Envision advertises lifecycle operations and change control, and Professional Services covers 'throughout the lifecycle of your deployment'. Graded partial because exact string checks on the Managed SD-WAN page returned ABSENT for both 'firmware' and 'hardware replacement', and no published statement was found on patching, renewals or end of life planning being included in the service."},"f09_encrypted_overlay_fabric":{"source_url":"https://www.gtt.net/resources/glossary/what-is-sd-wan-meaning-benefits-how-it-works/","reviewed_at":"2026-10-01","review_due":"2026-12-30T00:00:00Z","qualification":"GTT describes its managed SD-WAN service and encrypted connectivity. GTT documents encrypted connectivity within its managed SD-WAN offering. Confirm the selected technology, tunnel configuration, resilience and throughput for each site."},"f10_dynamic_path_selection":{"source_url":"https://gtt.net/resources/glossary/what-is-sd-wan-meaning-benefits-how-it-works/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'SD-WAN dynamically routes traffic across any connection based on real-time performance and policy' [10]"},"f12_application_aware_routing":{"source_url":"https://gtt.net/resources/glossary/what-is-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'SD-WAN intelligently manages traffic across multiple network paths using centralized policies and real-time performance data' [7]"},"f13_qos_and_traffic_shaping":{"source_url":"https://gtt.net/resources/glossary/what-is-sd-wan-meaning-benefits-how-it-works/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'centralized control, visibility and built-in security, making it more scalable and cloud-friendly' [10]"},"f17_cellular_and_5g_support":{"source_url":"https://www.gtt.net/services/managed-networking/internet/5g-services/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Dual SIM capability allows automatic switching between carrier networks during localized outages GTT publishes a 5G Fixed Wireless Access service supporting primary and failover use ('Deploy automatic failover for primary circuits'), multi-carrier SIM handling, and feeding 'reliable underlay connectivity into SD-WAN and SASE architectures'. The Managed SD-WAN page lists access types 'fiber, broadband, 4G/5G'. Signal monitoring specifically was not evidenced."},"f21_private_global_backbone":{"source_url":"https://www.gtt.net/services/secure-networking/managed-sd-wan/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"GTT owns and operates one of the world's largest global Tier 1 IP backbones GTT is a Tier 1 IP transit operator. The Fortinet press release (register 16) describes a 'top-ranked, global, Tier 1 IP backbone, which spans more than 260 cities on six continents', and the Connect page claims the '4th largest global IP backbone'. This is genuinely global rather than single-country, so yes rather than partial."},"f25_high_availability_design":{"source_url":"https://businesswire.com/news/home/20250318895249/en/Radisson-Hotel-Group-Selects-GTT-for-Global-SASE-Deployment","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and genuinely well-evidenced via a real, named customer example - 'wireless access for enhanced business continuity and resiliency', reinforced by confirmed '24/7 monitoring' [16]"},"f27_integrated_next_generation_firewall":{"source_url":"https://gtt.net/services/secure-networking/sase-secure-connect/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Firewall-as-a-Service (FWaaS)' named explicitly, reinforced by a confirmed 'Managed Firewall at branch locations' specifically for the Radisson deployment [9] [16]"},"f30_zero_trust_network_access":{"source_url":"https://businesswire.com/news/home/20250318895249/en/Radisson-Hotel-Group-Selects-GTT-for-Global-SASE-Deployment","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and repeatedly by name - 'Zero Trust Network Access' named explicitly across multiple sources, including the confirmed Radisson deployment specifically [3] [16]"},"f32_casb_capability":{"source_url":"https://businesswire.com/news/home/20250318895249/en/Radisson-Hotel-Group-Selects-GTT-for-Global-SASE-Deployment","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Cloud Access Security Broker' named explicitly, and confirmed directly again as 'Cloud Access Service Brokerage' in the named Radisson case study [3] [16] Specific inline-versus-API-mode technical detail not itemised"},"f33_data_loss_prevention":{"source_url":"https://www.gtt.net/services/secure-networking/cloud-security/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"prevents sensitive data from being exposed or exfiltrated by identifying, monitoring, and GTT's Cloud Security page lists 'Data Loss Protection (DLP)' as one of six SSE services, and the CASB page states it leverages data loss prevention technologies. Graded partner_integrated because the SSE stack is explicitly Fortinet and Palo Alto Networks technology per the SASE page. Alerting and exception workflow detail was not found. Quote is a verified substring of the DLP service description; the full sentence continues with enforcing policies on data across users, devices, applications, and networks."},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://businesswire.com/news/home/20250318895249/en/Radisson-Hotel-Group-Selects-GTT-for-Global-SASE-Deployment","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name via the specifically-named EnvisionDX platform component - 'DX' framing itself directly implies digital-experience-monitoring focus, reinforced by confirmed '24/7 monitoring and access to ticketing support' for the named Radisson deployment [16]"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:42a49360534e96d4228b2a27","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"partial","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"not_confirmed","transport_logistics":"yes","professional_services":"partial","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_entity","curated_uk_basis":"UK contracting entity with UK operations on a Tier 1 backbone; UK and EMEA delivery is established.","sector_review_queue":[{"sector":"hospitality_leisure","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, genuinely the best-evidenced sector in this entire profile | Confirmed global managed SD-WAN and distributed security architecture (FWaaS, SWG, CASB, ZTNA) directly deployed and confirmed operational across a real, named, large-scale hospitality customer | Not assessed for sector-specific frameworks, though PCI DSS relevance is high given payment-card handling typical of this sector, and was not independently confirmed (Table 13) | Radisson Hotel Group - named, major global hospitality brand, named senior customer executive quote (Adolfo Sanchez, SVP & CIO), 800-plus hotels and offices across four regions, extensively corroborated across at least eight independent publications | Asia-Pacific, Europe, Middle East, Africa, confirmed directly | The confirmed PCI DSS gap is a specific, worth-flagging limitation for this sector specifically, given typical payment-card handling requirements | Genuinely one of the strongest sector-fit findings in this entire profile - a real, detailed, large-scale, extensively-corroborated named case study with a senior customer executive quote.","named_evidence":"Radisson Hotel Group - named, major global hospitality brand, named senior customer executive quote (Adolfo Sanchez, SVP & CIO), 800-plus hotels and offices across four regions, extensively corroborated across at least eight independent publications","evidence_source_ids":["evidence:gtt:16","evidence:gtt:17"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"hospitality_leisure":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://businesswire.com/news/home/20250318895249/en/Radisson-Hotel-Group-Selects-GTT-for-Global-SASE-Deployment","https://gtt.net/about-us/press-releases/radisson-hotel-group-selects-gtt-for-global-sase-deployment/"],"qualification":"GTT Radisson release confirms selection and rollout of managed SASE/SD-WAN for hotels. This is an implementation announcement, not proof of all 800 hotels completed. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"hospitality_leisure":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":15,"research_metrics":{"supported":14,"partial":2,"partner_delivered":2,"managed_service_dependent":0,"not_primary":0,"unconfirmed":22,"total":40,"reviewed":18,"completeness_percent":45,"completeness":0.45},"proven_evidence_count":14,"response_panel":null,"best_for":"Hospitality and leisure; both","best_for_fields":{"sectors_yes":["Hospitality and leisure"],"sectors_partial":[],"regions":[],"size":[],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"zscaler","name":"Zscaler","website":"https://www.zscaler.com","category":"technology vendor","product_focus":"AI Security / GenAI Security, Data Fabric for Security, Risk360, Zero Trust Branch","cost_model":"Quote-based subscription; typically per-user/workload/location modules; SD-WAN integrations may add partner/vendor cost.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":160,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/zscaler/","shortlist_summary":"Zscaler is the vendor that effectively created the SSE category, and it’s still the one most competitors get measured against when it comes to sheer scale and security depth - the Zero Trust Exchange runs across 150+ data centres, processes over 400 billion transactions a day, and holds FedRAMP High authorisation for ZIA and ZPA (other SASE-class vendors also hold FedRAMP High or equivalent for their own components). If you’re a security-first buyer looking to retire VPN concentrators and stitch SWG, CASB, DLP and ZTNA together under one console, Zscaler is one of the most proven single-vendor routes to get there.","key_differentiators":["Category leader in SSE with ZIA, ZPA and ZDX; widely adopted as the security layer in best-of-breed SASE architectures.","Strong ecosystem of SD-WAN partners (Cisco, others) for buyers wanting Zscaler security with a separate SD-WAN platform.","Mature Zero Trust platform with substantial enterprise deployment history."],"best_fit_for":["Enterprises selecting best-of-breed SSE alongside a separate SD-WAN platform.","Security-driven SASE strategies where the SSE layer is the primary architectural decision.","Buyers consolidating multiple security point solutions onto a single SSE vendor."],"watch_outs":["Historically SSE-led; native SD-WAN capability is less mature than dedicated SD-WAN platforms (validate path selection, QoS and packet loss in RFP).","Premium pricing; typically per-user/workload/location with security modules adding cost.","Buyers needing one vendor for both SD-WAN and security may prefer a converged platform (Cato, FortiSASE, Prisma)."],"evidence_coverage_pct":0.45,"last_verified":"2026-09-01","evidence_source_count":81,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.zscaler.com/partners/service-providers","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"We partner with service providers to develop comprehensive managed offers that leverage the Zero Trust Exchange, our industry-leading security platform, to enable profitable managed service provider business models. Zscaler operates the platform itself and sells one first-party managed service (Zscaler MDR, security operations). On its own partner page the comprehensive managed offer is built and delivered by service provider partners, not by Zscaler. No Zscaler page was found describing Zscaler itself designing, deploying, changing and reporting on a customer's end-to-end service, so graded partial rather than yes."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.zscaler.com/blogs/product-insights/streamlining-multi-tenant-management-announcing-integration-multi-tenant","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The Multi-Tenant Portal has long been the cornerstone for Managed Service Providers (MSPs) and large-scale enterprises to oversee multiple Zscaler instances. Tenant isolation, cross-tenant pivoting and centralised delegated administration through ZIdentity are documented for MSPs. Nothing was found on Zscaler's own pages evidencing branded or white-label portals under the partner's own brand, and the definition requires that. The definitive partner portal documentation on help.zscaler.com could not be read because it is a JavaScript-only page (register 23). Graded partial for that reason."},"f17_cellular_and_5g_support":{"source_url":"https://www.zscaler.com/products-and-solutions/zscaler-cellular","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Devices use Zscaler SIMs to steer traffic securely to the Zero Trust Exchange with no need for additional software. Zscaler Cellular provides Zscaler-issued SIMs that carry cellular IoT and mobile device traffic into the Zero Trust Exchange, which covers SIM provisioning and management. The definition also asks for 4G and 5G as primary or failover WAN transport with modem and signal monitoring. Neither the Cellular product page nor the July 2025 cellular press release names 4G, 5G or LTE, the private 5G page concerns securing a customer's private 5G core rather than WAN transport, and the Zero Trust SD-WAN datasheet contains no cellular uplink specification. Graded partial on that gap."},"f19_public_cloud_gateways":{"source_url":"https://www.zscaler.com/press/zscaler-significantly-expands-global-sovereignty-zero-trust-exchange-platform","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Zscaler already operates 160+ data centers and is present in most countries. This is Zscaler's own infrastructure, not a resold third party's, so yes rather than partner_integrated. The reference architecture confirms Zscaler deploys its own ZIA Service Edge devices into those data centres and that users are always directed to the nearest one for traffic processing, which is security enforcement and SaaS access delivered as the vendor's own cloud service."},"f20_private_pops_dedicated_pops":{"source_url":"https://www.zscaler.com/resources/reference-architectures/traffic-forwarding-in-zscaler-internet-access.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"ZIA Private Service Edge and ZIA Virtual Service Edge devices extend the Zscaler cloud into your data center. Directly meets the definition: customer-hosted and dedicated deployments exist alongside the shared multi-tenant Public Service Edges. The March 2026 sovereignty press release additionally describes Private Service Edges as single-tenant, customer-hosted, and Zscaler-managed appliances, plus dedicated control and logging planes in six countries, which covers the sovereign case."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:44562c0b5225f88ac0275492","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"not_confirmed","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). UK PoPs in the Zero Trust Exchange; delivered direct or via UK partners and carriers.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Conditional fit | Not assessed | Not assessed | Mindbody (business software/services company) | N/A | Single case study, not sector-specific in focus | Some evidence exists but isn't a deep sector-specific case.","named_evidence":"Mindbody (business software/services company)","evidence_source_ids":["evidence:zscaler:19"]},{"sector":"government_public_sector","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | FedRAMP High/Moderate, DoD IL5, GovRAMP, CJIS, CMMC Level 2 | FedRAMP High/Moderate, GovRAMP Authorized, CJIS, CMMC Level 2, DoD IL4/IL5 | CSC (public-sector case study, VPN-to-Zero-Trust productivity gains) | Zscaler Government Cloud is a distinct FedRAMP High authorised offering | US-federal-specific; UK/EU public-sector framework listings not found in this pass | By far the best-evidenced sector in this entire profile - genuinely strong, multi-source, dated evidence. The clear standout differentiator versus Cato, which had no equivalent public-sector compliance depth.","named_evidence":"CSC (public-sector case study, VPN-to-Zero-Trust productivity gains)","evidence_source_ids":["evidence:zscaler:20"]},{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | SD-WAN/ZIA for distributed sites, M365 security | Not assessed | AutoNation (retail/automotive dealerships), Baker & Baker (food manufacturing/retail supply) | Multi-site retail benefits from ZIA's direct-to-cloud model avoiding centralised backhaul | US-centric case evidence; UK/EU retail-specific case studies not found in this pass | Reasonably well evidenced via AutoNation specifically, though not as singularly strong as Cato's Ulta Beauty story.","named_evidence":"AutoNation (retail/automotive dealerships), Baker & Baker (food manufacturing/retail supply)","evidence_source_ids":["evidence:zscaler:17","evidence:zscaler:18"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Conditional fit | SD-WAN/branch capability plausibly relevant | Not assessed | Baker & Baker (food manufacturing) | N/A | Single case study, not deeply metric-rich beyond the ransomware-reduction claim | Some evidence exists but is thinner than the retail/public-sector case studies.","named_evidence":"Baker & Baker (food manufacturing)","evidence_source_ids":["evidence:zscaler:17"]},{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Conditional fit | Global remote-access capability plausibly relevant | Not assessed | NOV (oilfield services/energy, 27,500 users, global remote-access rollout during COVID-19) | Global distributed workforce use case well evidenced | Single case study, but a genuinely substantial, named, metric-rich one | NOV is a strong, credible case study for this sector specifically - a real enterprise-scale (27,500-user) deployment with a clear before/after narrative.","named_evidence":"NOV (oilfield services/energy, 27,500 users, global remote-access rollout during COVID-19)","evidence_source_ids":["evidence:zscaler:21"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"energy_utilities":false,"government_public_sector":false,"manufacturing":false,"retail_ecommerce":false,"professional_services":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://zscaler.com/customers/nov","https://zscaler.com/customers/csc","https://zscaler.com/customers/baker-baker","https://zscaler.com/customers/mindbody","https://zscaler.com/customers/autonation"],"qualification":"NOV case documents ZIA/ZPA and zero-trust access for an energy-industry supplier. Do not infer utility-specific compliance or UK fit. CSC is Australian Commonwealth Superannuation Corporation; ZIA/ZPA deployment confirmed. Government-pension context, not a blanket public-sector accreditation. Baker and Baker case documents ZIA/ZPA alongside a separately adopted SD-WAN. Manufacturing evidence; Zscaler is not identified as the SD-WAN provider. Mindbody is a SaaS software business serving wellness firms. Its ZPA deployment does not establish professional-services or healthcare end-buyer sector evidence. AutoNation confirms ZIA deployment across retail locations. Baker and Baker must not be counted as a second retail case; it is manufacturing. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"energy_utilities":"yes","government_public_sector":"yes","manufacturing":"yes","professional_services":"not_confirmed","retail_ecommerce":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":16,"research_metrics":{"supported":15,"partial":3,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":22,"total":40,"reviewed":18,"completeness_percent":45,"completeness":0.45},"proven_evidence_count":15,"response_panel":null,"best_for":"Retail and e-commerce; Manufacturing; Energy and utilities; Government and public sector; platform","best_for_fields":{"sectors_yes":["Retail and e-commerce","Manufacturing","Energy and utilities","Government and public sector"],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"colt-technology-services","name":"Colt Technology Services","website":"https://www.colt.net/products/networking/sd-wan","category":"carrier network provider","product_focus":"Colt SASE Gateway solution, Colt SD WAN, Colt SD WAN Remote Access, Partner IP Access (Blue Wireless)","cost_model":"Quote-based managed service; access, SD-WAN/SASE design, data sovereignty and service options drive pricing.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_entity","uk_basis":"Colt Technology Services Group Limited, company 03232904, is registered at Colt House, 20 Great Eastern Street, London. Colt publishes a London SD-WAN deployment.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"yes","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"partial","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"yes","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"yes","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":99.9,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"yes","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/colt/","shortlist_summary":"Colt Technology Services is a long-established, European-anchored network operator, founded in 1992 as City of London Telecommunications and headquartered in London. Since 2015 Colt has been privately owned by Fidelity International (Eight Roads’ current specific role to be reconfirmed), and its network footprint expanded materially through a significant acquisition of Lumen Technologies’ Europe, Middle East and Africa business for $1.8 billion, completed November 2022, reinforcing Colt’s own confirmed network scale of more than 30 countries, more than 50 metropolitan area networks, and more than 32,000 on-net buildings, all delivered over its own named Colt IQ Network platform.","key_differentiators":["SD-WAN and SASE with strong European data sovereignty positioning.","Managed and co-managed delivery options with management portal access.","Enterprise-grade connectivity heritage with substantial European network ownership."],"best_fit_for":["European enterprises prioritising data residency, sovereignty and regulatory alignment.","Buyers wanting genuine co-managed delivery rather than pure managed or pure DIY.","Organisations consolidating European connectivity with SD-WAN under one provider."],"watch_outs":["Global delivery depth outside Europe is less prominent than the largest global carriers.","CASB capability: not confirmed; Data loss prevention: not confirmed. Ask Colt to identify the SSE platform, licences and operational responsibilities.","Underlying SD-WAN platform should be explicitly confirmed in RFP."],"evidence_coverage_pct":0.425,"last_verified":"2026-09-01","evidence_source_count":26,"capability_evidence":{"f03_co_managed_service":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Customers can choose to do (add/edit/delete) all their policy configurations anytime via the secure Colt SD WAN portal This is a textbook shared-responsibility split: Colt runs the platform, CPE and support while the customer retains live policy and change rights through the portal. The guide also states customers can add branch sites in hours and upgrade bandwidth in real time themselves."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"For the Wholesale SD WAN service, both wholesale customers and end customers will benefit from a customized look and feel, setting wholesale customer's own logo, background image, links and contact details, so that their end-customer experience doesn't differ from the rest of their services offered. All four elements of the definition are evidenced on one page: branded portal (logo, background, links), delegated administration (the carrier holds end-customer credentials and handles resets), tenant isolation (IPC* tenant identifiers in Versa Director) and hierarchy templates (customizable portal, branding and further hierarchy levels). Colt sells this explicitly as a Wholesale SD WAN solution for partners to resell."},"f09_encrypted_overlay_fabric":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-10-01","review_due":"2026-12-30T00:00:00Z","qualification":"Colt documents an encrypted overlay over private MPLS and public Internet underlay. The Colt Versa SD-WAN service guide documents an encrypted overlay using IPsec. Encryption configuration and throughput must be established for the chosen service design."},"f15_local_internet_breakout":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'secure local internet breakout' named explicitly as a core integrated-firewall capability [4]"},"f17_cellular_and_5g_support":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Colt SD WAN services can be provided over public internet – broadband Internet and business internet – dedicated internet access (DIA) connectivity (using any and all transport technologies like xDSL, wireless 3G/4G/LTE/5G (only available in EU for Colt provided SIMs, no limitation for customer-owned), Ethernet or traditional MPLS regardless of whether Colt is providing that underlying connectivity or not. 4G and 5G are supported as transport, and SIM management is evidenced both ways: Colt provided SIMs (EU only) or customer-owned SIMs with no geographic limitation. A separate wireless option is delivered with Blue Wireless, a Singapore-based company, supplying a Cradlepoint mobile router with dual SIM, data, installation, operation and an SLA. Confidence is medium because the guide also states that by default 3G/4G/5G circuits should be used as backup only where fixed Internet and MPLS are available, and because no published evidence of signal monitoring was found. Note the sentence quoted is reproduced as printed, including its unclosed parenthesis and en dashes."},"f18_cloud_on_ramp":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the confirmed uCPE architecture, described as 'bringing cloud computing benefits from data centres to edge computing at customer' sites [4]"},"f19_public_cloud_gateways":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the confirmed uCPE architecture, described as 'bringing cloud computing benefits from data centres to edge computing at customer' sites [4]"},"f20_private_pops_dedicated_pops":{"source_url":"https://www.colt.net/products/networking/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Sovereign SASE keeps data within its own network and in specific regions, avoiding third-party transfers and boosting control. Colt markets a Sovereign SASE deployment model and a Versa Hosted SASE Solution, and the product page describes sovereign SASE as a model where the organisation or a service provider hosts all components. That evidences regional and sovereign data control. Graded partial rather than yes because no page found describes a customer-hosted or single-tenant dedicated PoP as an orderable option with defined commercials; the published claim is about data residency within Colt's own network, which is not the same as a dedicated PoP."},"f24_flexible_edge_form_factors":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'uCPE allows customers to licence, manage, and monitor functions with flexible network options', with a specifically-named 'blue wireless CPE' attachable to 'any of the current standard Versa CPEs' [4]"},"f25_high_availability_design":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Active/Active operation' and the confirmed dual resilient SIM architecture for the named Blue Wireless partnership specifically [4] [6]"},"f26_sla_backed_service_fabric":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"SLA (for on-net circuits) | 99.90% | 99.90% | 99.95% | 99.90% | 99.95% | 99.90% | 99.95% The service guide publishes a contractual availability SLA differentiated by site package, 99.90% for XS/S/M/L and 99.95% for the S Plus, M Plus and L Plus tiers, and the guide is a service-guide-grade document rather than marketing. The wireless option is separately stated to guarantee 50% of contract speed. Confidence is medium on two counts: the SLA applies to on-net circuits only, and no published response-time, change-handling, latency, jitter or loss commitments were found. The quote is a table row, so a verifier should expect it rendered as a table rather than prose."},"f27_integrated_next_generation_firewall":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'Colt SD WAN provides an integrated firewall with SD WAN which provides secure local internet breakout, provides DDoS protection and ability to create firewall policies and rules through customer portal' [4]"},"f28_full_sase_platform":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and genuinely well-evidenced via Colt's own confirmed, substantial network scale combined with a confirmed, long-standing platform partnership [4]"},"f30_zero_trust_network_access":{"source_url":"https://colt.net/resources/insights/colt-technology-services-brings-together-sd-wan-and-sse-features-in-new-integrated-full-sase-solution","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a named product - Colt SD WAN Remote Access, 'based on Versa Secure Access (VSA)' [2]"},"f31_secure_web_gateway":{"source_url":"https://colt.net/resources/insights/colt-technology-services-brings-together-sd-wan-and-sse-features-in-new-integrated-full-sase-solution","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Versa Secure Web Gateway, a secure web access solution that offers organisations protection from malware and threats' [2]"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:a584a69d43415d71a6eb57d0","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"partial","energy_utilities":"not_confirmed","government_public_sector":"partial","education":"yes","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_hq","curated_uk_basis":"UK headquartered (London). UK contracting entity with owned UK metro fibre and UK support.","sector_review_queue":[{"sector":"financial_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via real, verbatim customer testimony | Confirmed real customer testimony directly describing Colt as 'an industry leader that provides a wide range of technology product portfolios and solutions which can best fit the financial customer's unique requirements' | PCI DSS not confirmed (Table 13); the confirmed August 2025 security incident is a specific, worth-flagging consideration for this sector particularly | A real, verbatim, independently-hosted (Gartner Peer Insights) customer review specifically naming financial-sector fit | N/A | The confirmed PCI DSS gap and the confirmed security incident are both specific, worth-flagging considerations for this sector specifically, given its typical compliance sensitivity | A real, specific, sector-relevant customer testimony exists, tempered directly by the confirmed compliance gaps and the confirmed security incident - Netify recommends financial-services buyers specifically raise both points directly with Colt.","named_evidence":"A real, verbatim, independently-hosted (Gartner Peer Insights) customer review specifically naming financial-sector fit","evidence_source_ids":["evidence:colt:7"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"financial_services":true},"reviewed_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.colt.net/customer-stories/byblos-bank-europe","https://www.colt.net/customer-stories/leading-global-investment-bank","https://docs.colt.net/legal/terms-and-conditions","https://docs.colt.net/legal/colt-group-of-companies","https://find-and-update.company-information.service.gov.uk/company/03232904"],"qualification":" Named Byblos Bank Europe case documents Colt SD-WAN at Brussels, London and Paris with Zscaler access services. Establishes financial-services deployment and London delivery; not nationwide or Irish access availability. Separate anonymous investment bank evidence is qualified and does not replace the named case. UK review update (supersedes earlier UK-region qualification): The named UK group entity operates the website; the trading-company list separately identifies Colt Technology Services (02452736) in England and Wales. The group entity is not assumed to sign each service contract. The Byblos Bank Europe case includes London SD-WAN delivery. Actual trading entity, each site and Irish coverage require order-specific confirmation.","sectors":{"financial_services":"yes"},"regions":{"uk_ireland":"yes"}}},"uk_evidence":{"entity":{"status":"evidenced","name":null,"source_urls":["https://www.colt.net/customer-stories/byblos-bank-europe","https://www.colt.net/customer-stories/leading-global-investment-bank","https://docs.colt.net/legal/terms-and-conditions","https://docs.colt.net/legal/colt-group-of-companies","https://find-and-update.company-information.service.gov.uk/company/03232904"],"checked_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","qualification":"Colt Technology Services Group Limited, company 03232904, is registered at Colt House, 20 Great Eastern Street, London. Colt publishes a London SD-WAN deployment."},"regional_delivery":{"status":"yes","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":17,"research_metrics":{"supported":16,"partial":1,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":23,"total":40,"reviewed":17,"completeness_percent":43,"completeness":0.425},"proven_evidence_count":16,"response_panel":null,"best_for":"Financial services; UK and Ireland; Large global enterprise; managed","best_for_fields":{"sectors_yes":["Financial services"],"sectors_partial":[],"regions":["UK and Ireland"],"size":["Large global enterprise"],"service_model":"managed","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"uk_entity","label":"UK contracting entity","source_urls":["https://www.colt.net/customer-stories/byblos-bank-europe","https://www.colt.net/customer-stories/leading-global-investment-bank","https://docs.colt.net/legal/terms-and-conditions","https://docs.colt.net/legal/colt-group-of-companies","https://find-and-update.company-information.service.gov.uk/company/03232904"],"reviewed_at":"2026-09-30T19:56:00Z","qualification":"Colt Technology Services Group Limited, company 03232904, is registered at Colt House, 20 Great Eastern Street, London. Colt publishes a London SD-WAN deployment."}},{"slug":"hpe-aruba","name":"HPE Aruba EdgeConnect","website":"https://www.hpe.com/us/en/aruba-edgeconnect-sd-wan.html","category":"technology vendor","product_focus":"Cloud Intelligence, EdgeConnect Orchestrator, First-Packet iQ, HPE Aruba Networking Central","cost_model":"Quote-based subscription/appliance/support; MSP-managed options available through partners/providers.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"not_confirmed","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"partial","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"not_primary","manufacturing":"yes","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_primary","professional_services":"yes","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/hpe-aruba-edgeconnect/","shortlist_summary":"HPE Aruba Networking’s SASE platform is a product of acquisition and integration rather than a single, from-scratch build. The SD-WAN engine, EdgeConnect, was built by Silver Peak Systems (founded 2004, first SD-WAN product shipped 2015) and joined HPE’s Aruba business in a $925 million acquisition completed September 2020.","key_differentiators":["EdgeConnect SD-WAN (acquired with Silver Peak) is positioned as the foundation for single-vendor SASE alongside Aruba SSE.","Strong heritage in WAN optimisation and packet-level performance engineering.","Tight integration with the broader Aruba campus and branch portfolio (LAN, Wi-Fi, NAC) for buyers consolidating end-to-end networking."],"best_fit_for":["Enterprises already running Aruba LAN/Wi-Fi who want WAN and SASE under the same operational tooling.","Buyers prioritising application performance and WAN optimisation in addition to standard SD-WAN routing.","Distributed organisations with branch-heavy footprints where Aruba campus presence is already established."],"watch_outs":["Aruba SSE is newer than the SSE leaders (Zscaler, Netskope); buyers wanting best-of-breed SASE should evaluate the SSE capability set carefully.","Managed delivery is partner-led rather than from HPE directly.","Private global backbone is not vendor-owned; SASE transport uses public cloud gateways."],"evidence_coverage_pct":0.425,"last_verified":"2026-09-01","evidence_source_count":46,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://docs.axissecurity.com/docs/tenants-management","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Managing multiple tenants can be useful when you are an MSSP and you manage several separate clients, or otherwise your company has several organizational units it prefers to keep separate. Tenant isolation and cross-tenant admin roles are documented for HPE Networking SSE, and the same documentation page states this is a limited release feature. No evidence of branded or white-label portals, custom logos or reseller templates was found on the documentation or partner programme pages reviewed, so graded partial rather than yes."},"f18_cloud_on_ramp":{"source_url":"https://hpe.com/us/en/aruba-edgeconnect-sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed for specific named hyperscalers [15] [19]"},"f19_public_cloud_gateways":{"source_url":"https://docs.axissecurity.com/docs/pops","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The HPE Aruba Networking SSE service utilizes both onramps and Points of Presence (PoPs) to enhance connectivity. The PoPs are documented as part of the HPE Aruba Networking SSE service itself, which is HPE's own security service edge infrastructure following the Axis Security acquisition, so this is the vendor's own service infrastructure rather than a resold third party gateway. Several PoP locations carry hyperscaler region names such as Northern Virginia, Oregon and Iowa, which suggests hosting inside public cloud regions, but the service and enforcement layer are HPE's."},"f23_multi_cloud_transit_fabric":{"source_url":"https://hpe.com/us/en/aruba-edgeconnect-sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed for specific named hyperscalers [15] [19]"},"f24_flexible_edge_form_factors":{"source_url":"https://buy.hpe.com/in/en/cloud/private-hybrid-cloud/hpe-aruba-networking-connectivity-saas/hpe-aruba-networking-connectivity/hpe-aruba-networking-edgeconnect-10106-1g-2x-sfp-2x-combo-1g-2x-rj45-poe-sd%E2%80%91wan-gateway/p/s0e22a","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native - physical appliances confirmed at a specific model level (e.g. the EC-10106 gateway, described as 'ideally suited for small branch and remote office environments'), plus virtual appliance deployment [21]"},"f27_integrated_next_generation_firewall":{"source_url":"https://hpe.com/us/en/networking/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, via the SSE platform's confirmed capability set alongside the EdgeConnect-embedded NGFW described above [14]"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:40513952c953a0dcc2253c38","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"not_confirmed","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). EdgeConnect delivered in the UK via HPE partners and MSPs.","sector_review_queue":[{"sector":"education","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Consistent network experience and centralised management relevant to distributed campus/student environments | Not assessed for sector-specific frameworks | A named reference describing a centrally-managed, high-performance network delivering 'a home-from-home experience for Oxford students'; Edmonton Public Library's digital-space modernisation is a related, if not strictly higher-education, public-education-adjacent reference | UK (Oxford) and Canada (Edmonton) - genuine international sector evidence | Both references are qualitative rather than quantified with a specific metric | Two independently named, international, credible references - real sector evidence, though without the specific quantified metrics found for some other sectors in this profile (e.g. Manufacturing's 99%+ uptime, Government's FedRAMP date).","named_evidence":"A named reference describing a centrally-managed, high-performance network delivering 'a home-from-home experience for Oxford students'; Edmonton Public Library's digital-space modernisation is a related, if not strictly higher-education, public-education-adjacent reference","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:30"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | SD-WAN reliability directly relevant to distributed manufacturing operations | Not assessed for sector-specific frameworks | IMMI (99%+ uptime ratio reported across all branches using EdgeConnect as a turn-key, out-of-the-box solution) | N/A | Single case study, though genuinely specific and quantified | A specific, quantified (99%+ uptime), named manufacturing customer reference - genuinely credible, concrete sector evidence.","named_evidence":"IMMI (99%+ uptime ratio reported across all branches using EdgeConnect as a turn-key, out-of-the-box solution)","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:30"]},{"sector":"healthcare","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"requires_confirmation","qualification":"Good fit, evidenced, though without a formal HIPAA attestation confirmed | SD-WAN reliability and DEM plausibly relevant to telehealth/clinical-application performance specifically | HIPAA not confirmed as a formal attestation | Universal Health Services (telehealth, assured network performance and reliability); Hato Hone St John (New Zealand ambulance/healthcare service, digital transformation of healthcare operations); USANA Health Sciences (global efficiency, application performance and savings from Unified SASE, per a named reseller case study) | Named customers in both US and New Zealand markets | No formal HIPAA attestation confirmed despite the named healthcare customer evidence | Two independently named healthcare-sector customers give real, credible sector evidence, though Netify should not assume formal HIPAA compliance without direct confirmation, given this wasn't found in this research pass.","named_evidence":"Universal Health Services (telehealth, assured network performance and reliability); Hato Hone St John (New Zealand ambulance/healthcare service, digital transformation of healthcare operations); USANA Health Sciences (global efficiency, application performance and savings from Unified SASE, per a named reseller case study)","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:14","evidence:hpe-aruba-edgeconnect:22","evidence:hpe-aruba-edgeconnect:29"]},{"sector":"hospitality_leisure","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Consistent network experience and branch/site connectivity relevant to distributed hospitality operations | Not assessed | A named hotel reference: 'Network excellence enables hotel to streamline operational efficiency and drive service innovation' | N/A | Anonymised (described as 'a hotel' without further naming detail in the source reviewed) | A real, if not fully named, hospitality-sector reference - worth a direct follow-up to identify the specific hotel/hotel group if a fully named case study is needed.","named_evidence":"A named hotel reference: 'Network excellence enables hotel to streamline operational efficiency and drive service innovation'","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:30"]},{"sector":"financial_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"requires_confirmation","qualification":"Conditional - one named customer reference exists, but no PCI-DSS or DORA-specific certification was confirmed for the SASE/SSE platform specifically | SD-WAN cost-reduction and application-performance capabilities plausibly relevant | PCI confirmed for Central's cloud infrastructure specifically (Table 13); DORA not confirmed | First Bank (SASE-based SD-WAN, cost reduction, application performance, cloud-smart technology strategy) | N/A | Compliance evidence is narrower than the named customer evidence would suggest is needed for full sector confidence | A real, named financial-services customer exists, though Netify should be precise that platform-wide PCI/DORA-specific certification for the SASE/SSE components specifically wasn't independently confirmed.","named_evidence":"First Bank (SASE-based SD-WAN, cost reduction, application performance, cloud-smart technology strategy)","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:14"]},{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced, and genuinely the platform's best-documented individual case study | The confirmed best-of-breed SD-WAN-plus-third-party-SSE architecture (Table 6) directly relevant to this sector's typical existing security-vendor investments | Not assessed for sector-specific frameworks | Cushman & Wakefield (global commercial real estate services firm) - 'boost global network performance and security with Aruba EdgeConnect SD-WAN edge platform and Zscaler cloud-delivered SASE' | Global deployment implied by the confirmed 'global network performance' framing | Single case study, though it directly demonstrates the platform's most architecturally distinctive capability | Genuinely the most strategically important case study in this entire profile - a real, named, global professional-services customer using the exact best-of-breed (EdgeConnect plus Zscaler) architecture that is this platform's clearest differentiator.","named_evidence":"Cushman & Wakefield (global commercial real estate services firm) - 'boost global network performance and security with Aruba EdgeConnect SD-WAN edge platform and Zscaler cloud-delivered SASE'","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:30","evidence:hpe-aruba-edgeconnect:36"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"financial_services":false,"healthcare":false,"professional_services":false,"hospitality_leisure":false,"manufacturing":false},"reviewed_at":"2026-09-30T15:45:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://hpe.com/us/en/networking/sase.html","https://www.hpe.com/psnow/doc/a50014000enw","https://hpe.com/tw/en/aruba-edgeconnect-sd-wan.html","https://consiliant.com/usana-hpe-aruba-networking-sase-case-study/","https://www.hpe.com/uk/en/aruba-edgeconnect-sd-wan.html.html","https://arubanetworks.com/resources/case-studies","https://hpe.com/psnow/doc/a00108908enw","https://buy.hpe.com/uk/en/p/JZ872A","https://www.hpe.com/psnow/downloadDoc/Finding%20a%20niche%20in%20a%20crowded%20hotel%20sector%20-%20Premier%20Inn%20MENA-a50011126enw.pdf?deepLink=&form=false&hf=regular&id=a50011126enw&isFutureVersion=true&originalObjectName=&prelaunchSection=&preview=false&print=&r=&section=&softrollSection=&ver=1","https://packetpushers.net/podcasts/tech-bytes/tb-global-manufacturer-taps-aruba-edgeconnect-for-sd-wan-wan-optimization/"],"qualification":"Recovered HPE First Bank case documents EdgeConnect SD-WAN at a US bank; no UK regulatory suitability inference. HPE EdgeConnect page explicitly identifies Universal Health Services using SD-WAN for telehealth. USANA reseller story is not evidence of healthcare delivery. HPE EdgeConnect page identifies Cushman and Wakefield application acceleration and MPLS replacement; professional-services sector evidence. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation. HPE UK product material identifies EdgeConnect and Barrett Steel customer deployment; UK store sells EdgeConnect gateways. UK product availability is evidenced; partner, site access circuits and Irish delivery must be confirmed. Region partial, not a managed-service or buyer-fit guarantee. Replacement named evidence: Premier Inn MENA documents EdgeConnect SD-WAN across 11 Middle East hotels. This does not validate the original anonymous hotel quote or prove a UK hotel deployment. Customer interview with IMMI VP of Enterprise Technology documents deployed EdgeConnect linking US data centres and a Chinese plant. HPE-sponsored primary customer account, not independent testing or UK delivery confirmation.","sectors":{"financial_services":"yes","healthcare":"yes","professional_services":"yes","hospitality_leisure":"yes","manufacturing":"yes"},"regions":{"uk_ireland":"partial"}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"partial","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":18,"research_metrics":{"supported":16,"partial":1,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":23,"total":40,"reviewed":17,"completeness_percent":43,"completeness":0.425},"proven_evidence_count":16,"response_panel":null,"best_for":"Healthcare; Financial services; Manufacturing; Professional services; Hospitality and leisure; platform","best_for_fields":{"sectors_yes":["Healthcare","Financial services","Manufacturing","Professional services","Hospitality and leisure"],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"vodafone-business","name":"Vodafone Business","website":"https://vb2b.vodafone.com/business/products/fixed-connectivity/sd-wan","category":"managed service provider / carrier network provider","product_focus":"Fortinet-based Secure Networking, Vodafone Business Managed Network Services, Vodafone Business Network as a Service (NaaS), Vodafone Business SASE","cost_model":"Quote-based managed service; carrier access, SD-WAN platform, security services and country coverage determine costs.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_entity","uk_basis":"Vodafone Limited, company 01471587, identifies its registered office in Newbury; the Optos SD-WAN case includes UK operations.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"partner_integrated","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"partner_integrated","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"yes"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"yes","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"yes","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"not_confirmed","manufacturing":"not_primary","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"yes","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":212,"sla_availability_pct":99.99,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"yes","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/vodafone/","shortlist_summary":"Vodafone Group is a vast, multinational telecommunications operator - for the financial year ended 31 March 2024, Vodafone Group reported total revenue of €36.7 billion, with Vodafone Business specifically operating across all of Vodafone’s markets, addressing a claimed €160 billion addressable market, serving 5 million customers, managing 198 million IoT connections (FY24 figure), and contributing 24% of Group service revenue. Against that scale, the managed SD-WAN and SASE proposition examined in this profile is one product line within a much larger enterprise business.","key_differentiators":["Strong UK and European market presence with NaaS positioning and integrated mobile/fixed access.","VeloCloud-based managed SD-WAN in the UK with broader Vodafone international footprint.","Tight integration with Vodafone mobile services for buyers prioritising cellular and 5G access."],"best_fit_for":["UK and European enterprises wanting carrier-led SD-WAN with strong mobile and 5G integration.","Buyers consolidating fixed and mobile access alongside SD-WAN platform delivery.","Organisations attracted to the NaaS consumption model."],"watch_outs":["Underlying platform varies by region (VeloCloud in UK, others elsewhere); ensure consistency for multinational deployment.","Security and SASE capabilities are largely partner-integrated.","Commercial structure bundles access, mobile and platform; line-item costing requires explicit RFP."],"evidence_coverage_pct":0.425,"last_verified":"2026-09-01","evidence_source_count":42,"capability_evidence":{"f07_lifecycle_management":{"source_url":"https://www.vodafone.com/news/newsroom/technology/vodafone-business-and-fortinet-expand-global-partnership-to-secure-hybrid-work","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Vodafone Business Secure Firewall with Fortinet delivers a comprehensive managed security service to setup, operate, run, manage and maintain customer firewalls in a highly secure manner. Graded partial, and the gap matters. What is documented is estate scale and ongoing maintenance: the datasheet claims 45,000 managed CPEs, includes Release Management and Vulnerability Management in the managed service list, and states Zero-touch provisioning reduces engineer time on site. Release and Vulnerability Management reasonably imply firmware upgrades and patching in service. What I could not evidence anywhere is the harder half of the definition: hardware replacement or RMA, renewals, and end-of-life planning. None of those terms appear in the datasheet or on any product page reviewed. A buyer should treat hardware refresh and EoL as an open contractual question rather than assume it is included."},"f17_cellular_and_5g_support":{"source_url":"https://d3bql97l1ytoxn.cloudfront.net/app_resources/401786/documentation/1435542_1720420681871_en-US.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Replace expensive private links with low-cost internet/5G Graded partial rather than yes because the evidence establishes only the transport half of the definition. The datasheet positions 5G as a substitute for private circuits and lists 4/5G among access options, so cellular as primary or failover transport is evidenced. I found no published detail on integrated versus external modems, SIM management, or signal monitoring. This is a case where prior knowledge would be tempting, since Vodafone is a mobile network operator and self-evidently manages SIMs at scale, but no page I fetched in this task documents SIM management as part of the SD-WAN service, so I have not graded it."},"f18_cloud_on_ramp":{"source_url":"https://vodafone.co.uk/business/sdn/secure-access-service-edge","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'secure overlay connectivity between customer sites and extending to cloud service provider environments e.g. Microsoft Azure, Amazon Web Services' [2]"},"f19_public_cloud_gateways":{"source_url":"https://www.vodafone.co.uk/newscentre/press-release/zscaler-smes-cloud/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Vodafone Business Secure Gateway Access is underpinned by the Zscaler Zero Trust Exchange™ Platform. This is the distinction the definition is built around, and it falls clearly on the partner side. The cloud enforcement points behind Vodafone Business Secure Access Gateway ZIA and ZPA are Zscaler's, and the 2025 Fortinet announcement adds FortiSASE, described by Fortinet as FortiSASE cloud-based security solutions. Both are another company's PoP estate that Vodafone resells and manages. Vodafone Cloud Connect was also checked and offers connectivity to AWS, Google Cloud, IBM, Microsoft Azure and Oracle, which the definition expressly excludes as evidence. No Vodafone-operated shared SASE gateway estate was found."},"f21_private_global_backbone":{"source_url":"https://www.vodafone.co.uk/business/sdn/secure-access-service-edge","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our range of access networks is available in 192 countries using our enhanced internet backbone, reducing the number of hops and providing resilience. Graded yes because the possessive is doing real work: our enhanced internet backbone is Vodafone-owned or controlled infrastructure, and the stated scope is global rather than national, which clears the bar the definition sets against single-country networks. The datasheet corroborates with We cover underlay, overlay, local access and wider services within the solution to 192 countries. Confidence is held at medium for two reasons. First, Vodafone describes it as an internet backbone rather than a private MPLS core in the current material, so the predictable latency and loss characteristic is asserted only indirectly through reducing the number of hops. Second, the 2014 release makes clear the reach is a mix of directly operated and partner networks, so not every one of the 192 countries rides Vodafone-owned fibre. Between regions on Vodafone's own core, the capability holds."},"f23_multi_cloud_transit_fabric":{"source_url":"https://vodafone.co.uk/business/sdn/secure-access-service-edge","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'secure overlay connectivity between customer sites and extending to cloud service provider environments e.g. Microsoft Azure, Amazon Web Services' [2]"},"f26_sla_backed_service_fabric":{"source_url":"https://d3bql97l1ytoxn.cloudfront.net/app_resources/401786/documentation/1435542_1720420681871_en-US.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our managed and co-managed services are backed up by the broadest range of SLAs in line with our vision for an excellent customer experience Graded yes on the existence of contractual commitments, which is what this field measures, and it is distinct from the sla_availability_pct field where the published number is much weaker. The datasheet also states Bundle our underlay for E2E SLAs, which is a meaningful claim: because Vodafone supplies the access circuits as well as the overlay, it can commit end to end rather than only on the overlay. The 2025 Fortinet announcement independently confirms various service-level guarantees as a purchasable management option. Change handling is covered by Change Management in the managed service list. Latency, jitter and loss targets were not found published."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.vodafone.com/news/newsroom/technology/vodafone-business-and-fortinet-expand-global-partnership-to-secure-hybrid-work","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Vodafone Business Secure Firewall with Fortinet delivers a comprehensive managed security service to setup, operate, run, manage and maintain customer firewalls in a highly secure manner. Fortinet technology, operated by Vodafone, so partner_integrated per the definition rather than yes. Fortinet's own release confirms the services integrate Fortinet's industry-leading software-defined wide area network (SD-WAN) and FortiSASE cloud-based security solutions. The datasheet's Inbuilt encryption and firewalls protects data and branches shows the firewall is integrated into the SD-WAN edge rather than sold as a separate appliance, which satisfies the integration half of the test, but the technology is not Vodafone's. I did not find a Vodafone page enumerating the individual NGFW functions (application control, IPS, malware inspection, URL filtering) by name, so that breakdown rests on the Fortinet product identification rather than on a Vodafone feature list."},"f30_zero_trust_network_access":{"source_url":"https://vodafone.co.uk/business/sdn/secure-access-service-edge","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - Zscaler is described specifically as delivering 'private application connectivity through a zero-trust architecture' [2]"},"f31_secure_web_gateway":{"source_url":"https://vodafone.co.uk/business/sdn/secure-access-service-edge","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as part of the Zscaler-based SASE partnership [2] Capability specifics depend on which underlying platform (Zscaler or Fortinet) is proposed"},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://vodafone.com/news/newsroom/technology/vodafone-business-and-fortinet-expand-global-partnership-to-secure-hybrid-work","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'a single view across network health visibility, performance dashboards, and customisable reports' [5] A distinctly-branded DEM product name wasn't itemised"},"f40_managed_service_assurance":{"source_url":"https://d3bql97l1ytoxn.cloudfront.net/app_resources/401786/documentation/1435542_1720420681871_en-US.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our global service desk and regional operations centres run 24x7x365 The network operations half is well evidenced by the datasheet quote plus 24/7 Incidents Support and Proactive incidents in the managed service list. The security operations half is evidenced from the Tier 2 G-Cloud filing by VODAFONE LIMITED, whose support levels field reads 24 x7 x 365 Security Operations Centre, although note that filing covers Managed SOC and SIEM rather than SD-WAN. Incident ownership through to root cause is supported by Problem Management appearing as a distinct line item alongside incident handling, which is the ITIL construct for root cause work, and change governance by Change Management. Confidence is medium rather than high because the phrase root cause analysis does not itself appear on any page fetched, and structured service reviews are implied by Service Management in the list rather than described."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:cf05ef06bacc5b079425816a","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_hq","curated_uk_basis":"UK headquartered (Vodafone, Newbury). UK contracting entity with UK support desks and fixed-mobile UK assets.","sector_review_queue":[],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{},"reviewed_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Codex primary-source review","source_urls":["https://www.vodafone.co.uk/privacy","https://www.vodafone.co.uk/business/case-studies/sd-wan-keeps-optos-connected-worldwide"],"qualification":"UK review update (supersedes earlier UK-region qualification): Vodafone Limited UK entity and UK SD-WAN delivery evidence are confirmed. Group branding does not determine the contracting entity for an individual quote. Irish coverage, address availability and current supplier fit require confirmation.","sectors":{},"regions":{"uk_ireland":"yes"}}},"uk_evidence":{"entity":{"status":"evidenced","name":null,"source_urls":["https://www.vodafone.co.uk/privacy","https://www.vodafone.co.uk/business/case-studies/sd-wan-keeps-optos-connected-worldwide"],"checked_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","qualification":"Vodafone Limited, company 01471587, identifies its registered office in Newbury; the Optos SD-WAN case includes UK operations."},"regional_delivery":{"status":"yes","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":19,"research_metrics":{"supported":11,"partial":3,"partner_delivered":3,"managed_service_dependent":0,"not_primary":0,"unconfirmed":23,"total":40,"reviewed":17,"completeness_percent":43,"completeness":0.425},"proven_evidence_count":11,"response_panel":null,"best_for":"Sector evidence not yet reviewed; UK and Ireland; Large global enterprise; Mid-market; managed","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":["UK and Ireland"],"size":["Large global enterprise","Mid-market"],"service_model":"managed","signoff":""},"editorial":null,"uk_status":{"status":"uk_entity","label":"UK contracting entity","source_urls":["https://www.vodafone.co.uk/privacy","https://www.vodafone.co.uk/business/case-studies/sd-wan-keeps-optos-connected-worldwide"],"reviewed_at":"2026-09-30T19:56:00Z","qualification":"Vodafone Limited, company 01471587, identifies its registered office in Newbury; the Optos SD-WAN case includes UK operations."}},{"slug":"ntt","name":"NTT DATA","website":"https://www.nttglobal.net/services/sd-wan","category":"carrier network provider","product_focus":"Managed Campus Networks with Prisma SASE, Managed Internet Connectivity, Managed IoT and Network as a Service (NaaS), Managed Network Security","cost_model":"Quote-based managed service; global design/delivery/support, SD-WAN vendor and security stack determine cost.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"partial","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"yes"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"yes","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":75,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/ntt-data/","shortlist_summary":"NTT DATA is a massive, globally-established IT services and network provider, founded in Japan in 1988 as a spinoff of Nippon Telegraph and Telephone (NTT), and now operating in more than 70 countries with approximately 190,000 employees. A significant, current corporate event is worth understanding first: on 8 May 2025, NTT, Inc. 75% acceptance, and following shareholder approval on 29 August 2025, NTT DATA Group was formally delisted from the Tokyo Stock Exchange on 26 September 2025, becoming a wholly-owned subsidiary of NTT, Inc.","key_differentiators":["24x7 managed SD-WAN delivery via global operations centres with strong portal visibility.","Managed SASE partnership with Palo Alto Networks (Prisma SASE) for buyers wanting that platform under managed service.","Strong global delivery footprint including APAC, EMEA and Americas."],"best_fit_for":["Multinational enterprises wanting truly global managed delivery with consistent operations across regions.","Buyers wanting Prisma SASE consumed as a fully managed service.","Organisations prioritising managed service maturity and global SOC/NOC depth."],"watch_outs":["Platform fit depends on which vendor is being proposed (Palo Alto, Zscaler, others); evaluate platform independently.","Commercial complexity is meaningful at global scale; ensure scope and RACI are explicit.","DIY/self-managed model is not the primary positioning."],"evidence_coverage_pct":0.4,"last_verified":"2026-09-01","evidence_source_count":32,"capability_evidence":{"f03_co_managed_service":{"source_url":"https://www.nttglobal.net/services/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Customers have the option to self-manage via a web portal or NTT can offer managed services. The published wording describes an either/or choice (customer self-manages via portal, OR NTT manages) rather than an explicitly shared-responsibility co-managed model. The NTT DATA/Cisco managed SASE brochure describes people-augmented, technology-augmented and hybrid operating models, which implies shared operation, but no page reviewed states which policy or change rights the customer retains. Graded partial rather than yes for that reason."},"f05_professional_services_and_migration_support":{"source_url":"https://dam.nttdata.com/api/public/content/GLOBAL-MNS-brochure","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'Move from outdated, end-of-life infrastructure to a modern, scalable network - with a tailored roadmap built around your current environment and future needs'"},"f07_lifecycle_management":{"source_url":"https://www.nttglobal.net/services/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"NTT's Infrastructure Management Services provide full life cycle: architecture, design, implementation, upgrades, and full proactive 24×7 management of a customer's global network and security infrastructure. Quote uses a multiplication sign in 24×7 as printed on the page. Upgrades and full lifecycle management are stated as part of the service. The NTT DATA/Cisco SASE brochure adds decommissioning and refresh to the same lifecycle. Hardware replacement and end-of-life planning are not named in those exact terms."},"f09_encrypted_overlay_fabric":{"source_url":"https://dam.nttdata.com/api/public/content/Guide-NTT-DATA-and-Cisco-together-we-make-you-unbeatable-perspective-compressed?v=3f355dc9","reviewed_at":"2026-10-01","review_due":"2026-12-30T00:00:00Z","qualification":"NTT DATA and Cisco describe an encrypted SD-WAN customer deployment and their managed SD-WAN services. NTT DATA documents an encrypted SD-WAN deployment with Cisco and managed services using Viptela/Meraki. Evidence establishes this delivery option, not every NTT platform or UK site availability."},"f13_qos_and_traffic_shaping":{"source_url":"https://services.global.ntt/en-us","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - SD-WAN networks 'can use additional resources to adapt to changes in demand and prioritize business-critical traffic'"},"f17_cellular_and_5g_support":{"source_url":"https://www.nttglobal.net/services/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Unrivaled performance and connectivity options: MPLS, Ethernet, Local Internet, Broadband, LTE/4G in over 190 countries. LTE/4G is named as a supported transport option alongside MPLS, Ethernet, internet and broadband. 5G is not named on the SD-WAN service page, the platform page or the security page, and no page reviewed mentions SIM management or signal monitoring. NTT DATA does market a separate Private 5G service, but that is a private cellular network offering rather than evidence of 5G WAN transport in the SD-WAN service, so it is not used to lift this grade."},"f19_public_cloud_gateways":{"source_url":"https://www.nttglobal.net/services/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Secure Web Gateways located at 75+ globally distributed Local Cloud Centers (LCCs) closer to client locations to protect customers from Internet threats. The Local Cloud Centers are NTT's own distributed infrastructure delivering secure web gateway enforcement as a cloud service, which meets the definition of vendor-operated shared gateways. Separately the page describes optimised connectivity to AWS, Azure and Oracle Cloud, but per the definition that cloud onramp capability is not counted as evidence here. The security functions enforced at these gateways may use partner technology, which is graded separately under sse_layer_ownership."},"f21_private_global_backbone":{"source_url":"https://www.gin.ntt.net/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our dual-stack Tier-1 Global IP Network spans the Americas, Asia, Europe and Oceania on a single autonomous system number (AS2914). NTT owns and operates a Tier 1 global IP backbone under AS2914 spanning four continents, and publishes contractual inter-region latency, loss and jitter figures for it, which is the strongest form of evidence for this field. Caveat: this is the Global IP Network transit product; none of the SD-WAN or SASE pages reviewed states that SD-WAN inter-region traffic is carried on AS2914 by default rather than over the public internet."},"f26_sla_backed_service_fabric":{"source_url":"https://www.gin.ntt.net/support-center/service-level-agreements-slas/our-global-ip-network/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The Global IP Network Backbone will be available to the customer free of Network Outages 100% of the time. NTT publishes a contractual SLA for its Global IP Network covering availability, region-by-region latency, packet loss (average monthly not exceeding 0.1%) and jitter. Confidence is medium because this SLA document covers the IP backbone product; no published SLA percentage or response and change-handling commitment specific to the managed SD-WAN or managed SASE service was located on the pages reviewed."},"f27_integrated_next_generation_firewall":{"source_url":"https://nttdata.com/global/en/services/enterprise-networking/managed-network-services","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, via the confirmed Managed Network Security product line and the confirmed underlying platform partnerships"},"f30_zero_trust_network_access":{"source_url":"https://services.global.ntt/en-us/campaigns/managed-campus-networks-with-prisma-sase","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'zero trust, identity-level security to strengthen the protection of enterprise digital resources and IT applications, no matter where employees access them'"},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://nttdata.com/global/en/insights/reports/ntt-data-is-a-leader-in-managed-network-services","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'Full-stack observability that gives you real-time visibility and analytics for faster resolution and enhanced end-user experiences' A distinctly-branded DEM product name wasn't itemised"},"f40_managed_service_assurance":{"source_url":"https://www.nttglobal.net/services/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"NTT's SD-WAN Services are managed by world-class Global Operations Centers that perform 24×7 predictive modeling, monitoring and management Quote uses a multiplication sign in 24×7 as printed on the page. NTT states 24x7 proactive monitoring and management from Global Operations Centers acting as a single point of contact, and the NTT DATA/Cisco brochure states that its ISO-certified operations and ITIL-aligned processes ensure service excellence in all areas, which implies formal change governance. Confidence is medium because no page reviewed explicitly commits to owning incidents through to root cause analysis or to structured periodic service reviews; NTT DATA's SPEKTRA platform page references AI-based root cause analysis as a platform feature but that wording was not independently verified as a contractual service commitment."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:f32cd79b051e6620156e54b6","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_entity","curated_uk_basis":"UK contracting entity (NTT DATA UK) of a Japanese parent, with UK delivery and operations.","sector_review_queue":[{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, named customer reference with IoT-specific detail | Confirmed IoT gateway deployment connecting 'sensors and water metres to the regional LoRaWAN network', via the named Cisco partnership specifically | Not assessed for sector-specific frameworks | CILE (Compagnie Intercommunale Liégeoise des Eaux) - named, real Belgian water utility, with specific, named technical partnership detail (Cisco, LoRaWAN) | Belgium, confirmed directly | This reference centres on IoT/sensor connectivity specifically rather than core SD-WAN/SASE; direct sector-fit evidence for the core service examined in this profile is more limited | A real, named, technically-specific customer reference exists for adjacent IoT/NaaS capability; direct evidence for the core SD-WAN/SASE service specifically in this sector is comparatively thinner.","named_evidence":"CILE (Compagnie Intercommunale Liégeoise des Eaux) - named, real Belgian water utility, with specific, named technical partnership detail (Cisco, LoRaWAN)","evidence_source_ids":[]},{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, named customer reference | Confirmed 'intelligent, software-defined network' enabling data access, collaboration, and secure remote work | Not assessed for sector-specific frameworks | Frucor Suntory - named, real beverage manufacturing company, brief but real customer reference | Not itemised by specific country/region | The confirmed reference is brief relative to the detailed Pick n Pay case study; specific quantified outcomes weren't itemised for this reference specifically | A real, named customer reference exists, though with less narrative and quantified detail than the confirmed Pick n Pay case study.","named_evidence":"Frucor Suntory - named, real beverage manufacturing company, brief but real customer reference","evidence_source_ids":[]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, named customer reference | Confirmed 'intelligent, software-defined network' enabling data access, collaboration, and secure remote work | Not assessed for sector-specific frameworks | Frucor Suntory - named, real beverage manufacturing company, brief but real customer reference | Not itemised by specific country/region | The confirmed reference is brief relative to the detailed Pick n Pay case study; specific quantified outcomes weren't itemised for this reference specifically | A real, named customer reference exists, though with less narrative and quantified detail than the confirmed Pick n Pay case study.","named_evidence":"Frucor Suntory - named, real beverage manufacturing company, brief but real customer reference","evidence_source_ids":[]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"retail_ecommerce":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://services.global.ntt/en-us/campaigns/infrastructure-services"],"qualification":"Recovered NTT Pick n Pay case: Fortinet managed SD-WAN across retail stores; South Africa, not proof of UK delivery. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"retail_ecommerce":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":20,"research_metrics":{"supported":12,"partial":3,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":24,"total":40,"reviewed":16,"completeness_percent":40,"completeness":0.4},"proven_evidence_count":12,"response_panel":null,"best_for":"Retail and e-commerce; Large global enterprise; managed","best_for_fields":{"sectors_yes":["Retail and e-commerce"],"sectors_partial":[],"regions":[],"size":["Large global enterprise"],"service_model":"managed","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"verizon-business","name":"Verizon Business","website":"https://www.verizon.com/business/resources/lp/secure-access-service-edge","category":"managed service provider / carrier network provider","product_focus":"RingCentral (voice/UC integration), Verizon Managed SD Branch, Verizon Managed SD WAN, Verizon SASE Management","cost_model":"Quote-based managed service; typically platform, access, security bundle, sites/users/bandwidth/term.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"partner_integrated","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"partner_integrated","f28_full_sase_platform":"partner_integrated","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"yes"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"partial","financial_services":"not_primary","retail_ecommerce":"not_confirmed","manufacturing":"partial","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/verizon/","shortlist_summary":"6 billion in revenue in 2023 (2025 consensus estimates are approximately $134-135 billion) and serving nearly all of the Fortune 500 - and its managed SD-WAN and SASE proposition sits within Verizon Business, itself organised into three named customer groups (Enterprise and Public Sector, Business Markets and Other, and Wholesale).","key_differentiators":["Global carrier-led managed SASE and SD-WAN with strong North American presence and international delivery.","Versa Networks partnership provides multi-tenant SD-WAN platform with security, routing and analytics under managed service.","Established reputation as a SASE managed services leader in industry analyst rankings."],"best_fit_for":["North American and multinational enterprises wanting carrier-led managed SD-WAN and SASE.","Buyers comfortable with Versa as the underlying platform via managed delivery.","Organisations prioritising service maturity and global delivery capability."],"watch_outs":["Platform is largely Versa-based; buyers wanting platform optionality should evaluate alternatives.","Commercial model is bespoke; cost transparency and change governance require careful contracting.","DIY/self-managed model is not the primary positioning."],"evidence_coverage_pct":0.4,"last_verified":"2026-09-01","evidence_source_count":37,"capability_evidence":{"f13_qos_and_traffic_shaping":{"source_url":"https://verizon.com/business/resources/lp/secure-access-service-edge/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'increase your overall performance through a combination of caching, application organization' and prioritisation mechanisms [18]"},"f17_cellular_and_5g_support":{"source_url":"https://www.verizon.com/business/products/networks/managed-network-services/managed-sd-branch/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Whether you have Verizon wireline or wireless access, SD Branch can support both. Graded partial rather than yes. Wireless access as a supported transport is stated plainly, and the same page describes a wireless backup option, which covers the failover half of the definition. However the words '5G', '4G' and 'LTE' do not appear in this context, and SIM management and signal monitoring were not found on any page reviewed (sources 3, 4, 8, 9, 21). Verizon is of course a mobile network operator, but that is prior knowledge and cannot be graded from; only what the pages state is reflected here."},"f18_cloud_on_ramp":{"source_url":"https://verizon.com/business/answers/what-is-cloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the specifically-named Virtual Network Services (VNS) platform and its VNS Application Edge capability [6]"},"f19_public_cloud_gateways":{"source_url":"https://www.verizon.com/business/en-gb/products/security/network-cloud-security/advanced-secure-access-service-edge/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Integrates network operation centers (NOCs) and security operation centers (SOCs) with our Managed SD WAN and Virtual Network Services (VNS), and supports Versa, Cisco cEdge and vEdge, Zscaler ZIA, Zscaler ZPA and Palo Alto Prisma Access. This is the pivotal judgement in the record. The cloud gateways that actually enforce security and deliver remote access in Verizon's SASE service are Zscaler Internet Access, Zscaler Private Access and Palo Alto Prisma Access, all of which run on those vendors' own global PoP estates, not Verizon's. Verizon's service guide carries a Zscaler product description (source 12) confirming it resells those subscriptions. Verizon operates substantial infrastructure of its own, but that is the MPLS and IP transport layer, not a Verizon-built cloud security edge, so the definition forces partner_integrated rather than yes. An identical vendor list was found on both the UK and US product pages, so this is not a regional arrangement."},"f21_private_global_backbone":{"source_url":"https://www.verizon.com/business/products/networks/connectivity/private-ip/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Private IP is a MultiProtocol Label Switching (MPLS) network that connects locations and clouds around the globe in 185+ countries. Comfortably meets the definition and is not a single-country case. Verizon operates a genuinely global MPLS backbone reaching 185+ countries, the Private IP page states 'Traffic is completely separated from the public internet to help keep it secure', and source 11 carries the ownership claim 'we own and operate one of the largest and most reliable networks on the planet'. Inter-region predictability is contractually underwritten by the Private IP SLA (source 7), which commits to jitter of '< 5 ms' PE to PE for EF class and a packet delivery ratio of '99.995%' for EF, exactly the sort of between-PoP commitment the definition contemplates."},"f26_sla_backed_service_fabric":{"source_url":"https://www.verizon.com/business/service_guide/reg/NaaS-SLA-2026JAN15-mk.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"This SLA only applies to Verizon managed NaaS components on a NaaS Order. Among the strongest evidence in this record because it rests on contractual documents rather than marketing pages. Three separate published SLAs were read. The NaaS SLA (source 6) commits to tiered site availability, to repair response of '3.5 hours (US)' or '4 hours (rest of world)' for managed devices, and to proactive incident notification 'within 15 minutes of opening such Priority 1 Trouble Ticket'. The Private IP SLA adds latency, jitter and packet delivery ratio standards. This is contractual rather than best-effort, covering uptime, response and incident handling together."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.verizon.com/business/resources/technology-partners/versa-integrated-solutions/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Intrusion detection and prevention services (IDS/IPS) The full NGFW feature set is present in the delivered service: the Versa partner page lists IDS/IPS alongside 'Antispam, antimalware and URL filtering' and DLP, and the SASE pages describe firewall as a service. But every one of those functions is another company's technology that Verizon bundles and manages, named on Verizon's own pages as Versa, Cisco cEdge and vEdge, Palo Alto Prisma Access and Zscaler, with the SASE landing page adding Netskope and Viptela. No evidence was found of a Verizon-authored firewall engine. Under the definition's explicit instruction, third-party firewall technology that the supplier resells or bundles grades partner_integrated, not yes."},"f30_zero_trust_network_access":{"source_url":"https://verizon.com/business/products/security/network-cloud-security/sase-management/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - Zscaler Private Access (ZPA) named directly [2]"},"f31_secure_web_gateway":{"source_url":"https://verizon.com/business/products/security/network-cloud-security/sase-management/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as part of the multi-platform SASE architecture [2] Capability specifics depend on which underlying platform is proposed"},"f32_casb_capability":{"source_url":"https://verizon.com/business/products/security/network-cloud-security/sase-management/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name as a core SASE architecture component described in Verizon's own SASE definition materials [2] Specific inline-versus-API-mode technical detail not itemised per platform"},"f40_managed_service_assurance":{"source_url":"https://www.verizon.com/business/resources/technology-partners/versa-integrated-solutions/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Support provided by Verizon's Network Operations Center (NOC) and Security Operations Center (SOC) teams Both a NOC and a SOC are Verizon's own and wrap the partner technology, which is the core of the definition. Proactive ownership is contractual rather than merely claimed: the NaaS SLA commits Verizon to open a trouble ticket for each Priority 1 incident and notify the customer within 15 minutes. The SOC services page adds 'Gain 24/7 access to monitoring, extensive global threat visibility and expert analysis', and SD Branch confirms '24/7/365 access to Managed SD Branch reporting'. Confidence is medium rather than high because two named elements of the definition, formal root cause analysis and structured periodic service reviews with change governance, were not found verbatim on any page reviewed."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:f524b565e57fd0343b667af0","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"yes","transport_logistics":"partial","professional_services":"partial","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"uk_entity","curated_uk_basis":"UK contracting entity (Verizon Business has UK operations), though US headquartered, with real UK and European delivery.","sector_review_queue":[{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real (if anonymised) case study | SD-WAN and network segmentation directly relevant to protecting sensitive manufacturing data and streamlining traffic | Not assessed for sector-specific frameworks | A real, detailed (anonymised) 'global manufacturer' case study confirming data protection and traffic streamlining | N/A | The case study is real and specific in its narrative but does not disclose the customer's name | Real, credible sector-fit evidence via a genuine case study, reinforced by Verizon's own dedicated manufacturing-sector SD-WAN use-case content.","named_evidence":"A real, detailed (anonymised) 'global manufacturer' case study confirming data protection and traffic streamlining","evidence_source_ids":["evidence:verizon:17","evidence:verizon:20"]},{"sector":"government_public_sector","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | Confirmed FedRAMP-authorized products, direct collaboration with Cisco during the authorization process, and confirmed government-traffic-specific network segmentation capability (Table 4) | FedRAMP confirmed at the specific, quantified case-study level (Table 13) | A real, detailed, quantified (anonymised) federal-agency case study: 20,000-plus users across 70 US locations | United States, per the confirmed case study | The confirmed case study describes a UC/collaboration deployment specifically, rather than confirmed blanket FedRAMP authorization for the core SD-WAN/SASE service | Genuinely the best-evidenced sector in this entire profile - a real, detailed, quantified case study with specific, named technology partners (Cisco) and a precise deployment scale.","named_evidence":"A real, detailed, quantified (anonymised) federal-agency case study: 20,000-plus users across 70 US locations","evidence_source_ids":["evidence:verizon:19"]},{"sector":"healthcare","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real (if anonymised) case study reference | Not assessed in specific technical detail for this sector beyond the confirmed SASE deployment reference | HIPAA not confirmed (Table 13) - a specific, worth-flagging gap for this sector specifically | A real, referenced (anonymised) 'large healthcare business' SASE deployment optimising security operations | N/A | The case study is referenced only briefly, without the same narrative depth as the manufacturing or federal examples | Real sector-fit evidence exists, though this specific case study reference is less detailed than the confirmed manufacturing and federal examples; the confirmed absence of a HIPAA attestation is a specific, worth-flagging gap for this sector.","named_evidence":"A real, referenced (anonymised) 'large healthcare business' SASE deployment optimising security operations","evidence_source_ids":["evidence:verizon:21"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"manufacturing":false,"healthcare":false,"government_public_sector":false},"reviewed_at":"2026-09-30T15:40:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://verizon.com/business/resources/customer-success-stories/federal-agency/","https://verizon.com/business/resources/articles/s/three-sd-wan-use-cases-for-enterprises/","https://verizon.com/business/resources/customer-success-stories/manufacturing-giant/","https://www.verizon.com/business/resources/articles/sase-helps-healthcare-business-privacy-concerns.pdf"],"qualification":"Verizon federal-agency page is secure cloud video collaboration for 20,000 users. The linked case is not SD-WAN/SASE evidence. Verizon manufacturing case explicitly describes SD-WAN design, rollout and traffic segmentation; manufacturer is unnamed. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation. Recovered primary anonymous healthcare SASE deployment: 200 sites, supplier managed. Does not establish UK/NHS delivery or a named customer.","sectors":{"government_public_sector":"not_confirmed","manufacturing":"partial","healthcare":"partial"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":21,"research_metrics":{"supported":11,"partial":1,"partner_delivered":4,"managed_service_dependent":0,"not_primary":0,"unconfirmed":24,"total":40,"reviewed":16,"completeness_percent":40,"completeness":0.4},"proven_evidence_count":11,"response_panel":null,"best_for":"Healthcare (partial evidence); Manufacturing (partial evidence); Large global enterprise; managed","best_for_fields":{"sectors_yes":[],"sectors_partial":["Healthcare","Manufacturing"],"regions":[],"size":["Large global enterprise"],"service_model":"managed","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"cradlepoint-ericsson","name":"Ericsson Cradlepoint","website":"https://cradlepoint.com","category":"technology vendor / carrier network provider","product_focus":"NetCloud Federal, NetCloud Manager, NetCloud Perimeter, NetCloud Private Networks","cost_model":"Quote-based NetCloud subscriptions + routers/adapters; public hardware pricing may exist through resellers.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"partner_integrated","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/ericsson-cradlepoint/","shortlist_summary":"1 billion. That makes this platform’s identity distinctive within this product category: it sits inside one of the world’s largest telecommunications equipment manufacturers rather than a standalone security company or a private-equity-backed challenger, and its architecture reflects that heritage directly - NetCloud SASE is built cellular-first, with confirmed, specific capabilities like traffic steering based on cellular attributes and 5G standalone network slicing for guaranteed bandwidth that have no real equivalent among fixed-line-oriented competitors.","key_differentiators":["Wireless-first branch architecture from Ericsson with deep 5G expertise; NetCloud provides cellular-centric SD-WAN management.","Strong story for organisations adopting 5G as a primary access medium rather than as a backup.","Network slicing and private 5G integration roadmap is more credible than competitors lacking cellular heritage."],"best_fit_for":["Distributed enterprises with strong cellular/5G access strategy (retail, logistics, transport, public sector).","Buyers consolidating wireless WAN with traditional fixed-line SD-WAN under one operational tool.","Organisations interested in private 5G integration with branch SD-WAN."],"watch_outs":["SASE story is partner-integrated rather than native; SSE capabilities require validation in RFP.","Cloud on-ramp: supported; Multi-cloud transit fabric: not confirmed. Confirm the cloud locations, connectivity pattern and transit design.","Best for cellular-led architectures; less strong as a primary fit for fixed-circuit-heavy estates."],"evidence_coverage_pct":0.375,"last_verified":"2026-09-01","evidence_source_count":38,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://cradlepoint.ericsson.com/about/how-to-buy","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Enterprise Wireless products are sold through our world-class global ecosystem of distributors, resellers, managed service providers, and integrators. Managed service providers are an explicit channel and the partner programme names a service provider category that builds managed offerings on the platform, which implies multi customer operation. However no page reviewed documents tenant isolation, delegated administration, branded portals or templates under the partner's own brand, so this is graded partial rather than yes. NetCloud Manager subaccount structure is referenced in the security page bullets but not in language firm enough to quote for white labelling."},"f05_professional_services_and_migration_support":{"source_url":"https://cradlepoint.ericsson.com/about/how-to-buy","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"These specialized partners have deep knowledge of our products and offer an array of high-value services. Design, integration and implementation services are attributed to the reseller and integrator channel rather than to an Ericsson Cradlepoint professional services organisation. The vendor supplies training and certification directly, but no discovery, pilot, staging, migration runbook or rollback offering was found on the pages reviewed, so the capability is graded as delivered through partners."},"f07_lifecycle_management":{"source_url":"https://cradlepoint.com/products/netcloud-service/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Your wireless edge routers and adapters, or endpoints, include a product warranty for the duration of your active NetCloud Essential or Advanced subscription. Hardware warranty runs for the life of the subscription and the same page states that NetCloud Manager continuously delivers real time cloud and device operating software updates to 5G and LTE endpoints, so firmware and software currency are part of the subscription. End of life planning and renewal management are implied by the subscription continuity wording but are not separately documented."},"f10_dynamic_path_selection":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the named cellular-attribute-based traffic steering capability [15]"},"f13_qos_and_traffic_shaping":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 5G standalone network slicing 'for guaranteed bandwidth' is a specific, named, technically distinctive QoS mechanism [15]"},"f17_cellular_and_5g_support":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"With benefits like traffic steering based on cellular attributes and network slicing for guaranteed bandwidth as networks evolve to 5G standalone, NetCloud SASE enables fast moving organizations to accelerate their transformation. This is the supplier's core competence. The data sheet additionally describes SD-WAN optimising traffic across wired, 5G and LTE, satellite, Wi-Fi as WAN, private APNs and 5G standalone network slices, and the endpoint range is built around integrated cellular modems. Traffic steering on cellular attributes evidences signal level awareness."},"f18_cloud_on_ramp":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via the platform's fully cloud-managed architecture [15]"},"f19_public_cloud_gateways":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via the platform's fully cloud-managed architecture [15]"},"f34_remote_user_access":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and genuinely a core, confirmed architectural principle - 'While other solutions require agents or special browsers, NetCloud SASE uses agent-less isolation-based security' [15]"},"f40_managed_service_assurance":{"source_url":"https://cradlepoint.com/support/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Support is one of the most valuable tools within a NetCloud subscription and is staffed by accredited network engineers Round the clock global support is documented, with centres in Boise, London and Melbourne and direct access to the engineering organisation, and a public NetCloud status page exists for incident notification. What is not documented on any page reviewed is a 24/7 NOC and SOC proactively monitoring the customer's service, incident ownership through to root cause analysis, structured service reviews or change governance, so this falls short of the full definition."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:6810d536693038af740ed4a9","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"not_confirmed","retail_ecommerce":"yes","manufacturing":"partial","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"partial","hospitality_leisure":"partner_integrated"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US, Ericsson-owned). UK delivery via mobile operators and partners.","sector_review_queue":[{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Conditional - evidenced via a single, smaller technographic reference | Not assessed in specific technical detail for this sector | Not assessed for sector-specific frameworks | Roanoke Electric Cooperative (a smaller, US-based utility, confirmed as a real-world NetCloud Manager customer via independent technographic sales-intelligence data) | N/A | A single, smaller-scale technographic reference rather than a full narrative case study | A real, named customer reference exists, though at a smaller scale than the manufacturing/retail technographic references found elsewhere in this table.","named_evidence":"Roanoke Electric Cooperative (a smaller, US-based utility, confirmed as a real-world NetCloud Manager customer via independent technographic sales-intelligence data)","evidence_source_ids":["evidence:ericsson-cradlepoint:20"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via technographic data | SD-WAN and branch connectivity plausibly relevant to distributed manufacturing sites | Not assessed for sector-specific frameworks | JBT Corporation (a $2 billion, 7,000-employee US manufacturer, confirmed as a real-world NetCloud Manager customer via independent technographic sales-intelligence data) | N/A | The evidence here is technographic (confirmed technology usage) rather than a full narrative case study with quoted outcomes | A real, named, large, credible, easily-verifiable customer (JBT Corporation) is confirmed via independent technographic data - genuinely concrete, if not narratively detailed, evidence for this sector.","named_evidence":"JBT Corporation (a $2 billion, 7,000-employee US manufacturer, confirmed as a real-world NetCloud Manager customer via independent technographic sales-intelligence data)","evidence_source_ids":["evidence:ericsson-cradlepoint:20"]},{"sector":"government_public_sector","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | NetCloud Federal, FIPS 140-3 routers, the Pop-Up Network Kit for field-deployable connectivity, and the confirmed multi-carrier active-failover architecture are all directly relevant to this sector's specific requirements | FedRAMP High-level assurance via the confirmed Axon-hosted NetCloud Federal environment; FIPS 140-3 confirmed for select routers | Confirmed directly as a served sector generally, reinforced by a named reseller's specific claim of serving '1,100 unique government agencies across local, state, education, and federal sectors' | US-specific, per the confirmed named-carrier and FedRAMP evidence | General sector confirmation and named-reseller scale evidence exist; a single, narrative, individually-named government-agency case study wasn't found | Genuinely the best-evidenced sector in this entire profile - a specific, precise, primary-sourced compliance pathway (NetCloud Federal/Axon) combined with a real, named reseller's confirmed, quantified government-agency customer count together make this the platform's strongest, most concretely-evidenced sector fit.","named_evidence":"Confirmed directly as a served sector generally, reinforced by a named reseller's specific claim of serving '1,100 unique government agencies across local, state, education, and federal sectors'","evidence_source_ids":["evidence:ericsson-cradlepoint:12","evidence:ericsson-cradlepoint:13","evidence:ericsson-cradlepoint:14"]},{"sector":"transport_logistics","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | The confirmed in-vehicle telemetry API/SDK integration example, multi-carrier active failover, and location-based performance analysis are all directly and specifically relevant to fleet and transportation use cases | Not assessed for sector-specific frameworks | Confirmed directly as a served sector generally; a dedicated 'Transportation' content section on the company's own site reinforces this sector focus specifically | N/A | Real, confirmed sector-specific product content and API examples exist; a named, individual transportation-company case study with quantified outcomes wasn't found | A genuinely well-evidenced sector fit at the product-and-capability level - the confirmed in-vehicle telemetry integration and fleet-specific content demonstrate real, deliberate sector focus, even without a single, quoted named customer story.","named_evidence":"Confirmed directly as a served sector generally; a dedicated 'Transportation' content section on the company's own site reinforces this sector focus specifically","evidence_source_ids":["evidence:ericsson-cradlepoint:12","evidence:ericsson-cradlepoint:15"]},{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via technographic data | SD-WAN and branch/POS connectivity plausibly relevant | Not assessed for sector-specific frameworks | Fuzzy's Taco Shop and Evereve (both confirmed as real-world NetCloud Manager customers via independent technographic sales-intelligence data) | N/A | The evidence here is technographic (confirmed technology usage) rather than a full narrative case study with quoted outcomes | Two real, named, independently-confirmed customers in this sector via technographic data - a real, if not narratively detailed, evidentiary base.","named_evidence":"Fuzzy's Taco Shop and Evereve (both confirmed as real-world NetCloud Manager customers via independent technographic sales-intelligence data)","evidence_source_ids":["evidence:ericsson-cradlepoint:20"]},{"sector":"hospitality_leisure","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via technographic data | SD-WAN and branch/POS connectivity plausibly relevant | Not assessed for sector-specific frameworks | Fuzzy's Taco Shop and Evereve (both confirmed as real-world NetCloud Manager customers via independent technographic sales-intelligence data) | N/A | The evidence here is technographic (confirmed technology usage) rather than a full narrative case study with quoted outcomes | Two real, named, independently-confirmed customers in this sector via technographic data - a real, if not narratively detailed, evidentiary base.","named_evidence":"Fuzzy's Taco Shop and Evereve (both confirmed as real-world NetCloud Manager customers via independent technographic sales-intelligence data)","evidence_source_ids":["evidence:ericsson-cradlepoint:20"]}],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":22,"research_metrics":{"supported":11,"partial":3,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":25,"total":40,"reviewed":15,"completeness_percent":38,"completeness":0.375},"proven_evidence_count":11,"response_panel":null,"best_for":"Sector evidence not yet reviewed; both","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"both","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"virgin-media-o2","name":"Virgin Media O2 Business","website":"https://netify.co.uk/marketplace/virgin-media-o2/","category":"managed service provider / carrier network provider","product_focus":"8x8 Voice for Teams, Cloud Infrastructure as a Service / Platform as a Service, Managed Detection and Response, Success Agreement","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_entity","uk_basis":"Virgin Media Business Limited, company 01785381, publishes its registered office in Reading and UK business network service terms.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"partial","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"partial","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"partial","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"yes","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"not_confirmed","uk_support_desk":"not_confirmed","named_tam":"not_confirmed"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/virgin-media-o2/","shortlist_summary":"Managed connectivity and SD-WAN with Zscaler-based SASE; confirm the current contracting entity and scope.","key_differentiators":["Managed connectivity and SD-WAN with Zscaler-based SASE; confirm the current contracting entity and scope."],"best_fit_for":["Buyers comparing managed connectivity and partner-delivered cloud security."],"watch_outs":[],"evidence_coverage_pct":0.35,"last_verified":"2026-09-01","evidence_source_count":39,"capability_evidence":{"f10_dynamic_path_selection":{"source_url":"https://virginmediao2business.co.uk/connectivity/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'automatically path adjustment based on real-time conditions with dynamic application-aware routing' [10] [13]"},"f12_application_aware_routing":{"source_url":"https://virginmediao2business.co.uk/connectivity/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'automatically path adjustment based on real-time conditions with dynamic application-aware routing' [10] [13]"},"f13_qos_and_traffic_shaping":{"source_url":"https://virginmediao2business.co.uk/connectivity/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'prioritising applications, focussing on critical services' and 'boost peak time performance and cut the need for MPLS circuits' [10] [13]"},"f17_cellular_and_5g_support":{"source_url":"https://virginmediao2business.co.uk/connectivity/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name as a supported WAN underlay [10] [13]"},"f18_cloud_on_ramp":{"source_url":"https://virginmediao2business.co.uk/connectivity/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'connecting directly to cloud apps including AWS, Azure and Google Cloud' [10] [13]"},"f23_multi_cloud_transit_fabric":{"source_url":"https://virginmediao2business.co.uk/connectivity/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'connecting directly to cloud apps including AWS, Azure and Google Cloud' [10] [13]"},"f05_professional_services_and_migration_support":{"grade":"partial","source_url":"https://www.virginmediabusiness.co.uk/connectivity/sdwan/sdwan-end-to-end-service/","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"VMO2 describes experts supporting network and cloud migration with customer teams. A site trial is offered; rollback and training scope require confirmation."},"f16_mpls_coexistence_and_migration":{"source_url":"https://www.virginmediabusiness.co.uk/connectivity/sdwan/sdwan-how-it-works/","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"Service gateways connect existing MPLS IP VPN and new SD-WAN networks during transition. Confirm the design for each site."},"f37_customer_portal_and_rbac":{"grade":"partial","source_url":"https://www.virginmediabusiness.co.uk/pdf/legal-documents/vmbusiness-service-schedule-sdwan-v5.0.pdf","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"Clause 14 and Appendix 1 document customer portals and individual user access. Granular role-based permissions remain unconfirmed."},"f26_sla_backed_service_fabric":{"grade":"partial","source_url":"https://www.virginmediabusiness.co.uk/pdf/legal-documents/vmbusiness-service-schedule-sdwan-v5.0.pdf","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"Appendix 2 provides conditional service gateway targets and credits. This is not a blanket end-to-end performance guarantee."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:121d7b6c883b7450e2526ed3","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"global_managed","curated_uk_basis":"Confirm UK delivery scope through RFP.","sector_review_queue":[],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{},"reviewed_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Codex primary-source review","source_urls":["https://www.virginmediabusiness.co.uk/legal/terms-and-conditions/","https://www.virginmediabusiness.co.uk/legal/privacy-policy/"],"qualification":"UK review update (supersedes earlier UK-region qualification): The published business terms name Virgin Media Business Limited and include SD-WAN and UK managed IPVPN schedules. This is evidence of a UK contracting entity, not confirmation of a specific estate, Irish availability, response commitment or the entity used for a separate O2 service.","sectors":{},"regions":{"uk_ireland":"yes"}}},"uk_evidence":{"entity":{"status":"evidenced","name":null,"source_urls":["https://www.virginmediabusiness.co.uk/legal/terms-and-conditions/","https://www.virginmediabusiness.co.uk/legal/privacy-policy/"],"checked_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","qualification":"Virgin Media Business Limited, company 01785381, publishes its registered office in Reading and UK business network service terms."},"regional_delivery":{"status":"yes","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"summary_source":"https://virginmediabusiness.co.uk/connectivity/sdwan/","position":23,"research_metrics":{"supported":10,"partial":4,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":26,"total":40,"reviewed":14,"completeness_percent":35,"completeness":0.35},"proven_evidence_count":10,"response_panel":null,"best_for":"Sector evidence not yet reviewed; UK and Ireland; Large global enterprise; managed","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":["UK and Ireland"],"size":["Large global enterprise"],"service_model":"managed","signoff":""},"editorial":null,"uk_status":{"status":"uk_entity","label":"UK contracting entity","source_urls":["https://www.virginmediabusiness.co.uk/legal/terms-and-conditions/","https://www.virginmediabusiness.co.uk/legal/privacy-policy/"],"reviewed_at":"2026-09-30T19:56:00Z","qualification":"Virgin Media Business Limited, company 01785381, publishes its registered office in Reading and UK business network service terms."}},{"slug":"cloudflare-one","name":"Cloudflare One","website":"https://www.cloudflare.com/sase","category":"technology vendor","product_focus":"AI Gateway / Agents SDK / MCP security, CASB, Cloudflare Access, Cloudflare One","cost_model":"Quote-based enterprise pricing; some Zero Trust user tiers public, Magic WAN enterprise requires quote.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"not_confirmed","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"partial","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"not_confirmed","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"not_confirmed","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":300,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/cloudflare-one/","shortlist_summary":"Rather than building a security platform and adding network reach, or building a network and adding security, Cloudflare started as one of the internet’s largest content-delivery and DDoS-mitigation networks (founded 2009, public since 2019 on NYSE: NET) and extended that same global infrastructure - every product running in every data centre, not routed to a handful of regional security hubs - into a full SASE platform.","key_differentiators":["Cloudflare global edge network provides one of the largest PoP footprints in the category for SASE traffic.","Strong Zero Trust and SWG capability inheritance from the wider Cloudflare security platform.","Magic WAN Connector provides simplified branch connectivity into the Cloudflare One platform."],"best_fit_for":["Buyers already using Cloudflare for DDoS protection, CDN or Zero Trust who want to extend into WAN.","Organisations prioritising global PoP coverage and edge performance for SaaS access.","Mid-market buyers attracted to Cloudflare One pricing transparency for Zero Trust user tiers."],"watch_outs":["Dynamic path selection: supported; QoS and traffic shaping: not confirmed; Packet loss remediation: not confirmed. Confirm branch requirements and any delivery partner dependency.","Less mature for very large branch estates with complex underlay requirements.","Managed and co-managed service models are partner-led; this is primarily a self-service platform."],"evidence_coverage_pct":0.325,"last_verified":"2026-09-01","evidence_source_count":75,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://developers.cloudflare.com/tenant/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The Cloudflare Tenant API is a provisioning mechanism to help Channel and Alliance partners set up and manage Cloudflare accounts and services for their customers. The Tenant Platform gives partners per-customer account provisioning and delegated administration, which covers tenant isolation. No evidence found on the pages read of branded portals or white-label templates letting an MSP operate the platform under its own brand."},"f10_dynamic_path_selection":{"source_url":"https://cloudflare.com/enterprise/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, via the confirmed Argo Smart Routing capability, which dynamically routes traffic across Cloudflare's own network for optimal performance [33]"},"f19_public_cloud_gateways":{"source_url":"https://developers.cloudflare.com/magic-wan/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Instead of backhauling traffic through a central data center or maintaining dedicated MPLS circuits at every site, your traffic routes through the nearest Cloudflare data center where security policies apply inline. The enforcement points are Cloudflare's own data centres, not a third party's infrastructure that Cloudflare resells. The SASE page states Cloudflare delivers full SASE from 300+ cities and the network page states 337 cities and 8 regions."},"f20_private_pops_dedicated_pops":{"source_url":"https://www.cloudflare.com/data-localization/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Choose the location of the data centers where your traffic is inspected. The Data Localization Suite offers regional control over which of Cloudflare's own data centres inspect traffic, which addresses sovereignty of the processing location. That remains region selection inside the shared multi-tenant network. No offer of customer-hosted or physically dedicated PoPs was found on the pages read."},"f21_private_global_backbone":{"source_url":"https://blog.cloudflare.com/cloudflare-backbone-internet-fast-lane/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our backbone is a dedicated network, providing guaranteed network capacity and consistent latency between various locations. The same dated vendor post states the backbone comprises long-distance fibre optic cables connecting Cloudflare data centres across North America, South America, Europe and Asia, so it is intercontinental rather than national. Evidence is from a 2021 post; the SASE reference architecture read in 2026 does not use the word backbone."},"f26_sla_backed_service_fabric":{"source_url":"https://www.cloudflare.com/plans/enterprise/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"backed by dependable SLAs, 100% uptime, and reliable service you can trust. Availability and 24/7/365 support commitments are published for Enterprise plans. The underlying contractual SLA document itself was not reachable, as two candidate SLA URLs returned 404, so change handling and latency, jitter and loss commitments could not be verified."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.cloudflare.com/sase/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Cloudflare One converges core SASE services such as zero trust network access (ZTNA), secure web gateway (SWG), cloud access security broker (CASB), network-as-a-service (NaaS), and firewall-as-a-service (FWaaS). Firewall, secure web gateway and DLP are converged into Cloudflare's own platform and delivered from its network rather than as a separate appliance or a resold third-party stack. Gateway documentation confirms packet-level network policies and full inspection of web request content. Intrusion prevention specifically was not confirmed by a verbatim sentence on the pages read."},"f35_soc_siem_soar_integration":{"source_url":"https://cloudflare.com/enterprise/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, well-evidenced via the confirmed, massive-scale, continuous global threat-telemetry operation (47.1 million DDoS attacks mitigated in 2025, 230 billion threats blocked daily per Cloudflare's own reporting) [33] [10] Not confirmed"},"f40_managed_service_assurance":{"source_url":"https://www.cloudflare.com/plans/enterprise/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Award-winning, global, 24/7/365 email and emergency phone support (for Enterprise plans). Round the clock vendor support is published, but no statement was found describing a NOC and SOC proactively monitoring the customer service, owning incidents through to root cause analysis, or running structured service reviews and change governance."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:d0cb15272c6bd7b3354bcf26","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"partial","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"partial","transport_logistics":"yes","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). Multiple UK edge locations; self-serve or via UK partners.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Conditional - one named, if thinly detailed, case reference exists | Not assessed in detail | Not assessed | Applied Systems (referenced specifically for 'legacy vendor costs avoided', per Cloudflare's own SASE product page) | N/A | Thin detail beyond the named customer and general cost-avoidance framing | A real, named customer reference, though with less quantified detail than the government-sector evidence above.","named_evidence":"Applied Systems (referenced specifically for 'legacy vendor costs avoided', per Cloudflare's own SASE product page)","evidence_source_ids":["evidence:cloudflare-one:32"]},{"sector":"government_public_sector","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | FedRAMP Moderate authorization with a genuinely distinctive, broad data-centre footprint; CISA partnership for .gov DNS security | FedRAMP Moderate (since 2022); FedRAMP High in progress | Berkeley Lab (named, chose Cloudflare as its zero-trust security partner, per Cloudflare's own materials); FBI and US Department of State referenced directly by Cloudflare's CEO as long-standing, technically demanding agency customers | US federal specifically well-evidenced; international government certification pursuits (IRAP for Australia, ENS achieved for Spain) demonstrate real, current international investment | FedRAMP High not yet confirmed achieved | Genuinely one of the best-evidenced sectors in this entire profile - a named national laboratory customer, direct CEO references to specific, technically sophisticated federal agencies, and a distinctive, primary-sourced FedRAMP architecture all combine into a credible, specific public-sector story.","named_evidence":"Berkeley Lab (named, chose Cloudflare as its zero-trust security partner, per Cloudflare's own materials); FBI and US Department of State referenced directly by Cloudflare's CEO as long-standing, technically demanding agency customers","evidence_source_ids":["evidence:cloudflare-one:26","evidence:cloudflare-one:27","evidence:cloudflare-one:29","evidence:cloudflare-one:30"]}],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":24,"research_metrics":{"supported":10,"partial":3,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":27,"total":40,"reviewed":13,"completeness_percent":33,"completeness":0.325},"proven_evidence_count":10,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"comcast-business","name":"Comcast Business","website":"https://business.comcast.com","category":"managed service provider / carrier network provider","product_focus":"Comcast Business CASB, Comcast Business FWaaS, Comcast Business Managed SD-WAN, Comcast Business SASE","cost_model":"Quote-based managed/co-managed service; access, SD-WAN, SASE and SOC/AIOps elements drive cost.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"not_confirmed","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"partner_integrated","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"partner_integrated","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/comcastbusiness/","shortlist_summary":"Comcast Business’s managed SD-WAN and SASE proposition traces its specialist technical foundation to Masergy, a managed SD-WAN and SASE vendor founded in 2000 in Plano, Texas, which Comcast Business acquired in 2021 to, in the words of Comcast Business’s then-President Bill Stemper, ‘instantly and dramatically amplify our growth in the global enterprise market’.","key_differentiators":["SASE combining SD-WAN and security available fully managed or co-managed, drawing on Masergy AIOps heritage.","Recognised as a leading managed SD-WAN provider by industry analysts.","Strong North American underlay ownership with international delivery via partners."],"best_fit_for":["North American enterprises wanting managed or co-managed SD-WAN and SASE from a single carrier.","Buyers attracted to the AIOps capabilities inherited from the Masergy acquisition.","Organisations prioritising co-managed delivery with shared operational control."],"watch_outs":["International delivery depth depends on partnerships outside North America.","Underlying platform choice should be confirmed; service depth varies by selected platform.","Commercial model bundles access, SD-WAN, SASE and SOC elements; explicit line-item costing required."],"evidence_coverage_pct":0.3,"last_verified":"2026-09-01","evidence_source_count":24,"capability_evidence":{"f07_lifecycle_management":{"source_url":"https://business.comcast.com/enterprise/products-services/sd-wan-solutions/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Equipment replacement SLA ,  24x7x4 (On-Net) and 8X5XNBD (Off-Net) Hardware replacement is contractually covered as part of the managed service. No statement found on the pages reviewed covering firmware upgrades, patching, renewals or end-of-life planning, so graded partial. CPE is Fortinet hardware per the Masergy product sheet."},"f17_cellular_and_5g_support":{"source_url":"https://business.comcast.com/enterprise/products-services/sd-wan-solutions/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Help keep your network running with 4G LTE backup. 4G LTE is documented as a backup transport. No evidence found on the pages reviewed for 5G, for cellular as a primary transport, or for SIM management and signal monitoring, so graded partial."},"f19_public_cloud_gateways":{"source_url":"https://corporate.comcast.com/press/releases/comcast-business-fortinet-secure-enterprise-application-access-sase-sse-solutions","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Comcast Business Secure Gateways are hosted across the United States at Equinix data centers, offering up to 10 gigabits per second (Gbps) of cloud connectivity for public, private, or hybrid cloud deployments. Comcast Business brands and operates the Secure Gateways, but the enforcement stack is Fortinet technology and the hosting fabric is Equinix, per the same release: \"Fortinet's security-driven networking technology and Equinix's flexible cloud connection Equinix Fabric™ for a complete secure network service.\" Under the definition this is partner_integrated, not yes. Footprint stated as United States only."},"f27_integrated_next_generation_firewall":{"source_url":"https://business.comcast.com/resources/enterprise/articles/uniting-managed-sase-and-connectivity-for-scalable-networking-and-security","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Firewall as a Service: Next-generation Firewall for network traffic inspection and security'"},"f28_full_sase_platform":{"source_url":"https://business.comcast.com/enterprise/products-services/secure-networking/sase","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'Zero-trust network access (ZTNA): Verifies the identity of every user and device before allowing them to access internal resources by setting up one-to-one encrypted connections'"},"f30_zero_trust_network_access":{"source_url":"https://business.comcast.com/enterprise/products-services/secure-networking/sase","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'Zero-trust network access (ZTNA): Verifies the identity of every user and device before allowing them to access internal resources by setting up one-to-one encrypted connections'"},"f31_secure_web_gateway":{"source_url":"https://business.comcast.com/resources/enterprise/articles/uniting-managed-sase-and-connectivity-for-scalable-networking-and-security","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name as a core SASE component - 'Secure Web Gateway (SWG): On-premise or cloud-based Internet traffic filtering'"},"f32_casb_capability":{"source_url":"https://business.comcast.com/resources/enterprise/articles/uniting-managed-sase-and-connectivity-for-scalable-networking-and-security","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Cloud Access Security Broker (CASB): To secure access to cloud applications' Specific inline-versus-API-mode technical detail not itemised"},"f33_data_loss_prevention":{"source_url":"https://corporate.comcast.com/press/releases/comcast-business-fortinet-secure-enterprise-application-access-sase-sse-solutions","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Firewall-as-a-Service (FWaaS), Intrusion Prevention (IPS), Data Loss Prevention (DLP), Cloud Access Security Brokers (CASB), and Zero Trust Network Access (ZTNA). DLP is named as part of the SASE/SSE offer but is delivered on Fortinet's security-driven networking technology, so partner_integrated rather than yes. No detail found on classification depth, blocking versus flagging, alerting or exception workflows."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:eb912a1b099feb573967e73d","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"yes"},"curated_uk_delivery":"global_managed","curated_uk_basis":"No UK HQ (US). UK delivery via the Masergy global platform and partners.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":25,"research_metrics":{"supported":8,"partial":2,"partner_delivered":2,"managed_service_dependent":0,"not_primary":0,"unconfirmed":28,"total":40,"reviewed":12,"completeness_percent":30,"completeness":0.3},"proven_evidence_count":8,"response_panel":null,"best_for":"Sector evidence not yet reviewed; managed","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"managed","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"arista-velocloud","name":"VeloCloud","website":"https://www.arista.com","category":"technology vendor","product_focus":"Arista AVA, Edge Threat Management (ETM), SSE partner integrations, VeloCloud Orchestrator","cost_model":"Quote-based edge subscriptions/appliances/support; managed services commonly delivered by carriers/MSPs.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partner_integrated","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"not_confirmed","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"partner_integrated","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"partner_integrated","f32_casb_capability":"partner_integrated","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"partner_integrated","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"not_primary","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":150,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/velocloud/","shortlist_summary":"VeloCloud was founded in 2012 as a cloud-delivered SD-WAN pioneer, acquired by VMware in 2017 for approximately $336 million, then came under Broadcom’s ownership when Broadcom completed its roughly $69 billion acquisition of VMware in 2023. Under Broadcom, the product was paired with Symantec’s security stack (Broadcom separately owns Symantec’s enterprise security business) into a single-vendor offering called ‘VMware VeloCloud SASE, secured by Symantec’, announced February 2024.","key_differentiators":["VeloCloud was an early SD-WAN platform with strong cloud-delivered gateway architecture; now under Arista following the 2025 acquisition.","Multi-tenant design has made VeloCloud common in carrier and MSP managed services.","Application-aware routing and dynamic path selection are mature capabilities with substantial deployment history."],"best_fit_for":["Enterprises consuming VeloCloud through a managed service provider (Vodafone UK, others).","Service providers running multi-tenant SD-WAN at scale.","Buyers comfortable with a platform in transition under new ownership."],"watch_outs":["Platform is mid-transition from VMware/Broadcom to Arista; product roadmap, naming and integration story will evolve.","Security and SASE capabilities are largely partner-integrated rather than native.","Direct enterprise sales motion is less established than legacy vendors; most consumption is via managed providers."],"evidence_coverage_pct":0.3,"last_verified":"2026-09-01","evidence_source_count":35,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.arista.com/assets/data/pdf/VeloCloud-SD-WAN-Data-Sheet.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Cloud-native by design, VeloCloud SD-WAN is delivered via a global network of Edge PoPs, either self-managed or as a managed service. Arista authors the platform; the managed-service option is operated by MSP and service-provider partners rather than by Arista end to end. Arista's own press release quotes T&A SYSTEME GmbH, 'a German MSP managing 7500+ sites in 98 countries', and MetTel as the parties running the service for customers. No Arista-run design-to-report managed service was found."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.arista.com/assets/data/pdf/SD-WAN-Solution-Overview.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Enterprises or their managed service providers can define business-level policies that apply enterprise-wide across many Edges Tenant isolation and delegated administration are evidenced by the multitenant Orchestrator, Controller and Gateway architecture and the three-tier RBAC model, and the partner programme carries 'SD-WAN MSP Partner Requirements'. Graded partial rather than yes because no page reviewed described branded or white-label partner portals, which the definition requires."},"f17_cellular_and_5g_support":{"source_url":"https://www.arista.com/assets/data/pdf/Datasheets/VeloCloud-SD-WAN-Edge-7x0-Series.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Dual Physical SIM + single eSIM (single standby) The 7x0 datasheet documents an integrated Telit FN990A28 modem, 'LTE Category Cat-19', carrier aggregation, HSPA+ 3G fallback and a full 5G FR1 band list, with dual physical SIM plus eSIM. The product page states 'integrated WiFi and 5G' and the 4100/5100 page leads with 'Integrated 5G Enterprise-class SD-WAN appliances for branches'. LTE is also listed among supported WAN transports."},"f20_private_pops_dedicated_pops":{"source_url":"https://www.arista.com/assets/data/pdf/SD-WAN-Solution-Overview.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Gateways can be deployed as partner Gateways on the premises of service providers, where they are managed by the service provider Gateways are not restricted to a shared multi-tenant estate: the datasheet describes 'A distributed, global network of gateways, hosted by Arista/service providers or deployed on-premises' and lists 'Partner Gateway Support' as a feature, covering customer-hosted and dedicated partner deployments. No sovereign-region offering was named on the pages reviewed."},"f27_integrated_next_generation_firewall":{"source_url":"https://networkworld.com/article/4199622/arista-debuts-unified-sd-wan-edge-platform.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and specifically confirmed as part of the in-development Edge Threat Management capability - firewalls, segmentation, DNS filtering, geolocation controls, and threat prevention embedded directly on VeloCloud edge devices [17] [21] Not yet generally available - planned for Q4 2026 as of this profile's research"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:f5387b83efff650f5c9acd5b","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). VeloCloud delivered in the UK through carriers including BT and Vodafone.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":26,"research_metrics":{"supported":6,"partial":2,"partner_delivered":4,"managed_service_dependent":0,"not_primary":0,"unconfirmed":28,"total":40,"reviewed":12,"completeness_percent":30,"completeness":0.3},"proven_evidence_count":6,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"expereo","name":"Expereo","website":"https://netify.co.uk/marketplace/expereo/","category":"managed service provider / carrier network provider","product_focus":"Expereo Enhanced Internet, Expereo Managed SD-WAN, Expereo SD-WAN/SASE with Cato Networks, Starlink (via Expereo, authorised reseller)","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"not_confirmed","uk_support_desk":"not_confirmed","named_tam":"not_confirmed"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/expereo/","shortlist_summary":"Managed SD-WAN and internet connectivity, with Cato Networks as a named partner for managed SASE.","key_differentiators":["Managed SD-WAN and internet connectivity, with Cato Networks as a named partner for managed SASE."],"best_fit_for":["Buyers comparing managed internet connectivity alongside SD-WAN and partner-delivered SASE."],"watch_outs":[],"evidence_coverage_pct":0.25,"last_verified":"2026-09-01","evidence_source_count":28,"capability_evidence":{"f10_dynamic_path_selection":{"source_url":"https://expereo.com/resources/brochures/sd-wan","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'AI-enabled dynamic routing for reliable and predictable networks'"},"f13_qos_and_traffic_shaping":{"source_url":"https://expereo.com/services/sd-wan","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Easier management with the ability to set routing, traffic thresholds and access policies to suit your business'"},"f27_integrated_next_generation_firewall":{"source_url":"https://expereo.com/sd-wan","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Includes integrated security features such as encryption and firewall capabilities'"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:42ce68f10f362e6b0e6440bf","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"global_managed","curated_uk_basis":"Confirm UK delivery scope through RFP.","sector_review_queue":[{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced via a second, distinct, real case study within the same corporate family | Confirmed network-complexity reduction and resilience improvement across a real customer spanning 100 sites worldwide | Not assessed for sector-specific frameworks | Kingspan Light, Air + Water - named individual, named company, direct quote (Fergal Moore, Divisional Head of Infrastructure & Cyber Security) on removing network complexity and boosting resilience across 100 sites worldwide | Global, confirmed directly ('100 Sites Worldwide') | None significant identified beyond the general, profile-wide compliance considerations | A second, real, named, individually-attributable customer reference - genuinely reinforcing the manufacturing-sector fit confirmed by the first Kingspan case study, within a short, recent time window (December 2025 and February 2026).","named_evidence":"Kingspan Light, Air + Water - named individual, named company, direct quote (Fergal Moore, Divisional Head of Infrastructure & Cyber Security) on removing network complexity and boosting resilience across 100 sites worldwide","evidence_source_ids":[]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"manufacturing":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.expereo.com/resources/press-releases/kingspan-insulation-chooses-expereo-to-unify-connectivity-and-accelerate-growth-across-90-global-sites"],"qualification":"Recovered Expereo Kingspan Insulation release explicitly documents SD-WAN and underlay at 90 facilities including factories. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"manufacturing":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"summary_source":"https://catonetworks.com/news/expereo-selects-cato-networks-for-delivering-managed-sase-services-worldwide/","position":27,"research_metrics":{"supported":8,"partial":1,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":30,"total":40,"reviewed":10,"completeness_percent":25,"completeness":0.25},"proven_evidence_count":8,"response_panel":null,"best_for":"Manufacturing; Large global enterprise; managed","best_for_fields":{"sectors_yes":["Manufacturing"],"sectors_partial":[],"regions":[],"size":["Large global enterprise"],"service_model":"managed","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"opensystems","name":"Open Systems","website":"https://netify.co.uk/marketplace/opensystems/","category":"technology vendor / managed service provider","product_focus":"MDR+ (Managed Detection and Response), Managed SD-WAN / Secure SD-WAN, Managed, Universal SSE, Mission Control","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"yes","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"not_confirmed","uk_support_desk":"not_confirmed","named_tam":"not_confirmed"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/opensystems/","shortlist_summary":"Managed SD-WAN and SASE supported by Open Systems' Mission Control service team.","key_differentiators":["Managed SD-WAN and SASE supported by Open Systems' Mission Control service team."],"best_fit_for":["Buyers comparing a managed operating model for SD-WAN and SASE."],"watch_outs":[],"evidence_coverage_pct":0.2,"last_verified":"2026-09-01","evidence_source_count":37,"capability_evidence":{"f15_local_internet_breakout":{"source_url":"https://open-systems.com/company/customers/mammut/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via real, named customer-deployment detail - 'low-cost and secure internet breakouts' specifically described in the Mammut case study [16]"},"f32_casb_capability":{"source_url":"https://eqtgroup.com/about/current-portfolio/open-systems","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as part of the broader converged security stack [7] Specific inline-versus-API-mode technical detail not itemised"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:3f18bb33f360d5fbfab497d9","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"global_managed","curated_uk_basis":"Confirm UK delivery scope through RFP.","sector_review_queue":[{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, named, well-known customer | Not assessed in specific technical detail for this sector beyond the confirmed WAN-replacement and internet-breakout capabilities evidenced directly | Not assessed for sector-specific frameworks | Mammut (named, well-known international outdoor-apparel brand, with specific, quantified deployment detail: WAN replacement completed in under two months) | N/A | A single, though genuinely well-known, named, and specifically-quantified case study | A real, credible, named customer - Mammut is a well-known international outdoor-apparel brand - reinforced by specific, quantified deployment-timeline detail, making this a genuinely strong reference despite being a single example.","named_evidence":"Mammut (named, well-known international outdoor-apparel brand, with specific, quantified deployment detail: WAN replacement completed in under two months)","evidence_source_ids":["evidence:opensystems:16"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | The confirmed, dedicated OT Firewall product, plus SD-WAN and Mission Control's proactive monitoring, are directly relevant to distributed manufacturing operations | Not assessed for sector-specific frameworks beyond the confirmed general ISO 27001 certification | Mikron (named customer, described directly as strengthening security specifically to 'protect critical production systems'), confirmed directly as a served sector generally | N/A | Real, named customer evidence exists for this sector specifically | Genuinely well-evidenced via both a real, named customer case study directly referencing production-system protection and a dedicated, purpose-built OT Firewall product.","named_evidence":"Mikron (named customer, described directly as strengthening security specifically to 'protect critical production systems'), confirmed directly as a served sector generally","evidence_source_ids":["evidence:opensystems:8"]},{"sector":"transport_logistics","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced via a real, named, quantified customer example | SD-WAN and Mission Control's global, multi-site management capability directly relevant, evidenced via genuine, quantified scale (60+ locations) | Not assessed for sector-specific frameworks | Altana (named customer, connecting 60+ locations worldwide and integrating new acquisitions) | Global, per the confirmed 60+-location customer example | A single, though genuinely specific and quantified, named case study | Genuinely well-evidenced via a real, named, specifically-quantified (60+ locations) customer example directly relevant to large-scale, distributed, multi-site operations.","named_evidence":"Altana (named customer, connecting 60+ locations worldwide and integrating new acquisitions)","evidence_source_ids":["evidence:opensystems:10"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"manufacturing":false,"retail_ecommerce":false,"transport_logistics":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.open-systems.com/company/customers/","https://www.open-systems.com/company/customers/mammut/"],"qualification":"Open Systems labels ALTANA chemicals and documents SASE at 60-plus sites. Correct sector to manufacturing/chemicals, not logistics. Recovered Open Systems customer index identifies Mikron precision manufacturing using SASE. Does not prove every secondary-directory detail. Mammut primary case describes SASE, branch breakouts, VPN and managed network operations for an outdoor retail brand. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"transport_logistics":"not_confirmed","manufacturing":"yes","retail_ecommerce":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"summary_source":"https://open-systems.com/company/","position":28,"research_metrics":{"supported":7,"partial":1,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":32,"total":40,"reviewed":8,"completeness_percent":20,"completeness":0.2},"proven_evidence_count":7,"response_panel":null,"best_for":"Retail and e-commerce; Manufacturing; both","best_for_fields":{"sectors_yes":["Retail and e-commerce","Manufacturing"],"sectors_partial":[],"regions":[],"size":[],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"barracuda-secureedge","name":"Barracuda SecureEdge","website":"https://netify.co.uk/marketplace/barracuda-secureedge/","category":"technology vendor","product_focus":"Barracuda SecureEdge, Barracuda SecureEdge Access, BarracudaONE, Secure Edge Manager","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_primary","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"not_confirmed","uk_support_desk":"not_confirmed","named_tam":"not_confirmed"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/barracuda-secureedge/","shortlist_summary":"SecureEdge combines SD-WAN and cloud security, with an MSP option for multi-tenant management.","key_differentiators":["SecureEdge combines SD-WAN and cloud security, with an MSP option for multi-tenant management."],"best_fit_for":["Buyers and service providers comparing SecureEdge deployment and management options."],"watch_outs":[],"evidence_coverage_pct":0.175,"last_verified":"2026-09-01","evidence_source_count":35,"capability_evidence":{"f05_professional_services_and_migration_support":{"source_url":"https://blog.barracuda.com/2026/03/25/barracudaone-secureedge-access-and-security-service-edge-adoption","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the specifically-named, dated (March 2026) phased-adoption approach - a defined four-step migration path allowing organisations to 'prioritize immediate needs and expand over time' rather than requiring a single, forced cutover [15]"},"f36_centralised_orchestration":{"source_url":"https://barracuda.com/products/network-protection/secureedge","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'With zero-touch deployment capabilities, you can remotely deliver SASE and network security services without sending technicians onsite' [4] [17]"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:74eb1c1b2bff395216330596","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"global_managed","curated_uk_basis":"Confirm UK delivery scope through RFP.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"summary_source":"https://barracuda.com/products/network-protection/secureedge/msp","position":29,"research_metrics":{"supported":6,"partial":1,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":33,"total":40,"reviewed":7,"completeness_percent":18,"completeness":0.175},"proven_evidence_count":6,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"sonicwall","name":"SonicWall Cloud Secure Edge","website":"https://www.sonicwall.com","category":"technology vendor","product_focus":"Global Response Intelligent Defence (GRID) Threat Network, Managed Protection Security Suite (MPSS), SAMI, Secure Internet Access","cost_model":"Public hardware/security bundle pricing often available via resellers; managed options partner-dependent.","public_pricing_visibility":"quote_based","value_tier":"budget","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"not_confirmed","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"not_confirmed","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"not_confirmed","ai_assistant":"yes","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"yes","retail_ecommerce":"not_confirmed","manufacturing":"not_primary","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"partial","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/sonicwall-cse/","shortlist_summary":"SonicWall is one of the oldest names in network security still operating under its own brand - founded 1991 as Sonic Systems, later renamed SonicWall, and shaped by an eventful corporate history: an IPO in 1999, a return to private ownership, acquisition by Dell in 2012, and a $2 billion-plus divestiture from Dell in November 2016 that spun the company out as an independent business jointly owned by private equity firms Francisco Partners and Elliott Management, who remain its owners today.","key_differentiators":["SD-WAN delivered via existing TZ, NSa and SM firewall appliances; familiar deployment for organisations standardised on SonicWall.","Strong SMB and mid-market positioning with reseller channel and public hardware pricing.","Integrated firewall and SD-WAN avoids separate appliances for smaller branches."],"best_fit_for":["SMB and mid-market organisations already running SonicWall firewalls.","Distributed branch estates where firewall-led SD-WAN is operationally simpler than a separate SD-WAN platform.","Buyers prioritising public pricing visibility and reseller channel options."],"watch_outs":["Full SASE platform: not confirmed; CASB capability: not confirmed; Data loss prevention: not confirmed. Confirm the exact networking and security modules included in the proposal.","Less suited to large enterprise multinational deployments requiring private backbone or PoP architectures.","Public cloud gateway and multi-cloud transit fabric capabilities are less prominent than cloud-native SASE vendors."],"evidence_coverage_pct":0.075,"last_verified":"2026-09-01","evidence_source_count":32,"capability_evidence":{"f05_professional_services_and_migration_support":{"source_url":"https://prnewswire.com/news-releases/sonicwall-partner-ximpleit-deploys-cloud-secure-edge-to-deliver-zero-trust-security-to-legal-industry-clients-302790435.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and genuinely one of the platform's clearest, most specifically-evidenced capabilities - explicit 'no rip-and-replace' positioning, confirmed 'guided migration, coexistence mode, and partner playbooks', and a real, named, dated 2026 case study describing exactly this scenario at an MSP [22]"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:53e04f892936ddcabcf1c016","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"yes","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). Strong UK SMB and mid-market channel and distribution.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | ZTNA and secure remote access directly relevant, evidenced via a real, detailed, named deployment scenario | Not assessed for sector-specific frameworks | XimpleIT (named MSP specializing in legal-industry clients, deploying CSE across a customer base of law firms following a real, confirmed security incident) | Colorado, United States (the MSP's own location; served law firms 'of all sizes') | A single, if genuinely detailed and dated, named case study | Genuinely the best-evidenced sector in this entire profile - a real, named, dated (June 2026), detailed account of an actual security incident driving adoption, rather than a generic sector-fit claim.","named_evidence":"XimpleIT (named MSP specializing in legal-industry clients, deploying CSE across a customer base of law firms following a real, confirmed security incident)","evidence_source_ids":["evidence:sonicwall-cse:22"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"professional_services":false,"financial_services":false},"reviewed_at":"2026-09-30T15:30:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://prnewswire.com/news-releases/sonicwall-partner-ximpleit-deploys-cloud-secure-edge-to-deliver-zero-trust-security-to-legal-industry-clients-302790435.html","https://www.sonicwall.com/es-mx/products/cloud-secure-edge","https://www.sonicwall.com/medialibrary/en/case-study/Lemonade-Moves-Up-from-VPN-to-Banyan-Zero-Trust-Access-Solution.pdf"],"qualification":"SonicWall-issued PRNewswire announcement describes XimpleIT deploying Cloud Secure Edge ZTNA for law firms. Named delivery partner; client firms unnamed. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation. SonicWall names insurer Lemonade as a Cloud Secure Edge customer and links its case study. Secure remote access evidence, not branch SD-WAN or UK delivery. PDF direct access was blocked during recheck; official product case text is the accessible corroboration.","sectors":{"professional_services":"partial","financial_services":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":30,"research_metrics":{"supported":3,"partial":0,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":37,"total":40,"reviewed":3,"completeness_percent":8,"completeness":0.075},"proven_evidence_count":3,"response_panel":null,"best_for":"Financial services; Professional services (partial evidence); platform","best_for_fields":{"sectors_yes":["Financial services"],"sectors_partial":["Professional services"],"regions":[],"size":[],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}}],"governed_provider_profiles":[{"comparison_slug":"lumen","name":"Lumen","provider_types":["technology vendor","managed service provider","carrier network provider"],"summary":"Lumen Technologies has just completed a corporate transformation - on 21 May 2025, Lumen announced the sale of its Mass Markets fiber-to-the-home business - including its Quantum Fiber consumer brand, serving more than 1 million subscribers across 11 states - to AT&T for $5.75 billion in cash, a transaction that closed on 2 February 2026. Lumen’s own CEO, Kate Johnson, described the deal directly as marking the company’s transformation into ‘a Pure Play Enterprise-Focused Technology Infrastructure Company’, retaining its national, regional, state, and metro fiber backbone specifically to support that enterprise focus while divesting the consumer-facing business entirely.","reviewed_at":"2026-09-01","products":["Black Lotus Labs","Lumen Managed SASE Solutions","Lumen SASE with Versa","Lumen SD-WAN with Versa Networks"],"evidence_source_count":31,"url":"https://netify.co.uk/marketplace/lumen/"},{"comparison_slug":"versa-networks","name":"Versa Networks","provider_types":["technology vendor"],"summary":"Versa Networks built its SASE platform around a single-vendor, single-operating-system architecture from an early starting point - the company was founded in 2012, before the SASE category itself existed, on the thesis that legacy hardware and static WAN architectures were holding enterprises back from the cloud. That heritage shows up directly in VersaONE’s design: one operating system (VOS), one console, one policy engine and one data lake, with a single-pass parallel-processing architecture built to avoid the latency penalty of chaining separate security functions together.","reviewed_at":"2026-09-01","products":["Inbound SSE","Secure Enterprise Browser","VOS","Versa Analytics"],"evidence_source_count":51,"url":"https://netify.co.uk/marketplace/versa-networks/"},{"comparison_slug":"cato-networks","name":"Cato Networks","provider_types":["technology vendor"],"summary":"Cato Networks is frequently scored by us at Netify as being one of the easiest platforms to actually use, and they’re often considered a more integrated offering than most of the competition, which is primarily down to building their SASE solution from the ground up rather than bolting security onto an existing networking product, or the other way round.","reviewed_at":"2026-09-01","products":["Cato Browser Extension","Cato Client","Cato DEM","Cato EPP/EDR"],"evidence_source_count":62,"url":"https://netify.co.uk/marketplace/cato-networks/"},{"comparison_slug":"netskope","name":"Netskope","provider_types":["technology vendor"],"summary":"Netskope sits in an interesting middle ground between a pure security-first platform and a fully networked one: unlike the likes of Zscaler, it has invested in its own converged mesh network (NewEdge) and a purpose-built SD-WAN (Borderless SD-WAN, built on the 2022 Infiot acquisition), so the ‘security company bolting on networking’ story is a few years further along than Zscaler’s; unlike Cato, that network is built on peering and interconnects across 67 regions rather than an owned private backbone.","reviewed_at":"2026-09-01","products":["Borderless SD-WAN","Cloud Confidence Index (CCI)","Netskope Cloud Exchange (CE)","Netskope One"],"evidence_source_count":66,"url":"https://netify.co.uk/marketplace/netskope/"},{"comparison_slug":"palo-alto-networks","name":"Palo Alto Networks Prisma SASE","provider_types":["technology vendor"],"summary":"Palo Alto Networks isn’t just selling SASE, it’s selling one door into a much larger security estate (NGFWs, Prisma Cloud, Cortex XDR/XSIAM, identity security) that most large enterprises already have some footprint in. That shows up directly in its differentiators: it’s one of the few vendors recognised as a Leader in all three of Gartner’s Single-Vendor SASE, SSE and SD-WAN Magic Quadrants simultaneously, and its ‘platformisation’ commercial strategy rewards multi-product commitment with steep discounts.","reviewed_at":"2026-09-01","products":["ADEM","AI Access Security","Enterprise DLP","Precision AI / Strata Copilot"],"evidence_source_count":65,"url":"https://netify.co.uk/marketplace/palo-alto-prisma-sase/"},{"comparison_slug":"cisco","name":"Cisco","provider_types":["technology vendor"],"summary":"Cisco’s own materials describe SASE explicitly as ‘a journey - you can start with SD-WAN or SSE and converge over time’, which is a different pitch to Cato’s, Zscaler’s, Netskope’s or Palo Alto’s single-platform-from-day-one story. In practise, ‘Cisco SASE’ means choosing between Cisco Secure Access (cloud-delivered SSE, evolved from Cisco Umbrella), Cisco Catalyst SD-WAN (the enterprise-grade fabric, formerly Viptela) or Meraki SD-WAN (the simpler, cloud-first option), and Cisco Secure Connect (a turnkey bundle of Secure Access plus Meraki SD-WAN specifically).","reviewed_at":"2026-09-01","products":["Cisco AI Defence","Cisco Catalyst SD-WAN","Cisco Duo","Cisco ISE"],"evidence_source_count":66,"url":"https://netify.co.uk/marketplace/cisco/"},{"comparison_slug":"check-point","name":"Check Point","provider_types":["technology vendor"],"summary":"Check Point’s SASE platform has been through two names in under three years. The underlying technology began life as Perimeter 81, an independent Israeli SSE/ZTNA vendor founded in 2018 that had grown to more than 3,000 customers and a Forrester Zero Trust Wave recognition before Check Point Software Technologies - the much larger, long-established Israeli cybersecurity vendor behind Check Point Firewall-1, founded in 1993 - acquired it for approximately $490 million in a deal announced September 2023.","reviewed_at":"2026-09-01","products":["AI Network Firewall / AI Defence Plane","CASB","Check Point Infinity Architecture","Check Point SASE Platform"],"evidence_source_count":44,"url":"https://netify.co.uk/marketplace/checkpoint/"},{"comparison_slug":"att-business","name":"AT&T Business","provider_types":["managed service provider","carrier network provider"],"summary":"AT&T is one of the largest telecommunications companies in the United States, reporting trailing-twelve-month revenue of approximately $120.7 billion as of Q1 2026, with fixed-line enterprise services (including the SD-WAN and SASE proposition covered in this profile) accounting for roughly 14% of total revenue. AT&T’s SASE strategy is built on two named, current, dated technology partnerships.","reviewed_at":"2026-09-01","products":["AT&T Dynamic Defence with Palo Alto Networks","AT&T Managed SASE with Cisco","AT&T Managed SD-WAN","AT&T Network as a Service (NaaS)"],"evidence_source_count":29,"url":"https://netify.co.uk/marketplace/att/"},{"comparison_slug":"aryaka","name":"Aryaka","provider_types":["technology vendor"],"summary":"Aryaka is one of the older, more established names in this category - founded 2009, more than 15 years before ‘SASE’ existed as an analyst-defined term, originally as a WAN optimisation and application-acceleration company before evolving into what it now calls ‘Unified SASE as a Service’. That specific phrase matters: Aryaka positions itself, and is described by independent commentary, as the first company to deliver SASE as a fully managed service rather than a self-managed software platform, built around a distinctive single-pass architecture (OnePASS) running over an owned, global private core network spanning more than 40 points of presence across six continents.","reviewed_at":"2026-09-01","products":["AI>Observe","AI>Secure","Aryaka Cyber Threat Research Lab (CTRL)","Aryaka Network Access Point (ANAP)"],"evidence_source_count":46,"url":"https://netify.co.uk/marketplace/aryaka/"},{"comparison_slug":"fortinet","name":"Fortinet FortiSASE","provider_types":["technology vendor"],"summary":"FortiSASE runs the same FortiOS operating system, and the same single-pass inspection engine, that has powered Fortinet’s physical FortiGate firewalls for over two decades. That’s a meaningfully different starting point from building a SASE platform natively for the cloud from scratch - the practical result is that FortiGate customers get a consistent policy and inspection model whether traffic is inspected on-premises or in a FortiSASE cloud point of presence, and Fortinet’s own commercial materials lean hard into a ‘Security Fabric’ discount for exactly these existing customers.","reviewed_at":"2026-09-01","products":["Fabric Connectors","FortiClient","FortiGuard AI-Powered Security Services","FortiManager / FortiAnalyzer"],"evidence_source_count":60,"url":"https://netify.co.uk/marketplace/fortinet-fortisase/"},{"comparison_slug":"juniper-networks","name":"Juniper Networks","provider_types":["technology vendor"],"summary":"Juniper Networks offer Mist AI with WAN Assurance, delivering AI-driven monitoring and troubleshooting at the WAN edge at a depth that few competitors match. Typically shortlisted by organisations where AIOps and network assurance quality are weighted evaluation criteria rather than SD-WAN feature breadth, and worth examining more closely than the overall score might suggest if AI-driven operations is a primary requirement.","reviewed_at":"2026-09-01","products":["Juniper AI-Native SD-WAN","Juniper Mist AI / Marvis AI","Juniper Secure Edge","Managed SD-WAN"],"evidence_source_count":40,"url":"https://netify.co.uk/marketplace/juniper/"},{"comparison_slug":"orange-business","name":"Orange Business","provider_types":["carrier network provider","integrator"],"summary":"Orange Business is the enterprise services arm of Orange S.A., one of the largest telecommunications groups in Europe, headquartered in France and listed on Euronext Paris. Orange Business itself traces its lineage to Equant and Global One before being formally established on 1 June 2006, and was renamed from Orange Business Services to Orange Business on 16 February 2023; Frédéric Schepens serves as CEO (appointed July 2024), leading approximately 30,000 employees.","reviewed_at":"2026-09-01","products":["Orange Business Evolution Platform","Orange Business SASE with Palo Alto Networks Prisma SASE","Orange Business and Fortinet SASE","Orange Cyberdefense Managed SASE"],"evidence_source_count":36,"url":"https://netify.co.uk/marketplace/orangebusiness/"},{"comparison_slug":"bt-business","name":"BT","provider_types":["managed service provider","carrier network provider"],"summary":"BT is not a single-platform SASE company, but the UK’s largest telecommunications operator and managed service provider, delivering SASE as one service line within a vastly larger, publicly-listed (LSE: BT.A) group.","reviewed_at":"2026-09-01","products":["Agile Connect","BT Managed Fortinet Firewall","BT Managed SASE (Fortinet-based)","BT Managed SASE (Meraki-based)"],"evidence_source_count":30,"url":"https://netify.co.uk/marketplace/bt/"},{"comparison_slug":"forcepoint","name":"Forcepoint","provider_types":["technology vendor"],"summary":"Forcepoint’s identity traces back to Websense, founded in 1994, and its whole platform is built around a data-first philosophy rather than a network- or device-first one - the pitch is that policy should follow the data itself, not the network path or the device it happens to be on. That heritage shows up as real, credible analyst recognition specifically for data loss prevention: Frost & Sullivan’s Global DLP Company of the Year for two consecutive years, an IDC MarketScape Leader placement for worldwide DLP in 2025, and a Forrester Wave Strong Performer placement for data security platforms in Q1 2025.","reviewed_at":"2026-09-01","products":["AI Mesh / Getvisibility","ARIA","Field Programmable SASE Logic (FPSL)","FlexEdge Secure SD-WAN"],"evidence_source_count":61,"url":"https://netify.co.uk/marketplace/forcepoint/"},{"comparison_slug":"gtt","name":"GTT","provider_types":["hybrid provider"],"summary":"GTT Communications is a specialist, purely networking-and-security-focused global provider rather than a diversified telecom conglomerate with mobile, broadband, and media businesses attached. Founded in 1998, listed on the NYSE in 2013, renamed GTT Communications in January 2014, and now headquartered in Arlington, Virginia, GTT operates a global Tier 1 IP backbone spanning more than 600 points of presence and connecting more than 3,500 cities.","reviewed_at":"2026-09-01","products":["GTT Envision","GTT Managed SD-WAN","GTT Secure Connect","Secure Connect with HPE (Aruba/EdgeConnect/SSE)"],"evidence_source_count":37,"url":"https://netify.co.uk/marketplace/gtt/"},{"comparison_slug":"zscaler","name":"Zscaler","provider_types":["technology vendor"],"summary":"Zscaler is the vendor that effectively created the SSE category, and it’s still the one most competitors get measured against when it comes to sheer scale and security depth - the Zero Trust Exchange runs across 150+ data centres, processes over 400 billion transactions a day, and holds FedRAMP High authorisation for ZIA and ZPA (other SASE-class vendors also hold FedRAMP High or equivalent for their own components). If you’re a security-first buyer looking to retire VPN concentrators and stitch SWG, CASB, DLP and ZTNA together under one console, Zscaler is one of the most proven single-vendor routes to get there.","reviewed_at":"2026-09-01","products":["AI Security / GenAI Security","Data Fabric for Security","Risk360","Zero Trust Branch"],"evidence_source_count":81,"url":"https://netify.co.uk/marketplace/zscaler/"},{"comparison_slug":"colt-technology-services","name":"Colt Technology Services","provider_types":["carrier network provider"],"summary":"Colt Technology Services is a long-established, European-anchored network operator, founded in 1992 as City of London Telecommunications and headquartered in London. Since 2015 Colt has been privately owned by Fidelity International (Eight Roads’ current specific role to be reconfirmed), and its network footprint expanded materially through a significant acquisition of Lumen Technologies’ Europe, Middle East and Africa business for $1.8 billion, completed November 2022, reinforcing Colt’s own confirmed network scale of more than 30 countries, more than 50 metropolitan area networks, and more than 32,000 on-net buildings, all delivered over its own named Colt IQ Network platform.","reviewed_at":"2026-09-01","products":["Colt SASE Gateway solution","Colt SD WAN","Colt SD WAN Remote Access","Partner IP Access (Blue Wireless)"],"evidence_source_count":26,"url":"https://netify.co.uk/marketplace/colt/"},{"comparison_slug":"hpe-aruba","name":"HPE Aruba EdgeConnect","provider_types":["technology vendor"],"summary":"HPE Aruba Networking’s SASE platform is a product of acquisition and integration rather than a single, from-scratch build. The SD-WAN engine, EdgeConnect, was built by Silver Peak Systems (founded 2004, first SD-WAN product shipped 2015) and joined HPE’s Aruba business in a $925 million acquisition completed September 2020.","reviewed_at":"2026-09-01","products":["Cloud Intelligence","EdgeConnect Orchestrator","First-Packet iQ","HPE Aruba Networking Central"],"evidence_source_count":46,"url":"https://netify.co.uk/marketplace/hpe-aruba-edgeconnect/"},{"comparison_slug":"vodafone-business","name":"Vodafone Business","provider_types":["managed service provider","carrier network provider"],"summary":"Vodafone Group is a vast, multinational telecommunications operator - for the financial year ended 31 March 2024, Vodafone Group reported total revenue of €36.7 billion, with Vodafone Business specifically operating across all of Vodafone’s markets, addressing a claimed €160 billion addressable market, serving 5 million customers, managing 198 million IoT connections (FY24 figure), and contributing 24% of Group service revenue. Against that scale, the managed SD-WAN and SASE proposition examined in this profile is one product line within a much larger enterprise business.","reviewed_at":"2026-09-01","products":["Fortinet-based Secure Networking","Vodafone Business Managed Network Services","Vodafone Business Network as a Service (NaaS)","Vodafone Business SASE"],"evidence_source_count":42,"url":"https://netify.co.uk/marketplace/vodafone/"},{"comparison_slug":"ntt","name":"NTT DATA","provider_types":["carrier network provider"],"summary":"NTT DATA is a massive, globally-established IT services and network provider, founded in Japan in 1988 as a spinoff of Nippon Telegraph and Telephone (NTT), and now operating in more than 70 countries with approximately 190,000 employees. A significant, current corporate event is worth understanding first: on 8 May 2025, NTT, Inc. 75% acceptance, and following shareholder approval on 29 August 2025, NTT DATA Group was formally delisted from the Tokyo Stock Exchange on 26 September 2025, becoming a wholly-owned subsidiary of NTT, Inc.","reviewed_at":"2026-09-01","products":["Managed Campus Networks with Prisma SASE","Managed Internet Connectivity","Managed IoT and Network as a Service (NaaS)","Managed Network Security"],"evidence_source_count":32,"url":"https://netify.co.uk/marketplace/ntt-data/"},{"comparison_slug":"verizon-business","name":"Verizon Business","provider_types":["managed service provider","carrier network provider"],"summary":"6 billion in revenue in 2023 (2025 consensus estimates are approximately $134-135 billion) and serving nearly all of the Fortune 500 - and its managed SD-WAN and SASE proposition sits within Verizon Business, itself organised into three named customer groups (Enterprise and Public Sector, Business Markets and Other, and Wholesale).","reviewed_at":"2026-09-01","products":["RingCentral (voice/UC integration)","Verizon Managed SD Branch","Verizon Managed SD WAN","Verizon SASE Management"],"evidence_source_count":37,"url":"https://netify.co.uk/marketplace/verizon/"},{"comparison_slug":"cradlepoint-ericsson","name":"Ericsson Cradlepoint","provider_types":["technology vendor","carrier network provider"],"summary":"1 billion. That makes this platform’s identity distinctive within this product category: it sits inside one of the world’s largest telecommunications equipment manufacturers rather than a standalone security company or a private-equity-backed challenger, and its architecture reflects that heritage directly - NetCloud SASE is built cellular-first, with confirmed, specific capabilities like traffic steering based on cellular attributes and 5G standalone network slicing for guaranteed bandwidth that have no real equivalent among fixed-line-oriented competitors.","reviewed_at":"2026-09-01","products":["NetCloud Federal","NetCloud Manager","NetCloud Perimeter","NetCloud Private Networks"],"evidence_source_count":38,"url":"https://netify.co.uk/marketplace/ericsson-cradlepoint/"},{"comparison_slug":"virgin-media-o2","name":"Virgin Media O2 Business","provider_types":["managed service provider","carrier network provider"],"summary":"Managed connectivity and SD-WAN with Zscaler-based SASE; confirm the current contracting entity and scope.","reviewed_at":"2026-09-01","products":["8x8 Voice for Teams","Cloud Infrastructure as a Service / Platform as a Service","Managed Detection and Response","Success Agreement"],"evidence_source_count":39,"url":"https://netify.co.uk/marketplace/virgin-media-o2/"},{"comparison_slug":"cloudflare-one","name":"Cloudflare One","provider_types":["technology vendor"],"summary":"Rather than building a security platform and adding network reach, or building a network and adding security, Cloudflare started as one of the internet’s largest content-delivery and DDoS-mitigation networks (founded 2009, public since 2019 on NYSE: NET) and extended that same global infrastructure - every product running in every data centre, not routed to a handful of regional security hubs - into a full SASE platform.","reviewed_at":"2026-09-01","products":["AI Gateway / Agents SDK / MCP security","CASB","Cloudflare Access","Cloudflare One"],"evidence_source_count":75,"url":"https://netify.co.uk/marketplace/cloudflare-one/"},{"comparison_slug":"comcast-business","name":"Comcast Business","provider_types":["managed service provider","carrier network provider"],"summary":"Comcast Business’s managed SD-WAN and SASE proposition traces its specialist technical foundation to Masergy, a managed SD-WAN and SASE vendor founded in 2000 in Plano, Texas, which Comcast Business acquired in 2021 to, in the words of Comcast Business’s then-President Bill Stemper, ‘instantly and dramatically amplify our growth in the global enterprise market’.","reviewed_at":"2026-09-01","products":["Comcast Business CASB","Comcast Business FWaaS","Comcast Business Managed SD-WAN","Comcast Business SASE"],"evidence_source_count":24,"url":"https://netify.co.uk/marketplace/comcastbusiness/"},{"comparison_slug":"arista-velocloud","name":"VeloCloud","provider_types":["technology vendor"],"summary":"VeloCloud was founded in 2012 as a cloud-delivered SD-WAN pioneer, acquired by VMware in 2017 for approximately $336 million, then came under Broadcom’s ownership when Broadcom completed its roughly $69 billion acquisition of VMware in 2023. Under Broadcom, the product was paired with Symantec’s security stack (Broadcom separately owns Symantec’s enterprise security business) into a single-vendor offering called ‘VMware VeloCloud SASE, secured by Symantec’, announced February 2024.","reviewed_at":"2026-09-01","products":["Arista AVA","Edge Threat Management (ETM)","SSE partner integrations","VeloCloud Orchestrator"],"evidence_source_count":35,"url":"https://netify.co.uk/marketplace/velocloud/"},{"comparison_slug":"expereo","name":"Expereo","provider_types":["managed service provider","carrier network provider"],"summary":"Managed SD-WAN and internet connectivity, with Cato Networks as a named partner for managed SASE.","reviewed_at":"2026-09-01","products":["Expereo Enhanced Internet","Expereo Managed SD-WAN","Expereo SD-WAN/SASE with Cato Networks","Starlink (via Expereo","authorised reseller)"],"evidence_source_count":28,"url":"https://netify.co.uk/marketplace/expereo/"},{"comparison_slug":"opensystems","name":"Open Systems","provider_types":["technology vendor","managed service provider"],"summary":"Managed SD-WAN and SASE supported by Open Systems' Mission Control service team.","reviewed_at":"2026-09-01","products":["MDR+ (Managed Detection and Response)","Managed SD-WAN / Secure SD-WAN","Managed","Universal SSE","Mission Control"],"evidence_source_count":37,"url":"https://netify.co.uk/marketplace/opensystems/"},{"comparison_slug":"barracuda-secureedge","name":"Barracuda SecureEdge","provider_types":["technology vendor"],"summary":"SecureEdge combines SD-WAN and cloud security, with an MSP option for multi-tenant management.","reviewed_at":"2026-09-01","products":["Barracuda SecureEdge","Barracuda SecureEdge Access","BarracudaONE","Secure Edge Manager"],"evidence_source_count":35,"url":"https://netify.co.uk/marketplace/barracuda-secureedge/"},{"comparison_slug":"sonicwall","name":"SonicWall Cloud Secure Edge","provider_types":["technology vendor"],"summary":"SonicWall is one of the oldest names in network security still operating under its own brand - founded 1991 as Sonic Systems, later renamed SonicWall, and shaped by an eventful corporate history: an IPO in 1999, a return to private ownership, acquisition by Dell in 2012, and a $2 billion-plus divestiture from Dell in November 2016 that spun the company out as an independent business jointly owned by private equity firms Francisco Partners and Elliott Management, who remain its owners today.","reviewed_at":"2026-09-01","products":["Global Response Intelligent Defence (GRID) Threat Network","Managed Protection Security Suite (MPSS)","SAMI","Secure Internet Access"],"evidence_source_count":32,"url":"https://netify.co.uk/marketplace/sonicwall-cse/"}],"public_evidence_contract":"public-provider-evidence/4.0.0","requires_publication":false,"ordered_by":"evidence_coverage_pct desc, provider name asc, slug asc","status_vocabulary":{"not_confirmed":"Evidence has not been confirmed; not a negative grade."},"notice":"All researched providers are ordered by evidence coverage, highest first, then name. Coverage is the proportion of capability fields carrying an evidence grade; it is not fit, quality or a recommendation. Commission does not affect this order. Research and evidence matching are open.","market_views":{"all":{"ordered_by":"evidence_coverage_pct desc, provider name asc, slug asc","label":"All providers","title":"All SD-WAN and SASE providers","answer":"Compare the researched SD-WAN and SASE market: technology platforms, managed service providers and connectivity carriers.","url":"https://netify.co.uk/sase/shortlist/","providers":[{"slug":"lumen","name":"Lumen","website":"https://www.lumen.com/en-us/services/sd-wan.html","category":"technology vendor / managed service provider / carrier network provider","product_focus":"Black Lotus Labs, Lumen Managed SASE Solutions, Lumen SASE with Versa, Lumen SD-WAN with Versa Networks","cost_model":"Quote-based; Lumen states fully managed or co-managed SD-WAN, with access/network services priced by requirement.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"partner_integrated","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"partner_integrated","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"partial","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":50,"sla_availability_pct":99.99,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/lumen/","shortlist_summary":"Lumen Technologies has just completed a corporate transformation - on 21 May 2025, Lumen announced the sale of its Mass Markets fiber-to-the-home business - including its Quantum Fiber consumer brand, serving more than 1 million subscribers across 11 states - to AT&T for $5.75 billion in cash, a transaction that closed on 2 February 2026. Lumen’s own CEO, Kate Johnson, described the deal directly as marking the company’s transformation into ‘a Pure Play Enterprise-Focused Technology Infrastructure Company’, retaining its national, regional, state, and metro fiber backbone specifically to support that enterprise focus while divesting the consumer-facing business entirely.","key_differentiators":["Fully managed or co-managed SD-WAN with strong NaaS positioning and integrated network services.","Substantial underlay ownership in North America with global reach.","Co-managed model provides operational flexibility for customers wanting selective control."],"best_fit_for":["North American enterprises wanting integrated managed SD-WAN, access and broader network services from one provider.","Buyers attracted to the NaaS consumption model.","Organisations wanting genuine co-managed delivery rather than pure managed or pure DIY."],"watch_outs":["SASE and security capabilities are largely partner-integrated rather than native; the SSE platform choice needs explicit evaluation.","International delivery depth is less prominent than the dedicated global carriers.","Underlying SD-WAN platform should be confirmed; platform choice affects feature set."],"evidence_coverage_pct":0.65,"last_verified":"2026-09-01","evidence_source_count":31,"capability_evidence":{"f07_lifecycle_management":{"source_url":"https://assets.lumen.com/is/content/Lumen/SD-WAN___Managed_Equipment_Service_Guide","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Lifecycle management – notification of end of sale/end of support. The same service guide lists CPE break/fix (RMA) warranty support for failed devices and processing of return material authorisation replacement requests, plus patch management for all hardware and software. The SD-WAN service schedule states that during the initial service term purchased CPE is eligible for the Managed Device Replacement Service Level in the Lumen Service Level Agreement, so replacement is contractual rather than best effort."},"f10_dynamic_path_selection":{"source_url":"https://lumen.com/en-us/services/sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Route traffic over the most efficient connection for high performance' [3]"},"f12_application_aware_routing":{"source_url":"https://lumen.com/en-us/services/sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Route traffic over the most efficient connection for high performance, and update routing and security rules in real time as network needs change' [3]"},"f13_qos_and_traffic_shaping":{"source_url":"https://docs.lumen.com/readiness/products/sd-wan-versa/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'the ability to intelligently use lower cost Internet connections to achieve MPLS-like QoS' [2]"},"f17_cellular_and_5g_support":{"source_url":"https://lumen.com/en-us/services/sdwan-versa-networks.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name as a supported WAN underlay ('4G/LTE') [5]"},"f18_cloud_on_ramp":{"source_url":"https://docs.lumen.com/readiness/products/sd-wan-versa/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the confirmed 'physical and virtual customer-premises equipment (CPE)' architecture description [2]"},"f19_public_cloud_gateways":{"source_url":"https://ir.lumen.com/news/news-details/2024/Lumen-and-Versa-Expand-Partnership-to-Deliver-a-Sovereign-SASE-Solution/default.aspx","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The Sovereign SASE solution is deployed on dedicated SASE gateways in Lumen's global points of presence (PoPs) or on customer premises, based on the customer's preference and needs. The PoPs are Lumen's own, which is what this field measures, and the SASE product page advertises 50+ low-latency edge nodes in key metro areas. The security software running in them is Versa or Fortinet technology, which does not change the ownership of the infrastructure. One complication is recorded in conflicts: the SASE service guide also describes an option delivered through a global network of VMware SASE points of presence, which would be partner_integrated rather than Lumen-owned."},"f20_private_pops_dedicated_pops":{"source_url":"https://assets.lumen.com/is/content/Lumen/sd-wan-service-schedule?Creativeid=914be424-577f-4a0d-97cd-3c9c00a783e4","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The Lumen SD-WAN with Versa Networks network Controllers are hosted within Lumen facilities, but can also be deployed as private infrastructure in a customer provided environment for an additional charge. Reinforced by the dated May 2024 Versa Sovereign SASE press release, which states the solution is deployed on dedicated SASE gateways in Lumen's global PoPs or on customer premises based on the customer's preference and needs. Customer-hosted, dedicated and sovereign options are therefore documented, not only shared multi-tenant locations."},"f21_private_global_backbone":{"source_url":"https://ir.lumen.com/news/news-details/2024/Lumen-and-Versa-Expand-Partnership-to-Deliver-a-Sovereign-SASE-Solution/default.aspx","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Black Lotus Labs, Lumen's threat research team, leverages its unique visibility into Lumen's global internet backbone using ML algorithms to generate threat intelligence Lumen owns and operates its own global backbone, which is the substance of this field. Confidence is medium rather than high for two reasons: the clearest wording found is incidental to a threat intelligence sentence, and the most explicit owned-fibre statement found, that Lumen operates the largest ultra-low-loss intercity fiber network in North America, is scoped to North America. No page reviewed states as a product property that inter-region SASE or SD-WAN traffic rides the Lumen backbone rather than the public internet."},"f24_flexible_edge_form_factors":{"source_url":"https://lumen.com/en-us/services/sase-versa.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - a named, sized CPE device tier ('Extra Small CPE Device') is confirmed directly as part of Lumen's disclosed pricing structure [4]"},"f25_high_availability_design":{"source_url":"https://lumen.com/en-us/services/sdwan-versa-networks.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - the confirmed service wrapper includes 'appliance/circuit monitoring' and '24/7 support for the entire WAN solution' [5]"},"f26_sla_backed_service_fabric":{"source_url":"https://assets.lumen.com/is/content/Lumen/lumen-service-level-agreementpdf?Creativeid=dc0beb0f-83c4-46d5-8684-85af0333edbe","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Lumen offers Service Availability Service Levels for Qualifying Services based on the following Availability Tiers. The published Lumen Service Level Agreement names Lumen SD-WAN Service with Versa Networks, Lumen SD-WAN Service with Cisco Meraki and Lumen SASE Solutions as qualifying services, and carries availability tiers, a four hour incident response commitment, managed device replacement targets, and regional latency, jitter and packet delivery objectives. These are credit-bearing contractual commitments rather than best-effort targets."},"f27_integrated_next_generation_firewall":{"source_url":"https://assets.lumen.com/is/content/Lumen/sase-solutions-service-guide?Creativeid=4af4755b-f89d-476b-a0b7-879ea4015615","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Next Generation Firewall (NGFW) is available as a service license with Fortinet and is powered by FortiOS The firewall function is Fortinet technology licensed and operated by Lumen, so partner_integrated rather than yes. The same guide describes anti-malware, web filtering and firewall, intrusion detection and prevention (IDS/IPS) within the unified threat management set, and the SD-WAN service schedule describes a Security Upgrade providing a set of firewall, web filtering and intrusion prevention. The function is integrated into the delivered platform, but the technology belongs to another vendor."},"f28_full_sase_platform":{"source_url":"https://lumen.com/en-us/services/sase-versa.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a named product - Versa Secure Private Access (VSPA) 'secure remote workforces at the edge with user-centric' access [4]"},"f30_zero_trust_network_access":{"source_url":"https://lumen.com/en-us/services/sase-versa.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a named product - Versa Secure Private Access (VSPA) 'secure remote workforces at the edge with user-centric' access [4]"},"f31_secure_web_gateway":{"source_url":"https://lumen.com/en-us/services/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly as part of the SSE capability list - 'Secure Web Gateway (SWG)' named explicitly [6]"},"f32_casb_capability":{"source_url":"https://lumen.com/en-us/services/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Cloud Access Security Broker (CASB)' named explicitly as SSE-compatible [6] Specific inline-versus-API-mode technical detail not itemised"},"f33_data_loss_prevention":{"source_url":"https://assets.lumen.com/is/content/Lumen/sase-solutions-service-guide?Creativeid=4af4755b-f89d-476b-a0b7-879ea4015615","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"intrusion detection and prevention (IDS/IPS), and data loss prevention DLP is listed on the Lumen SASE product page as one of the Security Service Edge services alongside NGFW, SWG, ZTNA and CASB, and appears in the SASE service guide within the Fortinet-powered feature set, so it is another vendor's engine operated by Lumen. No Lumen page reviewed describes content classification detail, blocking versus flagging behaviour, alerting or exception workflows, so confidence is medium on the depth of the capability rather than on its presence."},"f40_managed_service_assurance":{"source_url":"https://assets.lumen.com/is/content/Lumen/SD-WAN___Managed_Equipment_Service_Guide","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Lumen resources are available 24x7 for support. Graded partial for two reasons. First, the SD-WAN and Managed Equipment service guide evidences 24x7x365 performance management by Lumen skilled operations engineers and continuous network monitoring, which covers the NOC half, but the SASE service guide states that the Pro-Managed service does not include security operations center services, so the SOC half is not part of the standard managed wrap. Second, no source reviewed documents ownership of incidents through to root cause analysis, structured service reviews or change governance as contractual elements; those terms were searched for in both service guides and the service schedule and not found."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:6d66149079a3a4ab68cf17eb","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"yes","transport_logistics":"partial","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"global_managed","curated_uk_basis":"No UK HQ (US); UK delivery is largely via partners following the EMEA divestment to Colt.","sector_review_queue":[{"sector":"financial_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced via a real, named individual testimonial | Not assessed in specific technical detail for this sector beyond the confirmed general testimonial | Not assessed for sector-specific frameworks, though the confirmed comprehensive PCI DSS support (Table 13) is directly relevant | Mahendra Verma, VP and Sr. Network Engineering Manager, Horizon Bank - named individual, named company, direct positive quote on service responsiveness | N/A | The testimonial is disclosed directly by Lumen as a compensated endorsement | A real, named banking-sector customer reference - genuinely credible, specific evidence, reinforced by Lumen's own confirmed, comprehensive PCI DSS support relevant to this exact sector, tempered by the confirmed compensated-endorsement disclosure.","named_evidence":"Mahendra Verma, VP and Sr. Network Engineering Manager, Horizon Bank - named individual, named company, direct positive quote on service responsiveness","evidence_source_ids":["evidence:lumen:17"]},{"sector":"healthcare","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, though not individually-named, customer account | Confirmed DIA (Dedicated Internet Access) and SASE solutions directly improving 'telehealth capabilities' specifically named | HIPAA not confirmed (Table 13) | An anonymous (within the specific snippet reviewed) customer account confirming replacement of aging MPLS/SD-WAN with modern DIA and SASE, directly citing improved 'telehealth capabilities' | N/A | The customer's individual name was not extracted in this specific research pass; the confirmed HIPAA gap remains a specific, worth-flagging limitation | A real, specific, primary-sourced account directly naming telehealth as an improved capability - genuinely concrete evidence for this sector-adjacent use case, even without full individual attribution confirmed in this pass.","named_evidence":"An anonymous (within the specific snippet reviewed) customer account confirming replacement of aging MPLS/SD-WAN with modern DIA and SASE, directly citing improved 'telehealth capabilities'","evidence_source_ids":["evidence:lumen:17"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced via a real, named individual testimonial | Confirmed SASE and EWAS (Enterprise Wide Area Services) capabilities directly relevant to distributed manufacturing operations | Not assessed for sector-specific frameworks | Jeff Pinkerton, VP of IT, Berridge Manufacturing Co. - named individual, named company, direct quote on SASE/EWAS implementation responsiveness | N/A | The testimonial is disclosed directly by Lumen as a compensated endorsement | A real, named, individually-attributable customer reference - genuinely stronger evidence than an anonymised case study, tempered by the confirmed compensated-endorsement disclosure.","named_evidence":"Jeff Pinkerton, VP of IT, Berridge Manufacturing Co. - named individual, named company, direct quote on SASE/EWAS implementation responsiveness","evidence_source_ids":["evidence:lumen:17"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"healthcare":false,"manufacturing":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://lumen.com/en-us/resources/customer-success-stories.html","https://www.lumen.com/en-hk/resources/customer-stories/flux.html"],"qualification":"Recovered Lumen testimonial identifies Valley Cities Behavioral Health Care replacing MPLS/SD-WAN with DIA and SASE. Correct anonymous attribution; compensated supplier-published endorsement. Berridge testimonial explicitly says SASE and EWAS will work together once implementation is complete. It is not evidence of a completed outcome. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"healthcare":"partial","manufacturing":"not_confirmed"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":1,"research_metrics":{"supported":23,"partial":1,"partner_delivered":2,"managed_service_dependent":0,"not_primary":0,"unconfirmed":14,"total":40,"reviewed":26,"completeness_percent":65,"completeness":0.65},"proven_evidence_count":23,"response_panel":null,"best_for":"Healthcare (partial evidence); both","best_for_fields":{"sectors_yes":[],"sectors_partial":["Healthcare"],"regions":[],"size":[],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"versa-networks","name":"Versa Networks","website":"https://versa-networks.com","category":"technology vendor","product_focus":"Inbound SSE, Secure Enterprise Browser, VOS, Versa Analytics","cost_model":"Quote-based subscription; MSP/carrier pricing depends on tenant scale, bandwidth, security package and delivery model.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"partial","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_primary","financial_services":"not_primary","retail_ecommerce":"partial","manufacturing":"partial","energy_utilities":"yes","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"not_primary","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"yes"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":90,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/versa-networks/","shortlist_summary":"Versa Networks built its SASE platform around a single-vendor, single-operating-system architecture from an early starting point - the company was founded in 2012, before the SASE category itself existed, on the thesis that legacy hardware and static WAN architectures were holding enterprises back from the cloud. That heritage shows up directly in VersaONE’s design: one operating system (VOS), one console, one policy engine and one data lake, with a single-pass parallel-processing architecture built to avoid the latency penalty of chaining separate security functions together.","key_differentiators":["Multi-tenancy from the ground up, making Versa a common choice for service providers and carriers building managed SD-WAN and SASE platforms.","Versa Operating System (VOS) provides a converged networking and security software stack across cloud and on-premises delivery.","Often the underlying platform when buyers select a managed SD-WAN service from a carrier or MSP."],"best_fit_for":["Service providers, carriers and MSPs building white-label managed SD-WAN or SASE services.","Enterprises consuming Versa indirectly through a managed provider (e.g. Verizon, Orange).","Buyers who want platform flexibility across cloud-delivered, on-premises and hybrid delivery models."],"watch_outs":["Less well-known to enterprise buyers as a direct purchase; most enterprise consumption is via service providers.","Buyers should confirm exactly which managed provider is delivering the platform and what the operational RACI looks like.","Brand recognition trails Cisco, Palo Alto and Fortinet in enterprise procurement processes."],"evidence_coverage_pct":0.65,"last_verified":"2026-09-01","evidence_source_count":51,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://versa-networks.com/documents/solution-briefs/versa-sase.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"In this model Versa NOC is responsible for managing and maintaining Versa SASE, while the customer IT team is responsible for management and monitoring of the CPEs. Versa does operate a NOC and a hosted, managed head-end and gateway service under its own SLA, so part of the estate is genuinely run by Versa. But its own solution brief places CPE management with the customer IT team in that model, and the alternative model places configuration management and monitoring with a Service Provider. End-to-end design, deploy, change, support and report by Versa itself for the whole service is not evidenced, so partial rather than yes."},"f03_co_managed_service":{"source_url":"https://versa-networks.com/documents/solution-briefs/versa-sase.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"In this model Versa NOC is responsible for managing and maintaining Versa SASE, while the customer IT team is responsible for management and monitoring of the CPEs. This is a textbook split of responsibility: Versa runs the platform and the customer retains CPE operations. Concerto's provider-level and tenant-level roles document the same shared model in the tooling."},"f07_lifecycle_management":{"source_url":"https://versa-networks.com/documents/datasheets/versa-networks-hosted-and-managed-head-end.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Head-end server hardware OS and security patch upgrades and updates For the hosted head-end, Versa documents software upgrades of Director, Analytics, Controller, Concerto and VMS plus OS and security patching, which is lifecycle handled as part of the service. Separately, hardware documentation covers a two-year limited warranty, next-business-day and same-business-day advance replacement, DOA handling and an end-of-life policy. Graded partial rather than yes because branch CPE firmware upgrades and renewals in a typical Versa deployment sit with the customer or the service provider partner, and hardware replacement coverage is a purchased support tier rather than something evidenced as included in the service by default."},"f12_application_aware_routing":{"source_url":"https://versa-networks.com/news/2018/versa-networks-present-adobe-sd-wan-use-case-onug-fall-2018.php","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, per-application SLA-based routing confirmed specifically via the Adobe deployment [19]"},"f17_cellular_and_5g_support":{"source_url":"https://docs.versa-networks.com/Secure_SD-WAN/01_Configuration_from_Director/Common_Configuration/Configure_WWAN","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The term WWAN interfaces refers to LTE, 4G, and 5G interfaces. Documentation covers LTE, 4G and 5G on a VOS WAN port, SIM activation and operator ID checks, and radio quality monitoring via RSRP, RSRQ, RSSI and SINR with banded signal states. It is documented as usable where a branch has no wired connection and alongside wired links, so both primary and failover roles are covered. On the source page the words WWAN interfaces are italicised; the italics add no characters to the rendered text."},"f18_cloud_on_ramp":{"source_url":"https://docs.versa-networks.com/Integrations_and_Solutions/Integrations/Endpoint_Detection_and_Response/Integrate_Versa_SASE_with_CrowdStrike_Falcon","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native - confirmed explicitly for AWS-hosted VOS deployment, described as 'cloud edge deployment such as AWS running VOS' [24]"},"f19_public_cloud_gateways":{"source_url":"https://docs.versa-networks.com/Security_Service_Edge_(SSE)/Configuration_from_Director/Ecosystem/Versa_SASE_Ecosystem","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Versa Cloud Gateways (VCGs) are Versa SASE Gateways which are deployed in Point of Presence (PoP) locations around the world. These are Versa's own gateways running Versa's own VOS software, not a third party's PoPs resold under Versa's name, so yes rather than partner_integrated. They deliver secure internet access, ZTNA, threat protection and DLP as a cloud service, and the SASE client selects the VCG offering lowest latency."},"f20_private_pops_dedicated_pops":{"source_url":"https://versa-networks.com/products/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Versa SASE is delivered via the cloud, on-premises, or as a blended combination of both Versa markets Private SASE and Sovereign SASE as distinct deployment models alongside the shared cloud. Network World, a named-author dated source, reports that Sovereign SASE runs entirely on customer-controlled infrastructure with the customer choosing its own compute, on-premises or in a private cloud. Confidence is medium rather than high because the Sovereign SASE product page itself would not render without JavaScript, so the strongest Tier 1 statement of the claim could not be read directly."},"f21_private_global_backbone":{"source_url":"https://docs.versa-networks.com/Security_Service_Edge_(SSE)/Configuration_from_Director/Ecosystem/Versa_SASE_Ecosystem","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Versa SD-WAN Traffic Engineered network which uses multiple global and regional providers for the underlay. Inter-gateway traffic rides a Versa-controlled traffic-engineered overlay that selects paths on least end-to-end latency and loss, and each VCG is connected to multiple global and multiple regional service providers with peering relationships. But the underlay is explicitly other carriers' capacity, not fibre or circuits owned by Versa. Graded partial: the control plane and path selection are Versa's, the physical backbone is not."},"f24_flexible_edge_form_factors":{"source_url":"https://docs.versa-networks.com/Integrations_and_Solutions/Integrations/Endpoint_Detection_and_Response/Integrate_Versa_SASE_with_CrowdStrike_Falcon","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native - Versa-certified white-box routers (third-party hardware running VOS) confirmed specifically via the Adobe deployment account; branch edge devices, cloud edge deployment, and on-premises appliances all confirmed as supported form factors [24]"},"f25_high_availability_design":{"source_url":"https://versa-networks.com/customers/case-studies/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed at a specific, quantified level via the Adobe case study - 'four-nines of availability for critical services' was an explicit deployment requirement Versa was chosen to meet [18]"},"f26_sla_backed_service_fabric":{"source_url":"https://versa-networks.com/documents/Versa-Hosted-SASE-SLA.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"target Uptime average of 99.999% (\"Uptime SLA Percentage\") measured monthly A published, dated SLA document covering Versa Hosted and Managed Secure Services Edge Gateways, with a tiered service-credit table running from 2 days of credit for uptime below 99.999% up to 24 days below 98.0%, plus a security processing latency commitment of 10ms without TLS inspection and 50ms with anti-virus, malware detection and IPS with TLS decryption. Contractual rather than best-effort, including a two calendar day claim window."},"f33_data_loss_prevention":{"source_url":"https://docs.versa-networks.com/Security_Service_Edge_(SSE)/Configuration_from_Concerto/Configure_Data_Loss_Prevention_in_Concerto","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Data loss prevention (DLP) is a set of tools and processes for detecting and preventing data breaches, cyber exfiltration, and unwanted destruction of sensitive data. Native to the platform and configured from Concerto. Content passing through the organisation's ports and protocols is scanned against match rules, with enforcement actions of Alert, Allow, Block, Reject, Quarantine, Encrypt, Redact or Tokenize, and all actions reported to Versa Analytics for review. Documentation also covers offline DLP, DLP data exfiltration policies and applying Microsoft MIP sensitivity labels."},"f35_soc_siem_soar_integration":{"source_url":"https://docs.versa-networks.com/Integrations_and_Solutions/Integrations/SIEM/Versa_Analytics_and_CrowdStrike_NG-SIEM_Integration","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed and well-evidenced via Versa Analytics' specific, itemised log-type list (flow logs, SD-WAN path and bandwidth usage, CGNAT, DHCP, DNS, SASE-web monitoring, secure access, traffic conditioning, URL filtering, and IDP logs) and confirmed export to CrowdStrike Falcon Next-Gen SIEM [26] Not confirmed"},"f36_centralised_orchestration":{"source_url":"https://versa-networks.com/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via a named practitioner review describing the console's 'ZTP (zero touch provisioning)' capability speeding up implementation [7]"},"f40_managed_service_assurance":{"source_url":"https://versa-networks.com/documents/datasheets/versa-premier-service.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Versa will provide Root-Cause Analysis for customer-reported P1 issues. The NOC half is evidenced: 24x7 monitoring of head-end alarms and application health, a Versa NOC responsible for managing and maintaining Versa SASE, formal root cause analysis on P1 incidents, and scheduled periodic or quarterly customer review meetings. What I did not find on any page I read is a 24x7 SOC performing proactive security monitoring on the customer's behalf, nor a documented change governance process. Graded partial on that gap. Note also that the Premier Service datasheet carries a 2020 copyright."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:05460064bfddb49a73b78910","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"partial","manufacturing":"partial","energy_utilities":"partial","government_public_sector":"partial","education":"partial","transport_logistics":"partial","professional_services":"partial","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). Delivered in the UK through carrier and MSP partners building managed services on Versa.","sector_review_queue":[{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | SASE-ready architecture, TCO reduction relevant to distributed manufacturing operations | Not assessed | A Global-200 pharmaceutical manufacturing company, described as achieving a SASE-ready architecture and TCO savings | Not itemised in detail beyond the Global-200 scale reference | Single case reference, anonymised (described by scale/category rather than named) | A real, credible, if anonymised, large-scale manufacturing reference - worth a direct follow-up to get the specific customer name and quantified outcomes if Netify needs a fully named case study for this sector.","named_evidence":"A Global-200 pharmaceutical manufacturing company, described as achieving a SASE-ready architecture and TCO savings","evidence_source_ids":["evidence:versa-networks:18"]},{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Multi-site security and cloud migration relevant to utility operations | Not assessed | Lambton Area Water Supply Systems (Ontario, Canada) - deployed Versa SASE to secure remote and headquarter offices while migrating sensitive data to cloud environments; a named practitioner quote from a General Manager, Information Systems in Energy and Utilities also references one-touch edge deployment | Named, specific Canadian utility customer | Single named case study, plus one further anonymised named-role quote | A genuinely credible, named, specific utility-sector customer (Lambton Area Water Supply Systems), reinforced by a second, separate energy-and-utilities-specific practitioner quote - reasonably solid sector evidence.","named_evidence":"Lambton Area Water Supply Systems (Ontario, Canada) - deployed Versa SASE to secure remote and headquarter offices while migrating sensitive data to cloud environments; a named practitioner quote from a General Manager, Information Systems in Energy and Utilities also references one-touch edge deployment","evidence_source_ids":["evidence:versa-networks:7","evidence:versa-networks:18"]},{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | SD-WAN/branch capability, cost-reduction focus | Not assessed | A top global retailer (600+ store locations) reporting improved cost savings and reduced operational overhead; a primary food retailer with multiple brands increasing store locations while reducing TCO; a named F100 retailer reclaiming $4M in previously wasted spend | Large-scale, multi-brand deployment evidenced directly | US-centric framing in the sources reviewed; specific named retailers not identified by name (described by category/scale instead) | Genuinely well-evidenced by scale and count (three separate retail-sector references), even though the specific retailer names weren't disclosed in the sources reviewed - a real, if anonymised, sector-fit signal.","named_evidence":"A top global retailer (600+ store locations) reporting improved cost savings and reduced operational overhead; a primary food retailer with multiple brands increasing store locations while reducing TCO; a named F100 retailer reclaiming $4M in previously wasted spend","evidence_source_ids":["evidence:versa-networks:18","evidence:versa-networks:22","evidence:versa-networks:25"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"energy_utilities":false,"manufacturing":false,"retail_ecommerce":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://versa-networks.com/customers/case-studies/","https://versa-networks.com/","https://aitranslatewpml.versa-networks.com/customers/case-studies/","https://versa-networks.com/lp/sase-cost-savings/"],"qualification":"Versa case index expressly identifies Lambton Area Water Supply Systems deploying SASE for remote offices and cloud data. Canadian utility case only. Versa identifies an anonymous Global-200 pharmaceutical manufacturer using Secure SD-WAN. Retain anonymous evidence, not a named reference. Versa documents an unnamed retailer with over 600 stores using Secure SD-WAN. Do not describe this as named customer proof. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"energy_utilities":"yes","manufacturing":"partial","retail_ecommerce":"partial"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":2,"research_metrics":{"supported":22,"partial":4,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":14,"total":40,"reviewed":26,"completeness_percent":65,"completeness":0.65},"proven_evidence_count":22,"response_panel":null,"best_for":"Energy and utilities; Retail and e-commerce (partial evidence); Manufacturing (partial evidence); Small business; platform","best_for_fields":{"sectors_yes":["Energy and utilities"],"sectors_partial":["Retail and e-commerce","Manufacturing"],"regions":[],"size":["Small business"],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"cato-networks","name":"Cato Networks","website":"https://www.catonetworks.com","category":"technology vendor","product_focus":"Cato Browser Extension, Cato Client, Cato DEM, Cato EPP/EDR","cost_model":"Quote-based subscription; typically site/user/bandwidth/security bundle based.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_entity","uk_basis":"The Cato Master Service Agreement, section 1.4, lists this UK contracting party. The entity identified in the buyer’s order determines the actual counterparty; this does not establish site coverage or managed-service scope.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"partner_integrated","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"yes","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"partial","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"yes","small_business":"not_confirmed"},"pricing_units":["per_site","per_user","per_bandwidth","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":100,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/cato-networks/","shortlist_summary":"Cato Networks is frequently scored by us at Netify as being one of the easiest platforms to actually use, and they’re often considered a more integrated offering than most of the competition, which is primarily down to building their SASE solution from the ground up rather than bolting security onto an existing networking product, or the other way round.","key_differentiators":["Single converged platform with no policy or log fragmentation across SD-WAN and security functions.","100+ PoP global private backbone reduces internet variability and provides predictable performance for SaaS-heavy traffic.","Strong story for organisations consolidating multiple point solutions onto one operational platform."],"best_fit_for":["Mid-market and enterprise buyers consolidating SD-WAN and SASE on one platform from a single vendor.","Global organisations with SaaS-heavy traffic patterns that benefit from a private backbone.","Teams without dedicated security operations capacity who want a managed SASE experience."],"watch_outs":["Less suited to best-of-breed buyers wanting Zscaler or Netskope as the SSE layer.","Customer does not own the underlay; circuits sourced separately, so multi-supplier coordination remains.","Less mature than incumbents for very large multinational deployments with heavy legacy MPLS estates."],"evidence_coverage_pct":0.6,"last_verified":"2026-09-01","evidence_source_count":62,"capability_evidence":{"f13_qos_and_traffic_shaping":{"source_url":"https://support.catonetworks.com/hc/en-us/articles/7790698733341","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native - Network Rules let admins assign a bandwidth-priority QoS tier to business-critical traffic, alongside acceleration/optimisation and transport-path settings, confirmed directly in Cato's admin documentation. [46]"},"f14_packet_loss_remediation":{"source_url":"https://support.catonetworks.com/hc/en-us/articles/360001868837","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native - packet duplication for packet loss mitigation, confirmed directly in Cato's own documentation: TCP packets duplicated across active links, UDP packets duplicated across active or standby links. [44] [45] [46]"},"f17_cellular_and_5g_support":{"source_url":"https://support.catonetworks.com/hc/en-us/articles/16308182518173-X1600-Cellular-Connectivity-Troubleshooting","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Socket X1600 now has a hardware version that supports Cellular (LTE/5G) connections Cato's own Learning Center documents integrated LTE/5G on the X1600 Socket, dual SIM management (\"By default, SIM Slot 1 is the active one, while Slot 2 is standby.\") and signal monitoring via RSSI, RSRP, SINR and RSRQ. The platform page corroborates transport choice: \"Customers can choose any mix of fiber, cable, xDSL, and cellular connections.\" All three definition elements (transport, SIM management, signal monitoring) are met."},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://catonetworks.com/platform/digital-experience-monitoring-dem/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Confirmed - DEM's AI-powered engines correlate real-user monitoring and synthetic probing [16] Requires DEM licence"},"f11_active_active_link_utilisation":{"source_url":"https://knowledge.catonetworks.com/docs/hardware","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"Cato Socket WAN links support active/active operation. Link design and policy must be configured for the deployment."},"f25_high_availability_design":{"source_url":"https://knowledge.catonetworks.com/docs/hardware","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"WAN redundancy and optional Socket redundancy are documented. HA Sockets require their own licences; resilience depends on the deployed design."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:0b8c3f42d28c71efefe6ed68","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"partial","education":"yes","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (Israel and US). Delivers in the UK from London and Manchester PoPs; contract direct or through UK partners including Netify routes.","sector_review_queue":[{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit (best-evidenced sector) | Zero-touch branch provisioning, backbone performance, DEM | PCI-DSS Level 1 | Ulta Beauty (large-scale, phased, near-zero-touch, 99.99% cutover success, 10 stores/night); Opkalla-documented jewelry retailer (24 stores, MSP cost reduction) | Backbone/PoP density matters most for geographically distributed store estates | Case evidence is US-centric; UK/EU retail-specific case studies not found in this pass | This is genuinely Cato's best-evidenced sector - Netify can cite the Ulta Beauty story with confidence given it's a named, detailed, metric-rich case study.","named_evidence":"Ulta Beauty (large-scale, phased, near-zero-touch, 99.99% cutover success, 10 stores/night); Opkalla-documented jewelry retailer (24 stores, MSP cost reduction)","evidence_source_ids":["evidence:cato-networks:24","evidence:cato-networks:25"]},{"sector":"education","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Referenced in a customer quote ('reorganize our entire security portfolio... for our students, professors, and administrators') | General SASE consolidation value referenced qualitatively | Not assessed | One qualitative customer quote found (unnamed institution) on catonetworks.com/platform/ | N/A | Quote-level evidence only, not a structured case study with metrics | Treat as a weak signal only - a single unattributed quote is not the same standard of evidence as the Ulta Beauty case study; do not over-weight it.","named_evidence":"One qualitative customer quote found (unnamed institution) on catonetworks.com/platform/","evidence_source_ids":["evidence:cato-networks:9"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"retail_ecommerce":false,"education":false},"reviewed_at":"2026-09-30T15:50:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.catonetworks.com/customers/ulta-beauty-reinvents-network-deliver-seamless-retail-experience/","https://www.catonetworks.com/customers/waseda-university-achieves-universal-secure-remote-learning-and-jumpstarts-digital-transformation-with-cato/"],"qualification":"Ulta Beauty primary case documents a SASE-led cloud SD-WAN transition and staged store rollout. Do not imply the three-year rollout is complete. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation. Waseda University primary case documents Cato secure remote learning in Japan via GlobalDots. Replacement named education evidence; does not validate the original anonymous quotation or UK education suitability.","sectors":{"retail_ecommerce":"yes","education":"partial"},"regions":{}}},"uk_evidence":{"entity":{"status":"evidenced","name":"Cato Networks (UK) Limited","source_urls":["https://www.catonetworks.com/msa/"],"checked_at":"2026-10-01T00:00:00Z","review_due":"2026-12-30T00:00:00Z","qualification":"The Cato Master Service Agreement, section 1.4, lists this UK contracting party. The entity identified in the buyer’s order determines the actual counterparty; this does not establish site coverage or managed-service scope."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":3,"research_metrics":{"supported":24,"partial":0,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":16,"total":40,"reviewed":24,"completeness_percent":60,"completeness":0.6},"proven_evidence_count":24,"response_panel":null,"best_for":"Retail and e-commerce; Education (partial evidence); Large global enterprise; Mid-market; platform","best_for_fields":{"sectors_yes":["Retail and e-commerce"],"sectors_partial":["Education"],"regions":[],"size":["Large global enterprise","Mid-market"],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"uk_entity","label":"UK contracting entity","source_urls":["https://www.catonetworks.com/msa/"],"reviewed_at":"2026-10-01T00:00:00Z","qualification":"The Cato Master Service Agreement, section 1.4, lists this UK contracting party. The entity identified in the buyer’s order determines the actual counterparty; this does not establish site coverage or managed-service scope."}},{"slug":"netskope","name":"Netskope","website":"https://www.netskope.com","category":"technology vendor","product_focus":"Borderless SD-WAN, Cloud Confidence Index (CCI), Netskope Cloud Exchange (CE), Netskope One","cost_model":"Quote-based subscription; modules commonly priced by users, sites, traffic and security functions.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"partial","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"yes","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"yes","retail_ecommerce":"not_primary","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"yes","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":120,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/netskope/","shortlist_summary":"Netskope sits in an interesting middle ground between a pure security-first platform and a fully networked one: unlike the likes of Zscaler, it has invested in its own converged mesh network (NewEdge) and a purpose-built SD-WAN (Borderless SD-WAN, built on the 2022 Infiot acquisition), so the ‘security company bolting on networking’ story is a few years further along than Zscaler’s; unlike Cato, that network is built on peering and interconnects across 67 regions rather than an owned private backbone.","key_differentiators":["Strong CASB heritage; widely recognised as a leading SSE vendor for SaaS-heavy environments.","Borderless WAN (from the Infiot acquisition) extends Netskope into single-vendor SASE for buyers wanting both layers from one platform.","Detailed SaaS application visibility and policy controls."],"best_fit_for":["Enterprises with deep SaaS adoption where CASB and DLP are top procurement priorities.","Buyers comparing single-vendor SASE platforms after starting with SSE.","Organisations selecting Netskope SSE alongside a separate SD-WAN platform via partner integration."],"watch_outs":["Native SD-WAN (Borderless WAN) is newer than dedicated SD-WAN platforms; validate path selection and QoS depth in RFP.","Fully managed service: not confirmed. Confirm who will operate the service and whether management is supplied directly or through a partner.","Premium pricing with modular structure; full SASE bundle costs can scale meaningfully with users and traffic."],"evidence_coverage_pct":0.6,"last_verified":"2026-09-01","evidence_source_count":66,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.netskope.com/press-releases/netskope-enables-msps-to-generate-revenue-faster-with-launch-of-new-catalyst-msp-sp-program-and-netskope-partner-orchestrator","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"A self-service multi-tenant orchestrator for the full SASE and AI product suite that quickly provisions production-ready customer environments. Multi-tenant provisioning and delegated administration across unlimited partner tiers are documented in the June 2026 Catalyst announcement and corroborated by ChannelE2E. Branded or white-label partner portals and reusable customer templates were not evidenced on any page read, so graded partial rather than yes."},"f07_lifecycle_management":{"source_url":"https://www.netskope.com/wp-content/uploads/2022/07/2025-06-Netskope-One-SD-WAN-DS-607-9.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"simple one-click RMA, customized applications The SD-WAN datasheet documents zero-touch activation and one-click hardware RMA, and the platform is cloud-managed from a single console. No page read states that firmware upgrades, patching, renewals or end-of-life planning are performed as part of the service, so graded partial rather than yes."},"f17_cellular_and_5g_support":{"source_url":"https://www.netskope.com/products/wireless-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Reliable, high-performance 5G connectivity for primary, backup, or active-active links delivers sub-second brownout/blackout protection. 5G Standalone is supported as primary, backup or active-active transport. eSIM with on-gateway LPAd covers SIM management, the Converged Gateway carries built-in 4G/5G with Netskope Zero Trust SIM across 400+ networks, and digital experience management reports cellular signal strength and quality."},"f26_sla_backed_service_fabric":{"source_url":"https://www.netskope.com/press-releases/netskope-sets-new-industry-benchmarks-for-cloud-security-performance","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Netskope launches an industry-first SLA committing to less than 50 ms of latency for processing encrypted traffic Contractual commitments cover uptime and availability at five nines plus latency for both decrypted and non-decrypted traffic. The NewEdge datasheet repeats industry-best SLAs for availability and latency. Support response-time and change-handling commitments sit in Support Terms, which were not reachable in this task."},"f40_managed_service_assurance":{"source_url":"https://www.netskope.com/netskope-technical-support","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"We are a global team and operate 24/7/365 Netskope runs a global support organisation on a 24/7/365 basis at Premium and Premium Plus tiers, with technical account management and a focused technical support engineer at Premium Plus. No page read describes a Netskope NOC or SOC proactively monitoring the customer service, owning incidents through to root cause analysis, or running structured service reviews and change governance, so graded partial."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:922007c7966bdb60d5b68da6","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). UK NewEdge presence; delivered direct or via UK security MSPs.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | DLP, CASB for insider-risk and data-loss use cases | Not assessed | JLL (real estate/professional services), MinterEllisonRuddWatts (law firm) | N/A | Two named case studies, reasonably detailed | A genuinely well-evidenced sector for Netskope specifically - two independent, named, detailed case studies covering related professional-services use cases (insider risk, fast SSE rollout).","named_evidence":"JLL (real estate/professional services), MinterEllisonRuddWatts (law firm)","evidence_source_ids":["evidence:netskope:31","evidence:netskope:32"]},{"sector":"financial_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | DLP, CASB, PCI DSS v4.0.1 certification | PCI DSS v4.0.1 explicitly certified; DORA explicitly named on the Compliance Centre | CARE Ratings (credit rating agency, India) | N/A | Single named case study, though the PCI-DSS and DORA compliance evidence is genuinely strong | The best-evidenced sector-compliance combination across all three vendors profiled so far - explicit PCI-DSS and DORA naming, plus a real financial-services case study.","named_evidence":"CARE Ratings (credit rating agency, India)","evidence_source_ids":["evidence:netskope:15","evidence:netskope:30"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"financial_services":false,"professional_services":false},"reviewed_at":"2026-09-30T15:30:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.netskope.com/resources/case-studies/care-ratings","https://www.netskope.com/resources/case-studies/jll","https://www.netskope.com/fr/blog/explaining-the-importance-of-netskopes-recent-expansion-of-newedge-in-the-uk","https://www.netskope.com/wp-content/uploads/2022/12/2025-03-NewEdge-DS-333-11.pdf"],"qualification":"CARE Ratings case confirms Netskope CASB, SWG and Private Access deployment at an Indian rating agency. SSE evidence, not proof of SD-WAN. JLL and MinterEllisonRuddWatts primary cases describe SSE/secure remote access in professional services. No UK delivery inference. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation. Netskope documents UK NewEdge infrastructure; 2025 map names London, Manchester and Dublin. This is cloud security/network presence, not evidence of last-mile circuits, UK contracting entity or an approved managed service for these sites.","sectors":{"financial_services":"yes","professional_services":"yes"},"regions":{"uk_ireland":"partial"}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"partial","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":4,"research_metrics":{"supported":21,"partial":3,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":16,"total":40,"reviewed":24,"completeness_percent":60,"completeness":0.6},"proven_evidence_count":21,"response_panel":null,"best_for":"Financial services; Professional services; platform","best_for_fields":{"sectors_yes":["Financial services","Professional services"],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"palo-alto-networks","name":"Palo Alto Networks Prisma SASE","website":"https://www.paloaltonetworks.com/sase","category":"technology vendor","product_focus":"ADEM, AI Access Security, Enterprise DLP, Precision AI / Strata Copilot","cost_model":"Quote-based subscriptions; appliance/ION and Prisma Access/SASE licensing typically priced by users, bandwidth, locations and term.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"not_confirmed","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"partner_integrated","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"yes","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_confirmed","professional_services":"not_primary","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":100,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/palo-alto-prisma-sase/","shortlist_summary":"Palo Alto Networks isn’t just selling SASE, it’s selling one door into a much larger security estate (NGFWs, Prisma Cloud, Cortex XDR/XSIAM, identity security) that most large enterprises already have some footprint in. That shows up directly in its differentiators: it’s one of the few vendors recognised as a Leader in all three of Gartner’s Single-Vendor SASE, SSE and SD-WAN Magic Quadrants simultaneously, and its ‘platformisation’ commercial strategy rewards multi-product commitment with steep discounts.","key_differentiators":["Prisma SASE converges SD-WAN, cloud-delivered security, and digital experience management (ADEM) under a single platform identity.","Strong threat intelligence and security capability inheritance from the wider Palo Alto Networks portfolio.","Often selected by buyers consolidating from multiple security vendors onto a single SASE platform."],"best_fit_for":["Enterprises with mature security operations that want SASE built around a leading security platform rather than a security layer on top of an SD-WAN platform.","Buyers consolidating CASB, SWG, ZTNA and FWaaS onto one vendor for unified policy.","Organisations with global SaaS-heavy traffic patterns that benefit from Prisma Access PoP coverage."],"watch_outs":["Premium pricing relative to firewall-led SD-WAN vendors; commercial model requires careful scoping by users, bandwidth, locations and term.","Managed delivery is via partners (Orange Business, NTT, others); first-party managed service is not the primary model.","Private global backbone is not vendor-owned; cloud transport uses internet and Prisma Access PoPs."],"evidence_coverage_pct":0.6,"last_verified":"2026-09-01","evidence_source_count":65,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.paloaltonetworks.com/sase/managed-sase","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"MSPs can securely delegate responsibilities while ensuring only authorized users can read or modify critical security configurations. Hierarchical multitenancy and granular role-based delegated administration are evidenced on the Managed SASE page (source 6) and the 2022 MSP press release (source 14), which describes a cloud-based management portal with hierarchical multitenancy using granular role-based access control. Graded partial rather than yes because no evidence of branded or white-label portals and service templates carrying the MSP's own brand was found on the pages reviewed; the Prisma SASE for MSPs datasheet (source 18) is gated and returned no usable text."},"f07_lifecycle_management":{"source_url":"https://docs.paloaltonetworks.com/prisma-access/administration/sase-private-location","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Palo Alto Networks manages sizing, content versioning, monitoring, upgrades, and security subscriptions. For the cloud service and for SASE Private Location, Palo Alto Networks handles sizing, content versioning, upgrades and security subscriptions as part of the service. Graded partial because hardware replacement and RMA, ION appliance firmware handling, renewals and end-of-life planning were not evidenced: the Support Policies page (source 19) is a link index that returned no substantive text, and no RMA or end-of-life policy document was read in this task."},"f19_public_cloud_gateways":{"source_url":"https://docs.paloaltonetworks.com/prisma-access/administration/prisma-access-overview","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"With Prisma Access, Palo Alto Networks deploys and manages the security infrastructure globally to secure your remote networks and mobile users. The PoPs are Palo Alto Networks' own service, sold under its own brand and covered by its own SLA, so this is yes rather than partner_integrated. Recorded for transparency: the compute those PoPs run on is rented from GCP and AWS (source 11), which is a hosting arrangement rather than reselling another vendor's SASE gateway service."},"f20_private_pops_dedicated_pops":{"source_url":"https://docs.paloaltonetworks.com/prisma-access/administration/sase-private-location","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"SASE Private Location enables you to deploy Prisma Access services within your own infrastructure. SASE Private Location is a customer-hosted deployment of Prisma Access services on the customer's own hypervisor and ISP links, with Palo Alto Networks retaining backend management. Corroborated by the sovereignty blog (source 12), which states that for organisations with the most stringent data residency requirements Palo Alto offers SASE Private Location. Colo-Connect (source 9) is a different thing: private connectivity into the shared cloud, not a dedicated PoP."},"f21_private_global_backbone":{"source_url":"https://www.paloaltonetworks.com/blog/sase/the-architecture-behind-prisma-sase-99999-uptime/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Prisma SASE leverages the infrastructure of major hyperscale providers such as Google Cloud Platform (GCP) and Amazon Web Services (AWS). Inter-region transport rides the backbones of Google Cloud and AWS rather than a network owned or controlled by Palo Alto Networks. The same post adds that Prisma SASE benefits from private peering connections between tier 1 cloud providers and other public cloud platforms, SaaS networks and ISPs, which again describes third-party peering. Colo-Connect (source 9) uses GCP interconnect technology, reinforcing the same conclusion. No evidence of Palo Alto-owned fibre, wavelengths or core routing was found."},"f26_sla_backed_service_fabric":{"source_url":"https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/datasheets/support/prisma-access-service-sla.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"If, during any calendar month, the Service availability falls below 99.999%, Customer can submit a claim for credit The published SLA is contractual with service credits and covers three separate measures: service availability at 99.999%, a Monthly Security Processing Latency Percentage at 99.99% and a Monthly SaaS Application Latency Percentage at 99.99%, with credits scaling to 100% where availability falls below 98%. That goes beyond best-effort targets. Support response times and change handling commitments were not evidenced in the SLA text reviewed."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:c7cf7997ec576a63c92818da","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"partial","professional_services":"yes","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). UK Prisma Access presence; delivered direct or via UK partners and carriers.","sector_review_queue":[{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Cost reduction and productivity capabilities relevant to a 'changing market' retail context | Not assessed for sector-specific frameworks | Westfield (shopping centre/retail property operator) | N/A | Single case study; less quantified in the source snippet reviewed than Grupo Bimbo specifically | Westfield is a genuine, named retail-sector customer - weaker in detail than Cato's Ulta Beauty or Zscaler's AutoNation, but a real evidence point rather than a total gap.","named_evidence":"Westfield (shopping centre/retail property operator)","evidence_source_ids":["evidence:palo-alto-prisma-sase:23"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | IoT/OT security, Zero Trust for OT devices, Cortex XDR forensics | Not assessed for sector-specific frameworks | Grupo Bimbo (200+ bakery plants, 35 countries), Colgate-Palmolive (unified IT/OT security) | Global multi-country deployment evidenced via Grupo Bimbo specifically | US-centric/global-brand case evidence; UK/EU manufacturing-specific case studies not found in this pass | By a clear margin the best-evidenced sector across all four vendors profiled - Grupo Bimbo alone provides more quantified, credible manufacturing/OT evidence than any single case study found for the other three vendors.","named_evidence":"Grupo Bimbo (200+ bakery plants, 35 countries), Colgate-Palmolive (unified IT/OT security)","evidence_source_ids":["evidence:palo-alto-prisma-sase:25","evidence:palo-alto-prisma-sase:27"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"manufacturing":false,"retail_ecommerce":false,"transport_logistics":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://paloaltonetworks.com/customers/colgate-palmolive-powers-secure-manufacturing-with-palo-alto-networks","https://paloaltonetworks.com/customers/grupo-bimbo-protects-its-global-connected-supply-chain-with-palo-alto-networks","https://paloaltonetworks.com/customers/westfield-responds-rapidly-to-a-changing-market-with-prisma-sase"],"qualification":"Colgate primary case explicitly identifies Prisma SD-WAN and Prisma Access at a manufacturer. Bimbo corroborates manufacturing security, not a separate logistics sector. Westfield primary case documents Prisma SASE for mall operations and retail access. Evidence relates to a mall operator, not every retail format. Grupo Bimbo is a bakery manufacturer. Its connected supply chain does not make it an independent transport/logistics customer. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"manufacturing":"yes","retail_ecommerce":"yes","transport_logistics":"not_confirmed"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":5,"research_metrics":{"supported":21,"partial":2,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":16,"total":40,"reviewed":24,"completeness_percent":60,"completeness":0.6},"proven_evidence_count":21,"response_panel":null,"best_for":"Retail and e-commerce; Manufacturing; platform","best_for_fields":{"sectors_yes":["Retail and e-commerce","Manufacturing"],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"cisco","name":"Cisco","website":"https://www.cisco.com/site/us/en/solutions/networking/sdwan/index.html","category":"technology vendor","product_focus":"Cisco AI Defence, Cisco Catalyst SD-WAN, Cisco Duo, Cisco ISE","cost_model":"Quote-based subscription/licence + appliance/support; Meraki public SKUs via partners, enterprise pricing varies by platform and term.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"yes","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_primary","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"partial","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"partial","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"not_primary","manufacturing":"yes","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"yes","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/cisco/","shortlist_summary":"Cisco’s own materials describe SASE explicitly as ‘a journey - you can start with SD-WAN or SSE and converge over time’, which is a different pitch to Cato’s, Zscaler’s, Netskope’s or Palo Alto’s single-platform-from-day-one story. In practise, ‘Cisco SASE’ means choosing between Cisco Secure Access (cloud-delivered SSE, evolved from Cisco Umbrella), Cisco Catalyst SD-WAN (the enterprise-grade fabric, formerly Viptela) or Meraki SD-WAN (the simpler, cloud-first option), and Cisco Secure Connect (a turnkey bundle of Secure Access plus Meraki SD-WAN specifically).","key_differentiators":["Broadest platform portfolio in the category, covering Catalyst SD-WAN for enterprise WAN, Meraki MX for cloud-managed branch, and Cisco Secure Access for converged SASE delivery.","Cloud OnRamp provides automated optimisation paths for Microsoft 365, Salesforce, and major cloud providers, with native integration into the Cisco security stack.","Large global partner and integrator ecosystem reduces delivery risk for buyers wanting managed or co-managed delivery."],"best_fit_for":["Enterprises already standardised on Cisco networking who want platform consistency from LAN through WAN to security.","Multinational organisations needing strong vendor presence across regions and a deep partner channel.","Buyers prioritising single-vendor risk consolidation across networking and security."],"watch_outs":["Two distinct SD-WAN product lines (Catalyst and Meraki) means buyers should confirm which fits the target deployment profile and the longer-term roadmap.","Managed delivery is partner-led rather than first-party, so service quality varies meaningfully by integrator.","Private global backbone is not part of the platform; cloud transport relies on internet and partner gateways."],"evidence_coverage_pct":0.575,"last_verified":"2026-09-01","evidence_source_count":66,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://documentation.meraki.com/Platform_Management/Managed_Service_Provider_Resources/Dashboard_Branding_for_MSPs","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Managed Service Providers (MSPs) can now take advantage of custom branding options within the Cisco Meraki Dashboard. All four elements of the definition are evidenced. Branded portals from the Meraki dashboard branding documentation, which also states \"Any logos that are applied to Dashboard should be the logo of the MSP and not of the end customer.\" Tenant isolation and delegated administration from multi-organisation management, corroborated on the Secure Access datasheet: \"Large enterprise customers can manage multiple organizations (orgs) through a single user interface, with central access and license management.\" Branding is configured per organisation and can be cloned to new organisations as a template."},"f14_packet_loss_remediation":{"source_url":"https://investor.cisco.com/news/news-details/2026/Cisco-Redefines-Security-for-the-Agentic-Era-with-AI-Defence-Expansion-and-AI-Aware-SASE/default.aspx","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, specifically confirmed in the AI-traffic context - the February 2026 AI-aware SASE announcement explicitly names 'packet duplication' as an AI traffic optimization technique [25]"},"f19_public_cloud_gateways":{"source_url":"https://documentation.meraki.com/CiscoPlusSecureConnect/Cisco___Secure_Connect_Pre-configuration_Checklist/Data_Centers","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Cisco Secure Connect services operate in the Cisco Umbrella global cloud architecture which is network of data centers located throughout the world interconnected with a high speed, low latency backbone. Yes rather than partner_integrated. This is Cisco's own service infrastructure, not a third party's PoPs that Cisco resells: Cisco owns and operates the Umbrella global cloud architecture, publishes its data centre list, and enforces security and delivers remote access from it. Corroborated by the Umbrella global network page, \"The Cisco Umbrella global cloud architecture serves more than 30,000 customers daily in 190+ countries.\" AWS, Azure and GCP connectivity was disregarded as it does not meet the definition."},"f21_private_global_backbone":{"source_url":"https://documentation.meraki.com/CiscoPlusSecureConnect/Cisco___Secure_Connect_Pre-configuration_Checklist/Data_Centers","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Cisco Secure Connect services operate in the Cisco Umbrella global cloud architecture which is network of data centers located throughout the world interconnected with a high speed, low latency backbone. Partial rather than yes. A global, not national, footprint is clearly evidenced and the documentation states the data centres are interconnected by a backbone. What is not evidenced is the ownership or control test in the definition: no page reviewed states that Cisco owns or controls that backbone rather than buying transit or leased capacity. The Umbrella global cloud architecture page instead emphasises internet peering and anycast, \"Umbrella peers directly with more than 1000 organizations\", which points towards an internet-peering-centric design. Graded partial on the ownership gap. See conflicts."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:3e7b3c72170a8c6cadaf8368","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). Extensive UK channel; Catalyst and Meraki widely delivered as UK managed services.","sector_review_queue":[{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | Distributed-facility SD-WAN and security consolidation; ThousandEyes for multi-site assurance | Not assessed for sector-specific frameworks | Peco Foods (poultry processing, 7,500+ employees, 20 facilities across the Southeast US) | Multi-facility deployment evidenced directly | US-centric case evidence; single company rather than the multi-country breadth of Palo Alto's Grupo Bimbo evidence | A genuinely credible, named, quoted manufacturing case study - not as expansive as Grupo Bimbo's 35-country story, but solid, specific evidence (a 200% user-experience improvement, named IT manager) for a real distributed-facility food-processing operation.","named_evidence":"Peco Foods (poultry processing, 7,500+ employees, 20 facilities across the Southeast US)","evidence_source_ids":["evidence:cisco:31","evidence:cisco:32","evidence:cisco:34","evidence:cisco:35","evidence:cisco:37"]},{"sector":"healthcare","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Cloud-first, hardware-light deployment relevant to multi-site hospitality operators | Not assessed | Mitchells & Butlers (UK pub/restaurant operator) | UK-based customer specifically - directly relevant to Netify's UK-focused work | Single case study | Genuinely useful for Netify specifically: this is the only UK-named customer found across all five vendor profiles produced so far, evidenced by a named Head of Technology and Support quote about cloud-first infrastructure alignment.","named_evidence":"Mitchells & Butlers (UK pub/restaurant operator)","evidence_source_ids":["evidence:cisco:31"]},{"sector":"hospitality_leisure","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Cloud-first, hardware-light deployment relevant to multi-site hospitality operators | Not assessed | Mitchells & Butlers (UK pub/restaurant operator) | UK-based customer specifically - directly relevant to Netify's UK-focused work | Single case study | Genuinely useful for Netify specifically: this is the only UK-named customer found across all five vendor profiles produced so far, evidenced by a named Head of Technology and Support quote about cloud-first infrastructure alignment.","named_evidence":"Mitchells & Butlers (UK pub/restaurant operator)","evidence_source_ids":["evidence:cisco:31"]},{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Fast, low-complexity deployment relevant to smaller professional-services firms specifically | Not assessed | George Sink, P.A. (law firm) | N/A | Single case study, though genuinely specific and quotable (2-hour deployment, named CIO) | A real, credible, if narrow, professional-services proof point - the 2-hour deployment claim specifically is one of the standout pieces of evidence in this entire profile.","named_evidence":"George Sink, P.A. (law firm)","evidence_source_ids":["evidence:cisco:31"]},{"sector":"government_public_sector","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | FedRAMP Moderate across Secure Access, ThousandEyes, Duo and Catalyst SD-WAN together | FedRAMP Moderate (multiple named components) | Indiana Office of Technology (ThousandEyes specifically, not confirmed for the full Secure Access stack) | Coherent multi-component FedRAMP story, capped at Moderate | Weaker than Zscaler's or Palo Alto's FedRAMP High/DoD IL evidence | A genuinely multi-product, coherent public-sector compliance story, though it caps out at a lower assurance level (Moderate) than two of the other four vendors profiled - a specific, worth-stating nuance.","named_evidence":"Indiana Office of Technology (ThousandEyes specifically, not confirmed for the full Secure Access stack)","evidence_source_ids":["evidence:cisco:16","evidence:cisco:17","evidence:cisco:21"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"professional_services":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.cisco.com/c/dam/en/us/products/security/secure-access/customer-highlight-peco-foods.pdf","https://www.cisco.com/site/us/en/about/case-studies-customer-stories/mitchells-butlers.html","https://cisco.com/site/us/en/solutions/secure-access-service-edge-sase/index.html","https://www.cisco.com/c/en/us/products/collateral/plus-as-a-service/george-sink-law-customer-cs.pdf"],"qualification":"Peco Foods is identified as food manufacturing with a Cisco SASE deployment. Manufacturing evidence is US-based. The separate Mitchells and Butlers case documents UK hospitality SASE and Meraki SD-WAN. Regional coverage remains partial: it does not establish coverage of every UK/Ireland site or a contracting entity. Neither case certifies compliance or suitability for a particular estate. Recovered Cisco George Sink PDF: Secure Connect deployed in a law firm; SD-WAN expansion described as a next step. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"manufacturing":"yes","hospitality_leisure":"yes","professional_services":"yes"},"regions":{"uk_ireland":"partial"}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"partial","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":6,"research_metrics":{"supported":21,"partial":1,"partner_delivered":0,"managed_service_dependent":0,"not_primary":1,"unconfirmed":17,"total":40,"reviewed":23,"completeness_percent":58,"completeness":0.575},"proven_evidence_count":21,"response_panel":null,"best_for":"Manufacturing; Professional services; Hospitality and leisure; Large global enterprise; platform","best_for_fields":{"sectors_yes":["Manufacturing","Professional services","Hospitality and leisure"],"sectors_partial":[],"regions":[],"size":["Large global enterprise"],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"check-point","name":"Check Point","website":"https://www.checkpoint.com/harmony/sase","category":"technology vendor","product_focus":"AI Network Firewall / AI Defence Plane, CASB, Check Point Infinity Architecture, Check Point SASE Platform","cost_model":"Quote-based subscription; Microsoft marketplace listing exists but enterprise deployments normally require quote.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"partial","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"not_confirmed","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":80,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/checkpoint/","shortlist_summary":"Check Point’s SASE platform has been through two names in under three years. The underlying technology began life as Perimeter 81, an independent Israeli SSE/ZTNA vendor founded in 2018 that had grown to more than 3,000 customers and a Forrester Zero Trust Wave recognition before Check Point Software Technologies - the much larger, long-established Israeli cybersecurity vendor behind Check Point Firewall-1, founded in 1993 - acquired it for approximately $490 million in a deal announced September 2023.","key_differentiators":["Harmony SASE combines Check Point security heritage with cloud-delivered SASE and optimised SD-WAN performance.","Strong story for organisations already running Check Point firewalls who want to extend into SASE.","Available via Microsoft Azure marketplace for buyers wanting consolidated cloud procurement."],"best_fit_for":["Existing Check Point customers extending firewall investment into SD-WAN and SASE.","Mid-market enterprises consolidating security and SD-WAN under one vendor.","Buyers prioritising security maturity over network-platform maturity."],"watch_outs":["Dynamic path selection: not confirmed; QoS and traffic shaping: not confirmed; Packet loss remediation: not confirmed. Confirm the exact SD-WAN product and required branch behaviour.","Smaller SD-WAN deployment footprint than category leaders; validate scale references.","Managed delivery is partner-led."],"evidence_coverage_pct":0.55,"last_verified":"2026-09-01","evidence_source_count":44,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.checkpoint.com/services/managed-security/managed-firewall/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Managed Firewall Services with 24/7 monitoring, policy management, tuning, patching, upgrades, incident handling, and expert support for Check Point and third-party NGFWs. Check Point sells first-party managed services covering firewall, EDR, vulnerability management and Microsoft 365, with 24/7 monitoring, policy management and incident handling. I did not find a page describing Check Point itself designing, deploying, changing and reporting on the SASE service end to end for the customer, so partial rather than yes. The Managed Firewall as a Service page (register 20) could not be read."},"f03_co_managed_service":{"source_url":"https://www.checkpoint.com/services/managed-security/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Delivering co-managed services with partners and customers for optimal protection through unified collaboration and robust security strategies. Check Point explicitly frames its managed security offer as co-managed, with its experts acting as an extension of the customer team while the customer retains its own operations."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.checkpoint.com/partners/mssp-program/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Leverage true multi-tenancy, a wide range of security services, and full API integration to streamline customer management and accelerate service delivery. Multi-tenant architecture, delegated multi-customer management through one portal and API integration are all stated on the MSSP programme page. I found no statement of branded or white-label portals under the MSP's own brand, which the definition requires, so partial rather than yes."},"f05_professional_services_and_migration_support":{"source_url":"https://www.checkpoint.com/services/professional-services/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"As your security infrastructure becomes more complicated, our Professional Services team can assist you with your security design, deployment, operation, and optimization needs. The same page lists a Jumpstart Program, Maestro Deployment, SmartOptimize, Gateway Health Check and Lifecycle Management Services, and states delivery covers adding new features and layers while ensuring smooth migrations and scheduled updates. Training programmes are listed separately. Explicit runbook and rollback wording was not found."},"f07_lifecycle_management":{"source_url":"https://www.checkpoint.com/support-services/support-plans/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Check Point shall use commercially reasonable efforts to ship the replacement hardware on the same business day, however, shipment my occur on the next business day if required for operational reasons. Support programmes include RMA hardware replacement with same business day shipment and onsite delivery options, plus Latest Hot Fixes & Service Packs and Major Upgrades & Enhancements on every tier, and Lifecycle Management Services is a named professional service. This is a purchased support or services contract rather than something bundled into every subscription. The dedicated lifecycle management page (register 15) could not be read. The quote reproduces the page's own typo."},"f17_cellular_and_5g_support":{"source_url":"https://www.checkpoint.com/harmony/sase/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Sub-second failover to any WAN link: MPLS, 5G, broadband 5G is named as a supported WAN failover transport for SD-WAN, and the NGFW page notes a Wi-Fi 5G option on small business appliances and 1 GbE & 5G wireless secure connectivity on industrial appliances. I found no statement covering SIM management or signal monitoring, which the definition requires, so partial. The Quantum SD-WAN page (register 14) could not be read."},"f19_public_cloud_gateways":{"source_url":"https://www.checkpoint.com/harmony/sase/private-access/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our high-performance network provides fast delivery between corporate sites worldwide thanks to multiple tier-1 links at each point-of-presence (PoP), reserved bandwidth, and peering agreements. Check Point operates its own PoP and data centre estate for SASE internet access, private access and SaaS security, described as 80+ to 85+ global data centres depending on the page. This is Check Point's own infrastructure rather than a resold third party edge, so yes rather than partner_integrated."},"f21_private_global_backbone":{"source_url":"https://www.checkpoint.com/harmony/sase/private-access/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our high-performance network provides fast delivery between corporate sites worldwide thanks to multiple tier-1 links at each point-of-presence (PoP), reserved bandwidth, and peering agreements. The heading above this text is Global Private Backbone, and the SASE overview separately states Private Access delivers high performance with a full mesh global private backbone. The backbone is global rather than national. Check Point describes it as built on purchased tier-1 links, reserved bandwidth and peering rather than fibre it owns, so it is a controlled overlay backbone rather than owned infrastructure."},"f26_sla_backed_service_fabric":{"source_url":"https://www.checkpoint.com/support-services/support-plans/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Get advanced access to our large, self-service knowledge base and a committed 30-minute response time to issues with level one severity. Check Point publishes contractual support SLAs with per-severity response times (30 minutes for Severity 1 across all tiers), 7x24 coverage on Premium and above, and named SLA documents including the Check Point Direct Support Program Service Level Agreement. I found no published availability, latency, jitter or loss commitment for the SASE cloud service, so partial rather than yes."},"f27_integrated_next_generation_firewall":{"source_url":"https://checkpoint.com/harmony/sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, via the confirmed FWaaS capability [24] [28]"},"f33_data_loss_prevention":{"source_url":"https://www.checkpoint.com/harmony/sase/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Inline and API-based enforcement with Application Control for 10,000+ cloud apps, tenant restrictions, DLP, and Threat Prevention powered by ThreatCloud AI The same pages state AI-powered data classification with 800+ predefined data types, and the Internet Access page cites in-browser data loss prevention. Content classification and inline enforcement are clearly evidenced. Explicit alerting and exception workflow detail was not found on the pages read."},"f35_soc_siem_soar_integration":{"source_url":"https://sase.checkpoint.com/solutions/compliance/soc-2","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine technical specificity as part of the platform's SOC 2 Type 2 compliance architecture - 'monitor system activity, view system configuration changes and assign user access controls', with audit trails covering 'the modification, addition, or removal of key system components' [18] Not confirmed"},"f40_managed_service_assurance":{"source_url":"https://www.checkpoint.com/services/managed-security/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our 24/7 global service team will be there whenever and wherever you need them to help make sure your organization is always protected. 24/7 coverage, incident handling and NOC and SOC oriented managed services are stated, and the services pages claim 99% of threats responded to within 1 hour. I found no statement of provider-owned root cause analysis, structured service reviews or change governance, so partial. The Managed Detection and Response page (register 19) could not be read."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:745e1446fdf98dad45f0b532","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"partial","professional_services":"partial","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (Israel/US). Harmony SASE UK presence; delivered via UK security partners.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"requires_confirmation","qualification":"Unknown - not assessed, no case study found, though the platform's confirmed strong, independent review base spans real, named-role practitioners describing use across multiple industries generally | Not assessed in detail by sector | Not assessed | Named-role reviews confirmed generally (e.g. 'Manager, IT Security and Risk Management' at a company with $250M-500M revenue, per Gartner Peer Insights), though not sector-specific to professional services | N/A | General practitioner reviews exist; a sector-specific case study does not | Real, credible, named-role user evidence exists at a general level (Table 9, 11), though not itemised by professional-services sector specifically.","named_evidence":"Named-role reviews confirmed generally (e.g. 'Manager, IT Security and Risk Management' at a company with $250M-500M revenue, per Gartner Peer Insights), though not sector-specific to professional services","evidence_source_ids":["evidence:checkpoint:23"]}],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":7,"research_metrics":{"supported":17,"partial":5,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":18,"total":40,"reviewed":22,"completeness_percent":55,"completeness":0.55},"proven_evidence_count":17,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"att-business","name":"AT&T Business","website":"https://www.business.att.com/products/sd-wan.html","category":"managed service provider / carrier network provider","product_focus":"AT&T Dynamic Defence with Palo Alto Networks, AT&T Managed SASE with Cisco, AT&T Managed SD-WAN, AT&T Network as a Service (NaaS)","cost_model":"Quote-based managed service; access circuits, security, platform and managed service wrapped into term contract.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"partial","f27_integrated_next_generation_firewall":"partner_integrated","f28_full_sase_platform":"partner_integrated","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":1600,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/att/","shortlist_summary":"AT&T is one of the largest telecommunications companies in the United States, reporting trailing-twelve-month revenue of approximately $120.7 billion as of Q1 2026, with fixed-line enterprise services (including the SD-WAN and SASE proposition covered in this profile) accounting for roughly 14% of total revenue. AT&T’s SASE strategy is built on two named, current, dated technology partnerships.","key_differentiators":["Major US carrier-led managed SD-WAN portfolio with multi-vendor platform options (including Fortinet for AT&T SASE).","Strong North American underlay ownership with global delivery via international partnerships.","AT&T SASE unifies SD-WAN with network security as a converged managed service."],"best_fit_for":["US-headquartered enterprises wanting integrated carrier-led SD-WAN and SASE.","Buyers wanting Fortinet SASE delivered as a managed service rather than DIY.","Organisations prioritising carrier-grade SLAs and managed service maturity."],"watch_outs":["Underlying platform varies by service tier; buyers should confirm which platform supports the proposed scope.","International delivery depth depends on partnerships outside North America.","Commercial structure typically bundles access, security and platform; line-item costing requires explicit RFP."],"evidence_coverage_pct":0.525,"last_verified":"2026-09-01","evidence_source_count":29,"capability_evidence":{"f05_professional_services_and_migration_support":{"source_url":"https://www.business.att.com/content/dam/attbusiness/briefs/sd-wan-product-brief.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Engineers also support initial installations and LAN migrations and create and fine-tune business policies. The Managed SD-WAN product brief also states \"AT&T supports the entire continuum of the customer lifecycle from design and delivery to ongoing network management.\" and assigns \"Dedicated resources are assigned to each implementation, including project managers\". Discovery, pilots, staging, runbooks and rollback plans are not itemised in the material reviewed, so the grade rests on the design, installation and LAN migration wording."},"f07_lifecycle_management":{"source_url":"https://www.business.att.com/categories/att-managed-services.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"With comprehensive support and maintenance included, your systems and connectivity services stay smooth and efficient. Maintenance is stated to be included in AT&T managed services, and the FlexWare brief covers AT&T managed universal CPE. No AT&T page reviewed names hardware replacement, firmware upgrades, patching, renewals or end-of-life planning. The words \"maintenance\", \"replacement\" and \"firmware\" do not appear in the Managed SD-WAN product brief, and \"lifecycle\" does not appear on the managed services category page. Graded partial on that gap."},"f10_dynamic_path_selection":{"source_url":"https://business.att.com/products/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Intelligent network routing and optimization with SD-WAN' and 'Improve performance, reliability, and reduce latency with intelligent routing and local breakout capabilities' [4]"},"f12_application_aware_routing":{"source_url":"https://business.att.com/products/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Intelligent network routing and optimization with SD-WAN' named as a core managed-service capability [4]"},"f15_local_internet_breakout":{"source_url":"https://business.att.com/products/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'local breakout capabilities' named specifically alongside intelligent routing [4]"},"f17_cellular_and_5g_support":{"source_url":"https://www.business.att.com/content/dam/attbusiness/briefs/att-sase-branch-with-fortinet-solution-brief.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Moving to a more distributed cloud connectivity model means you can use widely available, low-cost options for connectivity such as broadband, 4G/LTE, and 5G. The Fortinet brief also states \"Fortinet extenders provide an LTE-based backup WAN connection. They can also serve as a primary connection to kiosks, retail pop-up stores, small branch offices, point of sale systems, and other locations.\", which covers both primary and failover use. AT&T is itself the mobile network operator. SIM management and signal monitoring were not evidenced on the pages read; the attempted AT&T managed wireless WAN PDF returned unreadable binary."},"f18_cloud_on_ramp":{"source_url":"https://business.att.com/categories/network-as-a-service.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Support multiple clouds by creating an integrated network that brings together your data centres, public clouds, and private clouds in a hybrid environment' and confirmed 'multicloud connectivity' named directly for the Cisco-based offering [2] [8] Specific, named hyperscaler cloud on-ramp partnerships weren't itemised by name"},"f23_multi_cloud_transit_fabric":{"source_url":"https://business.att.com/categories/network-as-a-service.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Support multiple clouds by creating an integrated network that brings together your data centres, public clouds, and private clouds in a hybrid environment' and confirmed 'multicloud connectivity' named directly for the Cisco-based offering [2] [8] Specific, named hyperscaler cloud on-ramp partnerships weren't itemised by name"},"f25_high_availability_design":{"source_url":"https://business.att.com/content/dam/attbusiness/briefs/next-generation-networking-use-case.pdf","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - AT&T's own use-case materials confirm 'SLAs for equipment availability' as a standard commercial commitment [17]"},"f26_sla_backed_service_fabric":{"source_url":"https://www.business.att.com/products/dedicated-internet.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"AT&T Dedicated Internet access is perfect for businesses that require the fastest speeds available and protection from outages with world-class Service Level Agreements (SLAs) supported by 24/7 active monitoring. Contractual SLAs with service credits are published for the underlying AT&T Dedicated Internet access service, and the SLA credit quick guide points to the ADI Service Guide for the objectives. No SLA covering the managed SD-WAN or SASE service itself was reachable: the AT&T Service Guide Library at serviceguidenew.att.com could not be fetched, and the strings \"SLA\" and \"service level agreement\" do not appear in the Managed SD-WAN product brief or the Palo Alto Networks SASE brief. Graded partial for that reason."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.business.att.com/content/dam/attbusiness/briefs/att-sase-branch-with-fortinet-solution-brief.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"AT&T Business next-generation firewalls with Fortinet enable one of the fastest application steering methods in the industry. Fortinet technology, branded and managed by AT&T. The same brief lists \"SSL/TLS inspection and threat protection for visibility and prevention against malware.\", \"Web filtering service to enforce internet security and reduce complexity.\" and \"Complete threat protection anti-virus, and intrusion prevention system (IPS)\", so the full NGFW feature set is present but is another vendor's. The FlexWare brief confirms multi-vendor sourcing: \"Supports a variety of secure virtual firewall vendor designs, including Palo Alto, Fortinet, and Juniper.\""},"f30_zero_trust_network_access":{"source_url":"https://business.att.com/products/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Helps ensure that only the right team members have access to the right apps, no matter where they access the network' and 'enforce strict identity verification regardless of location' [4]"},"f31_secure_web_gateway":{"source_url":"https://business.att.com/products/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as part of both named SASE architecture descriptions (Cisco and Palo Alto Networks-based) [4] Capability specifics depend on which underlying platform (Cisco or Palo Alto) is proposed"},"f32_casb_capability":{"source_url":"https://business.att.com/learn/articles/sase-vs-sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name as a core SASE architecture component in AT&T's own materials [7] Specific inline-versus-API-mode technical detail not itemised per platform"},"f36_centralised_orchestration":{"source_url":"https://business.att.com/categories/network-as-a-service.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'Software-defined networking (SDN) and network function virtualization (NFV) technologies enable zero-touch provisioning and seamlessly automate service changes' [8]"},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://business.att.com/products/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Enhanced observability and reporting from the edge to the cloud' is named specifically as a core managed-services capability [4] A distinctly-branded DEM product name wasn't itemised"},"f40_managed_service_assurance":{"source_url":"https://www.business.att.com/content/dam/attbusiness/briefs/att-sase-branch-with-fortinet-solution-brief.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Dedicated experts at the AT&T SNOC use rich SD-WAN analytics to help you fine-tune your business and security policies to improve user experiences. AT&T evidences a security network operations centre and round-the-clock proactive monitoring: \"With 24/7/365 proactive and reactive support, businesses can ensure continuous monitoring and troubleshooting across their connectivity solutions, including managed IT services, SD-WAN, and business Wi-Fi solutions.\" and \"At completion of installation, customers experience a world-class tiered support model available 24/7 to manage their global solution.\" No page reviewed evidences root cause analysis ownership, structured service reviews or change governance, and the AT&T SOC page proved to be about SOC optimisation consulting rather than a managed SOC. Graded partial on those gaps."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:64f133e38f967549cea8daf5","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"not_confirmed","hospitality_leisure":"yes"},"curated_uk_delivery":"global_managed","curated_uk_basis":"No UK HQ (US). UK sites served through AT&T's global managed network and partners, not UK-native infrastructure.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":8,"research_metrics":{"supported":15,"partial":3,"partner_delivered":3,"managed_service_dependent":0,"not_primary":0,"unconfirmed":19,"total":40,"reviewed":21,"completeness_percent":53,"completeness":0.525},"proven_evidence_count":15,"response_panel":null,"best_for":"Sector evidence not yet reviewed; Large global enterprise; managed","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":["Large global enterprise"],"service_model":"managed","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"aryaka","name":"Aryaka","website":"https://www.aryaka.com","category":"technology vendor","product_focus":"AI>Observe, AI>Secure, Aryaka Cyber Threat Research Lab (CTRL), Aryaka Network Access Point (ANAP)","cost_model":"Quote-based managed service; pricing normally depends on sites, bandwidth, regions, security stack and optimisation.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"partial","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"yes"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_primary","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"partial","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","per_bandwidth","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":40,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/aryaka/","shortlist_summary":"Aryaka is one of the older, more established names in this category - founded 2009, more than 15 years before ‘SASE’ existed as an analyst-defined term, originally as a WAN optimisation and application-acceleration company before evolving into what it now calls ‘Unified SASE as a Service’. That specific phrase matters: Aryaka positions itself, and is described by independent commentary, as the first company to deliver SASE as a fully managed service rather than a self-managed software platform, built around a distinctive single-pass architecture (OnePASS) running over an owned, global private core network spanning more than 40 points of presence across six continents.","key_differentiators":["Unified SASE delivered as a managed service from end to end, including the private global core network and WAN optimisation.","Strong story for global organisations needing predictable performance between regions without internet variability.","Embedded WAN optimisation differentiates from pure cloud-delivered SASE platforms."],"best_fit_for":["Global enterprises wanting SASE delivered as a fully managed service rather than as DIY platform plus tools.","Buyers who need consistent inter-regional performance for chatty applications.","Organisations preferring a vendor that owns the platform and the managed service rather than coordinating multiple parties."],"watch_outs":["Smaller PoP footprint and partner ecosystem than the hyperscale SASE vendors; coverage must match your geographic profile.","DIY / self-managed model: supported. Confirm which operating tasks your team retains and what Aryaka operates.","CASB capability: supported; Data loss prevention: supported. Confirm inspection modes, licences and policy depth in the proposal."],"evidence_coverage_pct":0.5,"last_verified":"2026-09-01","evidence_source_count":46,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.aryaka.com/datasheet/smartmanage-datasheet/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Utilizes the Aryaka Network Management and Control (ANMC) system for scalable, multi-tenant automation and orchestration Multi-tenant orchestration is confirmed at platform level, the partner programme names Managed Service Providers and System Integrators as a partner category, and co-management can be delegated to an Aryaka partner. However I found no vendor statement about white-label or partner-branded portals, delegated administration roles or tenant templates on the partners page or elsewhere, so this falls short of the full definition."},"f17_cellular_and_5g_support":{"source_url":"https://www.aryaka.com/last-mile-connectivity/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka provides truly global last mile services including wireline and 4G/5G wireless connectivity 4G and 5G are confirmed as supported and procurable last mile transport. Graded partial rather than yes because the ANAP appliance datasheet contains no mention of LTE, 5G, cellular, SIM or modem, and the High Availability datasheet describes redundancy only as dual ISP links, so integrated modem, SIM management and signal monitoring are not evidenced in the sources reviewed."},"f19_public_cloud_gateways":{"source_url":"https://www.aryaka.com/products-and-services/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka Secure Remote Access provides integrated, managed VPN as a service connecting users to the nearest Aryaka POP. The gateways are Aryaka's own infrastructure, not a resold third party's. Corroborated by \"a global private network interconnected in a mesh service fabric of over 40 Points of Presence (PoPs) across the globe\" and by the NGFW being hosted on the ANAP and on Aryaka's POP, so SaaS acceleration, remote access and security enforcement all run on vendor operated PoPs."},"f24_flexible_edge_form_factors":{"source_url":"https://aryaka.com/unified-sase-platform/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity - the Aryaka Network Access Point (ANAP), included as part of the service rather than sold as separate hardware [9]"},"f25_high_availability_design":{"source_url":"https://www.aryaka.com/unified-sase-platform/","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"ANAP high-availability configurations are available; validate appliance, circuit and implementation requirements for each site."},"f26_sla_backed_service_fabric":{"source_url":"https://www.aryaka.com/datasheet/smartmanage-datasheet/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Operates 24x7x365 to maintain industry-leading SLAs for uptime, latency, jitter and packet loss globally. Aryaka publishes a full SLA document with per service uptime targets (\"Uptime of 99.999%\" for PrivateCore, NGFW-SWG, PrivateAccess and RemoteUser, and Internet Breakout), a target of \"Packet Loss of less than 0.1%\", per minute probing, monthly measurement and graduated service credits of 5, 10 and 20 percent of Link Service Fees. That is contractual rather than best effort."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.aryaka.com/datasheet/ngfw-swg-solution/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka has built a dedicated security stack on top of our Software Defined Wide Area Network (SD-WAN) architecture The NGFW-SWG is Aryaka authored and runs on both the ANAP and Aryaka POPs, with IPS, anti-malware, application control via inline CASB and DPI, and URL filtering that \"Protects users from accessing malicious URLs using reputation scores for more than 32 billion URLs.\" Note that a separate optional SmartSecure Hosted VM Firewall Service is partner technology (\"The first technology partner providing the NGFW functionality is Palo Alto Networks with its VM series of virtualized NGFWs.\") and the Services Description and Terms references a Check Point EULA, so a partner_integrated firewall option exists alongside the native one. The integrated platform firewall itself is native."},"f31_secure_web_gateway":{"source_url":"https://aryaka.com/sase/sase-architecture/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as part of the unified single-pass stack [6]"},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://aryaka.com/case-study/electronics-company/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, well-evidenced via the confirmed 'greatly improved network performance' customer testimony and the platform's confirmed application-acceleration heritage [22] Not confirmed"},"f40_managed_service_assurance":{"source_url":"https://www.aryaka.com/datasheet/global-connectivity-solution/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka operates its own 24/7 NOC (Network Operations Center) to manage, orchestrate, and monitor all traffic The 24/7 NOC half of the definition is well evidenced: Aryaka runs its own NOCs \"24x7x365 to maintain industry-leading SLAs for uptime, latency, jitter and packet loss globally\", provides \"24x7 proactive Link Monitoring and management of Customer's procured last mile links\" and \"24x7 health monitoring and handle incident management issues related to the ZTNA Gateways\". Graded partial because the Services Description and Terms explicitly excludes a managed SOC from at least one offering: \"managed SOC (Security Operation Center) are not part of the scope of the Managed Firewall Service offering, and Customer is solely responsible for these functions.\" No published evidence found for root cause analysis commitments or structured service review and change governance."},"f02_diy_self_managed_model":{"source_url":"https://www.aryaka.com/use-cases/network-and-security-convergence/","reviewed_at":"2026-10-01T00:00:00Z","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka explicitly offers fully managed, co-managed and self-managed delivery. Confirm the buyer’s retained tasks and service scope; self-management is not evidence of a standalone appliance purchase."},"f01_fully_managed_service":{"source_url":"https://www.aryaka.com/unified-sase-platform/","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"Aryaka-managed delivery is an available service model; scope and responsibilities must be agreed in the service contract."},"f03_co_managed_service":{"source_url":"https://www.aryaka.com/unified-sase-platform/","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"Co-managed delivery is offered; confirm the division of responsibilities with Aryaka or its delivery partner."},"f21_private_global_backbone":{"source_url":"https://www.aryaka.com/unified-sase-platform/","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"Aryaka documents a global private network. This does not establish private last-mile access, every-country coverage or a site-specific SLA."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:be96a103e360c6122afebb8d","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"partial","financial_services":"yes","retail_ecommerce":"partial","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). UK PoP on the private core; managed-service delivery into the UK.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, if smaller-scale, named customer example | SD-WAN reliability and application performance directly relevant | Not assessed for sector-specific frameworks | KAWO (a named social-media start-up customer, described as benefiting from reliable network performance for global users) | N/A | A smaller-scale customer example relative to the strong manufacturing-sector evidence | A real, named customer example exists for this general sector category, though at a smaller scale than the strongest evidence found for manufacturing.","named_evidence":"KAWO (a named social-media start-up customer, described as benefiting from reliable network performance for global users)","evidence_source_ids":["evidence:aryaka:20"]},{"sector":"transport_logistics","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced at a general level | Multi-site, multi-cloud connectivity plausibly relevant | Not assessed for sector-specific frameworks | Confirmed directly as a served sector generally: 'customers span... transportation, logistics... industries with complex multi-site, multi-cloud network requirements' | N/A | General sector confirmation exists without a named individual customer example | A real, primary-sourced confirmation of sector fit, though without a named individual customer example to reinforce it directly.","named_evidence":"Confirmed directly as a served sector generally: 'customers span... transportation, logistics... industries with complex multi-site, multi-cloud network requirements'","evidence_source_ids":["evidence:aryaka:16"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | SD-WAN reliability, multi-site connectivity, and managed operations directly relevant to distributed manufacturing operations | Not assessed for sector-specific frameworks | A named Fortune 1000 chemicals/materials producer (Albemarle Corporation); a detailed, technically specific (if company-name-anonymised) semiconductor-manufacturing case study benchmarked against Cato and VeloCloud; confirmed directly as a served sector generally ('customers span manufacturing... industries') | Global - the named/detailed case studies span facilities in more than 100 countries (Albemarle) and multiple Asia-Pacific/North American sites (the semiconductor case) | The semiconductor case study's company name was withheld | Genuinely the best-evidenced sector in this entire profile - a real, named, large public company (Albemarle) plus a detailed, technically specific anonymised case study together give this sector exceptionally strong, concrete evidence.","named_evidence":"A named Fortune 1000 chemicals/materials producer (Albemarle Corporation); a detailed, technically specific (if company-name-anonymised) semiconductor-manufacturing case study benchmarked against Cato and VeloCloud; confirmed directly as a served sector generally ('customers span manufacturing... industries')","evidence_source_ids":["evidence:aryaka:16","evidence:aryaka:23","evidence:aryaka:24"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"transport_logistics":false},"reviewed_at":"2026-09-30T15:50:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.aryaka.com/case-study/albemarle/","https://www.aryaka.com/solution-brief/regional-network/","https://www.aryaka.com/press/cloud-first-managed-sd-wan-and-sase-pioneer-aryaka-activates-eu-friendly-dublin-services-pop-to-address-growing-customer-demand/","https://www.aryaka.com/docs/Transitex-Case-Study-2020.pdf"],"qualification":"Published manufacturing customer evidence for managed global WAN and last-mile services. Does not establish UK ten-site commercial fit or current supplier availability.  Transitex freight/logistics primary case documents Aryaka SmartSecure Remote Access through Cloud365 for China connectivity. Supports logistics experience with qualification; not proof of full branch SD-WAN, current UK delivery or the original generic claim.","sectors":{"manufacturing":"yes","transport_logistics":"partial"},"regions":{"uk_ireland":"partial"}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"partial","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":9,"research_metrics":{"supported":16,"partial":4,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":20,"total":40,"reviewed":20,"completeness_percent":50,"completeness":0.5},"proven_evidence_count":16,"response_panel":null,"best_for":"Manufacturing; Transport and logistics (partial evidence); both","best_for_fields":{"sectors_yes":["Manufacturing"],"sectors_partial":["Transport and logistics"],"regions":[],"size":[],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"fortinet","name":"Fortinet FortiSASE","website":"https://www.fortinet.com/products/sd-wan","category":"technology vendor","product_focus":"Fabric Connectors, FortiClient, FortiGuard AI-Powered Security Services, FortiManager / FortiAnalyzer","cost_model":"Quote-based appliances/subscriptions/support; public reseller pricing exists for hardware but enterprise managed/SASE bundles require quote.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"partner_integrated","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"yes","financial_services":"not_primary","retail_ecommerce":"not_confirmed","manufacturing":"not_primary","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"partial","transport_logistics":"yes","professional_services":"not_primary","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":170,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/fortinet-fortisase/","shortlist_summary":"FortiSASE runs the same FortiOS operating system, and the same single-pass inspection engine, that has powered Fortinet’s physical FortiGate firewalls for over two decades. That’s a meaningfully different starting point from building a SASE platform natively for the cloud from scratch - the practical result is that FortiGate customers get a consistent policy and inspection model whether traffic is inspected on-premises or in a FortiSASE cloud point of presence, and Fortinet’s own commercial materials lean hard into a ‘Security Fabric’ discount for exactly these existing customers.","key_differentiators":["Native convergence of networking and security on a single operating system (FortiOS) across FortiGate edge, FortiManager and FortiSASE.","Strong story for buyers who want secure SD-WAN and SASE delivered from one vendor platform rather than assembled from partner integrations.","Wide appliance range covering everything from small branch to large data centre, with public hardware pricing visible through resellers."],"best_fit_for":["Security-first buyers who want SD-WAN and SASE under a single policy and log domain.","Mid-market and enterprise organisations that already run FortiGate firewalls and want to extend into SD-WAN and cloud-delivered security.","Buyers comparing single-vendor SASE platforms (alongside Cato, Palo Alto, Cisco) for converged operations."],"watch_outs":["Like Cisco, managed delivery is via partners rather than Fortinet directly; underlay and field operations are not owned by the vendor.","Buyers wanting a private global backbone will need to validate FortiSASE PoP coverage against their geographic footprint.","Best-of-breed buyers may prefer integrating FortiGate SD-WAN with a separate SSE platform (Zscaler, Netskope) rather than adopting full FortiSASE."],"evidence_coverage_pct":0.5,"last_verified":"2026-09-01","evidence_source_count":60,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/managed-fortigate-svc.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Ensure FortiGates, FortiAPs, FortiSwitches and FortiExtenders are quickly and correctly deployed, configured to best practices Fortinet itself operates Managed FortiGate Service (MFGS), in which Fortinet NOC staff carry out deployment, configuration, provisioning and ongoing change management. The solution page adds \"Deployment, configuration, provisioning, and regular changes\" and \"Evaluate, implement, and verify configuration changes\". Note that this is a managed wrap around Fortinet's own appliances rather than an end-to-end managed WAN including circuits; most fully managed Fortinet SD-WAN in the market is delivered by carrier and MSSP partners rather than by Fortinet."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortisase.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The portal offers centralized multi-tenant management and configuration capabilities, enabling MSSPs to efficiently deploy and manage SASE services across their client base. Tenant isolation and delegated administration are evidenced: the FortiSASE datasheet describes an MSSP Portal, and the service provider page states \"Fortinet solutions are multi-tenant from the ground up, enabling MSPs and MSSPs to isolate and manage multiple customer networks from a single administrative console.\" Graded partial rather than yes because no page reviewed evidences branded or white-label portals for the MSP's own brand, and because the FortiSASE MSSP architecture guide qualifies the model by saying each customer gets a separate isolated instance. See conflicts."},"f07_lifecycle_management":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/managed-fortigate-svc.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Let MFGS experts handle your firmware upgrades to maximize effectiveness and minimize risk Firmware upgrade and patching are handled as part of Managed FortiGate Service, which also states \"Automatically trigger patching for vulnerabilities with a severity rating of medium or higher\". The FortiCare support page covers hardware replacement (\"Meet your availability requirements with our Priority RMA Services.\") and describes \"comprehensive lifecycle services\". Explicit end-of-life planning and renewals handling as part of the service were not found."},"f09_encrypted_overlay_fabric":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortinet_secure_sdwan.pdf","reviewed_at":"2026-10-01","review_due":"2026-12-30T00:00:00Z","qualification":"Fortinet documents IPsec tunnel configuration for its SD-WAN overlay. FortiGate Secure SD-WAN supports an IPsec overlay. This is a configurable platform capability; it does not establish a managed service or a deployment-specific throughput/SLA."},"f17_cellular_and_5g_support":{"source_url":"https://www.fortinet.com/products/extender","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"FortiExtender cellular gateways and routers provide secure 5G/LTE connectivity for any deployment. FortiExtender is Fortinet's own product line. The page also states \"Easily provision 5G or LTE wireless WAN, high availability, and failover, as well as out-of-band management (OOB) and private 5G/LTE.\" and \"FortiExtender 5G/LTE Wireless WAN gateways come equipped with Dual SIM and Dual Modem capabilities for fast failover and active/active cellular connectivity.\" covering dual SIM and both primary and failover transport. Signal quality is addressed by \"FortiExtender cellular gateways and routers ensure optimal signal reception, minimal attenuation, and the best experience.\""},"f26_sla_backed_service_fabric":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortisase.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Fortinet delivers 99.999% SLA with latency guarantee for security inspection, which is possible because of global reach with hundreds of security PoPs. Contractual rather than best-effort. Fortinet's own G-Cloud 14 FortiSASE service definition sets out availability tiers (Management Portal 99.99%, Individual Security POPs 99.99%, Overall service in high availability configuration 99.999%) and commits that \"FortiSASE cloud platform is managed by Fortinet on a twenty-four (24) hours a day by seven (7) days a week basis and is monitored for hardware availability, service capacity, and network resource utilization.\" Support response commitments come via \"24 x 7 FortiCare Technical Support\". A latency commitment is claimed alongside uptime. Change handling commitments were not found in the SLA text reviewed."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.fortinet.com/products/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Secure SD-WAN, SSE, zero trust, wireless controller, LTE/5G gateway, and FortiGuard AI-Powered Security Services have the same OS, policy engine, and management plane. Native, not partner_integrated. Fortinet authors FortiOS and the FortiGate NGFW itself, and the SD-WAN function is a feature of the same operating system rather than a bolt-on appliance. The FortiSASE datasheet confirms the cloud-delivered equivalent: \"FortiSASE FWaaS is a cloud-based service that provides hyperscale, next-generation firewall (NGFW) capabilities, including web filtering, advanced threat protection (ATP), intrusion prevention system (IPS), and Domain Name System (DNS) security.\" Stateful firewalling, application control, IPS, malware inspection and URL filtering are all in-platform."},"f33_data_loss_prevention":{"source_url":"https://www.fortinet.com/products/sase","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The FortiSASE DLP feature supports advanced data matching techniques, including pattern recognition and contextual analysis, to effectively prevent accidental data breaches. Native Fortinet capability. The FortiSASE datasheet adds \"Identify, monitor, and protect organization data at rest and in motion. DLP engine backed by FortiGuard AI feeds with over thousands of pre-defined data patterns, updated to protect from day zero.\" and \"DLP allows businesses to identify sensitive information across multiple cloud-based systems, prevent the accidental sharing of data, and monitor and protect data.\" Classification, inspection and blocking are evidenced. Alerting workflows and formal exception or override workflows were not found on the pages reviewed."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:ed65a89afeb5f9b44f4405ca","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"not_confirmed","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). Strong UK channel and FortiSASE PoPs; widely delivered as a UK managed service by BT, Vodafone and UK MSPs.","sector_review_queue":[{"sector":"healthcare","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | Distributed-site SD-WAN and cloud security consolidation at genuine global scale | Not assessed | A named global hospitality operator (4,000+ locations, 325,000+ employees, $19.4B gross annual revenue) reporting a 60% efficiency improvement for network and security teams; separately, IHG Hotels & Resorts is referenced as boosting IT efficiency 'close to 60%' with Fortinet Secure SD-WAN, which may be the same underlying customer story | Global, multi-location deployment evidenced directly at scale | The two hospitality references may describe the same underlying deployment rather than two independent proof points - worth confirming directly rather than double-counting as separate evidence | Genuinely the best-evidenced sector for Fortinet in this profile - specific, large, checkable scale figures (4,000+ locations, 325,000+ employees) and a consistent, repeated 60% efficiency figure across multiple Fortinet materials.","named_evidence":"A named global hospitality operator (4,000+ locations, 325,000+ employees, $19.4B gross annual revenue) reporting a 60% efficiency improvement for network and security teams; separately, IHG Hotels & Resorts is referenced as boosting IT efficiency 'close to 60%' with Fortinet Secure SD-WAN, which may be the same underlying customer story","evidence_source_ids":["evidence:fortinet-fortisase:19","evidence:fortinet-fortisase:21"]},{"sector":"hospitality_leisure","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | Distributed-site SD-WAN and cloud security consolidation at genuine global scale | Not assessed | A named global hospitality operator (4,000+ locations, 325,000+ employees, $19.4B gross annual revenue) reporting a 60% efficiency improvement for network and security teams; separately, IHG Hotels & Resorts is referenced as boosting IT efficiency 'close to 60%' with Fortinet Secure SD-WAN, which may be the same underlying customer story | Global, multi-location deployment evidenced directly at scale | The two hospitality references may describe the same underlying deployment rather than two independent proof points - worth confirming directly rather than double-counting as separate evidence | Genuinely the best-evidenced sector for Fortinet in this profile - specific, large, checkable scale figures (4,000+ locations, 325,000+ employees) and a consistent, repeated 60% efficiency figure across multiple Fortinet materials.","named_evidence":"A named global hospitality operator (4,000+ locations, 325,000+ employees, $19.4B gross annual revenue) reporting a 60% efficiency improvement for network and security teams; separately, IHG Hotels & Resorts is referenced as boosting IT efficiency 'close to 60%' with Fortinet Secure SD-WAN, which may be the same underlying customer story","evidence_source_ids":["evidence:fortinet-fortisase:19","evidence:fortinet-fortisase:21"]},{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Unknown - not assessed in detail, though Fortinet's own customer-story index references a power grid operator by category (not named) deploying a Fortinet SecOps solution for zero-day protection and IT/OT convergence | IT/OT convergence relevant per the referenced use case | Not assessed | Referenced but not independently detailed (unnamed power grid operator) | N/A | Reference exists but wasn't followed up to a named, detailed case study in this pass | A real, relevant use case is referenced in Fortinet's own materials but wasn't independently verified to the same depth as the hospitality or education evidence in this pass.","named_evidence":"Referenced but not independently detailed (unnamed power grid operator)","evidence_source_ids":["evidence:fortinet-fortisase:26"]},{"sector":"education","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | Large-scale, phased deployment (Secure SD-WAN, then NAC, then FortiSASE) at genuine scale | Not assessed for sector-specific frameworks | A named top-five-largest US school district, 375,000+ students and staff | Single-country (US) evidence; UK/EU education-specific case studies not found in this pass | No case-study limitations beyond the single-country evidence noted | A genuinely large, well-evidenced, named-scale customer story - one of the strongest sector-fit findings in this profile, given both the scale (375K+) and the specific, credible multi-stage adoption narrative.","named_evidence":"A named top-five-largest US school district, 375,000+ students and staff","evidence_source_ids":["evidence:fortinet-fortisase:26","evidence:fortinet-fortisase:27"]},{"sector":"transport_logistics","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_supported","qualification":"Unknown - not assessed, no case study found in this pass, though Fortinet's own customer-story index separately references an airport operator and a major bank's remote-ATM/5G deployment | Not assessed in detail | Not assessed | Referenced but not independently detailed in this pass (airport operator, bank ATM network) | N/A | Named but under-detailed references exist and weren't followed up individually in this research pass | A specific, worth-flagging follow-up opportunity - Fortinet's own materials reference relevant transport/financial-infrastructure customers that weren't fully explored in this pass.","named_evidence":"Referenced but not independently detailed in this pass (airport operator, bank ATM network)","evidence_source_ids":["evidence:fortinet-fortisase:26"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"education":false,"healthcare":false,"transport_logistics":false,"hospitality_leisure":false},"reviewed_at":"2026-09-30T15:45:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://fortinet.com/blog/customer-stories","https://fortinet.com/content/dam/fortinet/assets/ebook/eb-sase-customer-stories.pdf","https://www.fortinet.com/customers/the-guidance-center","https://www.fortinet.com/customers/indigo-airlines","https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","https://www.fortinet.com/content/dam/fortinet/assets/case-studies/cs-ihg.pdf"],"qualification":"Fortinet SASE customer-stories PDF page 10 documents an unnamed US school district with 375,000-plus users. Anonymous case only. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation. The Guidance Center is a California mental-health provider using FortiSASE, NOT an NHS organisation. IndiGo documents Secure SD-WAN at airport counters in India. UK Fortinet delivery is evidenced through BT managed service terms; it is partner-dependent, not a commitment from Fortinet or coverage of all UK/Ireland addresses. Recovered IHG primary PDF identifies 4,000 Secure SD-WAN locations and a global MSSP-delivered rollout. UK headquarters do not prove coverage of a particular UK estate. Savings and efficiency figures are forecasts, not measured completed outcomes.","sectors":{"education":"partial","healthcare":"yes","transport_logistics":"yes","hospitality_leisure":"yes"},"regions":{"uk_ireland":"partner_integrated"}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"partner_integrated","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":10,"research_metrics":{"supported":18,"partial":2,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":20,"total":40,"reviewed":20,"completeness_percent":50,"completeness":0.5},"proven_evidence_count":18,"response_panel":null,"best_for":"Healthcare; Transport and logistics; Hospitality and leisure; Education (partial evidence); Large global enterprise; both","best_for_fields":{"sectors_yes":["Healthcare","Transport and logistics","Hospitality and leisure"],"sectors_partial":["Education"],"regions":[],"size":["Large global enterprise"],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"juniper-networks","name":"Juniper Networks","website":"https://www.juniper.net","category":"technology vendor","product_focus":"Juniper AI-Native SD-WAN, Juniper Mist AI / Marvis AI, Juniper Secure Edge, Managed SD-WAN","cost_model":"Quote-based hardware/subscription/support; managed delivery via partners/providers.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"partial","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"partial","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"yes"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"yes","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_primary","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/juniper/","shortlist_summary":"Juniper Networks offer Mist AI with WAN Assurance, delivering AI-driven monitoring and troubleshooting at the WAN edge at a depth that few competitors match. Typically shortlisted by organisations where AIOps and network assurance quality are weighted evaluation criteria rather than SD-WAN feature breadth, and worth examining more closely than the overall score might suggest if AI-driven operations is a primary requirement.","key_differentiators":["Mist AI delivers WAN Assurance, providing AI-driven monitoring and troubleshooting at the WAN edge that few competitors match.","Strong story for buyers who want the WAN integrated with Mist-powered Wi-Fi and access network management.","Juniper SRX security platform integration provides native firewall capability for buyers standardised on Juniper."],"best_fit_for":["Enterprises already running Mist for Wi-Fi or access who want unified AI-driven operations across WAN and LAN.","Buyers prioritising observability and AI-assisted incident triage as a primary purchase criterion.","Organisations with strong network engineering capability who can take advantage of WAN Assurance telemetry."],"watch_outs":["Full SASE platform: partial evidence; CASB capability: not confirmed; Data loss prevention: not confirmed. Confirm the networking and SSE products and whether separate contracts or operators are required.","Managed delivery is via partners; first-party managed service is not the primary model.","Cloud on-ramp and private backbone capabilities are less prominent than dedicated SASE platforms."],"evidence_coverage_pct":0.475,"last_verified":"2026-09-01","evidence_source_count":40,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.juniper.net/us/en/services.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our highly trained experts, backed by AI-Native and automated insights, can help you design, deploy, and proactively manage your network to deliver seamless experiences for all. Juniper Services offers design, deployment and proactive management assistance, but the Juniper pages reviewed position end-to-end managed SD-WAN/SASE as something MSPs and service providers deliver using Juniper technology rather than something Juniper operates itself. The managed SD-WAN page is written to MSPs as the operator. No Juniper page reviewed described Juniper owning day-to-day operations, change execution and service reporting for a customer end to end. Graded partial rather than yes for that reason."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.juniper.net/us/en/solutions/sd-wan/managed-sd-wan.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"engineered specifically for forward-thinking MSPs ready to scale Juniper explicitly targets MSPs with its managed SD-WAN proposition, which is why this is not graded unknown. However none of the three specific tests in the definition were evidenced on pages reviewed: tenant isolation, delegated administration and branded (white-label) portals are not described. The Juniper Mist MSP dashboard documentation URL attempted returned HTTP 404, so multi-tenant administration could not be verified in this task."},"f07_lifecycle_management":{"source_url":"https://www.juniper.net/us/en/services.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Achieve simplicity and reliability at scale across your wired, wireless, and SD-WAN environments with AI-Native operations and support from Juniper Services, using AI for a comprehensive, proactive approach across the full network life cycle. Juniper claims a full network life cycle approach through Juniper Services. The specific components in the definition (hardware replacement/RMA, firmware upgrades, patching, renewals and end-of-life planning handled as part of the service) were not individually evidenced; the technical services page that would carry them returned HTTP 404 on attempt. Graded partial on that basis."},"f10_dynamic_path_selection":{"source_url":"https://juniper.net/content/dam/www/assets/white-papers/us/en/routers/ai-driven-sd-wan-secures-todays-cloud-era-networks.pdf","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via the platform's core, service-based routing architecture - 'sessions are delivered based on identity and context to relevant parties based on real-time policies' [10]"},"f18_cloud_on_ramp":{"source_url":"https://juniper.net/us/en/customers/ambifox-case-study.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a real, named customer deployment spanning two distinct named hyperscalers [25]"},"f19_public_cloud_gateways":{"source_url":"https://www.juniper.net/us/en/solutions/sase.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"full-stack Security Service Edge (SSE) and SD-WAN capabilities that leverage the power of the cloud to optimize both the network and the security experience Juniper operates its own cloud-delivered SSE (Juniper Secure Edge, managed by Juniper Security Director Cloud), so this is Juniper's own service infrastructure rather than a third party's resold platform. Graded partial not yes because no page reviewed named the gateway or PoP locations, the number of locations, or which capabilities (SaaS optimisation, remote access, security enforcement) are enforced at Juniper-operated PoPs. Attempts to reach the Juniper Secure Edge product page redirected to an HPE store page that returned Product Not Found, and the Secure Edge documentation guide URLs returned 404/403."},"f23_multi_cloud_transit_fabric":{"source_url":"https://juniper.net/us/en/customers/ambifox-case-study.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a real, named customer deployment spanning two distinct named hyperscalers [25]"},"f24_flexible_edge_form_factors":{"source_url":"https://juniper.net/us/en/products/routers/session-smart-router.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as genuinely flexible - the Session Smart Router runs as a software-based solution on dedicated Juniper SSR-series hardware, white-box customer-premises equipment, data-centre network servers, or the public cloud [14]"},"f27_integrated_next_generation_firewall":{"source_url":"https://juniper.net/us/en/solutions/sd-wan/managed-sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and confirmed with specific technical detail [15]"},"f28_full_sase_platform":{"source_url":"https://juniper.net/us/en/solutions/secure-ai-native-edge.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Partially confirmed - Universal Zero Trust Network Access (UZTNA) is explicitly described by Juniper's own materials as setting 'the vision for Juniper's view of... UZTNA to address customer needs in the future', a stated roadmap direction rather than a confirmed, fully-realised, currently-shipping capability [11] [17] Explicitly framed as a future-facing vision in Juniper's own primary materials"},"f30_zero_trust_network_access":{"source_url":"https://juniper.net/us/en/solutions/secure-ai-native-edge.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Partially confirmed - Universal Zero Trust Network Access (UZTNA) is explicitly described by Juniper's own materials as setting 'the vision for Juniper's view of... UZTNA to address customer needs in the future', a stated roadmap direction rather than a confirmed, fully-realised, currently-shipping capability [11] [17] Explicitly framed as a future-facing vision in Juniper's own primary materials"},"f36_centralised_orchestration":{"source_url":"https://juniper.net/us/en/customers/ambifox-case-study.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - the platform 'supports zero-touch installation and provisioning for fast setup and administration-with no site visits', evidenced via a real, named customer deployment [25]"},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://juniper.net/content/dam/www/assets/white-papers/us/en/routers/session-smart-routing-how-it-works.pdf","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, via the confirmed SLE architecture (Table 3, 10) [13] Technical depth beyond the named SLE capability itself not itemised in full"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:6302afddee37a3625fa05be4","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US, now HPE). UK channel and delivery via partners and MSPs.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":11,"research_metrics":{"supported":13,"partial":6,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":21,"total":40,"reviewed":19,"completeness_percent":48,"completeness":0.475},"proven_evidence_count":13,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"orange-business","name":"Orange Business","website":"https://www.orange-business.com","category":"carrier network provider / integrator","product_focus":"Orange Business Evolution Platform, Orange Business SASE with Palo Alto Networks Prisma SASE, Orange Business and Fortinet SASE, Orange Cyberdefense Managed SASE","cost_model":"Quote-based managed service; costs driven by access circuits, countries, vendor platform, security services and SLAs.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"partner_integrated","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"yes"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":400,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/orangebusiness/","shortlist_summary":"Orange Business is the enterprise services arm of Orange S.A., one of the largest telecommunications groups in Europe, headquartered in France and listed on Euronext Paris. Orange Business itself traces its lineage to Equant and Global One before being formally established on 1 June 2006, and was renamed from Orange Business Services to Orange Business on 16 February 2023; Frédéric Schepens serves as CEO (appointed July 2024), leading approximately 30,000 employees.","key_differentiators":["Global managed network leadership with strong service assurance, NOC depth and field operations.","Multi-vendor managed SD-WAN and SASE delivery (including Palo Alto Networks managed SASE via Orange Cyberdefense).","Strong UK and EMEA presence with established enterprise managed service track record."],"best_fit_for":["Multinational enterprises wanting a single global managed provider for SD-WAN, SASE and access.","Buyers prioritising service ownership, RCA quality and change governance over best-of-breed platform selection.","Organisations needing access circuit sourcing alongside SD-WAN platform delivery."],"watch_outs":["Platform choice depends on which Orange-supported vendor is selected; underlying platform fit and roadmap should be evaluated independently.","Commercial model is bespoke; rate cards and change costs need careful scoping.","DIY/self-managed model is not the primary positioning."],"evidence_coverage_pct":0.475,"last_verified":"2026-09-01","evidence_source_count":36,"capability_evidence":{"f07_lifecycle_management":{"source_url":"https://www.orange-business.com/en/solutions/internet-networks/flexible-sd-wan-international","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our Service Level Agreements (SLAs) guarantee 100% site availability and quick issue resolution within five hours. Break-fix and repair commitments are documented (five hour issue resolution on Flexible SD-WAN, \"4-hour guaranteed time to repair (GTTR)\" on Galerie, \"5 hour Guaranteed Time To Repair\" on Business VPN), and Orange performs on-site installation. No page reviewed states that firmware upgrades, patching, licence renewals or end-of-life planning are included in the service, so this is graded partial rather than yes."},"f10_dynamic_path_selection":{"source_url":"https://documentation.evolutionplatform.orange-business.com/docs/services/networking/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'adaptive routing mechanisms' and 'centralized controllers to direct network traffic in an intelligent and efficient manner'"},"f12_application_aware_routing":{"source_url":"https://documentation.evolutionplatform.orange-business.com/docs/services/networking/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'centralized controllers to direct network traffic in an intelligent and efficient manner... to make the most of your network resources'"},"f13_qos_and_traffic_shaping":{"source_url":"https://documentation.evolutionplatform.orange-business.com/docs/services/networking/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'dynamic bandwidth management' named explicitly"},"f17_cellular_and_5g_support":{"source_url":"https://orange-business.com/en/products/categories/internet-and-networks","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'wireless options' named explicitly as a supported underlay type"},"f18_cloud_on_ramp":{"source_url":"https://documentation.evolutionplatform.orange-business.com/docs/services/networking/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'SD-WAN also simplifies cloud connectivity, seamlessly integrating your cloud services with your network' Specific, named hyperscaler cloud on-ramp partnerships weren't itemised by name"},"f19_public_cloud_gateways":{"source_url":"https://www.orange-business.com/en/solutions/internet-networks/business-vpn-internet","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Orange Business has invested in 16 global Internet gateways on five continents. These are Orange's own gateways, not a third party's: \"These distributed Internet gateways break traffic out closer to the user to eliminate the latency caused by the long physical distances between the user, the gateway and the destination web site.\" Orange also publishes \"400 Points of Presence globally\" and operates the Galerie cloud gateway service. Caveat: the security enforcement running in the SASE PoPs is partner technology (Palo Alto Networks, Fortinet), so the gateway estate is Orange's own but the security stack inside it is not."},"f21_private_global_backbone":{"source_url":"https://www.orange-business.com/en/solutions/network-solutions","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Orange Business uses its own network to create the digital services of tomorrow. Corroborated by the Galerie statement that \"Your sites, traffic and data are not exposed to the public Internet\", by the network solutions page claim \"#1 Global voice and data network\", by \"400 Points of Presence globally\" and by \"global reach covering 220 countries and territories\". This is a genuinely international backbone rather than a single-country network."},"f23_multi_cloud_transit_fabric":{"source_url":"https://documentation.evolutionplatform.orange-business.com/docs/services/networking/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'SD-WAN also simplifies cloud connectivity, seamlessly integrating your cloud services with your network' Specific, named hyperscaler cloud on-ramp partnerships weren't itemised by name"},"f26_sla_backed_service_fabric":{"source_url":"https://www.orange-business.com/en/solutions/internet-networks/flexible-sd-wan-international","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our Service Level Agreements (SLAs) guarantee 100% site availability and quick issue resolution within five hours. Availability and time-to-repair commitments are published across Flexible SD-WAN, Business VPN (\"99.95% site availability\" and \"5 hour Guaranteed Time To Repair\") and Galerie (\"Orange Business commits to 100% Galerie availability and 4-hour guaranteed time to repair (GTTR)\"). Latency, jitter and loss commitments and change-handling SLAs were not found on the pages reviewed."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.orange-business.com/en/solutions/security/secure-gateway","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Secure Gateway consists of a new-generation firewall at the heart of the service The firewall function is present but the technology belongs to third parties Orange resells and manages. The Secure Gateway page names Fortinet and Palo Alto as its partners, the Fortinet partner page states \"Orange Business has chosen Fortinet Secure SD-WAN to enhance the Flexible SD-WAN offering, providing clients of all sizes worldwide with a security-focused solution\", and the Palo Alto press release names \"Prisma® SASE (Prisma Access + Prisma SD-WAN)\". Orange authors the management and service wrapper, not the firewall engine, hence partner_integrated rather than yes."},"f31_secure_web_gateway":{"source_url":"https://orange-business.com/en/news-and-events/articles/orange-powers-digital-trust-sase-sd-wan-strategies","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'augmenting industry-leading SSE capabilities from partners such as Netskope, Palo Alto, Zscaler, and Fortinet' Specific platform-by-platform packaging detail not itemised"},"f40_managed_service_assurance":{"source_url":"https://www.orange-business.com/en/solutions/security/secure-gateway","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Personalized services fully managed and supervised by our experts 24x7 Corroborated by \"Managed Firewall is ISO 20000 certified, and our SOCs are 27001 certified\" on the same page, by \"24/7/365 continuous monitoring of security systems worldwide\" and \"3,000+ multi-skilled cybersecurity experts\" on the Belgian SASE page, and by \"6 Major Service Centers covering all continents\" on the network solutions page. Round-the-clock NOC and SOC monitoring is well evidenced; formal root cause analysis ownership and structured service review or change governance are not explicitly stated on the pages reviewed, hence medium confidence."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:6d1e16776f3ed56135779cac","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"partial","education":"partial","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_entity","curated_uk_basis":"UK contracting entity (Orange Business UK) of a French parent, with UK delivery.","sector_review_queue":[{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, genuinely the best-evidenced sector in this entire profile | Confirmed global SD-WAN deployment directly supporting a genuinely major industrial conglomerate's broader cloud-migration and digitisation strategy | Not assessed for sector-specific frameworks | Siemens - named, major global industrial conglomerate, named Orange executive quote (John Isch, Director, Connectivity Solutions for the Americas), confirmed as a long-standing partnership | Global, implied via Siemens' own confirmed global operations | The confirmed case study is dated (2022); current-state deployment specifics weren't independently re-confirmed | A real, named, individually-attributable customer reference - genuinely strong evidence of large-enterprise deployment capability, reinforced by a named executive quote describing a long-standing, strategic partnership.","named_evidence":"Siemens - named, major global industrial conglomerate, named Orange executive quote (John Isch, Director, Connectivity Solutions for the Americas), confirmed as a long-standing partnership","evidence_source_ids":[]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"manufacturing":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.orange-business.com/en/press/orange-business-services-delivers-flexible-sd-wan-siemens-worldwide-majority-corporate"],"qualification":"Recovered Orange Siemens release confirms Cisco-based Flexible SD-WAN at corporate locations. No manufacturing-OT suitability or UK quote inference. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"manufacturing":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":12,"research_metrics":{"supported":16,"partial":2,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":21,"total":40,"reviewed":19,"completeness_percent":48,"completeness":0.475},"proven_evidence_count":16,"response_panel":null,"best_for":"Manufacturing; Large global enterprise; managed","best_for_fields":{"sectors_yes":["Manufacturing"],"sectors_partial":[],"regions":[],"size":["Large global enterprise"],"service_model":"managed","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"bt-business","name":"BT","website":"https://business.bt.com/networks-digital-services/sd-wan","category":"managed service provider / carrier network provider","product_focus":"Agile Connect, BT Managed Fortinet Firewall, BT Managed SASE (Fortinet-based), BT Managed SASE (Meraki-based)","cost_model":"Quote-based managed service; includes access, CPE, vendor stack and service tier options.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_hq","uk_basis":"BT Group plc is headquartered at 1 Braham Street, London; UK managed SD-WAN is published by BT Business.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"partial","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"partner_integrated","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"partial","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"partner_integrated","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"partial","f38_observability_and_digital_experience_monitoring":"partial","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"yes","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"yes","retail_ecommerce":"not_confirmed","manufacturing":"not_primary","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":140,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"yes","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/bt/","shortlist_summary":"BT is not a single-platform SASE company, but the UK’s largest telecommunications operator and managed service provider, delivering SASE as one service line within a vastly larger, publicly-listed (LSE: BT.A) group.","key_differentiators":["UK market leader for managed SD-WAN with deep access circuit ownership and field engineering capability.","Multi-vendor platform support (Cisco, VMware/Broadcom, Fortinet, Palo Alto, Meraki) gives buyers platform choice within one managed service.","Strong global SD-WAN and SASE delivery via BT Global for multinational requirements."],"best_fit_for":["UK enterprises wanting a single supplier for SD-WAN platform, access circuits, security and field operations.","Multinational organisations with a UK headquarters needing global delivery via BT Global.","Buyers prioritising underlay accountability and field engineering depth alongside SD-WAN delivery."],"watch_outs":["Platform choice and packaging vary; buyers should confirm which vendor platform is being proposed and why.","DIY/self-managed model is not BT's primary positioning.","Co-managed model and customer control boundaries should be confirmed via RACI and portal demo."],"evidence_coverage_pct":0.45,"last_verified":"2026-09-01","evidence_source_count":30,"capability_evidence":{"f09_encrypted_overlay_fabric":{"source_url":"https://business.bt.com/content/dam/bt-business/pdfs/networks-cloud-digital-services/sd-wan/bt-secure-sd-wan-datasheet.pdf","reviewed_at":"2026-10-01","review_due":"2026-12-30T00:00:00Z","qualification":"BT describes an accelerated IPsec overlay in its managed Fortinet Secure SD-WAN service. BT Secure SD-WAN uses Fortinet IPsec tunnels between branches, data centres and cloud. This evidence applies to that service option; confirm the platform, scope and throughput in the proposal."},"f10_dynamic_path_selection":{"source_url":"https://business.bt.com/networks-digital-services/sd-wan-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'elastic SD-WAN' dynamically steers traffic, and 'traffic is prioritised from your devices to the SASE cloud node, avoiding public internet congestion' [5] [6]"},"f17_cellular_and_5g_support":{"source_url":"https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Active-Active Mobile Data Access is only available over 5G where 5G is available to you. 5G and 4G are contractually defined transport, with a fallback ladder: the annex defines Mobile Network as a 5G or 4G communication network, 4G where 5G is not available and 3G where 4G is not available. SIM management is covered both ways, with a Customer Managed Mobile Data Access option where the customer provides the SIM. Two caveats worth carrying: Part B limits BT-provided Mobile Data Access to UK sites only, and BT explicitly disclaims mobile network degradation, congestion and interference. Signal monitoring specifically is not evidenced."},"f19_public_cloud_gateways":{"source_url":"https://business.bt.com/content/dam/bt-business/pdfs/terms-and-conditions/service-schedules/BT-fortinet-SD-WAN-service-schedule-part-B-31-01-2025-v3.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The service is only available with the FortiSASE PoPs plus selected PoPs. This is the key ownership call. The cloud security enforcement points are Fortinet's FortiSASE PoPs, not BT infrastructure, so partner_integrated rather than yes. Computer Weekly (Tier 2, named author, dated) confirms the SSE functions of firewall as a service, secure web gateway, CASB and ZTNA come from Fortinet technology. Do not confuse this with BT's Global Fabric PoPs, which BT does operate itself but which are a cloud interconnect fabric rather than a SaaS optimisation or security enforcement gateway service."},"f21_private_global_backbone":{"source_url":"https://newsroom.bt.com/bts-global-fabric-goes-live-with-customer-traffic/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Global Fabric will be available to customers internationally via 140 PoPs hosted in the world's top cloud locations located in 40 countries. Graded partial, and the reason matters. BT clearly operates a genuinely global, BT-controlled PoP footprint across 40 countries and markets it as deterministic in contrast to the public internet, which is more than a single-country network. What I could not evidence from any Tier 1 or Tier 2 source is that BT owns the inter-region fibre between those PoPs. Analysys Mason (Tier 3, so it cannot carry a grade) states the opposite, that Global Fabric rides partner fibre networks. That unresolved gap between control of the platform and ownership of the transmission caps this at partial. Recorded in conflicts. Note also that Global Fabric is a separate product from the Fortinet SD-WAN/SASE service and the schedules do not place SASE traffic on it."},"f27_integrated_next_generation_firewall":{"source_url":"https://newsroom.bt.com/bt-launches-a-new-managed-sase-service-powered-by-fortinet/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Fortinet Next-Generation Firewalls provide enterprise security at any edge, and at any scale on all WAN and LAN traffic as it passes through. The NGFW is Fortinet's technology that BT bundles and manages, so partner_integrated by definition even though it is tightly integrated into BT's managed service. The Managed Fortinet annex refers to 'Fortinet Security Options' configured against agreed design with applicable licence subscriptions, confirming a licensed third-party stack. The functional elements are evidenced: the Managed Cisco SD-WAN annex documents URL filtering by whitelist, blacklist, category and reputation, and Computer Weekly confirms firewall as a service alongside SWG, CASB and ZTNA. BT also offers Palo Alto Prisma and VMware variants, so the underlying firewall vendor varies by build."},"f28_full_sase_platform":{"source_url":"https://business.bt.com/networks-digital-services/sd-wan-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine sector-specific detail - explicitly named for financial services as 'secure, identity-based access through ZTNA' supporting data residency [5] [6]"},"f30_zero_trust_network_access":{"source_url":"https://business.bt.com/networks-digital-services/sd-wan-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine sector-specific detail - explicitly named for financial services as 'secure, identity-based access through ZTNA' supporting data residency [5] [6]"},"f31_secure_web_gateway":{"source_url":"https://newsroom.bt.com/bt-launches-a-new-managed-sase-service-powered-by-fortinet/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as part of the current, Fortinet-based managed SASE expansion [2] Capability specifics depend on which underlying platform (Fortinet vs. Meraki) is proposed"},"f32_casb_capability":{"source_url":"https://business.bt.com/networks-digital-services/sd-wan-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine sector-specific detail - explicitly named for retail, combined with elastic SD-WAN 'to dynamically steer traffic and safeguard payment and customer data' [5] [6] Specific inline-versus-API-mode technical detail not itemised"},"f12_application_aware_routing":{"source_url":"https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"Fortinet annex clause 2.5 documents application-aware routing. BT implements agreed categories; two enabling links optimise operation."},"f24_flexible_edge_form_factors":{"source_url":"https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"Physical and virtual SD-WAN devices are documented. Cloud deployment and customer-provided devices depend on the order and compatibility."},"f11_active_active_link_utilisation":{"grade":"partial","source_url":"https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"Active-active mobile access is an optional 5G service. This does not establish active-active operation across all access types."},"f37_customer_portal_and_rbac":{"grade":"partial","source_url":"https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"Customer monitoring and reporting portals are documented in clauses 2.3 and 2.8. Granular role-based permissions remain unconfirmed."},"f38_observability_and_digital_experience_monitoring":{"grade":"partial","source_url":"https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"The portal exposes application performance, flows and troubleshooting. These findings do not establish a full digital experience monitoring service."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:59b8c21f282ae65477c1c3f8","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"partial","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"not_confirmed","transport_logistics":"yes","professional_services":"partial","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"uk_hq","curated_uk_basis":"UK headquartered (BT Group). UK contract holder with owned UK access, UK NOC and SOC, and named UK support.","sector_review_queue":[{"sector":"financial_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | ZTNA-based identity-first access, data-residency support via localised traffic paths, and a real, detailed (anonymised) case study directly in this sector | PCI DSS and DORA not independently confirmed (Table 13), though data residency is confirmed directly for this sector specifically | A real, detailed, primary-sourced (anonymised) global financial-services customer case study, describing Agile Connect plus BT Managed Fortinet Firewall deployment | Multi-country deployment confirmed directly in the case study | The named certification gaps (PCI DSS, DORA) are worth flagging directly for this specific sector | Genuinely the best-evidenced sector in this entire profile - both specific, named sector-relevant product positioning (ZTNA, data residency) and a real, detailed case study exist together, even without the customer's name disclosed.","named_evidence":"A real, detailed, primary-sourced (anonymised) global financial-services customer case study, describing Agile Connect plus BT Managed Fortinet Firewall deployment","evidence_source_ids":["evidence:bt:6","evidence:bt:17"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{},"reviewed_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://business.bt.com/insights/case-studies/financial-services-sd-wan/","https://business.bt.com/networks-digital-services/sd-wan-sase/sase/","https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","https://www.bt.com/about/contact-bt","https://find-and-update.company-information.service.gov.uk/company/04190816","https://business.bt.com/networks-digital-services/sd-wan/"],"qualification":"BT documents managed Agile Connect SD-WAN and Fortinet Firewall for a global banking organisation. Does not verify DORA/PCI compliance or a manufacturing deployment.  BT publishes UK managed SASE infrastructure and a Managed Fortinet SD-WAN annex defining Territory as UK. This establishes UK offering, not every UK or Irish address, a specific contracting arrangement or Netify response commitment. Combined UK/Ireland region stays partial. UK review update (supersedes earlier UK-region qualification): UK headquarters and a published UK SD-WAN offering are confirmed. This is not a quote, site serviceability check or confirmation of the legal entity signing a particular order. The combined UK/Ireland yes flag records UK delivery evidence; Irish coverage must be checked separately.","sectors":{"financial_services":"yes"},"regions":{"uk_ireland":"yes"}}},"uk_evidence":{"entity":{"status":"evidenced","name":null,"source_urls":["https://business.bt.com/insights/case-studies/financial-services-sd-wan/","https://business.bt.com/networks-digital-services/sd-wan-sase/sase/","https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","https://www.bt.com/about/contact-bt","https://find-and-update.company-information.service.gov.uk/company/04190816","https://business.bt.com/networks-digital-services/sd-wan/"],"checked_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","qualification":"BT Group plc is headquartered at 1 Braham Street, London; UK managed SD-WAN is published by BT Business."},"regional_delivery":{"status":"yes","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":13,"research_metrics":{"supported":11,"partial":4,"partner_delivered":3,"managed_service_dependent":0,"not_primary":0,"unconfirmed":22,"total":40,"reviewed":18,"completeness_percent":45,"completeness":0.45},"proven_evidence_count":11,"response_panel":null,"best_for":"Financial services; UK and Ireland; managed","best_for_fields":{"sectors_yes":["Financial services"],"sectors_partial":[],"regions":["UK and Ireland"],"size":[],"service_model":"managed","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"uk_hq","label":"UK headquartered","source_urls":["https://business.bt.com/insights/case-studies/financial-services-sd-wan/","https://business.bt.com/networks-digital-services/sd-wan-sase/sase/","https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","https://www.bt.com/about/contact-bt","https://find-and-update.company-information.service.gov.uk/company/04190816","https://business.bt.com/networks-digital-services/sd-wan/"],"reviewed_at":"2026-09-30T19:56:00Z","qualification":"BT Group plc is headquartered at 1 Braham Street, London; UK managed SD-WAN is published by BT Business."}},{"slug":"forcepoint","name":"Forcepoint","website":"https://www.forcepoint.com/product/secure-sd-wan","category":"technology vendor","product_focus":"AI Mesh / Getvisibility, ARIA, Field Programmable SASE Logic (FPSL), FlexEdge Secure SD-WAN","cost_model":"Quote-based appliances/software/subscriptions; managed SD-WAN positioned but pricing public transparency limited.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"partial","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"partial","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"yes","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_primary","financial_services":"not_primary","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"not_primary","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/forcepoint/","shortlist_summary":"Forcepoint’s identity traces back to Websense, founded in 1994, and its whole platform is built around a data-first philosophy rather than a network- or device-first one - the pitch is that policy should follow the data itself, not the network path or the device it happens to be on. That heritage shows up as real, credible analyst recognition specifically for data loss prevention: Frost & Sullivan’s Global DLP Company of the Year for two consecutive years, an IDC MarketScape Leader placement for worldwide DLP in 2025, and a Forrester Wave Strong Performer placement for data security platforms in Q1 2025.","key_differentiators":["FlexEdge Secure SD-WAN combines secure SD-WAN with strong DLP and data security heritage from the wider Forcepoint portfolio.","MultiLink resilience and zero-touch deployment with cloud central management.","Strong story for buyers prioritising data security and DLP as a procurement criterion."],"best_fit_for":["Enterprises with strong data protection and DLP requirements (regulated industries, government).","Organisations wanting secure SD-WAN where data security is the primary decision driver.","Buyers consolidating DLP with SD-WAN under one vendor."],"watch_outs":["Smaller SD-WAN market presence than the leading platforms.","Full SASE platform: supported. Confirm the included networking and security products, licences and service scope.","Managed delivery is partner-led; co-managed and white-label support require partner validation."],"evidence_coverage_pct":0.45,"last_verified":"2026-09-01","evidence_source_count":61,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.forcepoint.com/resources/datasheets/flexedge-secure-sd-wan-manager","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Forcepoint Administrative Domain License enables multiple customer environments to be managed through a single management server. The SD-WAN Manager datasheet evidences tenant isolation and delegated administration: it also states 'Allows division of the environment into isolated configuration domains' and names MSSPs directly. Graded partial rather than yes because no evidence of branded or white-label portals was found on any page reviewed, and the partner programme page contains no MSP, MSSP, white label or multi-tenant terms."},"f05_professional_services_and_migration_support":{"source_url":"https://www.forcepoint.com/services/implementation-packages","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Resources and deliverables aligned to your deployment needs and timeline Packaged implementation services and consulting are published, and the Cybersecurity Services page lists 'Implementation Packages for our award-winning products' and 'Data Security Consulting customized to your organization's needs'. Graded partial because the pages reviewed do not describe discovery, pilots, staging, migration runbooks or rollback plans."},"f07_lifecycle_management":{"source_url":"https://www.forcepoint.com/resources/datasheets/forcepoint-technical-support-offerings","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Next Generation Firewall (NGFW) appliances (both N and S-series) now have RMA support included Hardware replacement is included in the support contract, with an option to 'upgrade to next business day or same day RMA service'. The SD-WAN Manager datasheet adds 'Upgrades and dynamic update packages for managed devices can be automatically downloaded' and 'Remote Upgrades One-click fail-safe remote upgrade of the managed engines'. Graded partial because upgrades and patching are customer-executed platform features rather than work performed for the customer as part of a service, and no end-of-life planning service was found."},"f17_cellular_and_5g_support":{"source_url":"https://www.forcepoint.com/resources/datasheets/forcepoint-ngfw-120-series-appliance","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"For LTE without Wi-Fi, Forcepoint offers the 120L model with LTE support and 125L model with LTE/5G support. The 120 Series datasheet also states 'Optional Wi-Fi and LTE/5G connectivity' and lists supported LTE and 5G NR band tables, so integrated cellular is a shipped hardware capability. SIM management and signal monitoring specifics were not located in the pages reviewed."},"f26_sla_backed_service_fabric":{"source_url":"https://www.forcepoint.com/resources/datasheets/forcepoint-technical-support-offerings","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"24/7 availability for your most critical issues. The Technical Support Offerings datasheet publishes tiered severity response targets ('Severity 1 1 hour' for Essential, 'Severity 1 45 minutes' for Enhanced, 'Severity 1 30 minutes' for Enterprise) and states 'Severity 1 issues use a follow-the-sun approach; Forcepoint technicians are always available'. Graded partial because these are support response commitments only: no uptime percentage, and no latency, jitter, loss or change handling commitments were found in the pages reviewed."},"f32_casb_capability":{"source_url":"https://forcepoint.com/sites/default/files/resources/brochures/whitepaper_forcepoint_one_differentiation_en_0_0_0_0_0.pdf","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed explicitly alongside inline modes [10]"},"f33_data_loss_prevention":{"source_url":"https://forcepoint.com/use-case/incident-and-breach-response","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed - Forcepoint DLP provides 'continuous monitoring' across data at rest, in use, and in transit, per Forcepoint's own materials and independent analyst recognition [36]"},"f34_remote_user_access":{"source_url":"https://forcepoint.com/sites/default/files/resources/brochures/whitepaper_forcepoint_one_differentiation_en_0_0_0_0_0.pdf","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via the CASB/SWG gateway architecture supporting unmanaged devices without requiring an agent [10]"},"f36_centralised_orchestration":{"source_url":"https://cyberdefensemagazine.com/innovator-spotlight-forcepoints-data-security-cloud-redefining-data-protection-in-the-ai-era/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Confirmed as part of ARIA's function - assists in 'creating, refining, and enforcing data protection policies' [25] Same as above"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:e03c3fdaf8448bdd3558a0fd","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"partial","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). UK delivery via security partners; government and defence heritage suits UK public sector.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":14,"research_metrics":{"supported":14,"partial":4,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":22,"total":40,"reviewed":18,"completeness_percent":45,"completeness":0.45},"proven_evidence_count":14,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"gtt","name":"GTT","website":"https://www.gtt.net/services/secure-networking/managed-sd-wan","category":"hybrid provider","product_focus":"GTT Envision, GTT Managed SD-WAN, GTT Secure Connect, Secure Connect with HPE (Aruba/EdgeConnect/SSE)","cost_model":"Quote-based managed service; GTT public page answers cost only as consultative/requirement-based.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"yes","f33_data_loss_prevention":"partner_integrated","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"yes","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":400,"sla_availability_pct":99.99,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/gtt/","shortlist_summary":"GTT Communications is a specialist, purely networking-and-security-focused global provider rather than a diversified telecom conglomerate with mobile, broadband, and media businesses attached. Founded in 1998, listed on the NYSE in 2013, renamed GTT Communications in January 2014, and now headquartered in Arlington, Virginia, GTT operates a global Tier 1 IP backbone spanning more than 600 points of presence and connecting more than 3,500 cities.","key_differentiators":["Tier 1 global backbone provides strong international transit capability alongside managed SD-WAN.","Vendor-agnostic SD-WAN delivery (multiple platform options) with the Envision management platform.","Recognised as a leader for SASE and managed SD-WAN by industry analysts."],"best_fit_for":["Multinational enterprises needing strong international backbone alongside managed SD-WAN.","Buyers wanting platform flexibility within a managed service.","Organisations consolidating global transit, SD-WAN and SASE under one provider."],"watch_outs":["SASE depth depends heavily on the chosen platform partner; native SSE capabilities are not primary positioning.","Security stack is largely partner-integrated.","Commercial model is consultative; ensure cost lines for managed changes, security and SLAs are explicit."],"evidence_coverage_pct":0.45,"last_verified":"2026-09-01","evidence_source_count":37,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.gtt.net/services/secure-networking/managed-sd-wan/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"We manage the underlay (network) and the cloud-based overlay (SD-WAN) as a unified service GTT positions Managed SD-WAN as an end to end managed service covering circuit installation, hardware delivery, zero touch provisioning and 24/7/365 proactive monitoring under one bill and one support team. Corroborated by the GTT SD-WAN datasheet (register 18, Tier 3 host) which states GTT experts design, implement, install and optimise the service."},"f07_lifecycle_management":{"source_url":"https://www.gtt.net/envision/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Lifecycle operations for SD-WAN/SASE, internet, voice, cloud connect, plus performance tuning and change control GTT Envision advertises lifecycle operations and change control, and Professional Services covers 'throughout the lifecycle of your deployment'. Graded partial because exact string checks on the Managed SD-WAN page returned ABSENT for both 'firmware' and 'hardware replacement', and no published statement was found on patching, renewals or end of life planning being included in the service."},"f09_encrypted_overlay_fabric":{"source_url":"https://www.gtt.net/resources/glossary/what-is-sd-wan-meaning-benefits-how-it-works/","reviewed_at":"2026-10-01","review_due":"2026-12-30T00:00:00Z","qualification":"GTT describes its managed SD-WAN service and encrypted connectivity. GTT documents encrypted connectivity within its managed SD-WAN offering. Confirm the selected technology, tunnel configuration, resilience and throughput for each site."},"f10_dynamic_path_selection":{"source_url":"https://gtt.net/resources/glossary/what-is-sd-wan-meaning-benefits-how-it-works/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'SD-WAN dynamically routes traffic across any connection based on real-time performance and policy' [10]"},"f12_application_aware_routing":{"source_url":"https://gtt.net/resources/glossary/what-is-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'SD-WAN intelligently manages traffic across multiple network paths using centralized policies and real-time performance data' [7]"},"f13_qos_and_traffic_shaping":{"source_url":"https://gtt.net/resources/glossary/what-is-sd-wan-meaning-benefits-how-it-works/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'centralized control, visibility and built-in security, making it more scalable and cloud-friendly' [10]"},"f17_cellular_and_5g_support":{"source_url":"https://www.gtt.net/services/managed-networking/internet/5g-services/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Dual SIM capability allows automatic switching between carrier networks during localized outages GTT publishes a 5G Fixed Wireless Access service supporting primary and failover use ('Deploy automatic failover for primary circuits'), multi-carrier SIM handling, and feeding 'reliable underlay connectivity into SD-WAN and SASE architectures'. The Managed SD-WAN page lists access types 'fiber, broadband, 4G/5G'. Signal monitoring specifically was not evidenced."},"f21_private_global_backbone":{"source_url":"https://www.gtt.net/services/secure-networking/managed-sd-wan/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"GTT owns and operates one of the world's largest global Tier 1 IP backbones GTT is a Tier 1 IP transit operator. The Fortinet press release (register 16) describes a 'top-ranked, global, Tier 1 IP backbone, which spans more than 260 cities on six continents', and the Connect page claims the '4th largest global IP backbone'. This is genuinely global rather than single-country, so yes rather than partial."},"f25_high_availability_design":{"source_url":"https://businesswire.com/news/home/20250318895249/en/Radisson-Hotel-Group-Selects-GTT-for-Global-SASE-Deployment","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and genuinely well-evidenced via a real, named customer example - 'wireless access for enhanced business continuity and resiliency', reinforced by confirmed '24/7 monitoring' [16]"},"f27_integrated_next_generation_firewall":{"source_url":"https://gtt.net/services/secure-networking/sase-secure-connect/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Firewall-as-a-Service (FWaaS)' named explicitly, reinforced by a confirmed 'Managed Firewall at branch locations' specifically for the Radisson deployment [9] [16]"},"f30_zero_trust_network_access":{"source_url":"https://businesswire.com/news/home/20250318895249/en/Radisson-Hotel-Group-Selects-GTT-for-Global-SASE-Deployment","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and repeatedly by name - 'Zero Trust Network Access' named explicitly across multiple sources, including the confirmed Radisson deployment specifically [3] [16]"},"f32_casb_capability":{"source_url":"https://businesswire.com/news/home/20250318895249/en/Radisson-Hotel-Group-Selects-GTT-for-Global-SASE-Deployment","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Cloud Access Security Broker' named explicitly, and confirmed directly again as 'Cloud Access Service Brokerage' in the named Radisson case study [3] [16] Specific inline-versus-API-mode technical detail not itemised"},"f33_data_loss_prevention":{"source_url":"https://www.gtt.net/services/secure-networking/cloud-security/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"prevents sensitive data from being exposed or exfiltrated by identifying, monitoring, and GTT's Cloud Security page lists 'Data Loss Protection (DLP)' as one of six SSE services, and the CASB page states it leverages data loss prevention technologies. Graded partner_integrated because the SSE stack is explicitly Fortinet and Palo Alto Networks technology per the SASE page. Alerting and exception workflow detail was not found. Quote is a verified substring of the DLP service description; the full sentence continues with enforcing policies on data across users, devices, applications, and networks."},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://businesswire.com/news/home/20250318895249/en/Radisson-Hotel-Group-Selects-GTT-for-Global-SASE-Deployment","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name via the specifically-named EnvisionDX platform component - 'DX' framing itself directly implies digital-experience-monitoring focus, reinforced by confirmed '24/7 monitoring and access to ticketing support' for the named Radisson deployment [16]"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:42a49360534e96d4228b2a27","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"partial","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"not_confirmed","transport_logistics":"yes","professional_services":"partial","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_entity","curated_uk_basis":"UK contracting entity with UK operations on a Tier 1 backbone; UK and EMEA delivery is established.","sector_review_queue":[{"sector":"hospitality_leisure","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, genuinely the best-evidenced sector in this entire profile | Confirmed global managed SD-WAN and distributed security architecture (FWaaS, SWG, CASB, ZTNA) directly deployed and confirmed operational across a real, named, large-scale hospitality customer | Not assessed for sector-specific frameworks, though PCI DSS relevance is high given payment-card handling typical of this sector, and was not independently confirmed (Table 13) | Radisson Hotel Group - named, major global hospitality brand, named senior customer executive quote (Adolfo Sanchez, SVP & CIO), 800-plus hotels and offices across four regions, extensively corroborated across at least eight independent publications | Asia-Pacific, Europe, Middle East, Africa, confirmed directly | The confirmed PCI DSS gap is a specific, worth-flagging limitation for this sector specifically, given typical payment-card handling requirements | Genuinely one of the strongest sector-fit findings in this entire profile - a real, detailed, large-scale, extensively-corroborated named case study with a senior customer executive quote.","named_evidence":"Radisson Hotel Group - named, major global hospitality brand, named senior customer executive quote (Adolfo Sanchez, SVP & CIO), 800-plus hotels and offices across four regions, extensively corroborated across at least eight independent publications","evidence_source_ids":["evidence:gtt:16","evidence:gtt:17"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"hospitality_leisure":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://businesswire.com/news/home/20250318895249/en/Radisson-Hotel-Group-Selects-GTT-for-Global-SASE-Deployment","https://gtt.net/about-us/press-releases/radisson-hotel-group-selects-gtt-for-global-sase-deployment/"],"qualification":"GTT Radisson release confirms selection and rollout of managed SASE/SD-WAN for hotels. This is an implementation announcement, not proof of all 800 hotels completed. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"hospitality_leisure":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":15,"research_metrics":{"supported":14,"partial":2,"partner_delivered":2,"managed_service_dependent":0,"not_primary":0,"unconfirmed":22,"total":40,"reviewed":18,"completeness_percent":45,"completeness":0.45},"proven_evidence_count":14,"response_panel":null,"best_for":"Hospitality and leisure; both","best_for_fields":{"sectors_yes":["Hospitality and leisure"],"sectors_partial":[],"regions":[],"size":[],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"zscaler","name":"Zscaler","website":"https://www.zscaler.com","category":"technology vendor","product_focus":"AI Security / GenAI Security, Data Fabric for Security, Risk360, Zero Trust Branch","cost_model":"Quote-based subscription; typically per-user/workload/location modules; SD-WAN integrations may add partner/vendor cost.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":160,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/zscaler/","shortlist_summary":"Zscaler is the vendor that effectively created the SSE category, and it’s still the one most competitors get measured against when it comes to sheer scale and security depth - the Zero Trust Exchange runs across 150+ data centres, processes over 400 billion transactions a day, and holds FedRAMP High authorisation for ZIA and ZPA (other SASE-class vendors also hold FedRAMP High or equivalent for their own components). If you’re a security-first buyer looking to retire VPN concentrators and stitch SWG, CASB, DLP and ZTNA together under one console, Zscaler is one of the most proven single-vendor routes to get there.","key_differentiators":["Category leader in SSE with ZIA, ZPA and ZDX; widely adopted as the security layer in best-of-breed SASE architectures.","Strong ecosystem of SD-WAN partners (Cisco, others) for buyers wanting Zscaler security with a separate SD-WAN platform.","Mature Zero Trust platform with substantial enterprise deployment history."],"best_fit_for":["Enterprises selecting best-of-breed SSE alongside a separate SD-WAN platform.","Security-driven SASE strategies where the SSE layer is the primary architectural decision.","Buyers consolidating multiple security point solutions onto a single SSE vendor."],"watch_outs":["Historically SSE-led; native SD-WAN capability is less mature than dedicated SD-WAN platforms (validate path selection, QoS and packet loss in RFP).","Premium pricing; typically per-user/workload/location with security modules adding cost.","Buyers needing one vendor for both SD-WAN and security may prefer a converged platform (Cato, FortiSASE, Prisma)."],"evidence_coverage_pct":0.45,"last_verified":"2026-09-01","evidence_source_count":81,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.zscaler.com/partners/service-providers","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"We partner with service providers to develop comprehensive managed offers that leverage the Zero Trust Exchange, our industry-leading security platform, to enable profitable managed service provider business models. Zscaler operates the platform itself and sells one first-party managed service (Zscaler MDR, security operations). On its own partner page the comprehensive managed offer is built and delivered by service provider partners, not by Zscaler. No Zscaler page was found describing Zscaler itself designing, deploying, changing and reporting on a customer's end-to-end service, so graded partial rather than yes."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.zscaler.com/blogs/product-insights/streamlining-multi-tenant-management-announcing-integration-multi-tenant","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The Multi-Tenant Portal has long been the cornerstone for Managed Service Providers (MSPs) and large-scale enterprises to oversee multiple Zscaler instances. Tenant isolation, cross-tenant pivoting and centralised delegated administration through ZIdentity are documented for MSPs. Nothing was found on Zscaler's own pages evidencing branded or white-label portals under the partner's own brand, and the definition requires that. The definitive partner portal documentation on help.zscaler.com could not be read because it is a JavaScript-only page (register 23). Graded partial for that reason."},"f17_cellular_and_5g_support":{"source_url":"https://www.zscaler.com/products-and-solutions/zscaler-cellular","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Devices use Zscaler SIMs to steer traffic securely to the Zero Trust Exchange with no need for additional software. Zscaler Cellular provides Zscaler-issued SIMs that carry cellular IoT and mobile device traffic into the Zero Trust Exchange, which covers SIM provisioning and management. The definition also asks for 4G and 5G as primary or failover WAN transport with modem and signal monitoring. Neither the Cellular product page nor the July 2025 cellular press release names 4G, 5G or LTE, the private 5G page concerns securing a customer's private 5G core rather than WAN transport, and the Zero Trust SD-WAN datasheet contains no cellular uplink specification. Graded partial on that gap."},"f19_public_cloud_gateways":{"source_url":"https://www.zscaler.com/press/zscaler-significantly-expands-global-sovereignty-zero-trust-exchange-platform","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Zscaler already operates 160+ data centers and is present in most countries. This is Zscaler's own infrastructure, not a resold third party's, so yes rather than partner_integrated. The reference architecture confirms Zscaler deploys its own ZIA Service Edge devices into those data centres and that users are always directed to the nearest one for traffic processing, which is security enforcement and SaaS access delivered as the vendor's own cloud service."},"f20_private_pops_dedicated_pops":{"source_url":"https://www.zscaler.com/resources/reference-architectures/traffic-forwarding-in-zscaler-internet-access.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"ZIA Private Service Edge and ZIA Virtual Service Edge devices extend the Zscaler cloud into your data center. Directly meets the definition: customer-hosted and dedicated deployments exist alongside the shared multi-tenant Public Service Edges. The March 2026 sovereignty press release additionally describes Private Service Edges as single-tenant, customer-hosted, and Zscaler-managed appliances, plus dedicated control and logging planes in six countries, which covers the sovereign case."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:44562c0b5225f88ac0275492","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"not_confirmed","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). UK PoPs in the Zero Trust Exchange; delivered direct or via UK partners and carriers.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Conditional fit | Not assessed | Not assessed | Mindbody (business software/services company) | N/A | Single case study, not sector-specific in focus | Some evidence exists but isn't a deep sector-specific case.","named_evidence":"Mindbody (business software/services company)","evidence_source_ids":["evidence:zscaler:19"]},{"sector":"government_public_sector","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | FedRAMP High/Moderate, DoD IL5, GovRAMP, CJIS, CMMC Level 2 | FedRAMP High/Moderate, GovRAMP Authorized, CJIS, CMMC Level 2, DoD IL4/IL5 | CSC (public-sector case study, VPN-to-Zero-Trust productivity gains) | Zscaler Government Cloud is a distinct FedRAMP High authorised offering | US-federal-specific; UK/EU public-sector framework listings not found in this pass | By far the best-evidenced sector in this entire profile - genuinely strong, multi-source, dated evidence. The clear standout differentiator versus Cato, which had no equivalent public-sector compliance depth.","named_evidence":"CSC (public-sector case study, VPN-to-Zero-Trust productivity gains)","evidence_source_ids":["evidence:zscaler:20"]},{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | SD-WAN/ZIA for distributed sites, M365 security | Not assessed | AutoNation (retail/automotive dealerships), Baker & Baker (food manufacturing/retail supply) | Multi-site retail benefits from ZIA's direct-to-cloud model avoiding centralised backhaul | US-centric case evidence; UK/EU retail-specific case studies not found in this pass | Reasonably well evidenced via AutoNation specifically, though not as singularly strong as Cato's Ulta Beauty story.","named_evidence":"AutoNation (retail/automotive dealerships), Baker & Baker (food manufacturing/retail supply)","evidence_source_ids":["evidence:zscaler:17","evidence:zscaler:18"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Conditional fit | SD-WAN/branch capability plausibly relevant | Not assessed | Baker & Baker (food manufacturing) | N/A | Single case study, not deeply metric-rich beyond the ransomware-reduction claim | Some evidence exists but is thinner than the retail/public-sector case studies.","named_evidence":"Baker & Baker (food manufacturing)","evidence_source_ids":["evidence:zscaler:17"]},{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Conditional fit | Global remote-access capability plausibly relevant | Not assessed | NOV (oilfield services/energy, 27,500 users, global remote-access rollout during COVID-19) | Global distributed workforce use case well evidenced | Single case study, but a genuinely substantial, named, metric-rich one | NOV is a strong, credible case study for this sector specifically - a real enterprise-scale (27,500-user) deployment with a clear before/after narrative.","named_evidence":"NOV (oilfield services/energy, 27,500 users, global remote-access rollout during COVID-19)","evidence_source_ids":["evidence:zscaler:21"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"energy_utilities":false,"government_public_sector":false,"manufacturing":false,"retail_ecommerce":false,"professional_services":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://zscaler.com/customers/nov","https://zscaler.com/customers/csc","https://zscaler.com/customers/baker-baker","https://zscaler.com/customers/mindbody","https://zscaler.com/customers/autonation"],"qualification":"NOV case documents ZIA/ZPA and zero-trust access for an energy-industry supplier. Do not infer utility-specific compliance or UK fit. CSC is Australian Commonwealth Superannuation Corporation; ZIA/ZPA deployment confirmed. Government-pension context, not a blanket public-sector accreditation. Baker and Baker case documents ZIA/ZPA alongside a separately adopted SD-WAN. Manufacturing evidence; Zscaler is not identified as the SD-WAN provider. Mindbody is a SaaS software business serving wellness firms. Its ZPA deployment does not establish professional-services or healthcare end-buyer sector evidence. AutoNation confirms ZIA deployment across retail locations. Baker and Baker must not be counted as a second retail case; it is manufacturing. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"energy_utilities":"yes","government_public_sector":"yes","manufacturing":"yes","professional_services":"not_confirmed","retail_ecommerce":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":16,"research_metrics":{"supported":15,"partial":3,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":22,"total":40,"reviewed":18,"completeness_percent":45,"completeness":0.45},"proven_evidence_count":15,"response_panel":null,"best_for":"Retail and e-commerce; Manufacturing; Energy and utilities; Government and public sector; platform","best_for_fields":{"sectors_yes":["Retail and e-commerce","Manufacturing","Energy and utilities","Government and public sector"],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"colt-technology-services","name":"Colt Technology Services","website":"https://www.colt.net/products/networking/sd-wan","category":"carrier network provider","product_focus":"Colt SASE Gateway solution, Colt SD WAN, Colt SD WAN Remote Access, Partner IP Access (Blue Wireless)","cost_model":"Quote-based managed service; access, SD-WAN/SASE design, data sovereignty and service options drive pricing.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_entity","uk_basis":"Colt Technology Services Group Limited, company 03232904, is registered at Colt House, 20 Great Eastern Street, London. Colt publishes a London SD-WAN deployment.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"yes","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"partial","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"yes","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"yes","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":99.9,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"yes","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/colt/","shortlist_summary":"Colt Technology Services is a long-established, European-anchored network operator, founded in 1992 as City of London Telecommunications and headquartered in London. Since 2015 Colt has been privately owned by Fidelity International (Eight Roads’ current specific role to be reconfirmed), and its network footprint expanded materially through a significant acquisition of Lumen Technologies’ Europe, Middle East and Africa business for $1.8 billion, completed November 2022, reinforcing Colt’s own confirmed network scale of more than 30 countries, more than 50 metropolitan area networks, and more than 32,000 on-net buildings, all delivered over its own named Colt IQ Network platform.","key_differentiators":["SD-WAN and SASE with strong European data sovereignty positioning.","Managed and co-managed delivery options with management portal access.","Enterprise-grade connectivity heritage with substantial European network ownership."],"best_fit_for":["European enterprises prioritising data residency, sovereignty and regulatory alignment.","Buyers wanting genuine co-managed delivery rather than pure managed or pure DIY.","Organisations consolidating European connectivity with SD-WAN under one provider."],"watch_outs":["Global delivery depth outside Europe is less prominent than the largest global carriers.","CASB capability: not confirmed; Data loss prevention: not confirmed. Ask Colt to identify the SSE platform, licences and operational responsibilities.","Underlying SD-WAN platform should be explicitly confirmed in RFP."],"evidence_coverage_pct":0.425,"last_verified":"2026-09-01","evidence_source_count":26,"capability_evidence":{"f03_co_managed_service":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Customers can choose to do (add/edit/delete) all their policy configurations anytime via the secure Colt SD WAN portal This is a textbook shared-responsibility split: Colt runs the platform, CPE and support while the customer retains live policy and change rights through the portal. The guide also states customers can add branch sites in hours and upgrade bandwidth in real time themselves."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"For the Wholesale SD WAN service, both wholesale customers and end customers will benefit from a customized look and feel, setting wholesale customer's own logo, background image, links and contact details, so that their end-customer experience doesn't differ from the rest of their services offered. All four elements of the definition are evidenced on one page: branded portal (logo, background, links), delegated administration (the carrier holds end-customer credentials and handles resets), tenant isolation (IPC* tenant identifiers in Versa Director) and hierarchy templates (customizable portal, branding and further hierarchy levels). Colt sells this explicitly as a Wholesale SD WAN solution for partners to resell."},"f09_encrypted_overlay_fabric":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-10-01","review_due":"2026-12-30T00:00:00Z","qualification":"Colt documents an encrypted overlay over private MPLS and public Internet underlay. The Colt Versa SD-WAN service guide documents an encrypted overlay using IPsec. Encryption configuration and throughput must be established for the chosen service design."},"f15_local_internet_breakout":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'secure local internet breakout' named explicitly as a core integrated-firewall capability [4]"},"f17_cellular_and_5g_support":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Colt SD WAN services can be provided over public internet – broadband Internet and business internet – dedicated internet access (DIA) connectivity (using any and all transport technologies like xDSL, wireless 3G/4G/LTE/5G (only available in EU for Colt provided SIMs, no limitation for customer-owned), Ethernet or traditional MPLS regardless of whether Colt is providing that underlying connectivity or not. 4G and 5G are supported as transport, and SIM management is evidenced both ways: Colt provided SIMs (EU only) or customer-owned SIMs with no geographic limitation. A separate wireless option is delivered with Blue Wireless, a Singapore-based company, supplying a Cradlepoint mobile router with dual SIM, data, installation, operation and an SLA. Confidence is medium because the guide also states that by default 3G/4G/5G circuits should be used as backup only where fixed Internet and MPLS are available, and because no published evidence of signal monitoring was found. Note the sentence quoted is reproduced as printed, including its unclosed parenthesis and en dashes."},"f18_cloud_on_ramp":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the confirmed uCPE architecture, described as 'bringing cloud computing benefits from data centres to edge computing at customer' sites [4]"},"f19_public_cloud_gateways":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the confirmed uCPE architecture, described as 'bringing cloud computing benefits from data centres to edge computing at customer' sites [4]"},"f20_private_pops_dedicated_pops":{"source_url":"https://www.colt.net/products/networking/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Sovereign SASE keeps data within its own network and in specific regions, avoiding third-party transfers and boosting control. Colt markets a Sovereign SASE deployment model and a Versa Hosted SASE Solution, and the product page describes sovereign SASE as a model where the organisation or a service provider hosts all components. That evidences regional and sovereign data control. Graded partial rather than yes because no page found describes a customer-hosted or single-tenant dedicated PoP as an orderable option with defined commercials; the published claim is about data residency within Colt's own network, which is not the same as a dedicated PoP."},"f24_flexible_edge_form_factors":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'uCPE allows customers to licence, manage, and monitor functions with flexible network options', with a specifically-named 'blue wireless CPE' attachable to 'any of the current standard Versa CPEs' [4]"},"f25_high_availability_design":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Active/Active operation' and the confirmed dual resilient SIM architecture for the named Blue Wireless partnership specifically [4] [6]"},"f26_sla_backed_service_fabric":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"SLA (for on-net circuits) | 99.90% | 99.90% | 99.95% | 99.90% | 99.95% | 99.90% | 99.95% The service guide publishes a contractual availability SLA differentiated by site package, 99.90% for XS/S/M/L and 99.95% for the S Plus, M Plus and L Plus tiers, and the guide is a service-guide-grade document rather than marketing. The wireless option is separately stated to guarantee 50% of contract speed. Confidence is medium on two counts: the SLA applies to on-net circuits only, and no published response-time, change-handling, latency, jitter or loss commitments were found. The quote is a table row, so a verifier should expect it rendered as a table rather than prose."},"f27_integrated_next_generation_firewall":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'Colt SD WAN provides an integrated firewall with SD WAN which provides secure local internet breakout, provides DDoS protection and ability to create firewall policies and rules through customer portal' [4]"},"f28_full_sase_platform":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and genuinely well-evidenced via Colt's own confirmed, substantial network scale combined with a confirmed, long-standing platform partnership [4]"},"f30_zero_trust_network_access":{"source_url":"https://colt.net/resources/insights/colt-technology-services-brings-together-sd-wan-and-sse-features-in-new-integrated-full-sase-solution","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a named product - Colt SD WAN Remote Access, 'based on Versa Secure Access (VSA)' [2]"},"f31_secure_web_gateway":{"source_url":"https://colt.net/resources/insights/colt-technology-services-brings-together-sd-wan-and-sse-features-in-new-integrated-full-sase-solution","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Versa Secure Web Gateway, a secure web access solution that offers organisations protection from malware and threats' [2]"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:a584a69d43415d71a6eb57d0","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"partial","energy_utilities":"not_confirmed","government_public_sector":"partial","education":"yes","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_hq","curated_uk_basis":"UK headquartered (London). UK contracting entity with owned UK metro fibre and UK support.","sector_review_queue":[{"sector":"financial_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via real, verbatim customer testimony | Confirmed real customer testimony directly describing Colt as 'an industry leader that provides a wide range of technology product portfolios and solutions which can best fit the financial customer's unique requirements' | PCI DSS not confirmed (Table 13); the confirmed August 2025 security incident is a specific, worth-flagging consideration for this sector particularly | A real, verbatim, independently-hosted (Gartner Peer Insights) customer review specifically naming financial-sector fit | N/A | The confirmed PCI DSS gap and the confirmed security incident are both specific, worth-flagging considerations for this sector specifically, given its typical compliance sensitivity | A real, specific, sector-relevant customer testimony exists, tempered directly by the confirmed compliance gaps and the confirmed security incident - Netify recommends financial-services buyers specifically raise both points directly with Colt.","named_evidence":"A real, verbatim, independently-hosted (Gartner Peer Insights) customer review specifically naming financial-sector fit","evidence_source_ids":["evidence:colt:7"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"financial_services":true},"reviewed_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.colt.net/customer-stories/byblos-bank-europe","https://www.colt.net/customer-stories/leading-global-investment-bank","https://docs.colt.net/legal/terms-and-conditions","https://docs.colt.net/legal/colt-group-of-companies","https://find-and-update.company-information.service.gov.uk/company/03232904"],"qualification":" Named Byblos Bank Europe case documents Colt SD-WAN at Brussels, London and Paris with Zscaler access services. Establishes financial-services deployment and London delivery; not nationwide or Irish access availability. Separate anonymous investment bank evidence is qualified and does not replace the named case. UK review update (supersedes earlier UK-region qualification): The named UK group entity operates the website; the trading-company list separately identifies Colt Technology Services (02452736) in England and Wales. The group entity is not assumed to sign each service contract. The Byblos Bank Europe case includes London SD-WAN delivery. Actual trading entity, each site and Irish coverage require order-specific confirmation.","sectors":{"financial_services":"yes"},"regions":{"uk_ireland":"yes"}}},"uk_evidence":{"entity":{"status":"evidenced","name":null,"source_urls":["https://www.colt.net/customer-stories/byblos-bank-europe","https://www.colt.net/customer-stories/leading-global-investment-bank","https://docs.colt.net/legal/terms-and-conditions","https://docs.colt.net/legal/colt-group-of-companies","https://find-and-update.company-information.service.gov.uk/company/03232904"],"checked_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","qualification":"Colt Technology Services Group Limited, company 03232904, is registered at Colt House, 20 Great Eastern Street, London. Colt publishes a London SD-WAN deployment."},"regional_delivery":{"status":"yes","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":17,"research_metrics":{"supported":16,"partial":1,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":23,"total":40,"reviewed":17,"completeness_percent":43,"completeness":0.425},"proven_evidence_count":16,"response_panel":null,"best_for":"Financial services; UK and Ireland; Large global enterprise; managed","best_for_fields":{"sectors_yes":["Financial services"],"sectors_partial":[],"regions":["UK and Ireland"],"size":["Large global enterprise"],"service_model":"managed","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"uk_entity","label":"UK contracting entity","source_urls":["https://www.colt.net/customer-stories/byblos-bank-europe","https://www.colt.net/customer-stories/leading-global-investment-bank","https://docs.colt.net/legal/terms-and-conditions","https://docs.colt.net/legal/colt-group-of-companies","https://find-and-update.company-information.service.gov.uk/company/03232904"],"reviewed_at":"2026-09-30T19:56:00Z","qualification":"Colt Technology Services Group Limited, company 03232904, is registered at Colt House, 20 Great Eastern Street, London. Colt publishes a London SD-WAN deployment."}},{"slug":"hpe-aruba","name":"HPE Aruba EdgeConnect","website":"https://www.hpe.com/us/en/aruba-edgeconnect-sd-wan.html","category":"technology vendor","product_focus":"Cloud Intelligence, EdgeConnect Orchestrator, First-Packet iQ, HPE Aruba Networking Central","cost_model":"Quote-based subscription/appliance/support; MSP-managed options available through partners/providers.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"not_confirmed","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"partial","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"not_primary","manufacturing":"yes","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_primary","professional_services":"yes","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/hpe-aruba-edgeconnect/","shortlist_summary":"HPE Aruba Networking’s SASE platform is a product of acquisition and integration rather than a single, from-scratch build. The SD-WAN engine, EdgeConnect, was built by Silver Peak Systems (founded 2004, first SD-WAN product shipped 2015) and joined HPE’s Aruba business in a $925 million acquisition completed September 2020.","key_differentiators":["EdgeConnect SD-WAN (acquired with Silver Peak) is positioned as the foundation for single-vendor SASE alongside Aruba SSE.","Strong heritage in WAN optimisation and packet-level performance engineering.","Tight integration with the broader Aruba campus and branch portfolio (LAN, Wi-Fi, NAC) for buyers consolidating end-to-end networking."],"best_fit_for":["Enterprises already running Aruba LAN/Wi-Fi who want WAN and SASE under the same operational tooling.","Buyers prioritising application performance and WAN optimisation in addition to standard SD-WAN routing.","Distributed organisations with branch-heavy footprints where Aruba campus presence is already established."],"watch_outs":["Aruba SSE is newer than the SSE leaders (Zscaler, Netskope); buyers wanting best-of-breed SASE should evaluate the SSE capability set carefully.","Managed delivery is partner-led rather than from HPE directly.","Private global backbone is not vendor-owned; SASE transport uses public cloud gateways."],"evidence_coverage_pct":0.425,"last_verified":"2026-09-01","evidence_source_count":46,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://docs.axissecurity.com/docs/tenants-management","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Managing multiple tenants can be useful when you are an MSSP and you manage several separate clients, or otherwise your company has several organizational units it prefers to keep separate. Tenant isolation and cross-tenant admin roles are documented for HPE Networking SSE, and the same documentation page states this is a limited release feature. No evidence of branded or white-label portals, custom logos or reseller templates was found on the documentation or partner programme pages reviewed, so graded partial rather than yes."},"f18_cloud_on_ramp":{"source_url":"https://hpe.com/us/en/aruba-edgeconnect-sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed for specific named hyperscalers [15] [19]"},"f19_public_cloud_gateways":{"source_url":"https://docs.axissecurity.com/docs/pops","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The HPE Aruba Networking SSE service utilizes both onramps and Points of Presence (PoPs) to enhance connectivity. The PoPs are documented as part of the HPE Aruba Networking SSE service itself, which is HPE's own security service edge infrastructure following the Axis Security acquisition, so this is the vendor's own service infrastructure rather than a resold third party gateway. Several PoP locations carry hyperscaler region names such as Northern Virginia, Oregon and Iowa, which suggests hosting inside public cloud regions, but the service and enforcement layer are HPE's."},"f23_multi_cloud_transit_fabric":{"source_url":"https://hpe.com/us/en/aruba-edgeconnect-sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed for specific named hyperscalers [15] [19]"},"f24_flexible_edge_form_factors":{"source_url":"https://buy.hpe.com/in/en/cloud/private-hybrid-cloud/hpe-aruba-networking-connectivity-saas/hpe-aruba-networking-connectivity/hpe-aruba-networking-edgeconnect-10106-1g-2x-sfp-2x-combo-1g-2x-rj45-poe-sd%E2%80%91wan-gateway/p/s0e22a","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native - physical appliances confirmed at a specific model level (e.g. the EC-10106 gateway, described as 'ideally suited for small branch and remote office environments'), plus virtual appliance deployment [21]"},"f27_integrated_next_generation_firewall":{"source_url":"https://hpe.com/us/en/networking/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, via the SSE platform's confirmed capability set alongside the EdgeConnect-embedded NGFW described above [14]"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:40513952c953a0dcc2253c38","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"not_confirmed","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). EdgeConnect delivered in the UK via HPE partners and MSPs.","sector_review_queue":[{"sector":"education","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Consistent network experience and centralised management relevant to distributed campus/student environments | Not assessed for sector-specific frameworks | A named reference describing a centrally-managed, high-performance network delivering 'a home-from-home experience for Oxford students'; Edmonton Public Library's digital-space modernisation is a related, if not strictly higher-education, public-education-adjacent reference | UK (Oxford) and Canada (Edmonton) - genuine international sector evidence | Both references are qualitative rather than quantified with a specific metric | Two independently named, international, credible references - real sector evidence, though without the specific quantified metrics found for some other sectors in this profile (e.g. Manufacturing's 99%+ uptime, Government's FedRAMP date).","named_evidence":"A named reference describing a centrally-managed, high-performance network delivering 'a home-from-home experience for Oxford students'; Edmonton Public Library's digital-space modernisation is a related, if not strictly higher-education, public-education-adjacent reference","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:30"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | SD-WAN reliability directly relevant to distributed manufacturing operations | Not assessed for sector-specific frameworks | IMMI (99%+ uptime ratio reported across all branches using EdgeConnect as a turn-key, out-of-the-box solution) | N/A | Single case study, though genuinely specific and quantified | A specific, quantified (99%+ uptime), named manufacturing customer reference - genuinely credible, concrete sector evidence.","named_evidence":"IMMI (99%+ uptime ratio reported across all branches using EdgeConnect as a turn-key, out-of-the-box solution)","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:30"]},{"sector":"healthcare","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"requires_confirmation","qualification":"Good fit, evidenced, though without a formal HIPAA attestation confirmed | SD-WAN reliability and DEM plausibly relevant to telehealth/clinical-application performance specifically | HIPAA not confirmed as a formal attestation | Universal Health Services (telehealth, assured network performance and reliability); Hato Hone St John (New Zealand ambulance/healthcare service, digital transformation of healthcare operations); USANA Health Sciences (global efficiency, application performance and savings from Unified SASE, per a named reseller case study) | Named customers in both US and New Zealand markets | No formal HIPAA attestation confirmed despite the named healthcare customer evidence | Two independently named healthcare-sector customers give real, credible sector evidence, though Netify should not assume formal HIPAA compliance without direct confirmation, given this wasn't found in this research pass.","named_evidence":"Universal Health Services (telehealth, assured network performance and reliability); Hato Hone St John (New Zealand ambulance/healthcare service, digital transformation of healthcare operations); USANA Health Sciences (global efficiency, application performance and savings from Unified SASE, per a named reseller case study)","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:14","evidence:hpe-aruba-edgeconnect:22","evidence:hpe-aruba-edgeconnect:29"]},{"sector":"hospitality_leisure","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Consistent network experience and branch/site connectivity relevant to distributed hospitality operations | Not assessed | A named hotel reference: 'Network excellence enables hotel to streamline operational efficiency and drive service innovation' | N/A | Anonymised (described as 'a hotel' without further naming detail in the source reviewed) | A real, if not fully named, hospitality-sector reference - worth a direct follow-up to identify the specific hotel/hotel group if a fully named case study is needed.","named_evidence":"A named hotel reference: 'Network excellence enables hotel to streamline operational efficiency and drive service innovation'","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:30"]},{"sector":"financial_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"requires_confirmation","qualification":"Conditional - one named customer reference exists, but no PCI-DSS or DORA-specific certification was confirmed for the SASE/SSE platform specifically | SD-WAN cost-reduction and application-performance capabilities plausibly relevant | PCI confirmed for Central's cloud infrastructure specifically (Table 13); DORA not confirmed | First Bank (SASE-based SD-WAN, cost reduction, application performance, cloud-smart technology strategy) | N/A | Compliance evidence is narrower than the named customer evidence would suggest is needed for full sector confidence | A real, named financial-services customer exists, though Netify should be precise that platform-wide PCI/DORA-specific certification for the SASE/SSE components specifically wasn't independently confirmed.","named_evidence":"First Bank (SASE-based SD-WAN, cost reduction, application performance, cloud-smart technology strategy)","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:14"]},{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced, and genuinely the platform's best-documented individual case study | The confirmed best-of-breed SD-WAN-plus-third-party-SSE architecture (Table 6) directly relevant to this sector's typical existing security-vendor investments | Not assessed for sector-specific frameworks | Cushman & Wakefield (global commercial real estate services firm) - 'boost global network performance and security with Aruba EdgeConnect SD-WAN edge platform and Zscaler cloud-delivered SASE' | Global deployment implied by the confirmed 'global network performance' framing | Single case study, though it directly demonstrates the platform's most architecturally distinctive capability | Genuinely the most strategically important case study in this entire profile - a real, named, global professional-services customer using the exact best-of-breed (EdgeConnect plus Zscaler) architecture that is this platform's clearest differentiator.","named_evidence":"Cushman & Wakefield (global commercial real estate services firm) - 'boost global network performance and security with Aruba EdgeConnect SD-WAN edge platform and Zscaler cloud-delivered SASE'","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:30","evidence:hpe-aruba-edgeconnect:36"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"financial_services":false,"healthcare":false,"professional_services":false,"hospitality_leisure":false,"manufacturing":false},"reviewed_at":"2026-09-30T15:45:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://hpe.com/us/en/networking/sase.html","https://www.hpe.com/psnow/doc/a50014000enw","https://hpe.com/tw/en/aruba-edgeconnect-sd-wan.html","https://consiliant.com/usana-hpe-aruba-networking-sase-case-study/","https://www.hpe.com/uk/en/aruba-edgeconnect-sd-wan.html.html","https://arubanetworks.com/resources/case-studies","https://hpe.com/psnow/doc/a00108908enw","https://buy.hpe.com/uk/en/p/JZ872A","https://www.hpe.com/psnow/downloadDoc/Finding%20a%20niche%20in%20a%20crowded%20hotel%20sector%20-%20Premier%20Inn%20MENA-a50011126enw.pdf?deepLink=&form=false&hf=regular&id=a50011126enw&isFutureVersion=true&originalObjectName=&prelaunchSection=&preview=false&print=&r=&section=&softrollSection=&ver=1","https://packetpushers.net/podcasts/tech-bytes/tb-global-manufacturer-taps-aruba-edgeconnect-for-sd-wan-wan-optimization/"],"qualification":"Recovered HPE First Bank case documents EdgeConnect SD-WAN at a US bank; no UK regulatory suitability inference. HPE EdgeConnect page explicitly identifies Universal Health Services using SD-WAN for telehealth. USANA reseller story is not evidence of healthcare delivery. HPE EdgeConnect page identifies Cushman and Wakefield application acceleration and MPLS replacement; professional-services sector evidence. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation. HPE UK product material identifies EdgeConnect and Barrett Steel customer deployment; UK store sells EdgeConnect gateways. UK product availability is evidenced; partner, site access circuits and Irish delivery must be confirmed. Region partial, not a managed-service or buyer-fit guarantee. Replacement named evidence: Premier Inn MENA documents EdgeConnect SD-WAN across 11 Middle East hotels. This does not validate the original anonymous hotel quote or prove a UK hotel deployment. Customer interview with IMMI VP of Enterprise Technology documents deployed EdgeConnect linking US data centres and a Chinese plant. HPE-sponsored primary customer account, not independent testing or UK delivery confirmation.","sectors":{"financial_services":"yes","healthcare":"yes","professional_services":"yes","hospitality_leisure":"yes","manufacturing":"yes"},"regions":{"uk_ireland":"partial"}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"partial","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":18,"research_metrics":{"supported":16,"partial":1,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":23,"total":40,"reviewed":17,"completeness_percent":43,"completeness":0.425},"proven_evidence_count":16,"response_panel":null,"best_for":"Healthcare; Financial services; Manufacturing; Professional services; Hospitality and leisure; platform","best_for_fields":{"sectors_yes":["Healthcare","Financial services","Manufacturing","Professional services","Hospitality and leisure"],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"vodafone-business","name":"Vodafone Business","website":"https://vb2b.vodafone.com/business/products/fixed-connectivity/sd-wan","category":"managed service provider / carrier network provider","product_focus":"Fortinet-based Secure Networking, Vodafone Business Managed Network Services, Vodafone Business Network as a Service (NaaS), Vodafone Business SASE","cost_model":"Quote-based managed service; carrier access, SD-WAN platform, security services and country coverage determine costs.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_entity","uk_basis":"Vodafone Limited, company 01471587, identifies its registered office in Newbury; the Optos SD-WAN case includes UK operations.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"partner_integrated","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"partner_integrated","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"yes"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"yes","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"yes","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"not_confirmed","manufacturing":"not_primary","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"yes","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":212,"sla_availability_pct":99.99,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"yes","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/vodafone/","shortlist_summary":"Vodafone Group is a vast, multinational telecommunications operator - for the financial year ended 31 March 2024, Vodafone Group reported total revenue of €36.7 billion, with Vodafone Business specifically operating across all of Vodafone’s markets, addressing a claimed €160 billion addressable market, serving 5 million customers, managing 198 million IoT connections (FY24 figure), and contributing 24% of Group service revenue. Against that scale, the managed SD-WAN and SASE proposition examined in this profile is one product line within a much larger enterprise business.","key_differentiators":["Strong UK and European market presence with NaaS positioning and integrated mobile/fixed access.","VeloCloud-based managed SD-WAN in the UK with broader Vodafone international footprint.","Tight integration with Vodafone mobile services for buyers prioritising cellular and 5G access."],"best_fit_for":["UK and European enterprises wanting carrier-led SD-WAN with strong mobile and 5G integration.","Buyers consolidating fixed and mobile access alongside SD-WAN platform delivery.","Organisations attracted to the NaaS consumption model."],"watch_outs":["Underlying platform varies by region (VeloCloud in UK, others elsewhere); ensure consistency for multinational deployment.","Security and SASE capabilities are largely partner-integrated.","Commercial structure bundles access, mobile and platform; line-item costing requires explicit RFP."],"evidence_coverage_pct":0.425,"last_verified":"2026-09-01","evidence_source_count":42,"capability_evidence":{"f07_lifecycle_management":{"source_url":"https://www.vodafone.com/news/newsroom/technology/vodafone-business-and-fortinet-expand-global-partnership-to-secure-hybrid-work","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Vodafone Business Secure Firewall with Fortinet delivers a comprehensive managed security service to setup, operate, run, manage and maintain customer firewalls in a highly secure manner. Graded partial, and the gap matters. What is documented is estate scale and ongoing maintenance: the datasheet claims 45,000 managed CPEs, includes Release Management and Vulnerability Management in the managed service list, and states Zero-touch provisioning reduces engineer time on site. Release and Vulnerability Management reasonably imply firmware upgrades and patching in service. What I could not evidence anywhere is the harder half of the definition: hardware replacement or RMA, renewals, and end-of-life planning. None of those terms appear in the datasheet or on any product page reviewed. A buyer should treat hardware refresh and EoL as an open contractual question rather than assume it is included."},"f17_cellular_and_5g_support":{"source_url":"https://d3bql97l1ytoxn.cloudfront.net/app_resources/401786/documentation/1435542_1720420681871_en-US.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Replace expensive private links with low-cost internet/5G Graded partial rather than yes because the evidence establishes only the transport half of the definition. The datasheet positions 5G as a substitute for private circuits and lists 4/5G among access options, so cellular as primary or failover transport is evidenced. I found no published detail on integrated versus external modems, SIM management, or signal monitoring. This is a case where prior knowledge would be tempting, since Vodafone is a mobile network operator and self-evidently manages SIMs at scale, but no page I fetched in this task documents SIM management as part of the SD-WAN service, so I have not graded it."},"f18_cloud_on_ramp":{"source_url":"https://vodafone.co.uk/business/sdn/secure-access-service-edge","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'secure overlay connectivity between customer sites and extending to cloud service provider environments e.g. Microsoft Azure, Amazon Web Services' [2]"},"f19_public_cloud_gateways":{"source_url":"https://www.vodafone.co.uk/newscentre/press-release/zscaler-smes-cloud/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Vodafone Business Secure Gateway Access is underpinned by the Zscaler Zero Trust Exchange™ Platform. This is the distinction the definition is built around, and it falls clearly on the partner side. The cloud enforcement points behind Vodafone Business Secure Access Gateway ZIA and ZPA are Zscaler's, and the 2025 Fortinet announcement adds FortiSASE, described by Fortinet as FortiSASE cloud-based security solutions. Both are another company's PoP estate that Vodafone resells and manages. Vodafone Cloud Connect was also checked and offers connectivity to AWS, Google Cloud, IBM, Microsoft Azure and Oracle, which the definition expressly excludes as evidence. No Vodafone-operated shared SASE gateway estate was found."},"f21_private_global_backbone":{"source_url":"https://www.vodafone.co.uk/business/sdn/secure-access-service-edge","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our range of access networks is available in 192 countries using our enhanced internet backbone, reducing the number of hops and providing resilience. Graded yes because the possessive is doing real work: our enhanced internet backbone is Vodafone-owned or controlled infrastructure, and the stated scope is global rather than national, which clears the bar the definition sets against single-country networks. The datasheet corroborates with We cover underlay, overlay, local access and wider services within the solution to 192 countries. Confidence is held at medium for two reasons. First, Vodafone describes it as an internet backbone rather than a private MPLS core in the current material, so the predictable latency and loss characteristic is asserted only indirectly through reducing the number of hops. Second, the 2014 release makes clear the reach is a mix of directly operated and partner networks, so not every one of the 192 countries rides Vodafone-owned fibre. Between regions on Vodafone's own core, the capability holds."},"f23_multi_cloud_transit_fabric":{"source_url":"https://vodafone.co.uk/business/sdn/secure-access-service-edge","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'secure overlay connectivity between customer sites and extending to cloud service provider environments e.g. Microsoft Azure, Amazon Web Services' [2]"},"f26_sla_backed_service_fabric":{"source_url":"https://d3bql97l1ytoxn.cloudfront.net/app_resources/401786/documentation/1435542_1720420681871_en-US.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our managed and co-managed services are backed up by the broadest range of SLAs in line with our vision for an excellent customer experience Graded yes on the existence of contractual commitments, which is what this field measures, and it is distinct from the sla_availability_pct field where the published number is much weaker. The datasheet also states Bundle our underlay for E2E SLAs, which is a meaningful claim: because Vodafone supplies the access circuits as well as the overlay, it can commit end to end rather than only on the overlay. The 2025 Fortinet announcement independently confirms various service-level guarantees as a purchasable management option. Change handling is covered by Change Management in the managed service list. Latency, jitter and loss targets were not found published."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.vodafone.com/news/newsroom/technology/vodafone-business-and-fortinet-expand-global-partnership-to-secure-hybrid-work","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Vodafone Business Secure Firewall with Fortinet delivers a comprehensive managed security service to setup, operate, run, manage and maintain customer firewalls in a highly secure manner. Fortinet technology, operated by Vodafone, so partner_integrated per the definition rather than yes. Fortinet's own release confirms the services integrate Fortinet's industry-leading software-defined wide area network (SD-WAN) and FortiSASE cloud-based security solutions. The datasheet's Inbuilt encryption and firewalls protects data and branches shows the firewall is integrated into the SD-WAN edge rather than sold as a separate appliance, which satisfies the integration half of the test, but the technology is not Vodafone's. I did not find a Vodafone page enumerating the individual NGFW functions (application control, IPS, malware inspection, URL filtering) by name, so that breakdown rests on the Fortinet product identification rather than on a Vodafone feature list."},"f30_zero_trust_network_access":{"source_url":"https://vodafone.co.uk/business/sdn/secure-access-service-edge","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - Zscaler is described specifically as delivering 'private application connectivity through a zero-trust architecture' [2]"},"f31_secure_web_gateway":{"source_url":"https://vodafone.co.uk/business/sdn/secure-access-service-edge","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as part of the Zscaler-based SASE partnership [2] Capability specifics depend on which underlying platform (Zscaler or Fortinet) is proposed"},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://vodafone.com/news/newsroom/technology/vodafone-business-and-fortinet-expand-global-partnership-to-secure-hybrid-work","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'a single view across network health visibility, performance dashboards, and customisable reports' [5] A distinctly-branded DEM product name wasn't itemised"},"f40_managed_service_assurance":{"source_url":"https://d3bql97l1ytoxn.cloudfront.net/app_resources/401786/documentation/1435542_1720420681871_en-US.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our global service desk and regional operations centres run 24x7x365 The network operations half is well evidenced by the datasheet quote plus 24/7 Incidents Support and Proactive incidents in the managed service list. The security operations half is evidenced from the Tier 2 G-Cloud filing by VODAFONE LIMITED, whose support levels field reads 24 x7 x 365 Security Operations Centre, although note that filing covers Managed SOC and SIEM rather than SD-WAN. Incident ownership through to root cause is supported by Problem Management appearing as a distinct line item alongside incident handling, which is the ITIL construct for root cause work, and change governance by Change Management. Confidence is medium rather than high because the phrase root cause analysis does not itself appear on any page fetched, and structured service reviews are implied by Service Management in the list rather than described."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:cf05ef06bacc5b079425816a","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_hq","curated_uk_basis":"UK headquartered (Vodafone, Newbury). UK contracting entity with UK support desks and fixed-mobile UK assets.","sector_review_queue":[],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{},"reviewed_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Codex primary-source review","source_urls":["https://www.vodafone.co.uk/privacy","https://www.vodafone.co.uk/business/case-studies/sd-wan-keeps-optos-connected-worldwide"],"qualification":"UK review update (supersedes earlier UK-region qualification): Vodafone Limited UK entity and UK SD-WAN delivery evidence are confirmed. Group branding does not determine the contracting entity for an individual quote. Irish coverage, address availability and current supplier fit require confirmation.","sectors":{},"regions":{"uk_ireland":"yes"}}},"uk_evidence":{"entity":{"status":"evidenced","name":null,"source_urls":["https://www.vodafone.co.uk/privacy","https://www.vodafone.co.uk/business/case-studies/sd-wan-keeps-optos-connected-worldwide"],"checked_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","qualification":"Vodafone Limited, company 01471587, identifies its registered office in Newbury; the Optos SD-WAN case includes UK operations."},"regional_delivery":{"status":"yes","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":19,"research_metrics":{"supported":11,"partial":3,"partner_delivered":3,"managed_service_dependent":0,"not_primary":0,"unconfirmed":23,"total":40,"reviewed":17,"completeness_percent":43,"completeness":0.425},"proven_evidence_count":11,"response_panel":null,"best_for":"Sector evidence not yet reviewed; UK and Ireland; Large global enterprise; Mid-market; managed","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":["UK and Ireland"],"size":["Large global enterprise","Mid-market"],"service_model":"managed","signoff":""},"editorial":null,"uk_status":{"status":"uk_entity","label":"UK contracting entity","source_urls":["https://www.vodafone.co.uk/privacy","https://www.vodafone.co.uk/business/case-studies/sd-wan-keeps-optos-connected-worldwide"],"reviewed_at":"2026-09-30T19:56:00Z","qualification":"Vodafone Limited, company 01471587, identifies its registered office in Newbury; the Optos SD-WAN case includes UK operations."}},{"slug":"ntt","name":"NTT DATA","website":"https://www.nttglobal.net/services/sd-wan","category":"carrier network provider","product_focus":"Managed Campus Networks with Prisma SASE, Managed Internet Connectivity, Managed IoT and Network as a Service (NaaS), Managed Network Security","cost_model":"Quote-based managed service; global design/delivery/support, SD-WAN vendor and security stack determine cost.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"partial","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"yes"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"yes","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":75,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/ntt-data/","shortlist_summary":"NTT DATA is a massive, globally-established IT services and network provider, founded in Japan in 1988 as a spinoff of Nippon Telegraph and Telephone (NTT), and now operating in more than 70 countries with approximately 190,000 employees. A significant, current corporate event is worth understanding first: on 8 May 2025, NTT, Inc. 75% acceptance, and following shareholder approval on 29 August 2025, NTT DATA Group was formally delisted from the Tokyo Stock Exchange on 26 September 2025, becoming a wholly-owned subsidiary of NTT, Inc.","key_differentiators":["24x7 managed SD-WAN delivery via global operations centres with strong portal visibility.","Managed SASE partnership with Palo Alto Networks (Prisma SASE) for buyers wanting that platform under managed service.","Strong global delivery footprint including APAC, EMEA and Americas."],"best_fit_for":["Multinational enterprises wanting truly global managed delivery with consistent operations across regions.","Buyers wanting Prisma SASE consumed as a fully managed service.","Organisations prioritising managed service maturity and global SOC/NOC depth."],"watch_outs":["Platform fit depends on which vendor is being proposed (Palo Alto, Zscaler, others); evaluate platform independently.","Commercial complexity is meaningful at global scale; ensure scope and RACI are explicit.","DIY/self-managed model is not the primary positioning."],"evidence_coverage_pct":0.4,"last_verified":"2026-09-01","evidence_source_count":32,"capability_evidence":{"f03_co_managed_service":{"source_url":"https://www.nttglobal.net/services/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Customers have the option to self-manage via a web portal or NTT can offer managed services. The published wording describes an either/or choice (customer self-manages via portal, OR NTT manages) rather than an explicitly shared-responsibility co-managed model. The NTT DATA/Cisco managed SASE brochure describes people-augmented, technology-augmented and hybrid operating models, which implies shared operation, but no page reviewed states which policy or change rights the customer retains. Graded partial rather than yes for that reason."},"f05_professional_services_and_migration_support":{"source_url":"https://dam.nttdata.com/api/public/content/GLOBAL-MNS-brochure","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'Move from outdated, end-of-life infrastructure to a modern, scalable network - with a tailored roadmap built around your current environment and future needs'"},"f07_lifecycle_management":{"source_url":"https://www.nttglobal.net/services/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"NTT's Infrastructure Management Services provide full life cycle: architecture, design, implementation, upgrades, and full proactive 24×7 management of a customer's global network and security infrastructure. Quote uses a multiplication sign in 24×7 as printed on the page. Upgrades and full lifecycle management are stated as part of the service. The NTT DATA/Cisco SASE brochure adds decommissioning and refresh to the same lifecycle. Hardware replacement and end-of-life planning are not named in those exact terms."},"f09_encrypted_overlay_fabric":{"source_url":"https://dam.nttdata.com/api/public/content/Guide-NTT-DATA-and-Cisco-together-we-make-you-unbeatable-perspective-compressed?v=3f355dc9","reviewed_at":"2026-10-01","review_due":"2026-12-30T00:00:00Z","qualification":"NTT DATA and Cisco describe an encrypted SD-WAN customer deployment and their managed SD-WAN services. NTT DATA documents an encrypted SD-WAN deployment with Cisco and managed services using Viptela/Meraki. Evidence establishes this delivery option, not every NTT platform or UK site availability."},"f13_qos_and_traffic_shaping":{"source_url":"https://services.global.ntt/en-us","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - SD-WAN networks 'can use additional resources to adapt to changes in demand and prioritize business-critical traffic'"},"f17_cellular_and_5g_support":{"source_url":"https://www.nttglobal.net/services/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Unrivaled performance and connectivity options: MPLS, Ethernet, Local Internet, Broadband, LTE/4G in over 190 countries. LTE/4G is named as a supported transport option alongside MPLS, Ethernet, internet and broadband. 5G is not named on the SD-WAN service page, the platform page or the security page, and no page reviewed mentions SIM management or signal monitoring. NTT DATA does market a separate Private 5G service, but that is a private cellular network offering rather than evidence of 5G WAN transport in the SD-WAN service, so it is not used to lift this grade."},"f19_public_cloud_gateways":{"source_url":"https://www.nttglobal.net/services/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Secure Web Gateways located at 75+ globally distributed Local Cloud Centers (LCCs) closer to client locations to protect customers from Internet threats. The Local Cloud Centers are NTT's own distributed infrastructure delivering secure web gateway enforcement as a cloud service, which meets the definition of vendor-operated shared gateways. Separately the page describes optimised connectivity to AWS, Azure and Oracle Cloud, but per the definition that cloud onramp capability is not counted as evidence here. The security functions enforced at these gateways may use partner technology, which is graded separately under sse_layer_ownership."},"f21_private_global_backbone":{"source_url":"https://www.gin.ntt.net/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our dual-stack Tier-1 Global IP Network spans the Americas, Asia, Europe and Oceania on a single autonomous system number (AS2914). NTT owns and operates a Tier 1 global IP backbone under AS2914 spanning four continents, and publishes contractual inter-region latency, loss and jitter figures for it, which is the strongest form of evidence for this field. Caveat: this is the Global IP Network transit product; none of the SD-WAN or SASE pages reviewed states that SD-WAN inter-region traffic is carried on AS2914 by default rather than over the public internet."},"f26_sla_backed_service_fabric":{"source_url":"https://www.gin.ntt.net/support-center/service-level-agreements-slas/our-global-ip-network/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The Global IP Network Backbone will be available to the customer free of Network Outages 100% of the time. NTT publishes a contractual SLA for its Global IP Network covering availability, region-by-region latency, packet loss (average monthly not exceeding 0.1%) and jitter. Confidence is medium because this SLA document covers the IP backbone product; no published SLA percentage or response and change-handling commitment specific to the managed SD-WAN or managed SASE service was located on the pages reviewed."},"f27_integrated_next_generation_firewall":{"source_url":"https://nttdata.com/global/en/services/enterprise-networking/managed-network-services","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, via the confirmed Managed Network Security product line and the confirmed underlying platform partnerships"},"f30_zero_trust_network_access":{"source_url":"https://services.global.ntt/en-us/campaigns/managed-campus-networks-with-prisma-sase","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'zero trust, identity-level security to strengthen the protection of enterprise digital resources and IT applications, no matter where employees access them'"},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://nttdata.com/global/en/insights/reports/ntt-data-is-a-leader-in-managed-network-services","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'Full-stack observability that gives you real-time visibility and analytics for faster resolution and enhanced end-user experiences' A distinctly-branded DEM product name wasn't itemised"},"f40_managed_service_assurance":{"source_url":"https://www.nttglobal.net/services/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"NTT's SD-WAN Services are managed by world-class Global Operations Centers that perform 24×7 predictive modeling, monitoring and management Quote uses a multiplication sign in 24×7 as printed on the page. NTT states 24x7 proactive monitoring and management from Global Operations Centers acting as a single point of contact, and the NTT DATA/Cisco brochure states that its ISO-certified operations and ITIL-aligned processes ensure service excellence in all areas, which implies formal change governance. Confidence is medium because no page reviewed explicitly commits to owning incidents through to root cause analysis or to structured periodic service reviews; NTT DATA's SPEKTRA platform page references AI-based root cause analysis as a platform feature but that wording was not independently verified as a contractual service commitment."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:f32cd79b051e6620156e54b6","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_entity","curated_uk_basis":"UK contracting entity (NTT DATA UK) of a Japanese parent, with UK delivery and operations.","sector_review_queue":[{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, named customer reference with IoT-specific detail | Confirmed IoT gateway deployment connecting 'sensors and water metres to the regional LoRaWAN network', via the named Cisco partnership specifically | Not assessed for sector-specific frameworks | CILE (Compagnie Intercommunale Liégeoise des Eaux) - named, real Belgian water utility, with specific, named technical partnership detail (Cisco, LoRaWAN) | Belgium, confirmed directly | This reference centres on IoT/sensor connectivity specifically rather than core SD-WAN/SASE; direct sector-fit evidence for the core service examined in this profile is more limited | A real, named, technically-specific customer reference exists for adjacent IoT/NaaS capability; direct evidence for the core SD-WAN/SASE service specifically in this sector is comparatively thinner.","named_evidence":"CILE (Compagnie Intercommunale Liégeoise des Eaux) - named, real Belgian water utility, with specific, named technical partnership detail (Cisco, LoRaWAN)","evidence_source_ids":[]},{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, named customer reference | Confirmed 'intelligent, software-defined network' enabling data access, collaboration, and secure remote work | Not assessed for sector-specific frameworks | Frucor Suntory - named, real beverage manufacturing company, brief but real customer reference | Not itemised by specific country/region | The confirmed reference is brief relative to the detailed Pick n Pay case study; specific quantified outcomes weren't itemised for this reference specifically | A real, named customer reference exists, though with less narrative and quantified detail than the confirmed Pick n Pay case study.","named_evidence":"Frucor Suntory - named, real beverage manufacturing company, brief but real customer reference","evidence_source_ids":[]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, named customer reference | Confirmed 'intelligent, software-defined network' enabling data access, collaboration, and secure remote work | Not assessed for sector-specific frameworks | Frucor Suntory - named, real beverage manufacturing company, brief but real customer reference | Not itemised by specific country/region | The confirmed reference is brief relative to the detailed Pick n Pay case study; specific quantified outcomes weren't itemised for this reference specifically | A real, named customer reference exists, though with less narrative and quantified detail than the confirmed Pick n Pay case study.","named_evidence":"Frucor Suntory - named, real beverage manufacturing company, brief but real customer reference","evidence_source_ids":[]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"retail_ecommerce":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://services.global.ntt/en-us/campaigns/infrastructure-services"],"qualification":"Recovered NTT Pick n Pay case: Fortinet managed SD-WAN across retail stores; South Africa, not proof of UK delivery. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"retail_ecommerce":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":20,"research_metrics":{"supported":12,"partial":3,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":24,"total":40,"reviewed":16,"completeness_percent":40,"completeness":0.4},"proven_evidence_count":12,"response_panel":null,"best_for":"Retail and e-commerce; Large global enterprise; managed","best_for_fields":{"sectors_yes":["Retail and e-commerce"],"sectors_partial":[],"regions":[],"size":["Large global enterprise"],"service_model":"managed","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"verizon-business","name":"Verizon Business","website":"https://www.verizon.com/business/resources/lp/secure-access-service-edge","category":"managed service provider / carrier network provider","product_focus":"RingCentral (voice/UC integration), Verizon Managed SD Branch, Verizon Managed SD WAN, Verizon SASE Management","cost_model":"Quote-based managed service; typically platform, access, security bundle, sites/users/bandwidth/term.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"partner_integrated","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"partner_integrated","f28_full_sase_platform":"partner_integrated","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"yes"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"partial","financial_services":"not_primary","retail_ecommerce":"not_confirmed","manufacturing":"partial","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/verizon/","shortlist_summary":"6 billion in revenue in 2023 (2025 consensus estimates are approximately $134-135 billion) and serving nearly all of the Fortune 500 - and its managed SD-WAN and SASE proposition sits within Verizon Business, itself organised into three named customer groups (Enterprise and Public Sector, Business Markets and Other, and Wholesale).","key_differentiators":["Global carrier-led managed SASE and SD-WAN with strong North American presence and international delivery.","Versa Networks partnership provides multi-tenant SD-WAN platform with security, routing and analytics under managed service.","Established reputation as a SASE managed services leader in industry analyst rankings."],"best_fit_for":["North American and multinational enterprises wanting carrier-led managed SD-WAN and SASE.","Buyers comfortable with Versa as the underlying platform via managed delivery.","Organisations prioritising service maturity and global delivery capability."],"watch_outs":["Platform is largely Versa-based; buyers wanting platform optionality should evaluate alternatives.","Commercial model is bespoke; cost transparency and change governance require careful contracting.","DIY/self-managed model is not the primary positioning."],"evidence_coverage_pct":0.4,"last_verified":"2026-09-01","evidence_source_count":37,"capability_evidence":{"f13_qos_and_traffic_shaping":{"source_url":"https://verizon.com/business/resources/lp/secure-access-service-edge/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'increase your overall performance through a combination of caching, application organization' and prioritisation mechanisms [18]"},"f17_cellular_and_5g_support":{"source_url":"https://www.verizon.com/business/products/networks/managed-network-services/managed-sd-branch/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Whether you have Verizon wireline or wireless access, SD Branch can support both. Graded partial rather than yes. Wireless access as a supported transport is stated plainly, and the same page describes a wireless backup option, which covers the failover half of the definition. However the words '5G', '4G' and 'LTE' do not appear in this context, and SIM management and signal monitoring were not found on any page reviewed (sources 3, 4, 8, 9, 21). Verizon is of course a mobile network operator, but that is prior knowledge and cannot be graded from; only what the pages state is reflected here."},"f18_cloud_on_ramp":{"source_url":"https://verizon.com/business/answers/what-is-cloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the specifically-named Virtual Network Services (VNS) platform and its VNS Application Edge capability [6]"},"f19_public_cloud_gateways":{"source_url":"https://www.verizon.com/business/en-gb/products/security/network-cloud-security/advanced-secure-access-service-edge/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Integrates network operation centers (NOCs) and security operation centers (SOCs) with our Managed SD WAN and Virtual Network Services (VNS), and supports Versa, Cisco cEdge and vEdge, Zscaler ZIA, Zscaler ZPA and Palo Alto Prisma Access. This is the pivotal judgement in the record. The cloud gateways that actually enforce security and deliver remote access in Verizon's SASE service are Zscaler Internet Access, Zscaler Private Access and Palo Alto Prisma Access, all of which run on those vendors' own global PoP estates, not Verizon's. Verizon's service guide carries a Zscaler product description (source 12) confirming it resells those subscriptions. Verizon operates substantial infrastructure of its own, but that is the MPLS and IP transport layer, not a Verizon-built cloud security edge, so the definition forces partner_integrated rather than yes. An identical vendor list was found on both the UK and US product pages, so this is not a regional arrangement."},"f21_private_global_backbone":{"source_url":"https://www.verizon.com/business/products/networks/connectivity/private-ip/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Private IP is a MultiProtocol Label Switching (MPLS) network that connects locations and clouds around the globe in 185+ countries. Comfortably meets the definition and is not a single-country case. Verizon operates a genuinely global MPLS backbone reaching 185+ countries, the Private IP page states 'Traffic is completely separated from the public internet to help keep it secure', and source 11 carries the ownership claim 'we own and operate one of the largest and most reliable networks on the planet'. Inter-region predictability is contractually underwritten by the Private IP SLA (source 7), which commits to jitter of '< 5 ms' PE to PE for EF class and a packet delivery ratio of '99.995%' for EF, exactly the sort of between-PoP commitment the definition contemplates."},"f26_sla_backed_service_fabric":{"source_url":"https://www.verizon.com/business/service_guide/reg/NaaS-SLA-2026JAN15-mk.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"This SLA only applies to Verizon managed NaaS components on a NaaS Order. Among the strongest evidence in this record because it rests on contractual documents rather than marketing pages. Three separate published SLAs were read. The NaaS SLA (source 6) commits to tiered site availability, to repair response of '3.5 hours (US)' or '4 hours (rest of world)' for managed devices, and to proactive incident notification 'within 15 minutes of opening such Priority 1 Trouble Ticket'. The Private IP SLA adds latency, jitter and packet delivery ratio standards. This is contractual rather than best-effort, covering uptime, response and incident handling together."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.verizon.com/business/resources/technology-partners/versa-integrated-solutions/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Intrusion detection and prevention services (IDS/IPS) The full NGFW feature set is present in the delivered service: the Versa partner page lists IDS/IPS alongside 'Antispam, antimalware and URL filtering' and DLP, and the SASE pages describe firewall as a service. But every one of those functions is another company's technology that Verizon bundles and manages, named on Verizon's own pages as Versa, Cisco cEdge and vEdge, Palo Alto Prisma Access and Zscaler, with the SASE landing page adding Netskope and Viptela. No evidence was found of a Verizon-authored firewall engine. Under the definition's explicit instruction, third-party firewall technology that the supplier resells or bundles grades partner_integrated, not yes."},"f30_zero_trust_network_access":{"source_url":"https://verizon.com/business/products/security/network-cloud-security/sase-management/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - Zscaler Private Access (ZPA) named directly [2]"},"f31_secure_web_gateway":{"source_url":"https://verizon.com/business/products/security/network-cloud-security/sase-management/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as part of the multi-platform SASE architecture [2] Capability specifics depend on which underlying platform is proposed"},"f32_casb_capability":{"source_url":"https://verizon.com/business/products/security/network-cloud-security/sase-management/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name as a core SASE architecture component described in Verizon's own SASE definition materials [2] Specific inline-versus-API-mode technical detail not itemised per platform"},"f40_managed_service_assurance":{"source_url":"https://www.verizon.com/business/resources/technology-partners/versa-integrated-solutions/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Support provided by Verizon's Network Operations Center (NOC) and Security Operations Center (SOC) teams Both a NOC and a SOC are Verizon's own and wrap the partner technology, which is the core of the definition. Proactive ownership is contractual rather than merely claimed: the NaaS SLA commits Verizon to open a trouble ticket for each Priority 1 incident and notify the customer within 15 minutes. The SOC services page adds 'Gain 24/7 access to monitoring, extensive global threat visibility and expert analysis', and SD Branch confirms '24/7/365 access to Managed SD Branch reporting'. Confidence is medium rather than high because two named elements of the definition, formal root cause analysis and structured periodic service reviews with change governance, were not found verbatim on any page reviewed."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:f524b565e57fd0343b667af0","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"yes","transport_logistics":"partial","professional_services":"partial","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"uk_entity","curated_uk_basis":"UK contracting entity (Verizon Business has UK operations), though US headquartered, with real UK and European delivery.","sector_review_queue":[{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real (if anonymised) case study | SD-WAN and network segmentation directly relevant to protecting sensitive manufacturing data and streamlining traffic | Not assessed for sector-specific frameworks | A real, detailed (anonymised) 'global manufacturer' case study confirming data protection and traffic streamlining | N/A | The case study is real and specific in its narrative but does not disclose the customer's name | Real, credible sector-fit evidence via a genuine case study, reinforced by Verizon's own dedicated manufacturing-sector SD-WAN use-case content.","named_evidence":"A real, detailed (anonymised) 'global manufacturer' case study confirming data protection and traffic streamlining","evidence_source_ids":["evidence:verizon:17","evidence:verizon:20"]},{"sector":"government_public_sector","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | Confirmed FedRAMP-authorized products, direct collaboration with Cisco during the authorization process, and confirmed government-traffic-specific network segmentation capability (Table 4) | FedRAMP confirmed at the specific, quantified case-study level (Table 13) | A real, detailed, quantified (anonymised) federal-agency case study: 20,000-plus users across 70 US locations | United States, per the confirmed case study | The confirmed case study describes a UC/collaboration deployment specifically, rather than confirmed blanket FedRAMP authorization for the core SD-WAN/SASE service | Genuinely the best-evidenced sector in this entire profile - a real, detailed, quantified case study with specific, named technology partners (Cisco) and a precise deployment scale.","named_evidence":"A real, detailed, quantified (anonymised) federal-agency case study: 20,000-plus users across 70 US locations","evidence_source_ids":["evidence:verizon:19"]},{"sector":"healthcare","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real (if anonymised) case study reference | Not assessed in specific technical detail for this sector beyond the confirmed SASE deployment reference | HIPAA not confirmed (Table 13) - a specific, worth-flagging gap for this sector specifically | A real, referenced (anonymised) 'large healthcare business' SASE deployment optimising security operations | N/A | The case study is referenced only briefly, without the same narrative depth as the manufacturing or federal examples | Real sector-fit evidence exists, though this specific case study reference is less detailed than the confirmed manufacturing and federal examples; the confirmed absence of a HIPAA attestation is a specific, worth-flagging gap for this sector.","named_evidence":"A real, referenced (anonymised) 'large healthcare business' SASE deployment optimising security operations","evidence_source_ids":["evidence:verizon:21"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"manufacturing":false,"healthcare":false,"government_public_sector":false},"reviewed_at":"2026-09-30T15:40:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://verizon.com/business/resources/customer-success-stories/federal-agency/","https://verizon.com/business/resources/articles/s/three-sd-wan-use-cases-for-enterprises/","https://verizon.com/business/resources/customer-success-stories/manufacturing-giant/","https://www.verizon.com/business/resources/articles/sase-helps-healthcare-business-privacy-concerns.pdf"],"qualification":"Verizon federal-agency page is secure cloud video collaboration for 20,000 users. The linked case is not SD-WAN/SASE evidence. Verizon manufacturing case explicitly describes SD-WAN design, rollout and traffic segmentation; manufacturer is unnamed. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation. Recovered primary anonymous healthcare SASE deployment: 200 sites, supplier managed. Does not establish UK/NHS delivery or a named customer.","sectors":{"government_public_sector":"not_confirmed","manufacturing":"partial","healthcare":"partial"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":21,"research_metrics":{"supported":11,"partial":1,"partner_delivered":4,"managed_service_dependent":0,"not_primary":0,"unconfirmed":24,"total":40,"reviewed":16,"completeness_percent":40,"completeness":0.4},"proven_evidence_count":11,"response_panel":null,"best_for":"Healthcare (partial evidence); Manufacturing (partial evidence); Large global enterprise; managed","best_for_fields":{"sectors_yes":[],"sectors_partial":["Healthcare","Manufacturing"],"regions":[],"size":["Large global enterprise"],"service_model":"managed","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"cradlepoint-ericsson","name":"Ericsson Cradlepoint","website":"https://cradlepoint.com","category":"technology vendor / carrier network provider","product_focus":"NetCloud Federal, NetCloud Manager, NetCloud Perimeter, NetCloud Private Networks","cost_model":"Quote-based NetCloud subscriptions + routers/adapters; public hardware pricing may exist through resellers.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"partner_integrated","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/ericsson-cradlepoint/","shortlist_summary":"1 billion. That makes this platform’s identity distinctive within this product category: it sits inside one of the world’s largest telecommunications equipment manufacturers rather than a standalone security company or a private-equity-backed challenger, and its architecture reflects that heritage directly - NetCloud SASE is built cellular-first, with confirmed, specific capabilities like traffic steering based on cellular attributes and 5G standalone network slicing for guaranteed bandwidth that have no real equivalent among fixed-line-oriented competitors.","key_differentiators":["Wireless-first branch architecture from Ericsson with deep 5G expertise; NetCloud provides cellular-centric SD-WAN management.","Strong story for organisations adopting 5G as a primary access medium rather than as a backup.","Network slicing and private 5G integration roadmap is more credible than competitors lacking cellular heritage."],"best_fit_for":["Distributed enterprises with strong cellular/5G access strategy (retail, logistics, transport, public sector).","Buyers consolidating wireless WAN with traditional fixed-line SD-WAN under one operational tool.","Organisations interested in private 5G integration with branch SD-WAN."],"watch_outs":["SASE story is partner-integrated rather than native; SSE capabilities require validation in RFP.","Cloud on-ramp: supported; Multi-cloud transit fabric: not confirmed. Confirm the cloud locations, connectivity pattern and transit design.","Best for cellular-led architectures; less strong as a primary fit for fixed-circuit-heavy estates."],"evidence_coverage_pct":0.375,"last_verified":"2026-09-01","evidence_source_count":38,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://cradlepoint.ericsson.com/about/how-to-buy","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Enterprise Wireless products are sold through our world-class global ecosystem of distributors, resellers, managed service providers, and integrators. Managed service providers are an explicit channel and the partner programme names a service provider category that builds managed offerings on the platform, which implies multi customer operation. However no page reviewed documents tenant isolation, delegated administration, branded portals or templates under the partner's own brand, so this is graded partial rather than yes. NetCloud Manager subaccount structure is referenced in the security page bullets but not in language firm enough to quote for white labelling."},"f05_professional_services_and_migration_support":{"source_url":"https://cradlepoint.ericsson.com/about/how-to-buy","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"These specialized partners have deep knowledge of our products and offer an array of high-value services. Design, integration and implementation services are attributed to the reseller and integrator channel rather than to an Ericsson Cradlepoint professional services organisation. The vendor supplies training and certification directly, but no discovery, pilot, staging, migration runbook or rollback offering was found on the pages reviewed, so the capability is graded as delivered through partners."},"f07_lifecycle_management":{"source_url":"https://cradlepoint.com/products/netcloud-service/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Your wireless edge routers and adapters, or endpoints, include a product warranty for the duration of your active NetCloud Essential or Advanced subscription. Hardware warranty runs for the life of the subscription and the same page states that NetCloud Manager continuously delivers real time cloud and device operating software updates to 5G and LTE endpoints, so firmware and software currency are part of the subscription. End of life planning and renewal management are implied by the subscription continuity wording but are not separately documented."},"f10_dynamic_path_selection":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the named cellular-attribute-based traffic steering capability [15]"},"f13_qos_and_traffic_shaping":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 5G standalone network slicing 'for guaranteed bandwidth' is a specific, named, technically distinctive QoS mechanism [15]"},"f17_cellular_and_5g_support":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"With benefits like traffic steering based on cellular attributes and network slicing for guaranteed bandwidth as networks evolve to 5G standalone, NetCloud SASE enables fast moving organizations to accelerate their transformation. This is the supplier's core competence. The data sheet additionally describes SD-WAN optimising traffic across wired, 5G and LTE, satellite, Wi-Fi as WAN, private APNs and 5G standalone network slices, and the endpoint range is built around integrated cellular modems. Traffic steering on cellular attributes evidences signal level awareness."},"f18_cloud_on_ramp":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via the platform's fully cloud-managed architecture [15]"},"f19_public_cloud_gateways":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via the platform's fully cloud-managed architecture [15]"},"f34_remote_user_access":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and genuinely a core, confirmed architectural principle - 'While other solutions require agents or special browsers, NetCloud SASE uses agent-less isolation-based security' [15]"},"f40_managed_service_assurance":{"source_url":"https://cradlepoint.com/support/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Support is one of the most valuable tools within a NetCloud subscription and is staffed by accredited network engineers Round the clock global support is documented, with centres in Boise, London and Melbourne and direct access to the engineering organisation, and a public NetCloud status page exists for incident notification. What is not documented on any page reviewed is a 24/7 NOC and SOC proactively monitoring the customer's service, incident ownership through to root cause analysis, structured service reviews or change governance, so this falls short of the full definition."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:6810d536693038af740ed4a9","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"not_confirmed","retail_ecommerce":"yes","manufacturing":"partial","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"partial","hospitality_leisure":"partner_integrated"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US, Ericsson-owned). UK delivery via mobile operators and partners.","sector_review_queue":[{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Conditional - evidenced via a single, smaller technographic reference | Not assessed in specific technical detail for this sector | Not assessed for sector-specific frameworks | Roanoke Electric Cooperative (a smaller, US-based utility, confirmed as a real-world NetCloud Manager customer via independent technographic sales-intelligence data) | N/A | A single, smaller-scale technographic reference rather than a full narrative case study | A real, named customer reference exists, though at a smaller scale than the manufacturing/retail technographic references found elsewhere in this table.","named_evidence":"Roanoke Electric Cooperative (a smaller, US-based utility, confirmed as a real-world NetCloud Manager customer via independent technographic sales-intelligence data)","evidence_source_ids":["evidence:ericsson-cradlepoint:20"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via technographic data | SD-WAN and branch connectivity plausibly relevant to distributed manufacturing sites | Not assessed for sector-specific frameworks | JBT Corporation (a $2 billion, 7,000-employee US manufacturer, confirmed as a real-world NetCloud Manager customer via independent technographic sales-intelligence data) | N/A | The evidence here is technographic (confirmed technology usage) rather than a full narrative case study with quoted outcomes | A real, named, large, credible, easily-verifiable customer (JBT Corporation) is confirmed via independent technographic data - genuinely concrete, if not narratively detailed, evidence for this sector.","named_evidence":"JBT Corporation (a $2 billion, 7,000-employee US manufacturer, confirmed as a real-world NetCloud Manager customer via independent technographic sales-intelligence data)","evidence_source_ids":["evidence:ericsson-cradlepoint:20"]},{"sector":"government_public_sector","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | NetCloud Federal, FIPS 140-3 routers, the Pop-Up Network Kit for field-deployable connectivity, and the confirmed multi-carrier active-failover architecture are all directly relevant to this sector's specific requirements | FedRAMP High-level assurance via the confirmed Axon-hosted NetCloud Federal environment; FIPS 140-3 confirmed for select routers | Confirmed directly as a served sector generally, reinforced by a named reseller's specific claim of serving '1,100 unique government agencies across local, state, education, and federal sectors' | US-specific, per the confirmed named-carrier and FedRAMP evidence | General sector confirmation and named-reseller scale evidence exist; a single, narrative, individually-named government-agency case study wasn't found | Genuinely the best-evidenced sector in this entire profile - a specific, precise, primary-sourced compliance pathway (NetCloud Federal/Axon) combined with a real, named reseller's confirmed, quantified government-agency customer count together make this the platform's strongest, most concretely-evidenced sector fit.","named_evidence":"Confirmed directly as a served sector generally, reinforced by a named reseller's specific claim of serving '1,100 unique government agencies across local, state, education, and federal sectors'","evidence_source_ids":["evidence:ericsson-cradlepoint:12","evidence:ericsson-cradlepoint:13","evidence:ericsson-cradlepoint:14"]},{"sector":"transport_logistics","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | The confirmed in-vehicle telemetry API/SDK integration example, multi-carrier active failover, and location-based performance analysis are all directly and specifically relevant to fleet and transportation use cases | Not assessed for sector-specific frameworks | Confirmed directly as a served sector generally; a dedicated 'Transportation' content section on the company's own site reinforces this sector focus specifically | N/A | Real, confirmed sector-specific product content and API examples exist; a named, individual transportation-company case study with quantified outcomes wasn't found | A genuinely well-evidenced sector fit at the product-and-capability level - the confirmed in-vehicle telemetry integration and fleet-specific content demonstrate real, deliberate sector focus, even without a single, quoted named customer story.","named_evidence":"Confirmed directly as a served sector generally; a dedicated 'Transportation' content section on the company's own site reinforces this sector focus specifically","evidence_source_ids":["evidence:ericsson-cradlepoint:12","evidence:ericsson-cradlepoint:15"]},{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via technographic data | SD-WAN and branch/POS connectivity plausibly relevant | Not assessed for sector-specific frameworks | Fuzzy's Taco Shop and Evereve (both confirmed as real-world NetCloud Manager customers via independent technographic sales-intelligence data) | N/A | The evidence here is technographic (confirmed technology usage) rather than a full narrative case study with quoted outcomes | Two real, named, independently-confirmed customers in this sector via technographic data - a real, if not narratively detailed, evidentiary base.","named_evidence":"Fuzzy's Taco Shop and Evereve (both confirmed as real-world NetCloud Manager customers via independent technographic sales-intelligence data)","evidence_source_ids":["evidence:ericsson-cradlepoint:20"]},{"sector":"hospitality_leisure","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via technographic data | SD-WAN and branch/POS connectivity plausibly relevant | Not assessed for sector-specific frameworks | Fuzzy's Taco Shop and Evereve (both confirmed as real-world NetCloud Manager customers via independent technographic sales-intelligence data) | N/A | The evidence here is technographic (confirmed technology usage) rather than a full narrative case study with quoted outcomes | Two real, named, independently-confirmed customers in this sector via technographic data - a real, if not narratively detailed, evidentiary base.","named_evidence":"Fuzzy's Taco Shop and Evereve (both confirmed as real-world NetCloud Manager customers via independent technographic sales-intelligence data)","evidence_source_ids":["evidence:ericsson-cradlepoint:20"]}],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":22,"research_metrics":{"supported":11,"partial":3,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":25,"total":40,"reviewed":15,"completeness_percent":38,"completeness":0.375},"proven_evidence_count":11,"response_panel":null,"best_for":"Sector evidence not yet reviewed; both","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"both","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"virgin-media-o2","name":"Virgin Media O2 Business","website":"https://netify.co.uk/marketplace/virgin-media-o2/","category":"managed service provider / carrier network provider","product_focus":"8x8 Voice for Teams, Cloud Infrastructure as a Service / Platform as a Service, Managed Detection and Response, Success Agreement","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_entity","uk_basis":"Virgin Media Business Limited, company 01785381, publishes its registered office in Reading and UK business network service terms.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"partial","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"partial","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"partial","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"yes","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"not_confirmed","uk_support_desk":"not_confirmed","named_tam":"not_confirmed"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/virgin-media-o2/","shortlist_summary":"Managed connectivity and SD-WAN with Zscaler-based SASE; confirm the current contracting entity and scope.","key_differentiators":["Managed connectivity and SD-WAN with Zscaler-based SASE; confirm the current contracting entity and scope."],"best_fit_for":["Buyers comparing managed connectivity and partner-delivered cloud security."],"watch_outs":[],"evidence_coverage_pct":0.35,"last_verified":"2026-09-01","evidence_source_count":39,"capability_evidence":{"f10_dynamic_path_selection":{"source_url":"https://virginmediao2business.co.uk/connectivity/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'automatically path adjustment based on real-time conditions with dynamic application-aware routing' [10] [13]"},"f12_application_aware_routing":{"source_url":"https://virginmediao2business.co.uk/connectivity/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'automatically path adjustment based on real-time conditions with dynamic application-aware routing' [10] [13]"},"f13_qos_and_traffic_shaping":{"source_url":"https://virginmediao2business.co.uk/connectivity/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'prioritising applications, focussing on critical services' and 'boost peak time performance and cut the need for MPLS circuits' [10] [13]"},"f17_cellular_and_5g_support":{"source_url":"https://virginmediao2business.co.uk/connectivity/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name as a supported WAN underlay [10] [13]"},"f18_cloud_on_ramp":{"source_url":"https://virginmediao2business.co.uk/connectivity/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'connecting directly to cloud apps including AWS, Azure and Google Cloud' [10] [13]"},"f23_multi_cloud_transit_fabric":{"source_url":"https://virginmediao2business.co.uk/connectivity/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'connecting directly to cloud apps including AWS, Azure and Google Cloud' [10] [13]"},"f05_professional_services_and_migration_support":{"grade":"partial","source_url":"https://www.virginmediabusiness.co.uk/connectivity/sdwan/sdwan-end-to-end-service/","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"VMO2 describes experts supporting network and cloud migration with customer teams. A site trial is offered; rollback and training scope require confirmation."},"f16_mpls_coexistence_and_migration":{"source_url":"https://www.virginmediabusiness.co.uk/connectivity/sdwan/sdwan-how-it-works/","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"Service gateways connect existing MPLS IP VPN and new SD-WAN networks during transition. Confirm the design for each site."},"f37_customer_portal_and_rbac":{"grade":"partial","source_url":"https://www.virginmediabusiness.co.uk/pdf/legal-documents/vmbusiness-service-schedule-sdwan-v5.0.pdf","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"Clause 14 and Appendix 1 document customer portals and individual user access. Granular role-based permissions remain unconfirmed."},"f26_sla_backed_service_fabric":{"grade":"partial","source_url":"https://www.virginmediabusiness.co.uk/pdf/legal-documents/vmbusiness-service-schedule-sdwan-v5.0.pdf","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"Appendix 2 provides conditional service gateway targets and credits. This is not a blanket end-to-end performance guarantee."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:121d7b6c883b7450e2526ed3","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"global_managed","curated_uk_basis":"Confirm UK delivery scope through RFP.","sector_review_queue":[],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{},"reviewed_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Codex primary-source review","source_urls":["https://www.virginmediabusiness.co.uk/legal/terms-and-conditions/","https://www.virginmediabusiness.co.uk/legal/privacy-policy/"],"qualification":"UK review update (supersedes earlier UK-region qualification): The published business terms name Virgin Media Business Limited and include SD-WAN and UK managed IPVPN schedules. This is evidence of a UK contracting entity, not confirmation of a specific estate, Irish availability, response commitment or the entity used for a separate O2 service.","sectors":{},"regions":{"uk_ireland":"yes"}}},"uk_evidence":{"entity":{"status":"evidenced","name":null,"source_urls":["https://www.virginmediabusiness.co.uk/legal/terms-and-conditions/","https://www.virginmediabusiness.co.uk/legal/privacy-policy/"],"checked_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","qualification":"Virgin Media Business Limited, company 01785381, publishes its registered office in Reading and UK business network service terms."},"regional_delivery":{"status":"yes","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"summary_source":"https://virginmediabusiness.co.uk/connectivity/sdwan/","position":23,"research_metrics":{"supported":10,"partial":4,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":26,"total":40,"reviewed":14,"completeness_percent":35,"completeness":0.35},"proven_evidence_count":10,"response_panel":null,"best_for":"Sector evidence not yet reviewed; UK and Ireland; Large global enterprise; managed","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":["UK and Ireland"],"size":["Large global enterprise"],"service_model":"managed","signoff":""},"editorial":null,"uk_status":{"status":"uk_entity","label":"UK contracting entity","source_urls":["https://www.virginmediabusiness.co.uk/legal/terms-and-conditions/","https://www.virginmediabusiness.co.uk/legal/privacy-policy/"],"reviewed_at":"2026-09-30T19:56:00Z","qualification":"Virgin Media Business Limited, company 01785381, publishes its registered office in Reading and UK business network service terms."}},{"slug":"cloudflare-one","name":"Cloudflare One","website":"https://www.cloudflare.com/sase","category":"technology vendor","product_focus":"AI Gateway / Agents SDK / MCP security, CASB, Cloudflare Access, Cloudflare One","cost_model":"Quote-based enterprise pricing; some Zero Trust user tiers public, Magic WAN enterprise requires quote.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"not_confirmed","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"partial","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"not_confirmed","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"not_confirmed","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":300,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/cloudflare-one/","shortlist_summary":"Rather than building a security platform and adding network reach, or building a network and adding security, Cloudflare started as one of the internet’s largest content-delivery and DDoS-mitigation networks (founded 2009, public since 2019 on NYSE: NET) and extended that same global infrastructure - every product running in every data centre, not routed to a handful of regional security hubs - into a full SASE platform.","key_differentiators":["Cloudflare global edge network provides one of the largest PoP footprints in the category for SASE traffic.","Strong Zero Trust and SWG capability inheritance from the wider Cloudflare security platform.","Magic WAN Connector provides simplified branch connectivity into the Cloudflare One platform."],"best_fit_for":["Buyers already using Cloudflare for DDoS protection, CDN or Zero Trust who want to extend into WAN.","Organisations prioritising global PoP coverage and edge performance for SaaS access.","Mid-market buyers attracted to Cloudflare One pricing transparency for Zero Trust user tiers."],"watch_outs":["Dynamic path selection: supported; QoS and traffic shaping: not confirmed; Packet loss remediation: not confirmed. Confirm branch requirements and any delivery partner dependency.","Less mature for very large branch estates with complex underlay requirements.","Managed and co-managed service models are partner-led; this is primarily a self-service platform."],"evidence_coverage_pct":0.325,"last_verified":"2026-09-01","evidence_source_count":75,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://developers.cloudflare.com/tenant/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The Cloudflare Tenant API is a provisioning mechanism to help Channel and Alliance partners set up and manage Cloudflare accounts and services for their customers. The Tenant Platform gives partners per-customer account provisioning and delegated administration, which covers tenant isolation. No evidence found on the pages read of branded portals or white-label templates letting an MSP operate the platform under its own brand."},"f10_dynamic_path_selection":{"source_url":"https://cloudflare.com/enterprise/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, via the confirmed Argo Smart Routing capability, which dynamically routes traffic across Cloudflare's own network for optimal performance [33]"},"f19_public_cloud_gateways":{"source_url":"https://developers.cloudflare.com/magic-wan/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Instead of backhauling traffic through a central data center or maintaining dedicated MPLS circuits at every site, your traffic routes through the nearest Cloudflare data center where security policies apply inline. The enforcement points are Cloudflare's own data centres, not a third party's infrastructure that Cloudflare resells. The SASE page states Cloudflare delivers full SASE from 300+ cities and the network page states 337 cities and 8 regions."},"f20_private_pops_dedicated_pops":{"source_url":"https://www.cloudflare.com/data-localization/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Choose the location of the data centers where your traffic is inspected. The Data Localization Suite offers regional control over which of Cloudflare's own data centres inspect traffic, which addresses sovereignty of the processing location. That remains region selection inside the shared multi-tenant network. No offer of customer-hosted or physically dedicated PoPs was found on the pages read."},"f21_private_global_backbone":{"source_url":"https://blog.cloudflare.com/cloudflare-backbone-internet-fast-lane/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our backbone is a dedicated network, providing guaranteed network capacity and consistent latency between various locations. The same dated vendor post states the backbone comprises long-distance fibre optic cables connecting Cloudflare data centres across North America, South America, Europe and Asia, so it is intercontinental rather than national. Evidence is from a 2021 post; the SASE reference architecture read in 2026 does not use the word backbone."},"f26_sla_backed_service_fabric":{"source_url":"https://www.cloudflare.com/plans/enterprise/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"backed by dependable SLAs, 100% uptime, and reliable service you can trust. Availability and 24/7/365 support commitments are published for Enterprise plans. The underlying contractual SLA document itself was not reachable, as two candidate SLA URLs returned 404, so change handling and latency, jitter and loss commitments could not be verified."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.cloudflare.com/sase/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Cloudflare One converges core SASE services such as zero trust network access (ZTNA), secure web gateway (SWG), cloud access security broker (CASB), network-as-a-service (NaaS), and firewall-as-a-service (FWaaS). Firewall, secure web gateway and DLP are converged into Cloudflare's own platform and delivered from its network rather than as a separate appliance or a resold third-party stack. Gateway documentation confirms packet-level network policies and full inspection of web request content. Intrusion prevention specifically was not confirmed by a verbatim sentence on the pages read."},"f35_soc_siem_soar_integration":{"source_url":"https://cloudflare.com/enterprise/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, well-evidenced via the confirmed, massive-scale, continuous global threat-telemetry operation (47.1 million DDoS attacks mitigated in 2025, 230 billion threats blocked daily per Cloudflare's own reporting) [33] [10] Not confirmed"},"f40_managed_service_assurance":{"source_url":"https://www.cloudflare.com/plans/enterprise/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Award-winning, global, 24/7/365 email and emergency phone support (for Enterprise plans). Round the clock vendor support is published, but no statement was found describing a NOC and SOC proactively monitoring the customer service, owning incidents through to root cause analysis, or running structured service reviews and change governance."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:d0cb15272c6bd7b3354bcf26","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"partial","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"partial","transport_logistics":"yes","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). Multiple UK edge locations; self-serve or via UK partners.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Conditional - one named, if thinly detailed, case reference exists | Not assessed in detail | Not assessed | Applied Systems (referenced specifically for 'legacy vendor costs avoided', per Cloudflare's own SASE product page) | N/A | Thin detail beyond the named customer and general cost-avoidance framing | A real, named customer reference, though with less quantified detail than the government-sector evidence above.","named_evidence":"Applied Systems (referenced specifically for 'legacy vendor costs avoided', per Cloudflare's own SASE product page)","evidence_source_ids":["evidence:cloudflare-one:32"]},{"sector":"government_public_sector","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | FedRAMP Moderate authorization with a genuinely distinctive, broad data-centre footprint; CISA partnership for .gov DNS security | FedRAMP Moderate (since 2022); FedRAMP High in progress | Berkeley Lab (named, chose Cloudflare as its zero-trust security partner, per Cloudflare's own materials); FBI and US Department of State referenced directly by Cloudflare's CEO as long-standing, technically demanding agency customers | US federal specifically well-evidenced; international government certification pursuits (IRAP for Australia, ENS achieved for Spain) demonstrate real, current international investment | FedRAMP High not yet confirmed achieved | Genuinely one of the best-evidenced sectors in this entire profile - a named national laboratory customer, direct CEO references to specific, technically sophisticated federal agencies, and a distinctive, primary-sourced FedRAMP architecture all combine into a credible, specific public-sector story.","named_evidence":"Berkeley Lab (named, chose Cloudflare as its zero-trust security partner, per Cloudflare's own materials); FBI and US Department of State referenced directly by Cloudflare's CEO as long-standing, technically demanding agency customers","evidence_source_ids":["evidence:cloudflare-one:26","evidence:cloudflare-one:27","evidence:cloudflare-one:29","evidence:cloudflare-one:30"]}],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":24,"research_metrics":{"supported":10,"partial":3,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":27,"total":40,"reviewed":13,"completeness_percent":33,"completeness":0.325},"proven_evidence_count":10,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"comcast-business","name":"Comcast Business","website":"https://business.comcast.com","category":"managed service provider / carrier network provider","product_focus":"Comcast Business CASB, Comcast Business FWaaS, Comcast Business Managed SD-WAN, Comcast Business SASE","cost_model":"Quote-based managed/co-managed service; access, SD-WAN, SASE and SOC/AIOps elements drive cost.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"not_confirmed","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"partner_integrated","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"partner_integrated","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/comcastbusiness/","shortlist_summary":"Comcast Business’s managed SD-WAN and SASE proposition traces its specialist technical foundation to Masergy, a managed SD-WAN and SASE vendor founded in 2000 in Plano, Texas, which Comcast Business acquired in 2021 to, in the words of Comcast Business’s then-President Bill Stemper, ‘instantly and dramatically amplify our growth in the global enterprise market’.","key_differentiators":["SASE combining SD-WAN and security available fully managed or co-managed, drawing on Masergy AIOps heritage.","Recognised as a leading managed SD-WAN provider by industry analysts.","Strong North American underlay ownership with international delivery via partners."],"best_fit_for":["North American enterprises wanting managed or co-managed SD-WAN and SASE from a single carrier.","Buyers attracted to the AIOps capabilities inherited from the Masergy acquisition.","Organisations prioritising co-managed delivery with shared operational control."],"watch_outs":["International delivery depth depends on partnerships outside North America.","Underlying platform choice should be confirmed; service depth varies by selected platform.","Commercial model bundles access, SD-WAN, SASE and SOC elements; explicit line-item costing required."],"evidence_coverage_pct":0.3,"last_verified":"2026-09-01","evidence_source_count":24,"capability_evidence":{"f07_lifecycle_management":{"source_url":"https://business.comcast.com/enterprise/products-services/sd-wan-solutions/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Equipment replacement SLA ,  24x7x4 (On-Net) and 8X5XNBD (Off-Net) Hardware replacement is contractually covered as part of the managed service. No statement found on the pages reviewed covering firmware upgrades, patching, renewals or end-of-life planning, so graded partial. CPE is Fortinet hardware per the Masergy product sheet."},"f17_cellular_and_5g_support":{"source_url":"https://business.comcast.com/enterprise/products-services/sd-wan-solutions/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Help keep your network running with 4G LTE backup. 4G LTE is documented as a backup transport. No evidence found on the pages reviewed for 5G, for cellular as a primary transport, or for SIM management and signal monitoring, so graded partial."},"f19_public_cloud_gateways":{"source_url":"https://corporate.comcast.com/press/releases/comcast-business-fortinet-secure-enterprise-application-access-sase-sse-solutions","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Comcast Business Secure Gateways are hosted across the United States at Equinix data centers, offering up to 10 gigabits per second (Gbps) of cloud connectivity for public, private, or hybrid cloud deployments. Comcast Business brands and operates the Secure Gateways, but the enforcement stack is Fortinet technology and the hosting fabric is Equinix, per the same release: \"Fortinet's security-driven networking technology and Equinix's flexible cloud connection Equinix Fabric™ for a complete secure network service.\" Under the definition this is partner_integrated, not yes. Footprint stated as United States only."},"f27_integrated_next_generation_firewall":{"source_url":"https://business.comcast.com/resources/enterprise/articles/uniting-managed-sase-and-connectivity-for-scalable-networking-and-security","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Firewall as a Service: Next-generation Firewall for network traffic inspection and security'"},"f28_full_sase_platform":{"source_url":"https://business.comcast.com/enterprise/products-services/secure-networking/sase","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'Zero-trust network access (ZTNA): Verifies the identity of every user and device before allowing them to access internal resources by setting up one-to-one encrypted connections'"},"f30_zero_trust_network_access":{"source_url":"https://business.comcast.com/enterprise/products-services/secure-networking/sase","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'Zero-trust network access (ZTNA): Verifies the identity of every user and device before allowing them to access internal resources by setting up one-to-one encrypted connections'"},"f31_secure_web_gateway":{"source_url":"https://business.comcast.com/resources/enterprise/articles/uniting-managed-sase-and-connectivity-for-scalable-networking-and-security","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name as a core SASE component - 'Secure Web Gateway (SWG): On-premise or cloud-based Internet traffic filtering'"},"f32_casb_capability":{"source_url":"https://business.comcast.com/resources/enterprise/articles/uniting-managed-sase-and-connectivity-for-scalable-networking-and-security","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Cloud Access Security Broker (CASB): To secure access to cloud applications' Specific inline-versus-API-mode technical detail not itemised"},"f33_data_loss_prevention":{"source_url":"https://corporate.comcast.com/press/releases/comcast-business-fortinet-secure-enterprise-application-access-sase-sse-solutions","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Firewall-as-a-Service (FWaaS), Intrusion Prevention (IPS), Data Loss Prevention (DLP), Cloud Access Security Brokers (CASB), and Zero Trust Network Access (ZTNA). DLP is named as part of the SASE/SSE offer but is delivered on Fortinet's security-driven networking technology, so partner_integrated rather than yes. No detail found on classification depth, blocking versus flagging, alerting or exception workflows."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:eb912a1b099feb573967e73d","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"yes"},"curated_uk_delivery":"global_managed","curated_uk_basis":"No UK HQ (US). UK delivery via the Masergy global platform and partners.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":25,"research_metrics":{"supported":8,"partial":2,"partner_delivered":2,"managed_service_dependent":0,"not_primary":0,"unconfirmed":28,"total":40,"reviewed":12,"completeness_percent":30,"completeness":0.3},"proven_evidence_count":8,"response_panel":null,"best_for":"Sector evidence not yet reviewed; managed","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"managed","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"arista-velocloud","name":"VeloCloud","website":"https://www.arista.com","category":"technology vendor","product_focus":"Arista AVA, Edge Threat Management (ETM), SSE partner integrations, VeloCloud Orchestrator","cost_model":"Quote-based edge subscriptions/appliances/support; managed services commonly delivered by carriers/MSPs.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partner_integrated","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"not_confirmed","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"partner_integrated","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"partner_integrated","f32_casb_capability":"partner_integrated","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"partner_integrated","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"not_primary","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":150,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/velocloud/","shortlist_summary":"VeloCloud was founded in 2012 as a cloud-delivered SD-WAN pioneer, acquired by VMware in 2017 for approximately $336 million, then came under Broadcom’s ownership when Broadcom completed its roughly $69 billion acquisition of VMware in 2023. Under Broadcom, the product was paired with Symantec’s security stack (Broadcom separately owns Symantec’s enterprise security business) into a single-vendor offering called ‘VMware VeloCloud SASE, secured by Symantec’, announced February 2024.","key_differentiators":["VeloCloud was an early SD-WAN platform with strong cloud-delivered gateway architecture; now under Arista following the 2025 acquisition.","Multi-tenant design has made VeloCloud common in carrier and MSP managed services.","Application-aware routing and dynamic path selection are mature capabilities with substantial deployment history."],"best_fit_for":["Enterprises consuming VeloCloud through a managed service provider (Vodafone UK, others).","Service providers running multi-tenant SD-WAN at scale.","Buyers comfortable with a platform in transition under new ownership."],"watch_outs":["Platform is mid-transition from VMware/Broadcom to Arista; product roadmap, naming and integration story will evolve.","Security and SASE capabilities are largely partner-integrated rather than native.","Direct enterprise sales motion is less established than legacy vendors; most consumption is via managed providers."],"evidence_coverage_pct":0.3,"last_verified":"2026-09-01","evidence_source_count":35,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.arista.com/assets/data/pdf/VeloCloud-SD-WAN-Data-Sheet.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Cloud-native by design, VeloCloud SD-WAN is delivered via a global network of Edge PoPs, either self-managed or as a managed service. Arista authors the platform; the managed-service option is operated by MSP and service-provider partners rather than by Arista end to end. Arista's own press release quotes T&A SYSTEME GmbH, 'a German MSP managing 7500+ sites in 98 countries', and MetTel as the parties running the service for customers. No Arista-run design-to-report managed service was found."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.arista.com/assets/data/pdf/SD-WAN-Solution-Overview.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Enterprises or their managed service providers can define business-level policies that apply enterprise-wide across many Edges Tenant isolation and delegated administration are evidenced by the multitenant Orchestrator, Controller and Gateway architecture and the three-tier RBAC model, and the partner programme carries 'SD-WAN MSP Partner Requirements'. Graded partial rather than yes because no page reviewed described branded or white-label partner portals, which the definition requires."},"f17_cellular_and_5g_support":{"source_url":"https://www.arista.com/assets/data/pdf/Datasheets/VeloCloud-SD-WAN-Edge-7x0-Series.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Dual Physical SIM + single eSIM (single standby) The 7x0 datasheet documents an integrated Telit FN990A28 modem, 'LTE Category Cat-19', carrier aggregation, HSPA+ 3G fallback and a full 5G FR1 band list, with dual physical SIM plus eSIM. The product page states 'integrated WiFi and 5G' and the 4100/5100 page leads with 'Integrated 5G Enterprise-class SD-WAN appliances for branches'. LTE is also listed among supported WAN transports."},"f20_private_pops_dedicated_pops":{"source_url":"https://www.arista.com/assets/data/pdf/SD-WAN-Solution-Overview.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Gateways can be deployed as partner Gateways on the premises of service providers, where they are managed by the service provider Gateways are not restricted to a shared multi-tenant estate: the datasheet describes 'A distributed, global network of gateways, hosted by Arista/service providers or deployed on-premises' and lists 'Partner Gateway Support' as a feature, covering customer-hosted and dedicated partner deployments. No sovereign-region offering was named on the pages reviewed."},"f27_integrated_next_generation_firewall":{"source_url":"https://networkworld.com/article/4199622/arista-debuts-unified-sd-wan-edge-platform.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and specifically confirmed as part of the in-development Edge Threat Management capability - firewalls, segmentation, DNS filtering, geolocation controls, and threat prevention embedded directly on VeloCloud edge devices [17] [21] Not yet generally available - planned for Q4 2026 as of this profile's research"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:f5387b83efff650f5c9acd5b","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). VeloCloud delivered in the UK through carriers including BT and Vodafone.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":26,"research_metrics":{"supported":6,"partial":2,"partner_delivered":4,"managed_service_dependent":0,"not_primary":0,"unconfirmed":28,"total":40,"reviewed":12,"completeness_percent":30,"completeness":0.3},"proven_evidence_count":6,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"expereo","name":"Expereo","website":"https://netify.co.uk/marketplace/expereo/","category":"managed service provider / carrier network provider","product_focus":"Expereo Enhanced Internet, Expereo Managed SD-WAN, Expereo SD-WAN/SASE with Cato Networks, Starlink (via Expereo, authorised reseller)","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"not_confirmed","uk_support_desk":"not_confirmed","named_tam":"not_confirmed"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/expereo/","shortlist_summary":"Managed SD-WAN and internet connectivity, with Cato Networks as a named partner for managed SASE.","key_differentiators":["Managed SD-WAN and internet connectivity, with Cato Networks as a named partner for managed SASE."],"best_fit_for":["Buyers comparing managed internet connectivity alongside SD-WAN and partner-delivered SASE."],"watch_outs":[],"evidence_coverage_pct":0.25,"last_verified":"2026-09-01","evidence_source_count":28,"capability_evidence":{"f10_dynamic_path_selection":{"source_url":"https://expereo.com/resources/brochures/sd-wan","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'AI-enabled dynamic routing for reliable and predictable networks'"},"f13_qos_and_traffic_shaping":{"source_url":"https://expereo.com/services/sd-wan","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Easier management with the ability to set routing, traffic thresholds and access policies to suit your business'"},"f27_integrated_next_generation_firewall":{"source_url":"https://expereo.com/sd-wan","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Includes integrated security features such as encryption and firewall capabilities'"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:42ce68f10f362e6b0e6440bf","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"global_managed","curated_uk_basis":"Confirm UK delivery scope through RFP.","sector_review_queue":[{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced via a second, distinct, real case study within the same corporate family | Confirmed network-complexity reduction and resilience improvement across a real customer spanning 100 sites worldwide | Not assessed for sector-specific frameworks | Kingspan Light, Air + Water - named individual, named company, direct quote (Fergal Moore, Divisional Head of Infrastructure & Cyber Security) on removing network complexity and boosting resilience across 100 sites worldwide | Global, confirmed directly ('100 Sites Worldwide') | None significant identified beyond the general, profile-wide compliance considerations | A second, real, named, individually-attributable customer reference - genuinely reinforcing the manufacturing-sector fit confirmed by the first Kingspan case study, within a short, recent time window (December 2025 and February 2026).","named_evidence":"Kingspan Light, Air + Water - named individual, named company, direct quote (Fergal Moore, Divisional Head of Infrastructure & Cyber Security) on removing network complexity and boosting resilience across 100 sites worldwide","evidence_source_ids":[]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"manufacturing":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.expereo.com/resources/press-releases/kingspan-insulation-chooses-expereo-to-unify-connectivity-and-accelerate-growth-across-90-global-sites"],"qualification":"Recovered Expereo Kingspan Insulation release explicitly documents SD-WAN and underlay at 90 facilities including factories. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"manufacturing":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"summary_source":"https://catonetworks.com/news/expereo-selects-cato-networks-for-delivering-managed-sase-services-worldwide/","position":27,"research_metrics":{"supported":8,"partial":1,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":30,"total":40,"reviewed":10,"completeness_percent":25,"completeness":0.25},"proven_evidence_count":8,"response_panel":null,"best_for":"Manufacturing; Large global enterprise; managed","best_for_fields":{"sectors_yes":["Manufacturing"],"sectors_partial":[],"regions":[],"size":["Large global enterprise"],"service_model":"managed","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"opensystems","name":"Open Systems","website":"https://netify.co.uk/marketplace/opensystems/","category":"technology vendor / managed service provider","product_focus":"MDR+ (Managed Detection and Response), Managed SD-WAN / Secure SD-WAN, Managed, Universal SSE, Mission Control","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"yes","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"not_confirmed","uk_support_desk":"not_confirmed","named_tam":"not_confirmed"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/opensystems/","shortlist_summary":"Managed SD-WAN and SASE supported by Open Systems' Mission Control service team.","key_differentiators":["Managed SD-WAN and SASE supported by Open Systems' Mission Control service team."],"best_fit_for":["Buyers comparing a managed operating model for SD-WAN and SASE."],"watch_outs":[],"evidence_coverage_pct":0.2,"last_verified":"2026-09-01","evidence_source_count":37,"capability_evidence":{"f15_local_internet_breakout":{"source_url":"https://open-systems.com/company/customers/mammut/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via real, named customer-deployment detail - 'low-cost and secure internet breakouts' specifically described in the Mammut case study [16]"},"f32_casb_capability":{"source_url":"https://eqtgroup.com/about/current-portfolio/open-systems","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as part of the broader converged security stack [7] Specific inline-versus-API-mode technical detail not itemised"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:3f18bb33f360d5fbfab497d9","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"global_managed","curated_uk_basis":"Confirm UK delivery scope through RFP.","sector_review_queue":[{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, named, well-known customer | Not assessed in specific technical detail for this sector beyond the confirmed WAN-replacement and internet-breakout capabilities evidenced directly | Not assessed for sector-specific frameworks | Mammut (named, well-known international outdoor-apparel brand, with specific, quantified deployment detail: WAN replacement completed in under two months) | N/A | A single, though genuinely well-known, named, and specifically-quantified case study | A real, credible, named customer - Mammut is a well-known international outdoor-apparel brand - reinforced by specific, quantified deployment-timeline detail, making this a genuinely strong reference despite being a single example.","named_evidence":"Mammut (named, well-known international outdoor-apparel brand, with specific, quantified deployment detail: WAN replacement completed in under two months)","evidence_source_ids":["evidence:opensystems:16"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | The confirmed, dedicated OT Firewall product, plus SD-WAN and Mission Control's proactive monitoring, are directly relevant to distributed manufacturing operations | Not assessed for sector-specific frameworks beyond the confirmed general ISO 27001 certification | Mikron (named customer, described directly as strengthening security specifically to 'protect critical production systems'), confirmed directly as a served sector generally | N/A | Real, named customer evidence exists for this sector specifically | Genuinely well-evidenced via both a real, named customer case study directly referencing production-system protection and a dedicated, purpose-built OT Firewall product.","named_evidence":"Mikron (named customer, described directly as strengthening security specifically to 'protect critical production systems'), confirmed directly as a served sector generally","evidence_source_ids":["evidence:opensystems:8"]},{"sector":"transport_logistics","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced via a real, named, quantified customer example | SD-WAN and Mission Control's global, multi-site management capability directly relevant, evidenced via genuine, quantified scale (60+ locations) | Not assessed for sector-specific frameworks | Altana (named customer, connecting 60+ locations worldwide and integrating new acquisitions) | Global, per the confirmed 60+-location customer example | A single, though genuinely specific and quantified, named case study | Genuinely well-evidenced via a real, named, specifically-quantified (60+ locations) customer example directly relevant to large-scale, distributed, multi-site operations.","named_evidence":"Altana (named customer, connecting 60+ locations worldwide and integrating new acquisitions)","evidence_source_ids":["evidence:opensystems:10"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"manufacturing":false,"retail_ecommerce":false,"transport_logistics":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.open-systems.com/company/customers/","https://www.open-systems.com/company/customers/mammut/"],"qualification":"Open Systems labels ALTANA chemicals and documents SASE at 60-plus sites. Correct sector to manufacturing/chemicals, not logistics. Recovered Open Systems customer index identifies Mikron precision manufacturing using SASE. Does not prove every secondary-directory detail. Mammut primary case describes SASE, branch breakouts, VPN and managed network operations for an outdoor retail brand. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"transport_logistics":"not_confirmed","manufacturing":"yes","retail_ecommerce":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"summary_source":"https://open-systems.com/company/","position":28,"research_metrics":{"supported":7,"partial":1,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":32,"total":40,"reviewed":8,"completeness_percent":20,"completeness":0.2},"proven_evidence_count":7,"response_panel":null,"best_for":"Retail and e-commerce; Manufacturing; both","best_for_fields":{"sectors_yes":["Retail and e-commerce","Manufacturing"],"sectors_partial":[],"regions":[],"size":[],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"barracuda-secureedge","name":"Barracuda SecureEdge","website":"https://netify.co.uk/marketplace/barracuda-secureedge/","category":"technology vendor","product_focus":"Barracuda SecureEdge, Barracuda SecureEdge Access, BarracudaONE, Secure Edge Manager","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_primary","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"not_confirmed","uk_support_desk":"not_confirmed","named_tam":"not_confirmed"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/barracuda-secureedge/","shortlist_summary":"SecureEdge combines SD-WAN and cloud security, with an MSP option for multi-tenant management.","key_differentiators":["SecureEdge combines SD-WAN and cloud security, with an MSP option for multi-tenant management."],"best_fit_for":["Buyers and service providers comparing SecureEdge deployment and management options."],"watch_outs":[],"evidence_coverage_pct":0.175,"last_verified":"2026-09-01","evidence_source_count":35,"capability_evidence":{"f05_professional_services_and_migration_support":{"source_url":"https://blog.barracuda.com/2026/03/25/barracudaone-secureedge-access-and-security-service-edge-adoption","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the specifically-named, dated (March 2026) phased-adoption approach - a defined four-step migration path allowing organisations to 'prioritize immediate needs and expand over time' rather than requiring a single, forced cutover [15]"},"f36_centralised_orchestration":{"source_url":"https://barracuda.com/products/network-protection/secureedge","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'With zero-touch deployment capabilities, you can remotely deliver SASE and network security services without sending technicians onsite' [4] [17]"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:74eb1c1b2bff395216330596","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"global_managed","curated_uk_basis":"Confirm UK delivery scope through RFP.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"summary_source":"https://barracuda.com/products/network-protection/secureedge/msp","position":29,"research_metrics":{"supported":6,"partial":1,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":33,"total":40,"reviewed":7,"completeness_percent":18,"completeness":0.175},"proven_evidence_count":6,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"sonicwall","name":"SonicWall Cloud Secure Edge","website":"https://www.sonicwall.com","category":"technology vendor","product_focus":"Global Response Intelligent Defence (GRID) Threat Network, Managed Protection Security Suite (MPSS), SAMI, Secure Internet Access","cost_model":"Public hardware/security bundle pricing often available via resellers; managed options partner-dependent.","public_pricing_visibility":"quote_based","value_tier":"budget","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"not_confirmed","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"not_confirmed","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"not_confirmed","ai_assistant":"yes","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"yes","retail_ecommerce":"not_confirmed","manufacturing":"not_primary","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"partial","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/sonicwall-cse/","shortlist_summary":"SonicWall is one of the oldest names in network security still operating under its own brand - founded 1991 as Sonic Systems, later renamed SonicWall, and shaped by an eventful corporate history: an IPO in 1999, a return to private ownership, acquisition by Dell in 2012, and a $2 billion-plus divestiture from Dell in November 2016 that spun the company out as an independent business jointly owned by private equity firms Francisco Partners and Elliott Management, who remain its owners today.","key_differentiators":["SD-WAN delivered via existing TZ, NSa and SM firewall appliances; familiar deployment for organisations standardised on SonicWall.","Strong SMB and mid-market positioning with reseller channel and public hardware pricing.","Integrated firewall and SD-WAN avoids separate appliances for smaller branches."],"best_fit_for":["SMB and mid-market organisations already running SonicWall firewalls.","Distributed branch estates where firewall-led SD-WAN is operationally simpler than a separate SD-WAN platform.","Buyers prioritising public pricing visibility and reseller channel options."],"watch_outs":["Full SASE platform: not confirmed; CASB capability: not confirmed; Data loss prevention: not confirmed. Confirm the exact networking and security modules included in the proposal.","Less suited to large enterprise multinational deployments requiring private backbone or PoP architectures.","Public cloud gateway and multi-cloud transit fabric capabilities are less prominent than cloud-native SASE vendors."],"evidence_coverage_pct":0.075,"last_verified":"2026-09-01","evidence_source_count":32,"capability_evidence":{"f05_professional_services_and_migration_support":{"source_url":"https://prnewswire.com/news-releases/sonicwall-partner-ximpleit-deploys-cloud-secure-edge-to-deliver-zero-trust-security-to-legal-industry-clients-302790435.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and genuinely one of the platform's clearest, most specifically-evidenced capabilities - explicit 'no rip-and-replace' positioning, confirmed 'guided migration, coexistence mode, and partner playbooks', and a real, named, dated 2026 case study describing exactly this scenario at an MSP [22]"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:53e04f892936ddcabcf1c016","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"yes","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). Strong UK SMB and mid-market channel and distribution.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | ZTNA and secure remote access directly relevant, evidenced via a real, detailed, named deployment scenario | Not assessed for sector-specific frameworks | XimpleIT (named MSP specializing in legal-industry clients, deploying CSE across a customer base of law firms following a real, confirmed security incident) | Colorado, United States (the MSP's own location; served law firms 'of all sizes') | A single, if genuinely detailed and dated, named case study | Genuinely the best-evidenced sector in this entire profile - a real, named, dated (June 2026), detailed account of an actual security incident driving adoption, rather than a generic sector-fit claim.","named_evidence":"XimpleIT (named MSP specializing in legal-industry clients, deploying CSE across a customer base of law firms following a real, confirmed security incident)","evidence_source_ids":["evidence:sonicwall-cse:22"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"professional_services":false,"financial_services":false},"reviewed_at":"2026-09-30T15:30:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://prnewswire.com/news-releases/sonicwall-partner-ximpleit-deploys-cloud-secure-edge-to-deliver-zero-trust-security-to-legal-industry-clients-302790435.html","https://www.sonicwall.com/es-mx/products/cloud-secure-edge","https://www.sonicwall.com/medialibrary/en/case-study/Lemonade-Moves-Up-from-VPN-to-Banyan-Zero-Trust-Access-Solution.pdf"],"qualification":"SonicWall-issued PRNewswire announcement describes XimpleIT deploying Cloud Secure Edge ZTNA for law firms. Named delivery partner; client firms unnamed. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation. SonicWall names insurer Lemonade as a Cloud Secure Edge customer and links its case study. Secure remote access evidence, not branch SD-WAN or UK delivery. PDF direct access was blocked during recheck; official product case text is the accessible corroboration.","sectors":{"professional_services":"partial","financial_services":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":30,"research_metrics":{"supported":3,"partial":0,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":37,"total":40,"reviewed":3,"completeness_percent":8,"completeness":0.075},"proven_evidence_count":3,"response_panel":null,"best_for":"Financial services; Professional services (partial evidence); platform","best_for_fields":{"sectors_yes":["Financial services"],"sectors_partial":["Professional services"],"regions":[],"size":[],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}}]},"sd-wan-vendors":{"ordered_by":"evidence_coverage_pct desc, provider name asc, slug asc","label":"SD-WAN vendors","title":"SD-WAN vendors compared","answer":"Compare technology vendors with published SD-WAN capability evidence. Check platform features, deployment requirements and management options.","url":"https://netify.co.uk/sase/shortlist/sd-wan-vendors/","providers":[{"slug":"lumen","name":"Lumen","website":"https://www.lumen.com/en-us/services/sd-wan.html","category":"technology vendor / managed service provider / carrier network provider","product_focus":"Black Lotus Labs, Lumen Managed SASE Solutions, Lumen SASE with Versa, Lumen SD-WAN with Versa Networks","cost_model":"Quote-based; Lumen states fully managed or co-managed SD-WAN, with access/network services priced by requirement.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"partner_integrated","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"partner_integrated","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"partial","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":50,"sla_availability_pct":99.99,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/lumen/","shortlist_summary":"Lumen Technologies has just completed a corporate transformation - on 21 May 2025, Lumen announced the sale of its Mass Markets fiber-to-the-home business - including its Quantum Fiber consumer brand, serving more than 1 million subscribers across 11 states - to AT&T for $5.75 billion in cash, a transaction that closed on 2 February 2026. Lumen’s own CEO, Kate Johnson, described the deal directly as marking the company’s transformation into ‘a Pure Play Enterprise-Focused Technology Infrastructure Company’, retaining its national, regional, state, and metro fiber backbone specifically to support that enterprise focus while divesting the consumer-facing business entirely.","key_differentiators":["Fully managed or co-managed SD-WAN with strong NaaS positioning and integrated network services.","Substantial underlay ownership in North America with global reach.","Co-managed model provides operational flexibility for customers wanting selective control."],"best_fit_for":["North American enterprises wanting integrated managed SD-WAN, access and broader network services from one provider.","Buyers attracted to the NaaS consumption model.","Organisations wanting genuine co-managed delivery rather than pure managed or pure DIY."],"watch_outs":["SASE and security capabilities are largely partner-integrated rather than native; the SSE platform choice needs explicit evaluation.","International delivery depth is less prominent than the dedicated global carriers.","Underlying SD-WAN platform should be confirmed; platform choice affects feature set."],"evidence_coverage_pct":0.65,"last_verified":"2026-09-01","evidence_source_count":31,"capability_evidence":{"f07_lifecycle_management":{"source_url":"https://assets.lumen.com/is/content/Lumen/SD-WAN___Managed_Equipment_Service_Guide","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Lifecycle management – notification of end of sale/end of support. The same service guide lists CPE break/fix (RMA) warranty support for failed devices and processing of return material authorisation replacement requests, plus patch management for all hardware and software. The SD-WAN service schedule states that during the initial service term purchased CPE is eligible for the Managed Device Replacement Service Level in the Lumen Service Level Agreement, so replacement is contractual rather than best effort."},"f10_dynamic_path_selection":{"source_url":"https://lumen.com/en-us/services/sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Route traffic over the most efficient connection for high performance' [3]"},"f12_application_aware_routing":{"source_url":"https://lumen.com/en-us/services/sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Route traffic over the most efficient connection for high performance, and update routing and security rules in real time as network needs change' [3]"},"f13_qos_and_traffic_shaping":{"source_url":"https://docs.lumen.com/readiness/products/sd-wan-versa/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'the ability to intelligently use lower cost Internet connections to achieve MPLS-like QoS' [2]"},"f17_cellular_and_5g_support":{"source_url":"https://lumen.com/en-us/services/sdwan-versa-networks.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name as a supported WAN underlay ('4G/LTE') [5]"},"f18_cloud_on_ramp":{"source_url":"https://docs.lumen.com/readiness/products/sd-wan-versa/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the confirmed 'physical and virtual customer-premises equipment (CPE)' architecture description [2]"},"f19_public_cloud_gateways":{"source_url":"https://ir.lumen.com/news/news-details/2024/Lumen-and-Versa-Expand-Partnership-to-Deliver-a-Sovereign-SASE-Solution/default.aspx","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The Sovereign SASE solution is deployed on dedicated SASE gateways in Lumen's global points of presence (PoPs) or on customer premises, based on the customer's preference and needs. The PoPs are Lumen's own, which is what this field measures, and the SASE product page advertises 50+ low-latency edge nodes in key metro areas. The security software running in them is Versa or Fortinet technology, which does not change the ownership of the infrastructure. One complication is recorded in conflicts: the SASE service guide also describes an option delivered through a global network of VMware SASE points of presence, which would be partner_integrated rather than Lumen-owned."},"f20_private_pops_dedicated_pops":{"source_url":"https://assets.lumen.com/is/content/Lumen/sd-wan-service-schedule?Creativeid=914be424-577f-4a0d-97cd-3c9c00a783e4","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The Lumen SD-WAN with Versa Networks network Controllers are hosted within Lumen facilities, but can also be deployed as private infrastructure in a customer provided environment for an additional charge. Reinforced by the dated May 2024 Versa Sovereign SASE press release, which states the solution is deployed on dedicated SASE gateways in Lumen's global PoPs or on customer premises based on the customer's preference and needs. Customer-hosted, dedicated and sovereign options are therefore documented, not only shared multi-tenant locations."},"f21_private_global_backbone":{"source_url":"https://ir.lumen.com/news/news-details/2024/Lumen-and-Versa-Expand-Partnership-to-Deliver-a-Sovereign-SASE-Solution/default.aspx","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Black Lotus Labs, Lumen's threat research team, leverages its unique visibility into Lumen's global internet backbone using ML algorithms to generate threat intelligence Lumen owns and operates its own global backbone, which is the substance of this field. Confidence is medium rather than high for two reasons: the clearest wording found is incidental to a threat intelligence sentence, and the most explicit owned-fibre statement found, that Lumen operates the largest ultra-low-loss intercity fiber network in North America, is scoped to North America. No page reviewed states as a product property that inter-region SASE or SD-WAN traffic rides the Lumen backbone rather than the public internet."},"f24_flexible_edge_form_factors":{"source_url":"https://lumen.com/en-us/services/sase-versa.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - a named, sized CPE device tier ('Extra Small CPE Device') is confirmed directly as part of Lumen's disclosed pricing structure [4]"},"f25_high_availability_design":{"source_url":"https://lumen.com/en-us/services/sdwan-versa-networks.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - the confirmed service wrapper includes 'appliance/circuit monitoring' and '24/7 support for the entire WAN solution' [5]"},"f26_sla_backed_service_fabric":{"source_url":"https://assets.lumen.com/is/content/Lumen/lumen-service-level-agreementpdf?Creativeid=dc0beb0f-83c4-46d5-8684-85af0333edbe","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Lumen offers Service Availability Service Levels for Qualifying Services based on the following Availability Tiers. The published Lumen Service Level Agreement names Lumen SD-WAN Service with Versa Networks, Lumen SD-WAN Service with Cisco Meraki and Lumen SASE Solutions as qualifying services, and carries availability tiers, a four hour incident response commitment, managed device replacement targets, and regional latency, jitter and packet delivery objectives. These are credit-bearing contractual commitments rather than best-effort targets."},"f27_integrated_next_generation_firewall":{"source_url":"https://assets.lumen.com/is/content/Lumen/sase-solutions-service-guide?Creativeid=4af4755b-f89d-476b-a0b7-879ea4015615","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Next Generation Firewall (NGFW) is available as a service license with Fortinet and is powered by FortiOS The firewall function is Fortinet technology licensed and operated by Lumen, so partner_integrated rather than yes. The same guide describes anti-malware, web filtering and firewall, intrusion detection and prevention (IDS/IPS) within the unified threat management set, and the SD-WAN service schedule describes a Security Upgrade providing a set of firewall, web filtering and intrusion prevention. The function is integrated into the delivered platform, but the technology belongs to another vendor."},"f28_full_sase_platform":{"source_url":"https://lumen.com/en-us/services/sase-versa.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a named product - Versa Secure Private Access (VSPA) 'secure remote workforces at the edge with user-centric' access [4]"},"f30_zero_trust_network_access":{"source_url":"https://lumen.com/en-us/services/sase-versa.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a named product - Versa Secure Private Access (VSPA) 'secure remote workforces at the edge with user-centric' access [4]"},"f31_secure_web_gateway":{"source_url":"https://lumen.com/en-us/services/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly as part of the SSE capability list - 'Secure Web Gateway (SWG)' named explicitly [6]"},"f32_casb_capability":{"source_url":"https://lumen.com/en-us/services/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Cloud Access Security Broker (CASB)' named explicitly as SSE-compatible [6] Specific inline-versus-API-mode technical detail not itemised"},"f33_data_loss_prevention":{"source_url":"https://assets.lumen.com/is/content/Lumen/sase-solutions-service-guide?Creativeid=4af4755b-f89d-476b-a0b7-879ea4015615","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"intrusion detection and prevention (IDS/IPS), and data loss prevention DLP is listed on the Lumen SASE product page as one of the Security Service Edge services alongside NGFW, SWG, ZTNA and CASB, and appears in the SASE service guide within the Fortinet-powered feature set, so it is another vendor's engine operated by Lumen. No Lumen page reviewed describes content classification detail, blocking versus flagging behaviour, alerting or exception workflows, so confidence is medium on the depth of the capability rather than on its presence."},"f40_managed_service_assurance":{"source_url":"https://assets.lumen.com/is/content/Lumen/SD-WAN___Managed_Equipment_Service_Guide","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Lumen resources are available 24x7 for support. Graded partial for two reasons. First, the SD-WAN and Managed Equipment service guide evidences 24x7x365 performance management by Lumen skilled operations engineers and continuous network monitoring, which covers the NOC half, but the SASE service guide states that the Pro-Managed service does not include security operations center services, so the SOC half is not part of the standard managed wrap. Second, no source reviewed documents ownership of incidents through to root cause analysis, structured service reviews or change governance as contractual elements; those terms were searched for in both service guides and the service schedule and not found."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:6d66149079a3a4ab68cf17eb","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"yes","transport_logistics":"partial","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"global_managed","curated_uk_basis":"No UK HQ (US); UK delivery is largely via partners following the EMEA divestment to Colt.","sector_review_queue":[{"sector":"financial_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced via a real, named individual testimonial | Not assessed in specific technical detail for this sector beyond the confirmed general testimonial | Not assessed for sector-specific frameworks, though the confirmed comprehensive PCI DSS support (Table 13) is directly relevant | Mahendra Verma, VP and Sr. Network Engineering Manager, Horizon Bank - named individual, named company, direct positive quote on service responsiveness | N/A | The testimonial is disclosed directly by Lumen as a compensated endorsement | A real, named banking-sector customer reference - genuinely credible, specific evidence, reinforced by Lumen's own confirmed, comprehensive PCI DSS support relevant to this exact sector, tempered by the confirmed compensated-endorsement disclosure.","named_evidence":"Mahendra Verma, VP and Sr. Network Engineering Manager, Horizon Bank - named individual, named company, direct positive quote on service responsiveness","evidence_source_ids":["evidence:lumen:17"]},{"sector":"healthcare","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, though not individually-named, customer account | Confirmed DIA (Dedicated Internet Access) and SASE solutions directly improving 'telehealth capabilities' specifically named | HIPAA not confirmed (Table 13) | An anonymous (within the specific snippet reviewed) customer account confirming replacement of aging MPLS/SD-WAN with modern DIA and SASE, directly citing improved 'telehealth capabilities' | N/A | The customer's individual name was not extracted in this specific research pass; the confirmed HIPAA gap remains a specific, worth-flagging limitation | A real, specific, primary-sourced account directly naming telehealth as an improved capability - genuinely concrete evidence for this sector-adjacent use case, even without full individual attribution confirmed in this pass.","named_evidence":"An anonymous (within the specific snippet reviewed) customer account confirming replacement of aging MPLS/SD-WAN with modern DIA and SASE, directly citing improved 'telehealth capabilities'","evidence_source_ids":["evidence:lumen:17"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced via a real, named individual testimonial | Confirmed SASE and EWAS (Enterprise Wide Area Services) capabilities directly relevant to distributed manufacturing operations | Not assessed for sector-specific frameworks | Jeff Pinkerton, VP of IT, Berridge Manufacturing Co. - named individual, named company, direct quote on SASE/EWAS implementation responsiveness | N/A | The testimonial is disclosed directly by Lumen as a compensated endorsement | A real, named, individually-attributable customer reference - genuinely stronger evidence than an anonymised case study, tempered by the confirmed compensated-endorsement disclosure.","named_evidence":"Jeff Pinkerton, VP of IT, Berridge Manufacturing Co. - named individual, named company, direct quote on SASE/EWAS implementation responsiveness","evidence_source_ids":["evidence:lumen:17"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"healthcare":false,"manufacturing":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://lumen.com/en-us/resources/customer-success-stories.html","https://www.lumen.com/en-hk/resources/customer-stories/flux.html"],"qualification":"Recovered Lumen testimonial identifies Valley Cities Behavioral Health Care replacing MPLS/SD-WAN with DIA and SASE. Correct anonymous attribution; compensated supplier-published endorsement. Berridge testimonial explicitly says SASE and EWAS will work together once implementation is complete. It is not evidence of a completed outcome. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"healthcare":"partial","manufacturing":"not_confirmed"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":1,"research_metrics":{"supported":23,"partial":1,"partner_delivered":2,"managed_service_dependent":0,"not_primary":0,"unconfirmed":14,"total":40,"reviewed":26,"completeness_percent":65,"completeness":0.65},"proven_evidence_count":23,"response_panel":null,"best_for":"Healthcare (partial evidence); both","best_for_fields":{"sectors_yes":[],"sectors_partial":["Healthcare"],"regions":[],"size":[],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"versa-networks","name":"Versa Networks","website":"https://versa-networks.com","category":"technology vendor","product_focus":"Inbound SSE, Secure Enterprise Browser, VOS, Versa Analytics","cost_model":"Quote-based subscription; MSP/carrier pricing depends on tenant scale, bandwidth, security package and delivery model.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"partial","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_primary","financial_services":"not_primary","retail_ecommerce":"partial","manufacturing":"partial","energy_utilities":"yes","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"not_primary","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"yes"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":90,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/versa-networks/","shortlist_summary":"Versa Networks built its SASE platform around a single-vendor, single-operating-system architecture from an early starting point - the company was founded in 2012, before the SASE category itself existed, on the thesis that legacy hardware and static WAN architectures were holding enterprises back from the cloud. That heritage shows up directly in VersaONE’s design: one operating system (VOS), one console, one policy engine and one data lake, with a single-pass parallel-processing architecture built to avoid the latency penalty of chaining separate security functions together.","key_differentiators":["Multi-tenancy from the ground up, making Versa a common choice for service providers and carriers building managed SD-WAN and SASE platforms.","Versa Operating System (VOS) provides a converged networking and security software stack across cloud and on-premises delivery.","Often the underlying platform when buyers select a managed SD-WAN service from a carrier or MSP."],"best_fit_for":["Service providers, carriers and MSPs building white-label managed SD-WAN or SASE services.","Enterprises consuming Versa indirectly through a managed provider (e.g. Verizon, Orange).","Buyers who want platform flexibility across cloud-delivered, on-premises and hybrid delivery models."],"watch_outs":["Less well-known to enterprise buyers as a direct purchase; most enterprise consumption is via service providers.","Buyers should confirm exactly which managed provider is delivering the platform and what the operational RACI looks like.","Brand recognition trails Cisco, Palo Alto and Fortinet in enterprise procurement processes."],"evidence_coverage_pct":0.65,"last_verified":"2026-09-01","evidence_source_count":51,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://versa-networks.com/documents/solution-briefs/versa-sase.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"In this model Versa NOC is responsible for managing and maintaining Versa SASE, while the customer IT team is responsible for management and monitoring of the CPEs. Versa does operate a NOC and a hosted, managed head-end and gateway service under its own SLA, so part of the estate is genuinely run by Versa. But its own solution brief places CPE management with the customer IT team in that model, and the alternative model places configuration management and monitoring with a Service Provider. End-to-end design, deploy, change, support and report by Versa itself for the whole service is not evidenced, so partial rather than yes."},"f03_co_managed_service":{"source_url":"https://versa-networks.com/documents/solution-briefs/versa-sase.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"In this model Versa NOC is responsible for managing and maintaining Versa SASE, while the customer IT team is responsible for management and monitoring of the CPEs. This is a textbook split of responsibility: Versa runs the platform and the customer retains CPE operations. Concerto's provider-level and tenant-level roles document the same shared model in the tooling."},"f07_lifecycle_management":{"source_url":"https://versa-networks.com/documents/datasheets/versa-networks-hosted-and-managed-head-end.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Head-end server hardware OS and security patch upgrades and updates For the hosted head-end, Versa documents software upgrades of Director, Analytics, Controller, Concerto and VMS plus OS and security patching, which is lifecycle handled as part of the service. Separately, hardware documentation covers a two-year limited warranty, next-business-day and same-business-day advance replacement, DOA handling and an end-of-life policy. Graded partial rather than yes because branch CPE firmware upgrades and renewals in a typical Versa deployment sit with the customer or the service provider partner, and hardware replacement coverage is a purchased support tier rather than something evidenced as included in the service by default."},"f12_application_aware_routing":{"source_url":"https://versa-networks.com/news/2018/versa-networks-present-adobe-sd-wan-use-case-onug-fall-2018.php","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, per-application SLA-based routing confirmed specifically via the Adobe deployment [19]"},"f17_cellular_and_5g_support":{"source_url":"https://docs.versa-networks.com/Secure_SD-WAN/01_Configuration_from_Director/Common_Configuration/Configure_WWAN","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The term WWAN interfaces refers to LTE, 4G, and 5G interfaces. Documentation covers LTE, 4G and 5G on a VOS WAN port, SIM activation and operator ID checks, and radio quality monitoring via RSRP, RSRQ, RSSI and SINR with banded signal states. It is documented as usable where a branch has no wired connection and alongside wired links, so both primary and failover roles are covered. On the source page the words WWAN interfaces are italicised; the italics add no characters to the rendered text."},"f18_cloud_on_ramp":{"source_url":"https://docs.versa-networks.com/Integrations_and_Solutions/Integrations/Endpoint_Detection_and_Response/Integrate_Versa_SASE_with_CrowdStrike_Falcon","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native - confirmed explicitly for AWS-hosted VOS deployment, described as 'cloud edge deployment such as AWS running VOS' [24]"},"f19_public_cloud_gateways":{"source_url":"https://docs.versa-networks.com/Security_Service_Edge_(SSE)/Configuration_from_Director/Ecosystem/Versa_SASE_Ecosystem","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Versa Cloud Gateways (VCGs) are Versa SASE Gateways which are deployed in Point of Presence (PoP) locations around the world. These are Versa's own gateways running Versa's own VOS software, not a third party's PoPs resold under Versa's name, so yes rather than partner_integrated. They deliver secure internet access, ZTNA, threat protection and DLP as a cloud service, and the SASE client selects the VCG offering lowest latency."},"f20_private_pops_dedicated_pops":{"source_url":"https://versa-networks.com/products/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Versa SASE is delivered via the cloud, on-premises, or as a blended combination of both Versa markets Private SASE and Sovereign SASE as distinct deployment models alongside the shared cloud. Network World, a named-author dated source, reports that Sovereign SASE runs entirely on customer-controlled infrastructure with the customer choosing its own compute, on-premises or in a private cloud. Confidence is medium rather than high because the Sovereign SASE product page itself would not render without JavaScript, so the strongest Tier 1 statement of the claim could not be read directly."},"f21_private_global_backbone":{"source_url":"https://docs.versa-networks.com/Security_Service_Edge_(SSE)/Configuration_from_Director/Ecosystem/Versa_SASE_Ecosystem","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Versa SD-WAN Traffic Engineered network which uses multiple global and regional providers for the underlay. Inter-gateway traffic rides a Versa-controlled traffic-engineered overlay that selects paths on least end-to-end latency and loss, and each VCG is connected to multiple global and multiple regional service providers with peering relationships. But the underlay is explicitly other carriers' capacity, not fibre or circuits owned by Versa. Graded partial: the control plane and path selection are Versa's, the physical backbone is not."},"f24_flexible_edge_form_factors":{"source_url":"https://docs.versa-networks.com/Integrations_and_Solutions/Integrations/Endpoint_Detection_and_Response/Integrate_Versa_SASE_with_CrowdStrike_Falcon","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native - Versa-certified white-box routers (third-party hardware running VOS) confirmed specifically via the Adobe deployment account; branch edge devices, cloud edge deployment, and on-premises appliances all confirmed as supported form factors [24]"},"f25_high_availability_design":{"source_url":"https://versa-networks.com/customers/case-studies/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed at a specific, quantified level via the Adobe case study - 'four-nines of availability for critical services' was an explicit deployment requirement Versa was chosen to meet [18]"},"f26_sla_backed_service_fabric":{"source_url":"https://versa-networks.com/documents/Versa-Hosted-SASE-SLA.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"target Uptime average of 99.999% (\"Uptime SLA Percentage\") measured monthly A published, dated SLA document covering Versa Hosted and Managed Secure Services Edge Gateways, with a tiered service-credit table running from 2 days of credit for uptime below 99.999% up to 24 days below 98.0%, plus a security processing latency commitment of 10ms without TLS inspection and 50ms with anti-virus, malware detection and IPS with TLS decryption. Contractual rather than best-effort, including a two calendar day claim window."},"f33_data_loss_prevention":{"source_url":"https://docs.versa-networks.com/Security_Service_Edge_(SSE)/Configuration_from_Concerto/Configure_Data_Loss_Prevention_in_Concerto","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Data loss prevention (DLP) is a set of tools and processes for detecting and preventing data breaches, cyber exfiltration, and unwanted destruction of sensitive data. Native to the platform and configured from Concerto. Content passing through the organisation's ports and protocols is scanned against match rules, with enforcement actions of Alert, Allow, Block, Reject, Quarantine, Encrypt, Redact or Tokenize, and all actions reported to Versa Analytics for review. Documentation also covers offline DLP, DLP data exfiltration policies and applying Microsoft MIP sensitivity labels."},"f35_soc_siem_soar_integration":{"source_url":"https://docs.versa-networks.com/Integrations_and_Solutions/Integrations/SIEM/Versa_Analytics_and_CrowdStrike_NG-SIEM_Integration","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed and well-evidenced via Versa Analytics' specific, itemised log-type list (flow logs, SD-WAN path and bandwidth usage, CGNAT, DHCP, DNS, SASE-web monitoring, secure access, traffic conditioning, URL filtering, and IDP logs) and confirmed export to CrowdStrike Falcon Next-Gen SIEM [26] Not confirmed"},"f36_centralised_orchestration":{"source_url":"https://versa-networks.com/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via a named practitioner review describing the console's 'ZTP (zero touch provisioning)' capability speeding up implementation [7]"},"f40_managed_service_assurance":{"source_url":"https://versa-networks.com/documents/datasheets/versa-premier-service.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Versa will provide Root-Cause Analysis for customer-reported P1 issues. The NOC half is evidenced: 24x7 monitoring of head-end alarms and application health, a Versa NOC responsible for managing and maintaining Versa SASE, formal root cause analysis on P1 incidents, and scheduled periodic or quarterly customer review meetings. What I did not find on any page I read is a 24x7 SOC performing proactive security monitoring on the customer's behalf, nor a documented change governance process. Graded partial on that gap. Note also that the Premier Service datasheet carries a 2020 copyright."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:05460064bfddb49a73b78910","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"partial","manufacturing":"partial","energy_utilities":"partial","government_public_sector":"partial","education":"partial","transport_logistics":"partial","professional_services":"partial","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). Delivered in the UK through carrier and MSP partners building managed services on Versa.","sector_review_queue":[{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | SASE-ready architecture, TCO reduction relevant to distributed manufacturing operations | Not assessed | A Global-200 pharmaceutical manufacturing company, described as achieving a SASE-ready architecture and TCO savings | Not itemised in detail beyond the Global-200 scale reference | Single case reference, anonymised (described by scale/category rather than named) | A real, credible, if anonymised, large-scale manufacturing reference - worth a direct follow-up to get the specific customer name and quantified outcomes if Netify needs a fully named case study for this sector.","named_evidence":"A Global-200 pharmaceutical manufacturing company, described as achieving a SASE-ready architecture and TCO savings","evidence_source_ids":["evidence:versa-networks:18"]},{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Multi-site security and cloud migration relevant to utility operations | Not assessed | Lambton Area Water Supply Systems (Ontario, Canada) - deployed Versa SASE to secure remote and headquarter offices while migrating sensitive data to cloud environments; a named practitioner quote from a General Manager, Information Systems in Energy and Utilities also references one-touch edge deployment | Named, specific Canadian utility customer | Single named case study, plus one further anonymised named-role quote | A genuinely credible, named, specific utility-sector customer (Lambton Area Water Supply Systems), reinforced by a second, separate energy-and-utilities-specific practitioner quote - reasonably solid sector evidence.","named_evidence":"Lambton Area Water Supply Systems (Ontario, Canada) - deployed Versa SASE to secure remote and headquarter offices while migrating sensitive data to cloud environments; a named practitioner quote from a General Manager, Information Systems in Energy and Utilities also references one-touch edge deployment","evidence_source_ids":["evidence:versa-networks:7","evidence:versa-networks:18"]},{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | SD-WAN/branch capability, cost-reduction focus | Not assessed | A top global retailer (600+ store locations) reporting improved cost savings and reduced operational overhead; a primary food retailer with multiple brands increasing store locations while reducing TCO; a named F100 retailer reclaiming $4M in previously wasted spend | Large-scale, multi-brand deployment evidenced directly | US-centric framing in the sources reviewed; specific named retailers not identified by name (described by category/scale instead) | Genuinely well-evidenced by scale and count (three separate retail-sector references), even though the specific retailer names weren't disclosed in the sources reviewed - a real, if anonymised, sector-fit signal.","named_evidence":"A top global retailer (600+ store locations) reporting improved cost savings and reduced operational overhead; a primary food retailer with multiple brands increasing store locations while reducing TCO; a named F100 retailer reclaiming $4M in previously wasted spend","evidence_source_ids":["evidence:versa-networks:18","evidence:versa-networks:22","evidence:versa-networks:25"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"energy_utilities":false,"manufacturing":false,"retail_ecommerce":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://versa-networks.com/customers/case-studies/","https://versa-networks.com/","https://aitranslatewpml.versa-networks.com/customers/case-studies/","https://versa-networks.com/lp/sase-cost-savings/"],"qualification":"Versa case index expressly identifies Lambton Area Water Supply Systems deploying SASE for remote offices and cloud data. Canadian utility case only. Versa identifies an anonymous Global-200 pharmaceutical manufacturer using Secure SD-WAN. Retain anonymous evidence, not a named reference. Versa documents an unnamed retailer with over 600 stores using Secure SD-WAN. Do not describe this as named customer proof. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"energy_utilities":"yes","manufacturing":"partial","retail_ecommerce":"partial"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":2,"research_metrics":{"supported":22,"partial":4,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":14,"total":40,"reviewed":26,"completeness_percent":65,"completeness":0.65},"proven_evidence_count":22,"response_panel":null,"best_for":"Energy and utilities; Retail and e-commerce (partial evidence); Manufacturing (partial evidence); Small business; platform","best_for_fields":{"sectors_yes":["Energy and utilities"],"sectors_partial":["Retail and e-commerce","Manufacturing"],"regions":[],"size":["Small business"],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"cato-networks","name":"Cato Networks","website":"https://www.catonetworks.com","category":"technology vendor","product_focus":"Cato Browser Extension, Cato Client, Cato DEM, Cato EPP/EDR","cost_model":"Quote-based subscription; typically site/user/bandwidth/security bundle based.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_entity","uk_basis":"The Cato Master Service Agreement, section 1.4, lists this UK contracting party. The entity identified in the buyer’s order determines the actual counterparty; this does not establish site coverage or managed-service scope.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"partner_integrated","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"yes","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"partial","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"yes","small_business":"not_confirmed"},"pricing_units":["per_site","per_user","per_bandwidth","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":100,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/cato-networks/","shortlist_summary":"Cato Networks is frequently scored by us at Netify as being one of the easiest platforms to actually use, and they’re often considered a more integrated offering than most of the competition, which is primarily down to building their SASE solution from the ground up rather than bolting security onto an existing networking product, or the other way round.","key_differentiators":["Single converged platform with no policy or log fragmentation across SD-WAN and security functions.","100+ PoP global private backbone reduces internet variability and provides predictable performance for SaaS-heavy traffic.","Strong story for organisations consolidating multiple point solutions onto one operational platform."],"best_fit_for":["Mid-market and enterprise buyers consolidating SD-WAN and SASE on one platform from a single vendor.","Global organisations with SaaS-heavy traffic patterns that benefit from a private backbone.","Teams without dedicated security operations capacity who want a managed SASE experience."],"watch_outs":["Less suited to best-of-breed buyers wanting Zscaler or Netskope as the SSE layer.","Customer does not own the underlay; circuits sourced separately, so multi-supplier coordination remains.","Less mature than incumbents for very large multinational deployments with heavy legacy MPLS estates."],"evidence_coverage_pct":0.6,"last_verified":"2026-09-01","evidence_source_count":62,"capability_evidence":{"f13_qos_and_traffic_shaping":{"source_url":"https://support.catonetworks.com/hc/en-us/articles/7790698733341","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native - Network Rules let admins assign a bandwidth-priority QoS tier to business-critical traffic, alongside acceleration/optimisation and transport-path settings, confirmed directly in Cato's admin documentation. [46]"},"f14_packet_loss_remediation":{"source_url":"https://support.catonetworks.com/hc/en-us/articles/360001868837","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native - packet duplication for packet loss mitigation, confirmed directly in Cato's own documentation: TCP packets duplicated across active links, UDP packets duplicated across active or standby links. [44] [45] [46]"},"f17_cellular_and_5g_support":{"source_url":"https://support.catonetworks.com/hc/en-us/articles/16308182518173-X1600-Cellular-Connectivity-Troubleshooting","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Socket X1600 now has a hardware version that supports Cellular (LTE/5G) connections Cato's own Learning Center documents integrated LTE/5G on the X1600 Socket, dual SIM management (\"By default, SIM Slot 1 is the active one, while Slot 2 is standby.\") and signal monitoring via RSSI, RSRP, SINR and RSRQ. The platform page corroborates transport choice: \"Customers can choose any mix of fiber, cable, xDSL, and cellular connections.\" All three definition elements (transport, SIM management, signal monitoring) are met."},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://catonetworks.com/platform/digital-experience-monitoring-dem/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Confirmed - DEM's AI-powered engines correlate real-user monitoring and synthetic probing [16] Requires DEM licence"},"f11_active_active_link_utilisation":{"source_url":"https://knowledge.catonetworks.com/docs/hardware","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"Cato Socket WAN links support active/active operation. Link design and policy must be configured for the deployment."},"f25_high_availability_design":{"source_url":"https://knowledge.catonetworks.com/docs/hardware","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"WAN redundancy and optional Socket redundancy are documented. HA Sockets require their own licences; resilience depends on the deployed design."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:0b8c3f42d28c71efefe6ed68","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"partial","education":"yes","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (Israel and US). Delivers in the UK from London and Manchester PoPs; contract direct or through UK partners including Netify routes.","sector_review_queue":[{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit (best-evidenced sector) | Zero-touch branch provisioning, backbone performance, DEM | PCI-DSS Level 1 | Ulta Beauty (large-scale, phased, near-zero-touch, 99.99% cutover success, 10 stores/night); Opkalla-documented jewelry retailer (24 stores, MSP cost reduction) | Backbone/PoP density matters most for geographically distributed store estates | Case evidence is US-centric; UK/EU retail-specific case studies not found in this pass | This is genuinely Cato's best-evidenced sector - Netify can cite the Ulta Beauty story with confidence given it's a named, detailed, metric-rich case study.","named_evidence":"Ulta Beauty (large-scale, phased, near-zero-touch, 99.99% cutover success, 10 stores/night); Opkalla-documented jewelry retailer (24 stores, MSP cost reduction)","evidence_source_ids":["evidence:cato-networks:24","evidence:cato-networks:25"]},{"sector":"education","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Referenced in a customer quote ('reorganize our entire security portfolio... for our students, professors, and administrators') | General SASE consolidation value referenced qualitatively | Not assessed | One qualitative customer quote found (unnamed institution) on catonetworks.com/platform/ | N/A | Quote-level evidence only, not a structured case study with metrics | Treat as a weak signal only - a single unattributed quote is not the same standard of evidence as the Ulta Beauty case study; do not over-weight it.","named_evidence":"One qualitative customer quote found (unnamed institution) on catonetworks.com/platform/","evidence_source_ids":["evidence:cato-networks:9"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"retail_ecommerce":false,"education":false},"reviewed_at":"2026-09-30T15:50:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.catonetworks.com/customers/ulta-beauty-reinvents-network-deliver-seamless-retail-experience/","https://www.catonetworks.com/customers/waseda-university-achieves-universal-secure-remote-learning-and-jumpstarts-digital-transformation-with-cato/"],"qualification":"Ulta Beauty primary case documents a SASE-led cloud SD-WAN transition and staged store rollout. Do not imply the three-year rollout is complete. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation. Waseda University primary case documents Cato secure remote learning in Japan via GlobalDots. Replacement named education evidence; does not validate the original anonymous quotation or UK education suitability.","sectors":{"retail_ecommerce":"yes","education":"partial"},"regions":{}}},"uk_evidence":{"entity":{"status":"evidenced","name":"Cato Networks (UK) Limited","source_urls":["https://www.catonetworks.com/msa/"],"checked_at":"2026-10-01T00:00:00Z","review_due":"2026-12-30T00:00:00Z","qualification":"The Cato Master Service Agreement, section 1.4, lists this UK contracting party. The entity identified in the buyer’s order determines the actual counterparty; this does not establish site coverage or managed-service scope."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":3,"research_metrics":{"supported":24,"partial":0,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":16,"total":40,"reviewed":24,"completeness_percent":60,"completeness":0.6},"proven_evidence_count":24,"response_panel":null,"best_for":"Retail and e-commerce; Education (partial evidence); Large global enterprise; Mid-market; platform","best_for_fields":{"sectors_yes":["Retail and e-commerce"],"sectors_partial":["Education"],"regions":[],"size":["Large global enterprise","Mid-market"],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"uk_entity","label":"UK contracting entity","source_urls":["https://www.catonetworks.com/msa/"],"reviewed_at":"2026-10-01T00:00:00Z","qualification":"The Cato Master Service Agreement, section 1.4, lists this UK contracting party. The entity identified in the buyer’s order determines the actual counterparty; this does not establish site coverage or managed-service scope."}},{"slug":"netskope","name":"Netskope","website":"https://www.netskope.com","category":"technology vendor","product_focus":"Borderless SD-WAN, Cloud Confidence Index (CCI), Netskope Cloud Exchange (CE), Netskope One","cost_model":"Quote-based subscription; modules commonly priced by users, sites, traffic and security functions.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"partial","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"yes","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"yes","retail_ecommerce":"not_primary","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"yes","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":120,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/netskope/","shortlist_summary":"Netskope sits in an interesting middle ground between a pure security-first platform and a fully networked one: unlike the likes of Zscaler, it has invested in its own converged mesh network (NewEdge) and a purpose-built SD-WAN (Borderless SD-WAN, built on the 2022 Infiot acquisition), so the ‘security company bolting on networking’ story is a few years further along than Zscaler’s; unlike Cato, that network is built on peering and interconnects across 67 regions rather than an owned private backbone.","key_differentiators":["Strong CASB heritage; widely recognised as a leading SSE vendor for SaaS-heavy environments.","Borderless WAN (from the Infiot acquisition) extends Netskope into single-vendor SASE for buyers wanting both layers from one platform.","Detailed SaaS application visibility and policy controls."],"best_fit_for":["Enterprises with deep SaaS adoption where CASB and DLP are top procurement priorities.","Buyers comparing single-vendor SASE platforms after starting with SSE.","Organisations selecting Netskope SSE alongside a separate SD-WAN platform via partner integration."],"watch_outs":["Native SD-WAN (Borderless WAN) is newer than dedicated SD-WAN platforms; validate path selection and QoS depth in RFP.","Fully managed service: not confirmed. Confirm who will operate the service and whether management is supplied directly or through a partner.","Premium pricing with modular structure; full SASE bundle costs can scale meaningfully with users and traffic."],"evidence_coverage_pct":0.6,"last_verified":"2026-09-01","evidence_source_count":66,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.netskope.com/press-releases/netskope-enables-msps-to-generate-revenue-faster-with-launch-of-new-catalyst-msp-sp-program-and-netskope-partner-orchestrator","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"A self-service multi-tenant orchestrator for the full SASE and AI product suite that quickly provisions production-ready customer environments. Multi-tenant provisioning and delegated administration across unlimited partner tiers are documented in the June 2026 Catalyst announcement and corroborated by ChannelE2E. Branded or white-label partner portals and reusable customer templates were not evidenced on any page read, so graded partial rather than yes."},"f07_lifecycle_management":{"source_url":"https://www.netskope.com/wp-content/uploads/2022/07/2025-06-Netskope-One-SD-WAN-DS-607-9.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"simple one-click RMA, customized applications The SD-WAN datasheet documents zero-touch activation and one-click hardware RMA, and the platform is cloud-managed from a single console. No page read states that firmware upgrades, patching, renewals or end-of-life planning are performed as part of the service, so graded partial rather than yes."},"f17_cellular_and_5g_support":{"source_url":"https://www.netskope.com/products/wireless-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Reliable, high-performance 5G connectivity for primary, backup, or active-active links delivers sub-second brownout/blackout protection. 5G Standalone is supported as primary, backup or active-active transport. eSIM with on-gateway LPAd covers SIM management, the Converged Gateway carries built-in 4G/5G with Netskope Zero Trust SIM across 400+ networks, and digital experience management reports cellular signal strength and quality."},"f26_sla_backed_service_fabric":{"source_url":"https://www.netskope.com/press-releases/netskope-sets-new-industry-benchmarks-for-cloud-security-performance","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Netskope launches an industry-first SLA committing to less than 50 ms of latency for processing encrypted traffic Contractual commitments cover uptime and availability at five nines plus latency for both decrypted and non-decrypted traffic. The NewEdge datasheet repeats industry-best SLAs for availability and latency. Support response-time and change-handling commitments sit in Support Terms, which were not reachable in this task."},"f40_managed_service_assurance":{"source_url":"https://www.netskope.com/netskope-technical-support","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"We are a global team and operate 24/7/365 Netskope runs a global support organisation on a 24/7/365 basis at Premium and Premium Plus tiers, with technical account management and a focused technical support engineer at Premium Plus. No page read describes a Netskope NOC or SOC proactively monitoring the customer service, owning incidents through to root cause analysis, or running structured service reviews and change governance, so graded partial."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:922007c7966bdb60d5b68da6","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). UK NewEdge presence; delivered direct or via UK security MSPs.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | DLP, CASB for insider-risk and data-loss use cases | Not assessed | JLL (real estate/professional services), MinterEllisonRuddWatts (law firm) | N/A | Two named case studies, reasonably detailed | A genuinely well-evidenced sector for Netskope specifically - two independent, named, detailed case studies covering related professional-services use cases (insider risk, fast SSE rollout).","named_evidence":"JLL (real estate/professional services), MinterEllisonRuddWatts (law firm)","evidence_source_ids":["evidence:netskope:31","evidence:netskope:32"]},{"sector":"financial_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | DLP, CASB, PCI DSS v4.0.1 certification | PCI DSS v4.0.1 explicitly certified; DORA explicitly named on the Compliance Centre | CARE Ratings (credit rating agency, India) | N/A | Single named case study, though the PCI-DSS and DORA compliance evidence is genuinely strong | The best-evidenced sector-compliance combination across all three vendors profiled so far - explicit PCI-DSS and DORA naming, plus a real financial-services case study.","named_evidence":"CARE Ratings (credit rating agency, India)","evidence_source_ids":["evidence:netskope:15","evidence:netskope:30"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"financial_services":false,"professional_services":false},"reviewed_at":"2026-09-30T15:30:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.netskope.com/resources/case-studies/care-ratings","https://www.netskope.com/resources/case-studies/jll","https://www.netskope.com/fr/blog/explaining-the-importance-of-netskopes-recent-expansion-of-newedge-in-the-uk","https://www.netskope.com/wp-content/uploads/2022/12/2025-03-NewEdge-DS-333-11.pdf"],"qualification":"CARE Ratings case confirms Netskope CASB, SWG and Private Access deployment at an Indian rating agency. SSE evidence, not proof of SD-WAN. JLL and MinterEllisonRuddWatts primary cases describe SSE/secure remote access in professional services. No UK delivery inference. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation. Netskope documents UK NewEdge infrastructure; 2025 map names London, Manchester and Dublin. This is cloud security/network presence, not evidence of last-mile circuits, UK contracting entity or an approved managed service for these sites.","sectors":{"financial_services":"yes","professional_services":"yes"},"regions":{"uk_ireland":"partial"}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"partial","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":4,"research_metrics":{"supported":21,"partial":3,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":16,"total":40,"reviewed":24,"completeness_percent":60,"completeness":0.6},"proven_evidence_count":21,"response_panel":null,"best_for":"Financial services; Professional services; platform","best_for_fields":{"sectors_yes":["Financial services","Professional services"],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"palo-alto-networks","name":"Palo Alto Networks Prisma SASE","website":"https://www.paloaltonetworks.com/sase","category":"technology vendor","product_focus":"ADEM, AI Access Security, Enterprise DLP, Precision AI / Strata Copilot","cost_model":"Quote-based subscriptions; appliance/ION and Prisma Access/SASE licensing typically priced by users, bandwidth, locations and term.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"not_confirmed","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"partner_integrated","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"yes","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_confirmed","professional_services":"not_primary","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":100,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/palo-alto-prisma-sase/","shortlist_summary":"Palo Alto Networks isn’t just selling SASE, it’s selling one door into a much larger security estate (NGFWs, Prisma Cloud, Cortex XDR/XSIAM, identity security) that most large enterprises already have some footprint in. That shows up directly in its differentiators: it’s one of the few vendors recognised as a Leader in all three of Gartner’s Single-Vendor SASE, SSE and SD-WAN Magic Quadrants simultaneously, and its ‘platformisation’ commercial strategy rewards multi-product commitment with steep discounts.","key_differentiators":["Prisma SASE converges SD-WAN, cloud-delivered security, and digital experience management (ADEM) under a single platform identity.","Strong threat intelligence and security capability inheritance from the wider Palo Alto Networks portfolio.","Often selected by buyers consolidating from multiple security vendors onto a single SASE platform."],"best_fit_for":["Enterprises with mature security operations that want SASE built around a leading security platform rather than a security layer on top of an SD-WAN platform.","Buyers consolidating CASB, SWG, ZTNA and FWaaS onto one vendor for unified policy.","Organisations with global SaaS-heavy traffic patterns that benefit from Prisma Access PoP coverage."],"watch_outs":["Premium pricing relative to firewall-led SD-WAN vendors; commercial model requires careful scoping by users, bandwidth, locations and term.","Managed delivery is via partners (Orange Business, NTT, others); first-party managed service is not the primary model.","Private global backbone is not vendor-owned; cloud transport uses internet and Prisma Access PoPs."],"evidence_coverage_pct":0.6,"last_verified":"2026-09-01","evidence_source_count":65,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.paloaltonetworks.com/sase/managed-sase","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"MSPs can securely delegate responsibilities while ensuring only authorized users can read or modify critical security configurations. Hierarchical multitenancy and granular role-based delegated administration are evidenced on the Managed SASE page (source 6) and the 2022 MSP press release (source 14), which describes a cloud-based management portal with hierarchical multitenancy using granular role-based access control. Graded partial rather than yes because no evidence of branded or white-label portals and service templates carrying the MSP's own brand was found on the pages reviewed; the Prisma SASE for MSPs datasheet (source 18) is gated and returned no usable text."},"f07_lifecycle_management":{"source_url":"https://docs.paloaltonetworks.com/prisma-access/administration/sase-private-location","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Palo Alto Networks manages sizing, content versioning, monitoring, upgrades, and security subscriptions. For the cloud service and for SASE Private Location, Palo Alto Networks handles sizing, content versioning, upgrades and security subscriptions as part of the service. Graded partial because hardware replacement and RMA, ION appliance firmware handling, renewals and end-of-life planning were not evidenced: the Support Policies page (source 19) is a link index that returned no substantive text, and no RMA or end-of-life policy document was read in this task."},"f19_public_cloud_gateways":{"source_url":"https://docs.paloaltonetworks.com/prisma-access/administration/prisma-access-overview","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"With Prisma Access, Palo Alto Networks deploys and manages the security infrastructure globally to secure your remote networks and mobile users. The PoPs are Palo Alto Networks' own service, sold under its own brand and covered by its own SLA, so this is yes rather than partner_integrated. Recorded for transparency: the compute those PoPs run on is rented from GCP and AWS (source 11), which is a hosting arrangement rather than reselling another vendor's SASE gateway service."},"f20_private_pops_dedicated_pops":{"source_url":"https://docs.paloaltonetworks.com/prisma-access/administration/sase-private-location","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"SASE Private Location enables you to deploy Prisma Access services within your own infrastructure. SASE Private Location is a customer-hosted deployment of Prisma Access services on the customer's own hypervisor and ISP links, with Palo Alto Networks retaining backend management. Corroborated by the sovereignty blog (source 12), which states that for organisations with the most stringent data residency requirements Palo Alto offers SASE Private Location. Colo-Connect (source 9) is a different thing: private connectivity into the shared cloud, not a dedicated PoP."},"f21_private_global_backbone":{"source_url":"https://www.paloaltonetworks.com/blog/sase/the-architecture-behind-prisma-sase-99999-uptime/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Prisma SASE leverages the infrastructure of major hyperscale providers such as Google Cloud Platform (GCP) and Amazon Web Services (AWS). Inter-region transport rides the backbones of Google Cloud and AWS rather than a network owned or controlled by Palo Alto Networks. The same post adds that Prisma SASE benefits from private peering connections between tier 1 cloud providers and other public cloud platforms, SaaS networks and ISPs, which again describes third-party peering. Colo-Connect (source 9) uses GCP interconnect technology, reinforcing the same conclusion. No evidence of Palo Alto-owned fibre, wavelengths or core routing was found."},"f26_sla_backed_service_fabric":{"source_url":"https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/datasheets/support/prisma-access-service-sla.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"If, during any calendar month, the Service availability falls below 99.999%, Customer can submit a claim for credit The published SLA is contractual with service credits and covers three separate measures: service availability at 99.999%, a Monthly Security Processing Latency Percentage at 99.99% and a Monthly SaaS Application Latency Percentage at 99.99%, with credits scaling to 100% where availability falls below 98%. That goes beyond best-effort targets. Support response times and change handling commitments were not evidenced in the SLA text reviewed."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:c7cf7997ec576a63c92818da","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"partial","professional_services":"yes","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). UK Prisma Access presence; delivered direct or via UK partners and carriers.","sector_review_queue":[{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Cost reduction and productivity capabilities relevant to a 'changing market' retail context | Not assessed for sector-specific frameworks | Westfield (shopping centre/retail property operator) | N/A | Single case study; less quantified in the source snippet reviewed than Grupo Bimbo specifically | Westfield is a genuine, named retail-sector customer - weaker in detail than Cato's Ulta Beauty or Zscaler's AutoNation, but a real evidence point rather than a total gap.","named_evidence":"Westfield (shopping centre/retail property operator)","evidence_source_ids":["evidence:palo-alto-prisma-sase:23"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | IoT/OT security, Zero Trust for OT devices, Cortex XDR forensics | Not assessed for sector-specific frameworks | Grupo Bimbo (200+ bakery plants, 35 countries), Colgate-Palmolive (unified IT/OT security) | Global multi-country deployment evidenced via Grupo Bimbo specifically | US-centric/global-brand case evidence; UK/EU manufacturing-specific case studies not found in this pass | By a clear margin the best-evidenced sector across all four vendors profiled - Grupo Bimbo alone provides more quantified, credible manufacturing/OT evidence than any single case study found for the other three vendors.","named_evidence":"Grupo Bimbo (200+ bakery plants, 35 countries), Colgate-Palmolive (unified IT/OT security)","evidence_source_ids":["evidence:palo-alto-prisma-sase:25","evidence:palo-alto-prisma-sase:27"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"manufacturing":false,"retail_ecommerce":false,"transport_logistics":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://paloaltonetworks.com/customers/colgate-palmolive-powers-secure-manufacturing-with-palo-alto-networks","https://paloaltonetworks.com/customers/grupo-bimbo-protects-its-global-connected-supply-chain-with-palo-alto-networks","https://paloaltonetworks.com/customers/westfield-responds-rapidly-to-a-changing-market-with-prisma-sase"],"qualification":"Colgate primary case explicitly identifies Prisma SD-WAN and Prisma Access at a manufacturer. Bimbo corroborates manufacturing security, not a separate logistics sector. Westfield primary case documents Prisma SASE for mall operations and retail access. Evidence relates to a mall operator, not every retail format. Grupo Bimbo is a bakery manufacturer. Its connected supply chain does not make it an independent transport/logistics customer. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"manufacturing":"yes","retail_ecommerce":"yes","transport_logistics":"not_confirmed"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":5,"research_metrics":{"supported":21,"partial":2,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":16,"total":40,"reviewed":24,"completeness_percent":60,"completeness":0.6},"proven_evidence_count":21,"response_panel":null,"best_for":"Retail and e-commerce; Manufacturing; platform","best_for_fields":{"sectors_yes":["Retail and e-commerce","Manufacturing"],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"cisco","name":"Cisco","website":"https://www.cisco.com/site/us/en/solutions/networking/sdwan/index.html","category":"technology vendor","product_focus":"Cisco AI Defence, Cisco Catalyst SD-WAN, Cisco Duo, Cisco ISE","cost_model":"Quote-based subscription/licence + appliance/support; Meraki public SKUs via partners, enterprise pricing varies by platform and term.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"yes","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_primary","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"partial","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"partial","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"not_primary","manufacturing":"yes","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"yes","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/cisco/","shortlist_summary":"Cisco’s own materials describe SASE explicitly as ‘a journey - you can start with SD-WAN or SSE and converge over time’, which is a different pitch to Cato’s, Zscaler’s, Netskope’s or Palo Alto’s single-platform-from-day-one story. In practise, ‘Cisco SASE’ means choosing between Cisco Secure Access (cloud-delivered SSE, evolved from Cisco Umbrella), Cisco Catalyst SD-WAN (the enterprise-grade fabric, formerly Viptela) or Meraki SD-WAN (the simpler, cloud-first option), and Cisco Secure Connect (a turnkey bundle of Secure Access plus Meraki SD-WAN specifically).","key_differentiators":["Broadest platform portfolio in the category, covering Catalyst SD-WAN for enterprise WAN, Meraki MX for cloud-managed branch, and Cisco Secure Access for converged SASE delivery.","Cloud OnRamp provides automated optimisation paths for Microsoft 365, Salesforce, and major cloud providers, with native integration into the Cisco security stack.","Large global partner and integrator ecosystem reduces delivery risk for buyers wanting managed or co-managed delivery."],"best_fit_for":["Enterprises already standardised on Cisco networking who want platform consistency from LAN through WAN to security.","Multinational organisations needing strong vendor presence across regions and a deep partner channel.","Buyers prioritising single-vendor risk consolidation across networking and security."],"watch_outs":["Two distinct SD-WAN product lines (Catalyst and Meraki) means buyers should confirm which fits the target deployment profile and the longer-term roadmap.","Managed delivery is partner-led rather than first-party, so service quality varies meaningfully by integrator.","Private global backbone is not part of the platform; cloud transport relies on internet and partner gateways."],"evidence_coverage_pct":0.575,"last_verified":"2026-09-01","evidence_source_count":66,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://documentation.meraki.com/Platform_Management/Managed_Service_Provider_Resources/Dashboard_Branding_for_MSPs","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Managed Service Providers (MSPs) can now take advantage of custom branding options within the Cisco Meraki Dashboard. All four elements of the definition are evidenced. Branded portals from the Meraki dashboard branding documentation, which also states \"Any logos that are applied to Dashboard should be the logo of the MSP and not of the end customer.\" Tenant isolation and delegated administration from multi-organisation management, corroborated on the Secure Access datasheet: \"Large enterprise customers can manage multiple organizations (orgs) through a single user interface, with central access and license management.\" Branding is configured per organisation and can be cloned to new organisations as a template."},"f14_packet_loss_remediation":{"source_url":"https://investor.cisco.com/news/news-details/2026/Cisco-Redefines-Security-for-the-Agentic-Era-with-AI-Defence-Expansion-and-AI-Aware-SASE/default.aspx","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, specifically confirmed in the AI-traffic context - the February 2026 AI-aware SASE announcement explicitly names 'packet duplication' as an AI traffic optimization technique [25]"},"f19_public_cloud_gateways":{"source_url":"https://documentation.meraki.com/CiscoPlusSecureConnect/Cisco___Secure_Connect_Pre-configuration_Checklist/Data_Centers","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Cisco Secure Connect services operate in the Cisco Umbrella global cloud architecture which is network of data centers located throughout the world interconnected with a high speed, low latency backbone. Yes rather than partner_integrated. This is Cisco's own service infrastructure, not a third party's PoPs that Cisco resells: Cisco owns and operates the Umbrella global cloud architecture, publishes its data centre list, and enforces security and delivers remote access from it. Corroborated by the Umbrella global network page, \"The Cisco Umbrella global cloud architecture serves more than 30,000 customers daily in 190+ countries.\" AWS, Azure and GCP connectivity was disregarded as it does not meet the definition."},"f21_private_global_backbone":{"source_url":"https://documentation.meraki.com/CiscoPlusSecureConnect/Cisco___Secure_Connect_Pre-configuration_Checklist/Data_Centers","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Cisco Secure Connect services operate in the Cisco Umbrella global cloud architecture which is network of data centers located throughout the world interconnected with a high speed, low latency backbone. Partial rather than yes. A global, not national, footprint is clearly evidenced and the documentation states the data centres are interconnected by a backbone. What is not evidenced is the ownership or control test in the definition: no page reviewed states that Cisco owns or controls that backbone rather than buying transit or leased capacity. The Umbrella global cloud architecture page instead emphasises internet peering and anycast, \"Umbrella peers directly with more than 1000 organizations\", which points towards an internet-peering-centric design. Graded partial on the ownership gap. See conflicts."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:3e7b3c72170a8c6cadaf8368","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). Extensive UK channel; Catalyst and Meraki widely delivered as UK managed services.","sector_review_queue":[{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | Distributed-facility SD-WAN and security consolidation; ThousandEyes for multi-site assurance | Not assessed for sector-specific frameworks | Peco Foods (poultry processing, 7,500+ employees, 20 facilities across the Southeast US) | Multi-facility deployment evidenced directly | US-centric case evidence; single company rather than the multi-country breadth of Palo Alto's Grupo Bimbo evidence | A genuinely credible, named, quoted manufacturing case study - not as expansive as Grupo Bimbo's 35-country story, but solid, specific evidence (a 200% user-experience improvement, named IT manager) for a real distributed-facility food-processing operation.","named_evidence":"Peco Foods (poultry processing, 7,500+ employees, 20 facilities across the Southeast US)","evidence_source_ids":["evidence:cisco:31","evidence:cisco:32","evidence:cisco:34","evidence:cisco:35","evidence:cisco:37"]},{"sector":"healthcare","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Cloud-first, hardware-light deployment relevant to multi-site hospitality operators | Not assessed | Mitchells & Butlers (UK pub/restaurant operator) | UK-based customer specifically - directly relevant to Netify's UK-focused work | Single case study | Genuinely useful for Netify specifically: this is the only UK-named customer found across all five vendor profiles produced so far, evidenced by a named Head of Technology and Support quote about cloud-first infrastructure alignment.","named_evidence":"Mitchells & Butlers (UK pub/restaurant operator)","evidence_source_ids":["evidence:cisco:31"]},{"sector":"hospitality_leisure","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Cloud-first, hardware-light deployment relevant to multi-site hospitality operators | Not assessed | Mitchells & Butlers (UK pub/restaurant operator) | UK-based customer specifically - directly relevant to Netify's UK-focused work | Single case study | Genuinely useful for Netify specifically: this is the only UK-named customer found across all five vendor profiles produced so far, evidenced by a named Head of Technology and Support quote about cloud-first infrastructure alignment.","named_evidence":"Mitchells & Butlers (UK pub/restaurant operator)","evidence_source_ids":["evidence:cisco:31"]},{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Fast, low-complexity deployment relevant to smaller professional-services firms specifically | Not assessed | George Sink, P.A. (law firm) | N/A | Single case study, though genuinely specific and quotable (2-hour deployment, named CIO) | A real, credible, if narrow, professional-services proof point - the 2-hour deployment claim specifically is one of the standout pieces of evidence in this entire profile.","named_evidence":"George Sink, P.A. (law firm)","evidence_source_ids":["evidence:cisco:31"]},{"sector":"government_public_sector","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | FedRAMP Moderate across Secure Access, ThousandEyes, Duo and Catalyst SD-WAN together | FedRAMP Moderate (multiple named components) | Indiana Office of Technology (ThousandEyes specifically, not confirmed for the full Secure Access stack) | Coherent multi-component FedRAMP story, capped at Moderate | Weaker than Zscaler's or Palo Alto's FedRAMP High/DoD IL evidence | A genuinely multi-product, coherent public-sector compliance story, though it caps out at a lower assurance level (Moderate) than two of the other four vendors profiled - a specific, worth-stating nuance.","named_evidence":"Indiana Office of Technology (ThousandEyes specifically, not confirmed for the full Secure Access stack)","evidence_source_ids":["evidence:cisco:16","evidence:cisco:17","evidence:cisco:21"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"professional_services":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.cisco.com/c/dam/en/us/products/security/secure-access/customer-highlight-peco-foods.pdf","https://www.cisco.com/site/us/en/about/case-studies-customer-stories/mitchells-butlers.html","https://cisco.com/site/us/en/solutions/secure-access-service-edge-sase/index.html","https://www.cisco.com/c/en/us/products/collateral/plus-as-a-service/george-sink-law-customer-cs.pdf"],"qualification":"Peco Foods is identified as food manufacturing with a Cisco SASE deployment. Manufacturing evidence is US-based. The separate Mitchells and Butlers case documents UK hospitality SASE and Meraki SD-WAN. Regional coverage remains partial: it does not establish coverage of every UK/Ireland site or a contracting entity. Neither case certifies compliance or suitability for a particular estate. Recovered Cisco George Sink PDF: Secure Connect deployed in a law firm; SD-WAN expansion described as a next step. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"manufacturing":"yes","hospitality_leisure":"yes","professional_services":"yes"},"regions":{"uk_ireland":"partial"}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"partial","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":6,"research_metrics":{"supported":21,"partial":1,"partner_delivered":0,"managed_service_dependent":0,"not_primary":1,"unconfirmed":17,"total":40,"reviewed":23,"completeness_percent":58,"completeness":0.575},"proven_evidence_count":21,"response_panel":null,"best_for":"Manufacturing; Professional services; Hospitality and leisure; Large global enterprise; platform","best_for_fields":{"sectors_yes":["Manufacturing","Professional services","Hospitality and leisure"],"sectors_partial":[],"regions":[],"size":["Large global enterprise"],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"check-point","name":"Check Point","website":"https://www.checkpoint.com/harmony/sase","category":"technology vendor","product_focus":"AI Network Firewall / AI Defence Plane, CASB, Check Point Infinity Architecture, Check Point SASE Platform","cost_model":"Quote-based subscription; Microsoft marketplace listing exists but enterprise deployments normally require quote.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"partial","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"not_confirmed","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":80,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/checkpoint/","shortlist_summary":"Check Point’s SASE platform has been through two names in under three years. The underlying technology began life as Perimeter 81, an independent Israeli SSE/ZTNA vendor founded in 2018 that had grown to more than 3,000 customers and a Forrester Zero Trust Wave recognition before Check Point Software Technologies - the much larger, long-established Israeli cybersecurity vendor behind Check Point Firewall-1, founded in 1993 - acquired it for approximately $490 million in a deal announced September 2023.","key_differentiators":["Harmony SASE combines Check Point security heritage with cloud-delivered SASE and optimised SD-WAN performance.","Strong story for organisations already running Check Point firewalls who want to extend into SASE.","Available via Microsoft Azure marketplace for buyers wanting consolidated cloud procurement."],"best_fit_for":["Existing Check Point customers extending firewall investment into SD-WAN and SASE.","Mid-market enterprises consolidating security and SD-WAN under one vendor.","Buyers prioritising security maturity over network-platform maturity."],"watch_outs":["Dynamic path selection: not confirmed; QoS and traffic shaping: not confirmed; Packet loss remediation: not confirmed. Confirm the exact SD-WAN product and required branch behaviour.","Smaller SD-WAN deployment footprint than category leaders; validate scale references.","Managed delivery is partner-led."],"evidence_coverage_pct":0.55,"last_verified":"2026-09-01","evidence_source_count":44,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.checkpoint.com/services/managed-security/managed-firewall/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Managed Firewall Services with 24/7 monitoring, policy management, tuning, patching, upgrades, incident handling, and expert support for Check Point and third-party NGFWs. Check Point sells first-party managed services covering firewall, EDR, vulnerability management and Microsoft 365, with 24/7 monitoring, policy management and incident handling. I did not find a page describing Check Point itself designing, deploying, changing and reporting on the SASE service end to end for the customer, so partial rather than yes. The Managed Firewall as a Service page (register 20) could not be read."},"f03_co_managed_service":{"source_url":"https://www.checkpoint.com/services/managed-security/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Delivering co-managed services with partners and customers for optimal protection through unified collaboration and robust security strategies. Check Point explicitly frames its managed security offer as co-managed, with its experts acting as an extension of the customer team while the customer retains its own operations."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.checkpoint.com/partners/mssp-program/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Leverage true multi-tenancy, a wide range of security services, and full API integration to streamline customer management and accelerate service delivery. Multi-tenant architecture, delegated multi-customer management through one portal and API integration are all stated on the MSSP programme page. I found no statement of branded or white-label portals under the MSP's own brand, which the definition requires, so partial rather than yes."},"f05_professional_services_and_migration_support":{"source_url":"https://www.checkpoint.com/services/professional-services/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"As your security infrastructure becomes more complicated, our Professional Services team can assist you with your security design, deployment, operation, and optimization needs. The same page lists a Jumpstart Program, Maestro Deployment, SmartOptimize, Gateway Health Check and Lifecycle Management Services, and states delivery covers adding new features and layers while ensuring smooth migrations and scheduled updates. Training programmes are listed separately. Explicit runbook and rollback wording was not found."},"f07_lifecycle_management":{"source_url":"https://www.checkpoint.com/support-services/support-plans/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Check Point shall use commercially reasonable efforts to ship the replacement hardware on the same business day, however, shipment my occur on the next business day if required for operational reasons. Support programmes include RMA hardware replacement with same business day shipment and onsite delivery options, plus Latest Hot Fixes & Service Packs and Major Upgrades & Enhancements on every tier, and Lifecycle Management Services is a named professional service. This is a purchased support or services contract rather than something bundled into every subscription. The dedicated lifecycle management page (register 15) could not be read. The quote reproduces the page's own typo."},"f17_cellular_and_5g_support":{"source_url":"https://www.checkpoint.com/harmony/sase/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Sub-second failover to any WAN link: MPLS, 5G, broadband 5G is named as a supported WAN failover transport for SD-WAN, and the NGFW page notes a Wi-Fi 5G option on small business appliances and 1 GbE & 5G wireless secure connectivity on industrial appliances. I found no statement covering SIM management or signal monitoring, which the definition requires, so partial. The Quantum SD-WAN page (register 14) could not be read."},"f19_public_cloud_gateways":{"source_url":"https://www.checkpoint.com/harmony/sase/private-access/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our high-performance network provides fast delivery between corporate sites worldwide thanks to multiple tier-1 links at each point-of-presence (PoP), reserved bandwidth, and peering agreements. Check Point operates its own PoP and data centre estate for SASE internet access, private access and SaaS security, described as 80+ to 85+ global data centres depending on the page. This is Check Point's own infrastructure rather than a resold third party edge, so yes rather than partner_integrated."},"f21_private_global_backbone":{"source_url":"https://www.checkpoint.com/harmony/sase/private-access/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our high-performance network provides fast delivery between corporate sites worldwide thanks to multiple tier-1 links at each point-of-presence (PoP), reserved bandwidth, and peering agreements. The heading above this text is Global Private Backbone, and the SASE overview separately states Private Access delivers high performance with a full mesh global private backbone. The backbone is global rather than national. Check Point describes it as built on purchased tier-1 links, reserved bandwidth and peering rather than fibre it owns, so it is a controlled overlay backbone rather than owned infrastructure."},"f26_sla_backed_service_fabric":{"source_url":"https://www.checkpoint.com/support-services/support-plans/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Get advanced access to our large, self-service knowledge base and a committed 30-minute response time to issues with level one severity. Check Point publishes contractual support SLAs with per-severity response times (30 minutes for Severity 1 across all tiers), 7x24 coverage on Premium and above, and named SLA documents including the Check Point Direct Support Program Service Level Agreement. I found no published availability, latency, jitter or loss commitment for the SASE cloud service, so partial rather than yes."},"f27_integrated_next_generation_firewall":{"source_url":"https://checkpoint.com/harmony/sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, via the confirmed FWaaS capability [24] [28]"},"f33_data_loss_prevention":{"source_url":"https://www.checkpoint.com/harmony/sase/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Inline and API-based enforcement with Application Control for 10,000+ cloud apps, tenant restrictions, DLP, and Threat Prevention powered by ThreatCloud AI The same pages state AI-powered data classification with 800+ predefined data types, and the Internet Access page cites in-browser data loss prevention. Content classification and inline enforcement are clearly evidenced. Explicit alerting and exception workflow detail was not found on the pages read."},"f35_soc_siem_soar_integration":{"source_url":"https://sase.checkpoint.com/solutions/compliance/soc-2","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine technical specificity as part of the platform's SOC 2 Type 2 compliance architecture - 'monitor system activity, view system configuration changes and assign user access controls', with audit trails covering 'the modification, addition, or removal of key system components' [18] Not confirmed"},"f40_managed_service_assurance":{"source_url":"https://www.checkpoint.com/services/managed-security/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our 24/7 global service team will be there whenever and wherever you need them to help make sure your organization is always protected. 24/7 coverage, incident handling and NOC and SOC oriented managed services are stated, and the services pages claim 99% of threats responded to within 1 hour. I found no statement of provider-owned root cause analysis, structured service reviews or change governance, so partial. The Managed Detection and Response page (register 19) could not be read."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:745e1446fdf98dad45f0b532","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"partial","professional_services":"partial","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (Israel/US). Harmony SASE UK presence; delivered via UK security partners.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"requires_confirmation","qualification":"Unknown - not assessed, no case study found, though the platform's confirmed strong, independent review base spans real, named-role practitioners describing use across multiple industries generally | Not assessed in detail by sector | Not assessed | Named-role reviews confirmed generally (e.g. 'Manager, IT Security and Risk Management' at a company with $250M-500M revenue, per Gartner Peer Insights), though not sector-specific to professional services | N/A | General practitioner reviews exist; a sector-specific case study does not | Real, credible, named-role user evidence exists at a general level (Table 9, 11), though not itemised by professional-services sector specifically.","named_evidence":"Named-role reviews confirmed generally (e.g. 'Manager, IT Security and Risk Management' at a company with $250M-500M revenue, per Gartner Peer Insights), though not sector-specific to professional services","evidence_source_ids":["evidence:checkpoint:23"]}],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":7,"research_metrics":{"supported":17,"partial":5,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":18,"total":40,"reviewed":22,"completeness_percent":55,"completeness":0.55},"proven_evidence_count":17,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"aryaka","name":"Aryaka","website":"https://www.aryaka.com","category":"technology vendor","product_focus":"AI>Observe, AI>Secure, Aryaka Cyber Threat Research Lab (CTRL), Aryaka Network Access Point (ANAP)","cost_model":"Quote-based managed service; pricing normally depends on sites, bandwidth, regions, security stack and optimisation.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"partial","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"yes"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_primary","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"partial","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","per_bandwidth","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":40,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/aryaka/","shortlist_summary":"Aryaka is one of the older, more established names in this category - founded 2009, more than 15 years before ‘SASE’ existed as an analyst-defined term, originally as a WAN optimisation and application-acceleration company before evolving into what it now calls ‘Unified SASE as a Service’. That specific phrase matters: Aryaka positions itself, and is described by independent commentary, as the first company to deliver SASE as a fully managed service rather than a self-managed software platform, built around a distinctive single-pass architecture (OnePASS) running over an owned, global private core network spanning more than 40 points of presence across six continents.","key_differentiators":["Unified SASE delivered as a managed service from end to end, including the private global core network and WAN optimisation.","Strong story for global organisations needing predictable performance between regions without internet variability.","Embedded WAN optimisation differentiates from pure cloud-delivered SASE platforms."],"best_fit_for":["Global enterprises wanting SASE delivered as a fully managed service rather than as DIY platform plus tools.","Buyers who need consistent inter-regional performance for chatty applications.","Organisations preferring a vendor that owns the platform and the managed service rather than coordinating multiple parties."],"watch_outs":["Smaller PoP footprint and partner ecosystem than the hyperscale SASE vendors; coverage must match your geographic profile.","DIY / self-managed model: supported. Confirm which operating tasks your team retains and what Aryaka operates.","CASB capability: supported; Data loss prevention: supported. Confirm inspection modes, licences and policy depth in the proposal."],"evidence_coverage_pct":0.5,"last_verified":"2026-09-01","evidence_source_count":46,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.aryaka.com/datasheet/smartmanage-datasheet/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Utilizes the Aryaka Network Management and Control (ANMC) system for scalable, multi-tenant automation and orchestration Multi-tenant orchestration is confirmed at platform level, the partner programme names Managed Service Providers and System Integrators as a partner category, and co-management can be delegated to an Aryaka partner. However I found no vendor statement about white-label or partner-branded portals, delegated administration roles or tenant templates on the partners page or elsewhere, so this falls short of the full definition."},"f17_cellular_and_5g_support":{"source_url":"https://www.aryaka.com/last-mile-connectivity/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka provides truly global last mile services including wireline and 4G/5G wireless connectivity 4G and 5G are confirmed as supported and procurable last mile transport. Graded partial rather than yes because the ANAP appliance datasheet contains no mention of LTE, 5G, cellular, SIM or modem, and the High Availability datasheet describes redundancy only as dual ISP links, so integrated modem, SIM management and signal monitoring are not evidenced in the sources reviewed."},"f19_public_cloud_gateways":{"source_url":"https://www.aryaka.com/products-and-services/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka Secure Remote Access provides integrated, managed VPN as a service connecting users to the nearest Aryaka POP. The gateways are Aryaka's own infrastructure, not a resold third party's. Corroborated by \"a global private network interconnected in a mesh service fabric of over 40 Points of Presence (PoPs) across the globe\" and by the NGFW being hosted on the ANAP and on Aryaka's POP, so SaaS acceleration, remote access and security enforcement all run on vendor operated PoPs."},"f24_flexible_edge_form_factors":{"source_url":"https://aryaka.com/unified-sase-platform/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity - the Aryaka Network Access Point (ANAP), included as part of the service rather than sold as separate hardware [9]"},"f25_high_availability_design":{"source_url":"https://www.aryaka.com/unified-sase-platform/","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"ANAP high-availability configurations are available; validate appliance, circuit and implementation requirements for each site."},"f26_sla_backed_service_fabric":{"source_url":"https://www.aryaka.com/datasheet/smartmanage-datasheet/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Operates 24x7x365 to maintain industry-leading SLAs for uptime, latency, jitter and packet loss globally. Aryaka publishes a full SLA document with per service uptime targets (\"Uptime of 99.999%\" for PrivateCore, NGFW-SWG, PrivateAccess and RemoteUser, and Internet Breakout), a target of \"Packet Loss of less than 0.1%\", per minute probing, monthly measurement and graduated service credits of 5, 10 and 20 percent of Link Service Fees. That is contractual rather than best effort."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.aryaka.com/datasheet/ngfw-swg-solution/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka has built a dedicated security stack on top of our Software Defined Wide Area Network (SD-WAN) architecture The NGFW-SWG is Aryaka authored and runs on both the ANAP and Aryaka POPs, with IPS, anti-malware, application control via inline CASB and DPI, and URL filtering that \"Protects users from accessing malicious URLs using reputation scores for more than 32 billion URLs.\" Note that a separate optional SmartSecure Hosted VM Firewall Service is partner technology (\"The first technology partner providing the NGFW functionality is Palo Alto Networks with its VM series of virtualized NGFWs.\") and the Services Description and Terms references a Check Point EULA, so a partner_integrated firewall option exists alongside the native one. The integrated platform firewall itself is native."},"f31_secure_web_gateway":{"source_url":"https://aryaka.com/sase/sase-architecture/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as part of the unified single-pass stack [6]"},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://aryaka.com/case-study/electronics-company/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, well-evidenced via the confirmed 'greatly improved network performance' customer testimony and the platform's confirmed application-acceleration heritage [22] Not confirmed"},"f40_managed_service_assurance":{"source_url":"https://www.aryaka.com/datasheet/global-connectivity-solution/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka operates its own 24/7 NOC (Network Operations Center) to manage, orchestrate, and monitor all traffic The 24/7 NOC half of the definition is well evidenced: Aryaka runs its own NOCs \"24x7x365 to maintain industry-leading SLAs for uptime, latency, jitter and packet loss globally\", provides \"24x7 proactive Link Monitoring and management of Customer's procured last mile links\" and \"24x7 health monitoring and handle incident management issues related to the ZTNA Gateways\". Graded partial because the Services Description and Terms explicitly excludes a managed SOC from at least one offering: \"managed SOC (Security Operation Center) are not part of the scope of the Managed Firewall Service offering, and Customer is solely responsible for these functions.\" No published evidence found for root cause analysis commitments or structured service review and change governance."},"f02_diy_self_managed_model":{"source_url":"https://www.aryaka.com/use-cases/network-and-security-convergence/","reviewed_at":"2026-10-01T00:00:00Z","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka explicitly offers fully managed, co-managed and self-managed delivery. Confirm the buyer’s retained tasks and service scope; self-management is not evidence of a standalone appliance purchase."},"f01_fully_managed_service":{"source_url":"https://www.aryaka.com/unified-sase-platform/","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"Aryaka-managed delivery is an available service model; scope and responsibilities must be agreed in the service contract."},"f03_co_managed_service":{"source_url":"https://www.aryaka.com/unified-sase-platform/","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"Co-managed delivery is offered; confirm the division of responsibilities with Aryaka or its delivery partner."},"f21_private_global_backbone":{"source_url":"https://www.aryaka.com/unified-sase-platform/","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"Aryaka documents a global private network. This does not establish private last-mile access, every-country coverage or a site-specific SLA."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:be96a103e360c6122afebb8d","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"partial","financial_services":"yes","retail_ecommerce":"partial","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). UK PoP on the private core; managed-service delivery into the UK.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, if smaller-scale, named customer example | SD-WAN reliability and application performance directly relevant | Not assessed for sector-specific frameworks | KAWO (a named social-media start-up customer, described as benefiting from reliable network performance for global users) | N/A | A smaller-scale customer example relative to the strong manufacturing-sector evidence | A real, named customer example exists for this general sector category, though at a smaller scale than the strongest evidence found for manufacturing.","named_evidence":"KAWO (a named social-media start-up customer, described as benefiting from reliable network performance for global users)","evidence_source_ids":["evidence:aryaka:20"]},{"sector":"transport_logistics","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced at a general level | Multi-site, multi-cloud connectivity plausibly relevant | Not assessed for sector-specific frameworks | Confirmed directly as a served sector generally: 'customers span... transportation, logistics... industries with complex multi-site, multi-cloud network requirements' | N/A | General sector confirmation exists without a named individual customer example | A real, primary-sourced confirmation of sector fit, though without a named individual customer example to reinforce it directly.","named_evidence":"Confirmed directly as a served sector generally: 'customers span... transportation, logistics... industries with complex multi-site, multi-cloud network requirements'","evidence_source_ids":["evidence:aryaka:16"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | SD-WAN reliability, multi-site connectivity, and managed operations directly relevant to distributed manufacturing operations | Not assessed for sector-specific frameworks | A named Fortune 1000 chemicals/materials producer (Albemarle Corporation); a detailed, technically specific (if company-name-anonymised) semiconductor-manufacturing case study benchmarked against Cato and VeloCloud; confirmed directly as a served sector generally ('customers span manufacturing... industries') | Global - the named/detailed case studies span facilities in more than 100 countries (Albemarle) and multiple Asia-Pacific/North American sites (the semiconductor case) | The semiconductor case study's company name was withheld | Genuinely the best-evidenced sector in this entire profile - a real, named, large public company (Albemarle) plus a detailed, technically specific anonymised case study together give this sector exceptionally strong, concrete evidence.","named_evidence":"A named Fortune 1000 chemicals/materials producer (Albemarle Corporation); a detailed, technically specific (if company-name-anonymised) semiconductor-manufacturing case study benchmarked against Cato and VeloCloud; confirmed directly as a served sector generally ('customers span manufacturing... industries')","evidence_source_ids":["evidence:aryaka:16","evidence:aryaka:23","evidence:aryaka:24"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"transport_logistics":false},"reviewed_at":"2026-09-30T15:50:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.aryaka.com/case-study/albemarle/","https://www.aryaka.com/solution-brief/regional-network/","https://www.aryaka.com/press/cloud-first-managed-sd-wan-and-sase-pioneer-aryaka-activates-eu-friendly-dublin-services-pop-to-address-growing-customer-demand/","https://www.aryaka.com/docs/Transitex-Case-Study-2020.pdf"],"qualification":"Published manufacturing customer evidence for managed global WAN and last-mile services. Does not establish UK ten-site commercial fit or current supplier availability.  Transitex freight/logistics primary case documents Aryaka SmartSecure Remote Access through Cloud365 for China connectivity. Supports logistics experience with qualification; not proof of full branch SD-WAN, current UK delivery or the original generic claim.","sectors":{"manufacturing":"yes","transport_logistics":"partial"},"regions":{"uk_ireland":"partial"}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"partial","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":8,"research_metrics":{"supported":16,"partial":4,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":20,"total":40,"reviewed":20,"completeness_percent":50,"completeness":0.5},"proven_evidence_count":16,"response_panel":null,"best_for":"Manufacturing; Transport and logistics (partial evidence); both","best_for_fields":{"sectors_yes":["Manufacturing"],"sectors_partial":["Transport and logistics"],"regions":[],"size":[],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"fortinet","name":"Fortinet FortiSASE","website":"https://www.fortinet.com/products/sd-wan","category":"technology vendor","product_focus":"Fabric Connectors, FortiClient, FortiGuard AI-Powered Security Services, FortiManager / FortiAnalyzer","cost_model":"Quote-based appliances/subscriptions/support; public reseller pricing exists for hardware but enterprise managed/SASE bundles require quote.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"partner_integrated","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"yes","financial_services":"not_primary","retail_ecommerce":"not_confirmed","manufacturing":"not_primary","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"partial","transport_logistics":"yes","professional_services":"not_primary","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":170,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/fortinet-fortisase/","shortlist_summary":"FortiSASE runs the same FortiOS operating system, and the same single-pass inspection engine, that has powered Fortinet’s physical FortiGate firewalls for over two decades. That’s a meaningfully different starting point from building a SASE platform natively for the cloud from scratch - the practical result is that FortiGate customers get a consistent policy and inspection model whether traffic is inspected on-premises or in a FortiSASE cloud point of presence, and Fortinet’s own commercial materials lean hard into a ‘Security Fabric’ discount for exactly these existing customers.","key_differentiators":["Native convergence of networking and security on a single operating system (FortiOS) across FortiGate edge, FortiManager and FortiSASE.","Strong story for buyers who want secure SD-WAN and SASE delivered from one vendor platform rather than assembled from partner integrations.","Wide appliance range covering everything from small branch to large data centre, with public hardware pricing visible through resellers."],"best_fit_for":["Security-first buyers who want SD-WAN and SASE under a single policy and log domain.","Mid-market and enterprise organisations that already run FortiGate firewalls and want to extend into SD-WAN and cloud-delivered security.","Buyers comparing single-vendor SASE platforms (alongside Cato, Palo Alto, Cisco) for converged operations."],"watch_outs":["Like Cisco, managed delivery is via partners rather than Fortinet directly; underlay and field operations are not owned by the vendor.","Buyers wanting a private global backbone will need to validate FortiSASE PoP coverage against their geographic footprint.","Best-of-breed buyers may prefer integrating FortiGate SD-WAN with a separate SSE platform (Zscaler, Netskope) rather than adopting full FortiSASE."],"evidence_coverage_pct":0.5,"last_verified":"2026-09-01","evidence_source_count":60,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/managed-fortigate-svc.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Ensure FortiGates, FortiAPs, FortiSwitches and FortiExtenders are quickly and correctly deployed, configured to best practices Fortinet itself operates Managed FortiGate Service (MFGS), in which Fortinet NOC staff carry out deployment, configuration, provisioning and ongoing change management. The solution page adds \"Deployment, configuration, provisioning, and regular changes\" and \"Evaluate, implement, and verify configuration changes\". Note that this is a managed wrap around Fortinet's own appliances rather than an end-to-end managed WAN including circuits; most fully managed Fortinet SD-WAN in the market is delivered by carrier and MSSP partners rather than by Fortinet."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortisase.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The portal offers centralized multi-tenant management and configuration capabilities, enabling MSSPs to efficiently deploy and manage SASE services across their client base. Tenant isolation and delegated administration are evidenced: the FortiSASE datasheet describes an MSSP Portal, and the service provider page states \"Fortinet solutions are multi-tenant from the ground up, enabling MSPs and MSSPs to isolate and manage multiple customer networks from a single administrative console.\" Graded partial rather than yes because no page reviewed evidences branded or white-label portals for the MSP's own brand, and because the FortiSASE MSSP architecture guide qualifies the model by saying each customer gets a separate isolated instance. See conflicts."},"f07_lifecycle_management":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/managed-fortigate-svc.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Let MFGS experts handle your firmware upgrades to maximize effectiveness and minimize risk Firmware upgrade and patching are handled as part of Managed FortiGate Service, which also states \"Automatically trigger patching for vulnerabilities with a severity rating of medium or higher\". The FortiCare support page covers hardware replacement (\"Meet your availability requirements with our Priority RMA Services.\") and describes \"comprehensive lifecycle services\". Explicit end-of-life planning and renewals handling as part of the service were not found."},"f09_encrypted_overlay_fabric":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortinet_secure_sdwan.pdf","reviewed_at":"2026-10-01","review_due":"2026-12-30T00:00:00Z","qualification":"Fortinet documents IPsec tunnel configuration for its SD-WAN overlay. FortiGate Secure SD-WAN supports an IPsec overlay. This is a configurable platform capability; it does not establish a managed service or a deployment-specific throughput/SLA."},"f17_cellular_and_5g_support":{"source_url":"https://www.fortinet.com/products/extender","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"FortiExtender cellular gateways and routers provide secure 5G/LTE connectivity for any deployment. FortiExtender is Fortinet's own product line. The page also states \"Easily provision 5G or LTE wireless WAN, high availability, and failover, as well as out-of-band management (OOB) and private 5G/LTE.\" and \"FortiExtender 5G/LTE Wireless WAN gateways come equipped with Dual SIM and Dual Modem capabilities for fast failover and active/active cellular connectivity.\" covering dual SIM and both primary and failover transport. Signal quality is addressed by \"FortiExtender cellular gateways and routers ensure optimal signal reception, minimal attenuation, and the best experience.\""},"f26_sla_backed_service_fabric":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortisase.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Fortinet delivers 99.999% SLA with latency guarantee for security inspection, which is possible because of global reach with hundreds of security PoPs. Contractual rather than best-effort. Fortinet's own G-Cloud 14 FortiSASE service definition sets out availability tiers (Management Portal 99.99%, Individual Security POPs 99.99%, Overall service in high availability configuration 99.999%) and commits that \"FortiSASE cloud platform is managed by Fortinet on a twenty-four (24) hours a day by seven (7) days a week basis and is monitored for hardware availability, service capacity, and network resource utilization.\" Support response commitments come via \"24 x 7 FortiCare Technical Support\". A latency commitment is claimed alongside uptime. Change handling commitments were not found in the SLA text reviewed."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.fortinet.com/products/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Secure SD-WAN, SSE, zero trust, wireless controller, LTE/5G gateway, and FortiGuard AI-Powered Security Services have the same OS, policy engine, and management plane. Native, not partner_integrated. Fortinet authors FortiOS and the FortiGate NGFW itself, and the SD-WAN function is a feature of the same operating system rather than a bolt-on appliance. The FortiSASE datasheet confirms the cloud-delivered equivalent: \"FortiSASE FWaaS is a cloud-based service that provides hyperscale, next-generation firewall (NGFW) capabilities, including web filtering, advanced threat protection (ATP), intrusion prevention system (IPS), and Domain Name System (DNS) security.\" Stateful firewalling, application control, IPS, malware inspection and URL filtering are all in-platform."},"f33_data_loss_prevention":{"source_url":"https://www.fortinet.com/products/sase","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The FortiSASE DLP feature supports advanced data matching techniques, including pattern recognition and contextual analysis, to effectively prevent accidental data breaches. Native Fortinet capability. The FortiSASE datasheet adds \"Identify, monitor, and protect organization data at rest and in motion. DLP engine backed by FortiGuard AI feeds with over thousands of pre-defined data patterns, updated to protect from day zero.\" and \"DLP allows businesses to identify sensitive information across multiple cloud-based systems, prevent the accidental sharing of data, and monitor and protect data.\" Classification, inspection and blocking are evidenced. Alerting workflows and formal exception or override workflows were not found on the pages reviewed."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:ed65a89afeb5f9b44f4405ca","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"not_confirmed","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). Strong UK channel and FortiSASE PoPs; widely delivered as a UK managed service by BT, Vodafone and UK MSPs.","sector_review_queue":[{"sector":"healthcare","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | Distributed-site SD-WAN and cloud security consolidation at genuine global scale | Not assessed | A named global hospitality operator (4,000+ locations, 325,000+ employees, $19.4B gross annual revenue) reporting a 60% efficiency improvement for network and security teams; separately, IHG Hotels & Resorts is referenced as boosting IT efficiency 'close to 60%' with Fortinet Secure SD-WAN, which may be the same underlying customer story | Global, multi-location deployment evidenced directly at scale | The two hospitality references may describe the same underlying deployment rather than two independent proof points - worth confirming directly rather than double-counting as separate evidence | Genuinely the best-evidenced sector for Fortinet in this profile - specific, large, checkable scale figures (4,000+ locations, 325,000+ employees) and a consistent, repeated 60% efficiency figure across multiple Fortinet materials.","named_evidence":"A named global hospitality operator (4,000+ locations, 325,000+ employees, $19.4B gross annual revenue) reporting a 60% efficiency improvement for network and security teams; separately, IHG Hotels & Resorts is referenced as boosting IT efficiency 'close to 60%' with Fortinet Secure SD-WAN, which may be the same underlying customer story","evidence_source_ids":["evidence:fortinet-fortisase:19","evidence:fortinet-fortisase:21"]},{"sector":"hospitality_leisure","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | Distributed-site SD-WAN and cloud security consolidation at genuine global scale | Not assessed | A named global hospitality operator (4,000+ locations, 325,000+ employees, $19.4B gross annual revenue) reporting a 60% efficiency improvement for network and security teams; separately, IHG Hotels & Resorts is referenced as boosting IT efficiency 'close to 60%' with Fortinet Secure SD-WAN, which may be the same underlying customer story | Global, multi-location deployment evidenced directly at scale | The two hospitality references may describe the same underlying deployment rather than two independent proof points - worth confirming directly rather than double-counting as separate evidence | Genuinely the best-evidenced sector for Fortinet in this profile - specific, large, checkable scale figures (4,000+ locations, 325,000+ employees) and a consistent, repeated 60% efficiency figure across multiple Fortinet materials.","named_evidence":"A named global hospitality operator (4,000+ locations, 325,000+ employees, $19.4B gross annual revenue) reporting a 60% efficiency improvement for network and security teams; separately, IHG Hotels & Resorts is referenced as boosting IT efficiency 'close to 60%' with Fortinet Secure SD-WAN, which may be the same underlying customer story","evidence_source_ids":["evidence:fortinet-fortisase:19","evidence:fortinet-fortisase:21"]},{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Unknown - not assessed in detail, though Fortinet's own customer-story index references a power grid operator by category (not named) deploying a Fortinet SecOps solution for zero-day protection and IT/OT convergence | IT/OT convergence relevant per the referenced use case | Not assessed | Referenced but not independently detailed (unnamed power grid operator) | N/A | Reference exists but wasn't followed up to a named, detailed case study in this pass | A real, relevant use case is referenced in Fortinet's own materials but wasn't independently verified to the same depth as the hospitality or education evidence in this pass.","named_evidence":"Referenced but not independently detailed (unnamed power grid operator)","evidence_source_ids":["evidence:fortinet-fortisase:26"]},{"sector":"education","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | Large-scale, phased deployment (Secure SD-WAN, then NAC, then FortiSASE) at genuine scale | Not assessed for sector-specific frameworks | A named top-five-largest US school district, 375,000+ students and staff | Single-country (US) evidence; UK/EU education-specific case studies not found in this pass | No case-study limitations beyond the single-country evidence noted | A genuinely large, well-evidenced, named-scale customer story - one of the strongest sector-fit findings in this profile, given both the scale (375K+) and the specific, credible multi-stage adoption narrative.","named_evidence":"A named top-five-largest US school district, 375,000+ students and staff","evidence_source_ids":["evidence:fortinet-fortisase:26","evidence:fortinet-fortisase:27"]},{"sector":"transport_logistics","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_supported","qualification":"Unknown - not assessed, no case study found in this pass, though Fortinet's own customer-story index separately references an airport operator and a major bank's remote-ATM/5G deployment | Not assessed in detail | Not assessed | Referenced but not independently detailed in this pass (airport operator, bank ATM network) | N/A | Named but under-detailed references exist and weren't followed up individually in this research pass | A specific, worth-flagging follow-up opportunity - Fortinet's own materials reference relevant transport/financial-infrastructure customers that weren't fully explored in this pass.","named_evidence":"Referenced but not independently detailed in this pass (airport operator, bank ATM network)","evidence_source_ids":["evidence:fortinet-fortisase:26"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"education":false,"healthcare":false,"transport_logistics":false,"hospitality_leisure":false},"reviewed_at":"2026-09-30T15:45:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://fortinet.com/blog/customer-stories","https://fortinet.com/content/dam/fortinet/assets/ebook/eb-sase-customer-stories.pdf","https://www.fortinet.com/customers/the-guidance-center","https://www.fortinet.com/customers/indigo-airlines","https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","https://www.fortinet.com/content/dam/fortinet/assets/case-studies/cs-ihg.pdf"],"qualification":"Fortinet SASE customer-stories PDF page 10 documents an unnamed US school district with 375,000-plus users. Anonymous case only. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation. The Guidance Center is a California mental-health provider using FortiSASE, NOT an NHS organisation. IndiGo documents Secure SD-WAN at airport counters in India. UK Fortinet delivery is evidenced through BT managed service terms; it is partner-dependent, not a commitment from Fortinet or coverage of all UK/Ireland addresses. Recovered IHG primary PDF identifies 4,000 Secure SD-WAN locations and a global MSSP-delivered rollout. UK headquarters do not prove coverage of a particular UK estate. Savings and efficiency figures are forecasts, not measured completed outcomes.","sectors":{"education":"partial","healthcare":"yes","transport_logistics":"yes","hospitality_leisure":"yes"},"regions":{"uk_ireland":"partner_integrated"}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"partner_integrated","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":9,"research_metrics":{"supported":18,"partial":2,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":20,"total":40,"reviewed":20,"completeness_percent":50,"completeness":0.5},"proven_evidence_count":18,"response_panel":null,"best_for":"Healthcare; Transport and logistics; Hospitality and leisure; Education (partial evidence); Large global enterprise; both","best_for_fields":{"sectors_yes":["Healthcare","Transport and logistics","Hospitality and leisure"],"sectors_partial":["Education"],"regions":[],"size":["Large global enterprise"],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"juniper-networks","name":"Juniper Networks","website":"https://www.juniper.net","category":"technology vendor","product_focus":"Juniper AI-Native SD-WAN, Juniper Mist AI / Marvis AI, Juniper Secure Edge, Managed SD-WAN","cost_model":"Quote-based hardware/subscription/support; managed delivery via partners/providers.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"partial","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"partial","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"yes"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"yes","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_primary","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/juniper/","shortlist_summary":"Juniper Networks offer Mist AI with WAN Assurance, delivering AI-driven monitoring and troubleshooting at the WAN edge at a depth that few competitors match. Typically shortlisted by organisations where AIOps and network assurance quality are weighted evaluation criteria rather than SD-WAN feature breadth, and worth examining more closely than the overall score might suggest if AI-driven operations is a primary requirement.","key_differentiators":["Mist AI delivers WAN Assurance, providing AI-driven monitoring and troubleshooting at the WAN edge that few competitors match.","Strong story for buyers who want the WAN integrated with Mist-powered Wi-Fi and access network management.","Juniper SRX security platform integration provides native firewall capability for buyers standardised on Juniper."],"best_fit_for":["Enterprises already running Mist for Wi-Fi or access who want unified AI-driven operations across WAN and LAN.","Buyers prioritising observability and AI-assisted incident triage as a primary purchase criterion.","Organisations with strong network engineering capability who can take advantage of WAN Assurance telemetry."],"watch_outs":["Full SASE platform: partial evidence; CASB capability: not confirmed; Data loss prevention: not confirmed. Confirm the networking and SSE products and whether separate contracts or operators are required.","Managed delivery is via partners; first-party managed service is not the primary model.","Cloud on-ramp and private backbone capabilities are less prominent than dedicated SASE platforms."],"evidence_coverage_pct":0.475,"last_verified":"2026-09-01","evidence_source_count":40,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.juniper.net/us/en/services.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our highly trained experts, backed by AI-Native and automated insights, can help you design, deploy, and proactively manage your network to deliver seamless experiences for all. Juniper Services offers design, deployment and proactive management assistance, but the Juniper pages reviewed position end-to-end managed SD-WAN/SASE as something MSPs and service providers deliver using Juniper technology rather than something Juniper operates itself. The managed SD-WAN page is written to MSPs as the operator. No Juniper page reviewed described Juniper owning day-to-day operations, change execution and service reporting for a customer end to end. Graded partial rather than yes for that reason."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.juniper.net/us/en/solutions/sd-wan/managed-sd-wan.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"engineered specifically for forward-thinking MSPs ready to scale Juniper explicitly targets MSPs with its managed SD-WAN proposition, which is why this is not graded unknown. However none of the three specific tests in the definition were evidenced on pages reviewed: tenant isolation, delegated administration and branded (white-label) portals are not described. The Juniper Mist MSP dashboard documentation URL attempted returned HTTP 404, so multi-tenant administration could not be verified in this task."},"f07_lifecycle_management":{"source_url":"https://www.juniper.net/us/en/services.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Achieve simplicity and reliability at scale across your wired, wireless, and SD-WAN environments with AI-Native operations and support from Juniper Services, using AI for a comprehensive, proactive approach across the full network life cycle. Juniper claims a full network life cycle approach through Juniper Services. The specific components in the definition (hardware replacement/RMA, firmware upgrades, patching, renewals and end-of-life planning handled as part of the service) were not individually evidenced; the technical services page that would carry them returned HTTP 404 on attempt. Graded partial on that basis."},"f10_dynamic_path_selection":{"source_url":"https://juniper.net/content/dam/www/assets/white-papers/us/en/routers/ai-driven-sd-wan-secures-todays-cloud-era-networks.pdf","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via the platform's core, service-based routing architecture - 'sessions are delivered based on identity and context to relevant parties based on real-time policies' [10]"},"f18_cloud_on_ramp":{"source_url":"https://juniper.net/us/en/customers/ambifox-case-study.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a real, named customer deployment spanning two distinct named hyperscalers [25]"},"f19_public_cloud_gateways":{"source_url":"https://www.juniper.net/us/en/solutions/sase.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"full-stack Security Service Edge (SSE) and SD-WAN capabilities that leverage the power of the cloud to optimize both the network and the security experience Juniper operates its own cloud-delivered SSE (Juniper Secure Edge, managed by Juniper Security Director Cloud), so this is Juniper's own service infrastructure rather than a third party's resold platform. Graded partial not yes because no page reviewed named the gateway or PoP locations, the number of locations, or which capabilities (SaaS optimisation, remote access, security enforcement) are enforced at Juniper-operated PoPs. Attempts to reach the Juniper Secure Edge product page redirected to an HPE store page that returned Product Not Found, and the Secure Edge documentation guide URLs returned 404/403."},"f23_multi_cloud_transit_fabric":{"source_url":"https://juniper.net/us/en/customers/ambifox-case-study.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a real, named customer deployment spanning two distinct named hyperscalers [25]"},"f24_flexible_edge_form_factors":{"source_url":"https://juniper.net/us/en/products/routers/session-smart-router.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as genuinely flexible - the Session Smart Router runs as a software-based solution on dedicated Juniper SSR-series hardware, white-box customer-premises equipment, data-centre network servers, or the public cloud [14]"},"f27_integrated_next_generation_firewall":{"source_url":"https://juniper.net/us/en/solutions/sd-wan/managed-sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and confirmed with specific technical detail [15]"},"f28_full_sase_platform":{"source_url":"https://juniper.net/us/en/solutions/secure-ai-native-edge.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Partially confirmed - Universal Zero Trust Network Access (UZTNA) is explicitly described by Juniper's own materials as setting 'the vision for Juniper's view of... UZTNA to address customer needs in the future', a stated roadmap direction rather than a confirmed, fully-realised, currently-shipping capability [11] [17] Explicitly framed as a future-facing vision in Juniper's own primary materials"},"f30_zero_trust_network_access":{"source_url":"https://juniper.net/us/en/solutions/secure-ai-native-edge.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Partially confirmed - Universal Zero Trust Network Access (UZTNA) is explicitly described by Juniper's own materials as setting 'the vision for Juniper's view of... UZTNA to address customer needs in the future', a stated roadmap direction rather than a confirmed, fully-realised, currently-shipping capability [11] [17] Explicitly framed as a future-facing vision in Juniper's own primary materials"},"f36_centralised_orchestration":{"source_url":"https://juniper.net/us/en/customers/ambifox-case-study.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - the platform 'supports zero-touch installation and provisioning for fast setup and administration-with no site visits', evidenced via a real, named customer deployment [25]"},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://juniper.net/content/dam/www/assets/white-papers/us/en/routers/session-smart-routing-how-it-works.pdf","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, via the confirmed SLE architecture (Table 3, 10) [13] Technical depth beyond the named SLE capability itself not itemised in full"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:6302afddee37a3625fa05be4","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US, now HPE). UK channel and delivery via partners and MSPs.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":10,"research_metrics":{"supported":13,"partial":6,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":21,"total":40,"reviewed":19,"completeness_percent":48,"completeness":0.475},"proven_evidence_count":13,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"forcepoint","name":"Forcepoint","website":"https://www.forcepoint.com/product/secure-sd-wan","category":"technology vendor","product_focus":"AI Mesh / Getvisibility, ARIA, Field Programmable SASE Logic (FPSL), FlexEdge Secure SD-WAN","cost_model":"Quote-based appliances/software/subscriptions; managed SD-WAN positioned but pricing public transparency limited.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"partial","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"partial","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"yes","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_primary","financial_services":"not_primary","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"not_primary","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/forcepoint/","shortlist_summary":"Forcepoint’s identity traces back to Websense, founded in 1994, and its whole platform is built around a data-first philosophy rather than a network- or device-first one - the pitch is that policy should follow the data itself, not the network path or the device it happens to be on. That heritage shows up as real, credible analyst recognition specifically for data loss prevention: Frost & Sullivan’s Global DLP Company of the Year for two consecutive years, an IDC MarketScape Leader placement for worldwide DLP in 2025, and a Forrester Wave Strong Performer placement for data security platforms in Q1 2025.","key_differentiators":["FlexEdge Secure SD-WAN combines secure SD-WAN with strong DLP and data security heritage from the wider Forcepoint portfolio.","MultiLink resilience and zero-touch deployment with cloud central management.","Strong story for buyers prioritising data security and DLP as a procurement criterion."],"best_fit_for":["Enterprises with strong data protection and DLP requirements (regulated industries, government).","Organisations wanting secure SD-WAN where data security is the primary decision driver.","Buyers consolidating DLP with SD-WAN under one vendor."],"watch_outs":["Smaller SD-WAN market presence than the leading platforms.","Full SASE platform: supported. Confirm the included networking and security products, licences and service scope.","Managed delivery is partner-led; co-managed and white-label support require partner validation."],"evidence_coverage_pct":0.45,"last_verified":"2026-09-01","evidence_source_count":61,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.forcepoint.com/resources/datasheets/flexedge-secure-sd-wan-manager","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Forcepoint Administrative Domain License enables multiple customer environments to be managed through a single management server. The SD-WAN Manager datasheet evidences tenant isolation and delegated administration: it also states 'Allows division of the environment into isolated configuration domains' and names MSSPs directly. Graded partial rather than yes because no evidence of branded or white-label portals was found on any page reviewed, and the partner programme page contains no MSP, MSSP, white label or multi-tenant terms."},"f05_professional_services_and_migration_support":{"source_url":"https://www.forcepoint.com/services/implementation-packages","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Resources and deliverables aligned to your deployment needs and timeline Packaged implementation services and consulting are published, and the Cybersecurity Services page lists 'Implementation Packages for our award-winning products' and 'Data Security Consulting customized to your organization's needs'. Graded partial because the pages reviewed do not describe discovery, pilots, staging, migration runbooks or rollback plans."},"f07_lifecycle_management":{"source_url":"https://www.forcepoint.com/resources/datasheets/forcepoint-technical-support-offerings","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Next Generation Firewall (NGFW) appliances (both N and S-series) now have RMA support included Hardware replacement is included in the support contract, with an option to 'upgrade to next business day or same day RMA service'. The SD-WAN Manager datasheet adds 'Upgrades and dynamic update packages for managed devices can be automatically downloaded' and 'Remote Upgrades One-click fail-safe remote upgrade of the managed engines'. Graded partial because upgrades and patching are customer-executed platform features rather than work performed for the customer as part of a service, and no end-of-life planning service was found."},"f17_cellular_and_5g_support":{"source_url":"https://www.forcepoint.com/resources/datasheets/forcepoint-ngfw-120-series-appliance","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"For LTE without Wi-Fi, Forcepoint offers the 120L model with LTE support and 125L model with LTE/5G support. The 120 Series datasheet also states 'Optional Wi-Fi and LTE/5G connectivity' and lists supported LTE and 5G NR band tables, so integrated cellular is a shipped hardware capability. SIM management and signal monitoring specifics were not located in the pages reviewed."},"f26_sla_backed_service_fabric":{"source_url":"https://www.forcepoint.com/resources/datasheets/forcepoint-technical-support-offerings","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"24/7 availability for your most critical issues. The Technical Support Offerings datasheet publishes tiered severity response targets ('Severity 1 1 hour' for Essential, 'Severity 1 45 minutes' for Enhanced, 'Severity 1 30 minutes' for Enterprise) and states 'Severity 1 issues use a follow-the-sun approach; Forcepoint technicians are always available'. Graded partial because these are support response commitments only: no uptime percentage, and no latency, jitter, loss or change handling commitments were found in the pages reviewed."},"f32_casb_capability":{"source_url":"https://forcepoint.com/sites/default/files/resources/brochures/whitepaper_forcepoint_one_differentiation_en_0_0_0_0_0.pdf","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed explicitly alongside inline modes [10]"},"f33_data_loss_prevention":{"source_url":"https://forcepoint.com/use-case/incident-and-breach-response","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed - Forcepoint DLP provides 'continuous monitoring' across data at rest, in use, and in transit, per Forcepoint's own materials and independent analyst recognition [36]"},"f34_remote_user_access":{"source_url":"https://forcepoint.com/sites/default/files/resources/brochures/whitepaper_forcepoint_one_differentiation_en_0_0_0_0_0.pdf","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via the CASB/SWG gateway architecture supporting unmanaged devices without requiring an agent [10]"},"f36_centralised_orchestration":{"source_url":"https://cyberdefensemagazine.com/innovator-spotlight-forcepoints-data-security-cloud-redefining-data-protection-in-the-ai-era/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Confirmed as part of ARIA's function - assists in 'creating, refining, and enforcing data protection policies' [25] Same as above"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:e03c3fdaf8448bdd3558a0fd","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"partial","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). UK delivery via security partners; government and defence heritage suits UK public sector.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":11,"research_metrics":{"supported":14,"partial":4,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":22,"total":40,"reviewed":18,"completeness_percent":45,"completeness":0.45},"proven_evidence_count":14,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"zscaler","name":"Zscaler","website":"https://www.zscaler.com","category":"technology vendor","product_focus":"AI Security / GenAI Security, Data Fabric for Security, Risk360, Zero Trust Branch","cost_model":"Quote-based subscription; typically per-user/workload/location modules; SD-WAN integrations may add partner/vendor cost.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":160,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/zscaler/","shortlist_summary":"Zscaler is the vendor that effectively created the SSE category, and it’s still the one most competitors get measured against when it comes to sheer scale and security depth - the Zero Trust Exchange runs across 150+ data centres, processes over 400 billion transactions a day, and holds FedRAMP High authorisation for ZIA and ZPA (other SASE-class vendors also hold FedRAMP High or equivalent for their own components). If you’re a security-first buyer looking to retire VPN concentrators and stitch SWG, CASB, DLP and ZTNA together under one console, Zscaler is one of the most proven single-vendor routes to get there.","key_differentiators":["Category leader in SSE with ZIA, ZPA and ZDX; widely adopted as the security layer in best-of-breed SASE architectures.","Strong ecosystem of SD-WAN partners (Cisco, others) for buyers wanting Zscaler security with a separate SD-WAN platform.","Mature Zero Trust platform with substantial enterprise deployment history."],"best_fit_for":["Enterprises selecting best-of-breed SSE alongside a separate SD-WAN platform.","Security-driven SASE strategies where the SSE layer is the primary architectural decision.","Buyers consolidating multiple security point solutions onto a single SSE vendor."],"watch_outs":["Historically SSE-led; native SD-WAN capability is less mature than dedicated SD-WAN platforms (validate path selection, QoS and packet loss in RFP).","Premium pricing; typically per-user/workload/location with security modules adding cost.","Buyers needing one vendor for both SD-WAN and security may prefer a converged platform (Cato, FortiSASE, Prisma)."],"evidence_coverage_pct":0.45,"last_verified":"2026-09-01","evidence_source_count":81,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.zscaler.com/partners/service-providers","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"We partner with service providers to develop comprehensive managed offers that leverage the Zero Trust Exchange, our industry-leading security platform, to enable profitable managed service provider business models. Zscaler operates the platform itself and sells one first-party managed service (Zscaler MDR, security operations). On its own partner page the comprehensive managed offer is built and delivered by service provider partners, not by Zscaler. No Zscaler page was found describing Zscaler itself designing, deploying, changing and reporting on a customer's end-to-end service, so graded partial rather than yes."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.zscaler.com/blogs/product-insights/streamlining-multi-tenant-management-announcing-integration-multi-tenant","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The Multi-Tenant Portal has long been the cornerstone for Managed Service Providers (MSPs) and large-scale enterprises to oversee multiple Zscaler instances. Tenant isolation, cross-tenant pivoting and centralised delegated administration through ZIdentity are documented for MSPs. Nothing was found on Zscaler's own pages evidencing branded or white-label portals under the partner's own brand, and the definition requires that. The definitive partner portal documentation on help.zscaler.com could not be read because it is a JavaScript-only page (register 23). Graded partial for that reason."},"f17_cellular_and_5g_support":{"source_url":"https://www.zscaler.com/products-and-solutions/zscaler-cellular","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Devices use Zscaler SIMs to steer traffic securely to the Zero Trust Exchange with no need for additional software. Zscaler Cellular provides Zscaler-issued SIMs that carry cellular IoT and mobile device traffic into the Zero Trust Exchange, which covers SIM provisioning and management. The definition also asks for 4G and 5G as primary or failover WAN transport with modem and signal monitoring. Neither the Cellular product page nor the July 2025 cellular press release names 4G, 5G or LTE, the private 5G page concerns securing a customer's private 5G core rather than WAN transport, and the Zero Trust SD-WAN datasheet contains no cellular uplink specification. Graded partial on that gap."},"f19_public_cloud_gateways":{"source_url":"https://www.zscaler.com/press/zscaler-significantly-expands-global-sovereignty-zero-trust-exchange-platform","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Zscaler already operates 160+ data centers and is present in most countries. This is Zscaler's own infrastructure, not a resold third party's, so yes rather than partner_integrated. The reference architecture confirms Zscaler deploys its own ZIA Service Edge devices into those data centres and that users are always directed to the nearest one for traffic processing, which is security enforcement and SaaS access delivered as the vendor's own cloud service."},"f20_private_pops_dedicated_pops":{"source_url":"https://www.zscaler.com/resources/reference-architectures/traffic-forwarding-in-zscaler-internet-access.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"ZIA Private Service Edge and ZIA Virtual Service Edge devices extend the Zscaler cloud into your data center. Directly meets the definition: customer-hosted and dedicated deployments exist alongside the shared multi-tenant Public Service Edges. The March 2026 sovereignty press release additionally describes Private Service Edges as single-tenant, customer-hosted, and Zscaler-managed appliances, plus dedicated control and logging planes in six countries, which covers the sovereign case."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:44562c0b5225f88ac0275492","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"not_confirmed","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). UK PoPs in the Zero Trust Exchange; delivered direct or via UK partners and carriers.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Conditional fit | Not assessed | Not assessed | Mindbody (business software/services company) | N/A | Single case study, not sector-specific in focus | Some evidence exists but isn't a deep sector-specific case.","named_evidence":"Mindbody (business software/services company)","evidence_source_ids":["evidence:zscaler:19"]},{"sector":"government_public_sector","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | FedRAMP High/Moderate, DoD IL5, GovRAMP, CJIS, CMMC Level 2 | FedRAMP High/Moderate, GovRAMP Authorized, CJIS, CMMC Level 2, DoD IL4/IL5 | CSC (public-sector case study, VPN-to-Zero-Trust productivity gains) | Zscaler Government Cloud is a distinct FedRAMP High authorised offering | US-federal-specific; UK/EU public-sector framework listings not found in this pass | By far the best-evidenced sector in this entire profile - genuinely strong, multi-source, dated evidence. The clear standout differentiator versus Cato, which had no equivalent public-sector compliance depth.","named_evidence":"CSC (public-sector case study, VPN-to-Zero-Trust productivity gains)","evidence_source_ids":["evidence:zscaler:20"]},{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | SD-WAN/ZIA for distributed sites, M365 security | Not assessed | AutoNation (retail/automotive dealerships), Baker & Baker (food manufacturing/retail supply) | Multi-site retail benefits from ZIA's direct-to-cloud model avoiding centralised backhaul | US-centric case evidence; UK/EU retail-specific case studies not found in this pass | Reasonably well evidenced via AutoNation specifically, though not as singularly strong as Cato's Ulta Beauty story.","named_evidence":"AutoNation (retail/automotive dealerships), Baker & Baker (food manufacturing/retail supply)","evidence_source_ids":["evidence:zscaler:17","evidence:zscaler:18"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Conditional fit | SD-WAN/branch capability plausibly relevant | Not assessed | Baker & Baker (food manufacturing) | N/A | Single case study, not deeply metric-rich beyond the ransomware-reduction claim | Some evidence exists but is thinner than the retail/public-sector case studies.","named_evidence":"Baker & Baker (food manufacturing)","evidence_source_ids":["evidence:zscaler:17"]},{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Conditional fit | Global remote-access capability plausibly relevant | Not assessed | NOV (oilfield services/energy, 27,500 users, global remote-access rollout during COVID-19) | Global distributed workforce use case well evidenced | Single case study, but a genuinely substantial, named, metric-rich one | NOV is a strong, credible case study for this sector specifically - a real enterprise-scale (27,500-user) deployment with a clear before/after narrative.","named_evidence":"NOV (oilfield services/energy, 27,500 users, global remote-access rollout during COVID-19)","evidence_source_ids":["evidence:zscaler:21"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"energy_utilities":false,"government_public_sector":false,"manufacturing":false,"retail_ecommerce":false,"professional_services":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://zscaler.com/customers/nov","https://zscaler.com/customers/csc","https://zscaler.com/customers/baker-baker","https://zscaler.com/customers/mindbody","https://zscaler.com/customers/autonation"],"qualification":"NOV case documents ZIA/ZPA and zero-trust access for an energy-industry supplier. Do not infer utility-specific compliance or UK fit. CSC is Australian Commonwealth Superannuation Corporation; ZIA/ZPA deployment confirmed. Government-pension context, not a blanket public-sector accreditation. Baker and Baker case documents ZIA/ZPA alongside a separately adopted SD-WAN. Manufacturing evidence; Zscaler is not identified as the SD-WAN provider. Mindbody is a SaaS software business serving wellness firms. Its ZPA deployment does not establish professional-services or healthcare end-buyer sector evidence. AutoNation confirms ZIA deployment across retail locations. Baker and Baker must not be counted as a second retail case; it is manufacturing. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"energy_utilities":"yes","government_public_sector":"yes","manufacturing":"yes","professional_services":"not_confirmed","retail_ecommerce":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":12,"research_metrics":{"supported":15,"partial":3,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":22,"total":40,"reviewed":18,"completeness_percent":45,"completeness":0.45},"proven_evidence_count":15,"response_panel":null,"best_for":"Retail and e-commerce; Manufacturing; Energy and utilities; Government and public sector; platform","best_for_fields":{"sectors_yes":["Retail and e-commerce","Manufacturing","Energy and utilities","Government and public sector"],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"hpe-aruba","name":"HPE Aruba EdgeConnect","website":"https://www.hpe.com/us/en/aruba-edgeconnect-sd-wan.html","category":"technology vendor","product_focus":"Cloud Intelligence, EdgeConnect Orchestrator, First-Packet iQ, HPE Aruba Networking Central","cost_model":"Quote-based subscription/appliance/support; MSP-managed options available through partners/providers.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"not_confirmed","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"partial","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"not_primary","manufacturing":"yes","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_primary","professional_services":"yes","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/hpe-aruba-edgeconnect/","shortlist_summary":"HPE Aruba Networking’s SASE platform is a product of acquisition and integration rather than a single, from-scratch build. The SD-WAN engine, EdgeConnect, was built by Silver Peak Systems (founded 2004, first SD-WAN product shipped 2015) and joined HPE’s Aruba business in a $925 million acquisition completed September 2020.","key_differentiators":["EdgeConnect SD-WAN (acquired with Silver Peak) is positioned as the foundation for single-vendor SASE alongside Aruba SSE.","Strong heritage in WAN optimisation and packet-level performance engineering.","Tight integration with the broader Aruba campus and branch portfolio (LAN, Wi-Fi, NAC) for buyers consolidating end-to-end networking."],"best_fit_for":["Enterprises already running Aruba LAN/Wi-Fi who want WAN and SASE under the same operational tooling.","Buyers prioritising application performance and WAN optimisation in addition to standard SD-WAN routing.","Distributed organisations with branch-heavy footprints where Aruba campus presence is already established."],"watch_outs":["Aruba SSE is newer than the SSE leaders (Zscaler, Netskope); buyers wanting best-of-breed SASE should evaluate the SSE capability set carefully.","Managed delivery is partner-led rather than from HPE directly.","Private global backbone is not vendor-owned; SASE transport uses public cloud gateways."],"evidence_coverage_pct":0.425,"last_verified":"2026-09-01","evidence_source_count":46,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://docs.axissecurity.com/docs/tenants-management","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Managing multiple tenants can be useful when you are an MSSP and you manage several separate clients, or otherwise your company has several organizational units it prefers to keep separate. Tenant isolation and cross-tenant admin roles are documented for HPE Networking SSE, and the same documentation page states this is a limited release feature. No evidence of branded or white-label portals, custom logos or reseller templates was found on the documentation or partner programme pages reviewed, so graded partial rather than yes."},"f18_cloud_on_ramp":{"source_url":"https://hpe.com/us/en/aruba-edgeconnect-sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed for specific named hyperscalers [15] [19]"},"f19_public_cloud_gateways":{"source_url":"https://docs.axissecurity.com/docs/pops","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The HPE Aruba Networking SSE service utilizes both onramps and Points of Presence (PoPs) to enhance connectivity. The PoPs are documented as part of the HPE Aruba Networking SSE service itself, which is HPE's own security service edge infrastructure following the Axis Security acquisition, so this is the vendor's own service infrastructure rather than a resold third party gateway. Several PoP locations carry hyperscaler region names such as Northern Virginia, Oregon and Iowa, which suggests hosting inside public cloud regions, but the service and enforcement layer are HPE's."},"f23_multi_cloud_transit_fabric":{"source_url":"https://hpe.com/us/en/aruba-edgeconnect-sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed for specific named hyperscalers [15] [19]"},"f24_flexible_edge_form_factors":{"source_url":"https://buy.hpe.com/in/en/cloud/private-hybrid-cloud/hpe-aruba-networking-connectivity-saas/hpe-aruba-networking-connectivity/hpe-aruba-networking-edgeconnect-10106-1g-2x-sfp-2x-combo-1g-2x-rj45-poe-sd%E2%80%91wan-gateway/p/s0e22a","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native - physical appliances confirmed at a specific model level (e.g. the EC-10106 gateway, described as 'ideally suited for small branch and remote office environments'), plus virtual appliance deployment [21]"},"f27_integrated_next_generation_firewall":{"source_url":"https://hpe.com/us/en/networking/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, via the SSE platform's confirmed capability set alongside the EdgeConnect-embedded NGFW described above [14]"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:40513952c953a0dcc2253c38","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"not_confirmed","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). EdgeConnect delivered in the UK via HPE partners and MSPs.","sector_review_queue":[{"sector":"education","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Consistent network experience and centralised management relevant to distributed campus/student environments | Not assessed for sector-specific frameworks | A named reference describing a centrally-managed, high-performance network delivering 'a home-from-home experience for Oxford students'; Edmonton Public Library's digital-space modernisation is a related, if not strictly higher-education, public-education-adjacent reference | UK (Oxford) and Canada (Edmonton) - genuine international sector evidence | Both references are qualitative rather than quantified with a specific metric | Two independently named, international, credible references - real sector evidence, though without the specific quantified metrics found for some other sectors in this profile (e.g. Manufacturing's 99%+ uptime, Government's FedRAMP date).","named_evidence":"A named reference describing a centrally-managed, high-performance network delivering 'a home-from-home experience for Oxford students'; Edmonton Public Library's digital-space modernisation is a related, if not strictly higher-education, public-education-adjacent reference","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:30"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | SD-WAN reliability directly relevant to distributed manufacturing operations | Not assessed for sector-specific frameworks | IMMI (99%+ uptime ratio reported across all branches using EdgeConnect as a turn-key, out-of-the-box solution) | N/A | Single case study, though genuinely specific and quantified | A specific, quantified (99%+ uptime), named manufacturing customer reference - genuinely credible, concrete sector evidence.","named_evidence":"IMMI (99%+ uptime ratio reported across all branches using EdgeConnect as a turn-key, out-of-the-box solution)","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:30"]},{"sector":"healthcare","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"requires_confirmation","qualification":"Good fit, evidenced, though without a formal HIPAA attestation confirmed | SD-WAN reliability and DEM plausibly relevant to telehealth/clinical-application performance specifically | HIPAA not confirmed as a formal attestation | Universal Health Services (telehealth, assured network performance and reliability); Hato Hone St John (New Zealand ambulance/healthcare service, digital transformation of healthcare operations); USANA Health Sciences (global efficiency, application performance and savings from Unified SASE, per a named reseller case study) | Named customers in both US and New Zealand markets | No formal HIPAA attestation confirmed despite the named healthcare customer evidence | Two independently named healthcare-sector customers give real, credible sector evidence, though Netify should not assume formal HIPAA compliance without direct confirmation, given this wasn't found in this research pass.","named_evidence":"Universal Health Services (telehealth, assured network performance and reliability); Hato Hone St John (New Zealand ambulance/healthcare service, digital transformation of healthcare operations); USANA Health Sciences (global efficiency, application performance and savings from Unified SASE, per a named reseller case study)","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:14","evidence:hpe-aruba-edgeconnect:22","evidence:hpe-aruba-edgeconnect:29"]},{"sector":"hospitality_leisure","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Consistent network experience and branch/site connectivity relevant to distributed hospitality operations | Not assessed | A named hotel reference: 'Network excellence enables hotel to streamline operational efficiency and drive service innovation' | N/A | Anonymised (described as 'a hotel' without further naming detail in the source reviewed) | A real, if not fully named, hospitality-sector reference - worth a direct follow-up to identify the specific hotel/hotel group if a fully named case study is needed.","named_evidence":"A named hotel reference: 'Network excellence enables hotel to streamline operational efficiency and drive service innovation'","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:30"]},{"sector":"financial_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"requires_confirmation","qualification":"Conditional - one named customer reference exists, but no PCI-DSS or DORA-specific certification was confirmed for the SASE/SSE platform specifically | SD-WAN cost-reduction and application-performance capabilities plausibly relevant | PCI confirmed for Central's cloud infrastructure specifically (Table 13); DORA not confirmed | First Bank (SASE-based SD-WAN, cost reduction, application performance, cloud-smart technology strategy) | N/A | Compliance evidence is narrower than the named customer evidence would suggest is needed for full sector confidence | A real, named financial-services customer exists, though Netify should be precise that platform-wide PCI/DORA-specific certification for the SASE/SSE components specifically wasn't independently confirmed.","named_evidence":"First Bank (SASE-based SD-WAN, cost reduction, application performance, cloud-smart technology strategy)","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:14"]},{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced, and genuinely the platform's best-documented individual case study | The confirmed best-of-breed SD-WAN-plus-third-party-SSE architecture (Table 6) directly relevant to this sector's typical existing security-vendor investments | Not assessed for sector-specific frameworks | Cushman & Wakefield (global commercial real estate services firm) - 'boost global network performance and security with Aruba EdgeConnect SD-WAN edge platform and Zscaler cloud-delivered SASE' | Global deployment implied by the confirmed 'global network performance' framing | Single case study, though it directly demonstrates the platform's most architecturally distinctive capability | Genuinely the most strategically important case study in this entire profile - a real, named, global professional-services customer using the exact best-of-breed (EdgeConnect plus Zscaler) architecture that is this platform's clearest differentiator.","named_evidence":"Cushman & Wakefield (global commercial real estate services firm) - 'boost global network performance and security with Aruba EdgeConnect SD-WAN edge platform and Zscaler cloud-delivered SASE'","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:30","evidence:hpe-aruba-edgeconnect:36"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"financial_services":false,"healthcare":false,"professional_services":false,"hospitality_leisure":false,"manufacturing":false},"reviewed_at":"2026-09-30T15:45:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://hpe.com/us/en/networking/sase.html","https://www.hpe.com/psnow/doc/a50014000enw","https://hpe.com/tw/en/aruba-edgeconnect-sd-wan.html","https://consiliant.com/usana-hpe-aruba-networking-sase-case-study/","https://www.hpe.com/uk/en/aruba-edgeconnect-sd-wan.html.html","https://arubanetworks.com/resources/case-studies","https://hpe.com/psnow/doc/a00108908enw","https://buy.hpe.com/uk/en/p/JZ872A","https://www.hpe.com/psnow/downloadDoc/Finding%20a%20niche%20in%20a%20crowded%20hotel%20sector%20-%20Premier%20Inn%20MENA-a50011126enw.pdf?deepLink=&form=false&hf=regular&id=a50011126enw&isFutureVersion=true&originalObjectName=&prelaunchSection=&preview=false&print=&r=&section=&softrollSection=&ver=1","https://packetpushers.net/podcasts/tech-bytes/tb-global-manufacturer-taps-aruba-edgeconnect-for-sd-wan-wan-optimization/"],"qualification":"Recovered HPE First Bank case documents EdgeConnect SD-WAN at a US bank; no UK regulatory suitability inference. HPE EdgeConnect page explicitly identifies Universal Health Services using SD-WAN for telehealth. USANA reseller story is not evidence of healthcare delivery. HPE EdgeConnect page identifies Cushman and Wakefield application acceleration and MPLS replacement; professional-services sector evidence. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation. HPE UK product material identifies EdgeConnect and Barrett Steel customer deployment; UK store sells EdgeConnect gateways. UK product availability is evidenced; partner, site access circuits and Irish delivery must be confirmed. Region partial, not a managed-service or buyer-fit guarantee. Replacement named evidence: Premier Inn MENA documents EdgeConnect SD-WAN across 11 Middle East hotels. This does not validate the original anonymous hotel quote or prove a UK hotel deployment. Customer interview with IMMI VP of Enterprise Technology documents deployed EdgeConnect linking US data centres and a Chinese plant. HPE-sponsored primary customer account, not independent testing or UK delivery confirmation.","sectors":{"financial_services":"yes","healthcare":"yes","professional_services":"yes","hospitality_leisure":"yes","manufacturing":"yes"},"regions":{"uk_ireland":"partial"}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"partial","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":13,"research_metrics":{"supported":16,"partial":1,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":23,"total":40,"reviewed":17,"completeness_percent":43,"completeness":0.425},"proven_evidence_count":16,"response_panel":null,"best_for":"Healthcare; Financial services; Manufacturing; Professional services; Hospitality and leisure; platform","best_for_fields":{"sectors_yes":["Healthcare","Financial services","Manufacturing","Professional services","Hospitality and leisure"],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"cradlepoint-ericsson","name":"Ericsson Cradlepoint","website":"https://cradlepoint.com","category":"technology vendor / carrier network provider","product_focus":"NetCloud Federal, NetCloud Manager, NetCloud Perimeter, NetCloud Private Networks","cost_model":"Quote-based NetCloud subscriptions + routers/adapters; public hardware pricing may exist through resellers.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"partner_integrated","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/ericsson-cradlepoint/","shortlist_summary":"1 billion. That makes this platform’s identity distinctive within this product category: it sits inside one of the world’s largest telecommunications equipment manufacturers rather than a standalone security company or a private-equity-backed challenger, and its architecture reflects that heritage directly - NetCloud SASE is built cellular-first, with confirmed, specific capabilities like traffic steering based on cellular attributes and 5G standalone network slicing for guaranteed bandwidth that have no real equivalent among fixed-line-oriented competitors.","key_differentiators":["Wireless-first branch architecture from Ericsson with deep 5G expertise; NetCloud provides cellular-centric SD-WAN management.","Strong story for organisations adopting 5G as a primary access medium rather than as a backup.","Network slicing and private 5G integration roadmap is more credible than competitors lacking cellular heritage."],"best_fit_for":["Distributed enterprises with strong cellular/5G access strategy (retail, logistics, transport, public sector).","Buyers consolidating wireless WAN with traditional fixed-line SD-WAN under one operational tool.","Organisations interested in private 5G integration with branch SD-WAN."],"watch_outs":["SASE story is partner-integrated rather than native; SSE capabilities require validation in RFP.","Cloud on-ramp: supported; Multi-cloud transit fabric: not confirmed. Confirm the cloud locations, connectivity pattern and transit design.","Best for cellular-led architectures; less strong as a primary fit for fixed-circuit-heavy estates."],"evidence_coverage_pct":0.375,"last_verified":"2026-09-01","evidence_source_count":38,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://cradlepoint.ericsson.com/about/how-to-buy","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Enterprise Wireless products are sold through our world-class global ecosystem of distributors, resellers, managed service providers, and integrators. Managed service providers are an explicit channel and the partner programme names a service provider category that builds managed offerings on the platform, which implies multi customer operation. However no page reviewed documents tenant isolation, delegated administration, branded portals or templates under the partner's own brand, so this is graded partial rather than yes. NetCloud Manager subaccount structure is referenced in the security page bullets but not in language firm enough to quote for white labelling."},"f05_professional_services_and_migration_support":{"source_url":"https://cradlepoint.ericsson.com/about/how-to-buy","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"These specialized partners have deep knowledge of our products and offer an array of high-value services. Design, integration and implementation services are attributed to the reseller and integrator channel rather than to an Ericsson Cradlepoint professional services organisation. The vendor supplies training and certification directly, but no discovery, pilot, staging, migration runbook or rollback offering was found on the pages reviewed, so the capability is graded as delivered through partners."},"f07_lifecycle_management":{"source_url":"https://cradlepoint.com/products/netcloud-service/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Your wireless edge routers and adapters, or endpoints, include a product warranty for the duration of your active NetCloud Essential or Advanced subscription. Hardware warranty runs for the life of the subscription and the same page states that NetCloud Manager continuously delivers real time cloud and device operating software updates to 5G and LTE endpoints, so firmware and software currency are part of the subscription. End of life planning and renewal management are implied by the subscription continuity wording but are not separately documented."},"f10_dynamic_path_selection":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the named cellular-attribute-based traffic steering capability [15]"},"f13_qos_and_traffic_shaping":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 5G standalone network slicing 'for guaranteed bandwidth' is a specific, named, technically distinctive QoS mechanism [15]"},"f17_cellular_and_5g_support":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"With benefits like traffic steering based on cellular attributes and network slicing for guaranteed bandwidth as networks evolve to 5G standalone, NetCloud SASE enables fast moving organizations to accelerate their transformation. This is the supplier's core competence. The data sheet additionally describes SD-WAN optimising traffic across wired, 5G and LTE, satellite, Wi-Fi as WAN, private APNs and 5G standalone network slices, and the endpoint range is built around integrated cellular modems. Traffic steering on cellular attributes evidences signal level awareness."},"f18_cloud_on_ramp":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via the platform's fully cloud-managed architecture [15]"},"f19_public_cloud_gateways":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via the platform's fully cloud-managed architecture [15]"},"f34_remote_user_access":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and genuinely a core, confirmed architectural principle - 'While other solutions require agents or special browsers, NetCloud SASE uses agent-less isolation-based security' [15]"},"f40_managed_service_assurance":{"source_url":"https://cradlepoint.com/support/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Support is one of the most valuable tools within a NetCloud subscription and is staffed by accredited network engineers Round the clock global support is documented, with centres in Boise, London and Melbourne and direct access to the engineering organisation, and a public NetCloud status page exists for incident notification. What is not documented on any page reviewed is a 24/7 NOC and SOC proactively monitoring the customer's service, incident ownership through to root cause analysis, structured service reviews or change governance, so this falls short of the full definition."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:6810d536693038af740ed4a9","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"not_confirmed","retail_ecommerce":"yes","manufacturing":"partial","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"partial","hospitality_leisure":"partner_integrated"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US, Ericsson-owned). UK delivery via mobile operators and partners.","sector_review_queue":[{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Conditional - evidenced via a single, smaller technographic reference | Not assessed in specific technical detail for this sector | Not assessed for sector-specific frameworks | Roanoke Electric Cooperative (a smaller, US-based utility, confirmed as a real-world NetCloud Manager customer via independent technographic sales-intelligence data) | N/A | A single, smaller-scale technographic reference rather than a full narrative case study | A real, named customer reference exists, though at a smaller scale than the manufacturing/retail technographic references found elsewhere in this table.","named_evidence":"Roanoke Electric Cooperative (a smaller, US-based utility, confirmed as a real-world NetCloud Manager customer via independent technographic sales-intelligence data)","evidence_source_ids":["evidence:ericsson-cradlepoint:20"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via technographic data | SD-WAN and branch connectivity plausibly relevant to distributed manufacturing sites | Not assessed for sector-specific frameworks | JBT Corporation (a $2 billion, 7,000-employee US manufacturer, confirmed as a real-world NetCloud Manager customer via independent technographic sales-intelligence data) | N/A | The evidence here is technographic (confirmed technology usage) rather than a full narrative case study with quoted outcomes | A real, named, large, credible, easily-verifiable customer (JBT Corporation) is confirmed via independent technographic data - genuinely concrete, if not narratively detailed, evidence for this sector.","named_evidence":"JBT Corporation (a $2 billion, 7,000-employee US manufacturer, confirmed as a real-world NetCloud Manager customer via independent technographic sales-intelligence data)","evidence_source_ids":["evidence:ericsson-cradlepoint:20"]},{"sector":"government_public_sector","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | NetCloud Federal, FIPS 140-3 routers, the Pop-Up Network Kit for field-deployable connectivity, and the confirmed multi-carrier active-failover architecture are all directly relevant to this sector's specific requirements | FedRAMP High-level assurance via the confirmed Axon-hosted NetCloud Federal environment; FIPS 140-3 confirmed for select routers | Confirmed directly as a served sector generally, reinforced by a named reseller's specific claim of serving '1,100 unique government agencies across local, state, education, and federal sectors' | US-specific, per the confirmed named-carrier and FedRAMP evidence | General sector confirmation and named-reseller scale evidence exist; a single, narrative, individually-named government-agency case study wasn't found | Genuinely the best-evidenced sector in this entire profile - a specific, precise, primary-sourced compliance pathway (NetCloud Federal/Axon) combined with a real, named reseller's confirmed, quantified government-agency customer count together make this the platform's strongest, most concretely-evidenced sector fit.","named_evidence":"Confirmed directly as a served sector generally, reinforced by a named reseller's specific claim of serving '1,100 unique government agencies across local, state, education, and federal sectors'","evidence_source_ids":["evidence:ericsson-cradlepoint:12","evidence:ericsson-cradlepoint:13","evidence:ericsson-cradlepoint:14"]},{"sector":"transport_logistics","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | The confirmed in-vehicle telemetry API/SDK integration example, multi-carrier active failover, and location-based performance analysis are all directly and specifically relevant to fleet and transportation use cases | Not assessed for sector-specific frameworks | Confirmed directly as a served sector generally; a dedicated 'Transportation' content section on the company's own site reinforces this sector focus specifically | N/A | Real, confirmed sector-specific product content and API examples exist; a named, individual transportation-company case study with quantified outcomes wasn't found | A genuinely well-evidenced sector fit at the product-and-capability level - the confirmed in-vehicle telemetry integration and fleet-specific content demonstrate real, deliberate sector focus, even without a single, quoted named customer story.","named_evidence":"Confirmed directly as a served sector generally; a dedicated 'Transportation' content section on the company's own site reinforces this sector focus specifically","evidence_source_ids":["evidence:ericsson-cradlepoint:12","evidence:ericsson-cradlepoint:15"]},{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via technographic data | SD-WAN and branch/POS connectivity plausibly relevant | Not assessed for sector-specific frameworks | Fuzzy's Taco Shop and Evereve (both confirmed as real-world NetCloud Manager customers via independent technographic sales-intelligence data) | N/A | The evidence here is technographic (confirmed technology usage) rather than a full narrative case study with quoted outcomes | Two real, named, independently-confirmed customers in this sector via technographic data - a real, if not narratively detailed, evidentiary base.","named_evidence":"Fuzzy's Taco Shop and Evereve (both confirmed as real-world NetCloud Manager customers via independent technographic sales-intelligence data)","evidence_source_ids":["evidence:ericsson-cradlepoint:20"]},{"sector":"hospitality_leisure","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via technographic data | SD-WAN and branch/POS connectivity plausibly relevant | Not assessed for sector-specific frameworks | Fuzzy's Taco Shop and Evereve (both confirmed as real-world NetCloud Manager customers via independent technographic sales-intelligence data) | N/A | The evidence here is technographic (confirmed technology usage) rather than a full narrative case study with quoted outcomes | Two real, named, independently-confirmed customers in this sector via technographic data - a real, if not narratively detailed, evidentiary base.","named_evidence":"Fuzzy's Taco Shop and Evereve (both confirmed as real-world NetCloud Manager customers via independent technographic sales-intelligence data)","evidence_source_ids":["evidence:ericsson-cradlepoint:20"]}],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":14,"research_metrics":{"supported":11,"partial":3,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":25,"total":40,"reviewed":15,"completeness_percent":38,"completeness":0.375},"proven_evidence_count":11,"response_panel":null,"best_for":"Sector evidence not yet reviewed; both","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"both","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"arista-velocloud","name":"VeloCloud","website":"https://www.arista.com","category":"technology vendor","product_focus":"Arista AVA, Edge Threat Management (ETM), SSE partner integrations, VeloCloud Orchestrator","cost_model":"Quote-based edge subscriptions/appliances/support; managed services commonly delivered by carriers/MSPs.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partner_integrated","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"not_confirmed","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"partner_integrated","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"partner_integrated","f32_casb_capability":"partner_integrated","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"partner_integrated","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"not_primary","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":150,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/velocloud/","shortlist_summary":"VeloCloud was founded in 2012 as a cloud-delivered SD-WAN pioneer, acquired by VMware in 2017 for approximately $336 million, then came under Broadcom’s ownership when Broadcom completed its roughly $69 billion acquisition of VMware in 2023. Under Broadcom, the product was paired with Symantec’s security stack (Broadcom separately owns Symantec’s enterprise security business) into a single-vendor offering called ‘VMware VeloCloud SASE, secured by Symantec’, announced February 2024.","key_differentiators":["VeloCloud was an early SD-WAN platform with strong cloud-delivered gateway architecture; now under Arista following the 2025 acquisition.","Multi-tenant design has made VeloCloud common in carrier and MSP managed services.","Application-aware routing and dynamic path selection are mature capabilities with substantial deployment history."],"best_fit_for":["Enterprises consuming VeloCloud through a managed service provider (Vodafone UK, others).","Service providers running multi-tenant SD-WAN at scale.","Buyers comfortable with a platform in transition under new ownership."],"watch_outs":["Platform is mid-transition from VMware/Broadcom to Arista; product roadmap, naming and integration story will evolve.","Security and SASE capabilities are largely partner-integrated rather than native.","Direct enterprise sales motion is less established than legacy vendors; most consumption is via managed providers."],"evidence_coverage_pct":0.3,"last_verified":"2026-09-01","evidence_source_count":35,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.arista.com/assets/data/pdf/VeloCloud-SD-WAN-Data-Sheet.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Cloud-native by design, VeloCloud SD-WAN is delivered via a global network of Edge PoPs, either self-managed or as a managed service. Arista authors the platform; the managed-service option is operated by MSP and service-provider partners rather than by Arista end to end. Arista's own press release quotes T&A SYSTEME GmbH, 'a German MSP managing 7500+ sites in 98 countries', and MetTel as the parties running the service for customers. No Arista-run design-to-report managed service was found."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.arista.com/assets/data/pdf/SD-WAN-Solution-Overview.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Enterprises or their managed service providers can define business-level policies that apply enterprise-wide across many Edges Tenant isolation and delegated administration are evidenced by the multitenant Orchestrator, Controller and Gateway architecture and the three-tier RBAC model, and the partner programme carries 'SD-WAN MSP Partner Requirements'. Graded partial rather than yes because no page reviewed described branded or white-label partner portals, which the definition requires."},"f17_cellular_and_5g_support":{"source_url":"https://www.arista.com/assets/data/pdf/Datasheets/VeloCloud-SD-WAN-Edge-7x0-Series.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Dual Physical SIM + single eSIM (single standby) The 7x0 datasheet documents an integrated Telit FN990A28 modem, 'LTE Category Cat-19', carrier aggregation, HSPA+ 3G fallback and a full 5G FR1 band list, with dual physical SIM plus eSIM. The product page states 'integrated WiFi and 5G' and the 4100/5100 page leads with 'Integrated 5G Enterprise-class SD-WAN appliances for branches'. LTE is also listed among supported WAN transports."},"f20_private_pops_dedicated_pops":{"source_url":"https://www.arista.com/assets/data/pdf/SD-WAN-Solution-Overview.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Gateways can be deployed as partner Gateways on the premises of service providers, where they are managed by the service provider Gateways are not restricted to a shared multi-tenant estate: the datasheet describes 'A distributed, global network of gateways, hosted by Arista/service providers or deployed on-premises' and lists 'Partner Gateway Support' as a feature, covering customer-hosted and dedicated partner deployments. No sovereign-region offering was named on the pages reviewed."},"f27_integrated_next_generation_firewall":{"source_url":"https://networkworld.com/article/4199622/arista-debuts-unified-sd-wan-edge-platform.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and specifically confirmed as part of the in-development Edge Threat Management capability - firewalls, segmentation, DNS filtering, geolocation controls, and threat prevention embedded directly on VeloCloud edge devices [17] [21] Not yet generally available - planned for Q4 2026 as of this profile's research"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:f5387b83efff650f5c9acd5b","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). VeloCloud delivered in the UK through carriers including BT and Vodafone.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":15,"research_metrics":{"supported":6,"partial":2,"partner_delivered":4,"managed_service_dependent":0,"not_primary":0,"unconfirmed":28,"total":40,"reviewed":12,"completeness_percent":30,"completeness":0.3},"proven_evidence_count":6,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"opensystems","name":"Open Systems","website":"https://netify.co.uk/marketplace/opensystems/","category":"technology vendor / managed service provider","product_focus":"MDR+ (Managed Detection and Response), Managed SD-WAN / Secure SD-WAN, Managed, Universal SSE, Mission Control","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"yes","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"not_confirmed","uk_support_desk":"not_confirmed","named_tam":"not_confirmed"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/opensystems/","shortlist_summary":"Managed SD-WAN and SASE supported by Open Systems' Mission Control service team.","key_differentiators":["Managed SD-WAN and SASE supported by Open Systems' Mission Control service team."],"best_fit_for":["Buyers comparing a managed operating model for SD-WAN and SASE."],"watch_outs":[],"evidence_coverage_pct":0.2,"last_verified":"2026-09-01","evidence_source_count":37,"capability_evidence":{"f15_local_internet_breakout":{"source_url":"https://open-systems.com/company/customers/mammut/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via real, named customer-deployment detail - 'low-cost and secure internet breakouts' specifically described in the Mammut case study [16]"},"f32_casb_capability":{"source_url":"https://eqtgroup.com/about/current-portfolio/open-systems","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as part of the broader converged security stack [7] Specific inline-versus-API-mode technical detail not itemised"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:3f18bb33f360d5fbfab497d9","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"global_managed","curated_uk_basis":"Confirm UK delivery scope through RFP.","sector_review_queue":[{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, named, well-known customer | Not assessed in specific technical detail for this sector beyond the confirmed WAN-replacement and internet-breakout capabilities evidenced directly | Not assessed for sector-specific frameworks | Mammut (named, well-known international outdoor-apparel brand, with specific, quantified deployment detail: WAN replacement completed in under two months) | N/A | A single, though genuinely well-known, named, and specifically-quantified case study | A real, credible, named customer - Mammut is a well-known international outdoor-apparel brand - reinforced by specific, quantified deployment-timeline detail, making this a genuinely strong reference despite being a single example.","named_evidence":"Mammut (named, well-known international outdoor-apparel brand, with specific, quantified deployment detail: WAN replacement completed in under two months)","evidence_source_ids":["evidence:opensystems:16"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | The confirmed, dedicated OT Firewall product, plus SD-WAN and Mission Control's proactive monitoring, are directly relevant to distributed manufacturing operations | Not assessed for sector-specific frameworks beyond the confirmed general ISO 27001 certification | Mikron (named customer, described directly as strengthening security specifically to 'protect critical production systems'), confirmed directly as a served sector generally | N/A | Real, named customer evidence exists for this sector specifically | Genuinely well-evidenced via both a real, named customer case study directly referencing production-system protection and a dedicated, purpose-built OT Firewall product.","named_evidence":"Mikron (named customer, described directly as strengthening security specifically to 'protect critical production systems'), confirmed directly as a served sector generally","evidence_source_ids":["evidence:opensystems:8"]},{"sector":"transport_logistics","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced via a real, named, quantified customer example | SD-WAN and Mission Control's global, multi-site management capability directly relevant, evidenced via genuine, quantified scale (60+ locations) | Not assessed for sector-specific frameworks | Altana (named customer, connecting 60+ locations worldwide and integrating new acquisitions) | Global, per the confirmed 60+-location customer example | A single, though genuinely specific and quantified, named case study | Genuinely well-evidenced via a real, named, specifically-quantified (60+ locations) customer example directly relevant to large-scale, distributed, multi-site operations.","named_evidence":"Altana (named customer, connecting 60+ locations worldwide and integrating new acquisitions)","evidence_source_ids":["evidence:opensystems:10"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"manufacturing":false,"retail_ecommerce":false,"transport_logistics":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.open-systems.com/company/customers/","https://www.open-systems.com/company/customers/mammut/"],"qualification":"Open Systems labels ALTANA chemicals and documents SASE at 60-plus sites. Correct sector to manufacturing/chemicals, not logistics. Recovered Open Systems customer index identifies Mikron precision manufacturing using SASE. Does not prove every secondary-directory detail. Mammut primary case describes SASE, branch breakouts, VPN and managed network operations for an outdoor retail brand. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"transport_logistics":"not_confirmed","manufacturing":"yes","retail_ecommerce":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"summary_source":"https://open-systems.com/company/","position":16,"research_metrics":{"supported":7,"partial":1,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":32,"total":40,"reviewed":8,"completeness_percent":20,"completeness":0.2},"proven_evidence_count":7,"response_panel":null,"best_for":"Retail and e-commerce; Manufacturing; both","best_for_fields":{"sectors_yes":["Retail and e-commerce","Manufacturing"],"sectors_partial":[],"regions":[],"size":[],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"barracuda-secureedge","name":"Barracuda SecureEdge","website":"https://netify.co.uk/marketplace/barracuda-secureedge/","category":"technology vendor","product_focus":"Barracuda SecureEdge, Barracuda SecureEdge Access, BarracudaONE, Secure Edge Manager","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_primary","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"not_confirmed","uk_support_desk":"not_confirmed","named_tam":"not_confirmed"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/barracuda-secureedge/","shortlist_summary":"SecureEdge combines SD-WAN and cloud security, with an MSP option for multi-tenant management.","key_differentiators":["SecureEdge combines SD-WAN and cloud security, with an MSP option for multi-tenant management."],"best_fit_for":["Buyers and service providers comparing SecureEdge deployment and management options."],"watch_outs":[],"evidence_coverage_pct":0.175,"last_verified":"2026-09-01","evidence_source_count":35,"capability_evidence":{"f05_professional_services_and_migration_support":{"source_url":"https://blog.barracuda.com/2026/03/25/barracudaone-secureedge-access-and-security-service-edge-adoption","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the specifically-named, dated (March 2026) phased-adoption approach - a defined four-step migration path allowing organisations to 'prioritize immediate needs and expand over time' rather than requiring a single, forced cutover [15]"},"f36_centralised_orchestration":{"source_url":"https://barracuda.com/products/network-protection/secureedge","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'With zero-touch deployment capabilities, you can remotely deliver SASE and network security services without sending technicians onsite' [4] [17]"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:74eb1c1b2bff395216330596","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"global_managed","curated_uk_basis":"Confirm UK delivery scope through RFP.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"summary_source":"https://barracuda.com/products/network-protection/secureedge/msp","position":17,"research_metrics":{"supported":6,"partial":1,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":33,"total":40,"reviewed":7,"completeness_percent":18,"completeness":0.175},"proven_evidence_count":6,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}}]},"sase-vendors":{"ordered_by":"evidence_coverage_pct desc, provider name asc, slug asc","label":"SASE vendors","title":"SASE vendors compared","answer":"Compare technology vendors with published SASE or SSE capability evidence. Check security scope and whether SD-WAN is included or requires integration.","url":"https://netify.co.uk/sase/shortlist/sase-vendors/","providers":[{"slug":"lumen","name":"Lumen","website":"https://www.lumen.com/en-us/services/sd-wan.html","category":"technology vendor / managed service provider / carrier network provider","product_focus":"Black Lotus Labs, Lumen Managed SASE Solutions, Lumen SASE with Versa, Lumen SD-WAN with Versa Networks","cost_model":"Quote-based; Lumen states fully managed or co-managed SD-WAN, with access/network services priced by requirement.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"partner_integrated","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"partner_integrated","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"partial","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":50,"sla_availability_pct":99.99,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/lumen/","shortlist_summary":"Lumen Technologies has just completed a corporate transformation - on 21 May 2025, Lumen announced the sale of its Mass Markets fiber-to-the-home business - including its Quantum Fiber consumer brand, serving more than 1 million subscribers across 11 states - to AT&T for $5.75 billion in cash, a transaction that closed on 2 February 2026. Lumen’s own CEO, Kate Johnson, described the deal directly as marking the company’s transformation into ‘a Pure Play Enterprise-Focused Technology Infrastructure Company’, retaining its national, regional, state, and metro fiber backbone specifically to support that enterprise focus while divesting the consumer-facing business entirely.","key_differentiators":["Fully managed or co-managed SD-WAN with strong NaaS positioning and integrated network services.","Substantial underlay ownership in North America with global reach.","Co-managed model provides operational flexibility for customers wanting selective control."],"best_fit_for":["North American enterprises wanting integrated managed SD-WAN, access and broader network services from one provider.","Buyers attracted to the NaaS consumption model.","Organisations wanting genuine co-managed delivery rather than pure managed or pure DIY."],"watch_outs":["SASE and security capabilities are largely partner-integrated rather than native; the SSE platform choice needs explicit evaluation.","International delivery depth is less prominent than the dedicated global carriers.","Underlying SD-WAN platform should be confirmed; platform choice affects feature set."],"evidence_coverage_pct":0.65,"last_verified":"2026-09-01","evidence_source_count":31,"capability_evidence":{"f07_lifecycle_management":{"source_url":"https://assets.lumen.com/is/content/Lumen/SD-WAN___Managed_Equipment_Service_Guide","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Lifecycle management – notification of end of sale/end of support. The same service guide lists CPE break/fix (RMA) warranty support for failed devices and processing of return material authorisation replacement requests, plus patch management for all hardware and software. The SD-WAN service schedule states that during the initial service term purchased CPE is eligible for the Managed Device Replacement Service Level in the Lumen Service Level Agreement, so replacement is contractual rather than best effort."},"f10_dynamic_path_selection":{"source_url":"https://lumen.com/en-us/services/sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Route traffic over the most efficient connection for high performance' [3]"},"f12_application_aware_routing":{"source_url":"https://lumen.com/en-us/services/sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Route traffic over the most efficient connection for high performance, and update routing and security rules in real time as network needs change' [3]"},"f13_qos_and_traffic_shaping":{"source_url":"https://docs.lumen.com/readiness/products/sd-wan-versa/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'the ability to intelligently use lower cost Internet connections to achieve MPLS-like QoS' [2]"},"f17_cellular_and_5g_support":{"source_url":"https://lumen.com/en-us/services/sdwan-versa-networks.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name as a supported WAN underlay ('4G/LTE') [5]"},"f18_cloud_on_ramp":{"source_url":"https://docs.lumen.com/readiness/products/sd-wan-versa/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the confirmed 'physical and virtual customer-premises equipment (CPE)' architecture description [2]"},"f19_public_cloud_gateways":{"source_url":"https://ir.lumen.com/news/news-details/2024/Lumen-and-Versa-Expand-Partnership-to-Deliver-a-Sovereign-SASE-Solution/default.aspx","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The Sovereign SASE solution is deployed on dedicated SASE gateways in Lumen's global points of presence (PoPs) or on customer premises, based on the customer's preference and needs. The PoPs are Lumen's own, which is what this field measures, and the SASE product page advertises 50+ low-latency edge nodes in key metro areas. The security software running in them is Versa or Fortinet technology, which does not change the ownership of the infrastructure. One complication is recorded in conflicts: the SASE service guide also describes an option delivered through a global network of VMware SASE points of presence, which would be partner_integrated rather than Lumen-owned."},"f20_private_pops_dedicated_pops":{"source_url":"https://assets.lumen.com/is/content/Lumen/sd-wan-service-schedule?Creativeid=914be424-577f-4a0d-97cd-3c9c00a783e4","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The Lumen SD-WAN with Versa Networks network Controllers are hosted within Lumen facilities, but can also be deployed as private infrastructure in a customer provided environment for an additional charge. Reinforced by the dated May 2024 Versa Sovereign SASE press release, which states the solution is deployed on dedicated SASE gateways in Lumen's global PoPs or on customer premises based on the customer's preference and needs. Customer-hosted, dedicated and sovereign options are therefore documented, not only shared multi-tenant locations."},"f21_private_global_backbone":{"source_url":"https://ir.lumen.com/news/news-details/2024/Lumen-and-Versa-Expand-Partnership-to-Deliver-a-Sovereign-SASE-Solution/default.aspx","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Black Lotus Labs, Lumen's threat research team, leverages its unique visibility into Lumen's global internet backbone using ML algorithms to generate threat intelligence Lumen owns and operates its own global backbone, which is the substance of this field. Confidence is medium rather than high for two reasons: the clearest wording found is incidental to a threat intelligence sentence, and the most explicit owned-fibre statement found, that Lumen operates the largest ultra-low-loss intercity fiber network in North America, is scoped to North America. No page reviewed states as a product property that inter-region SASE or SD-WAN traffic rides the Lumen backbone rather than the public internet."},"f24_flexible_edge_form_factors":{"source_url":"https://lumen.com/en-us/services/sase-versa.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - a named, sized CPE device tier ('Extra Small CPE Device') is confirmed directly as part of Lumen's disclosed pricing structure [4]"},"f25_high_availability_design":{"source_url":"https://lumen.com/en-us/services/sdwan-versa-networks.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - the confirmed service wrapper includes 'appliance/circuit monitoring' and '24/7 support for the entire WAN solution' [5]"},"f26_sla_backed_service_fabric":{"source_url":"https://assets.lumen.com/is/content/Lumen/lumen-service-level-agreementpdf?Creativeid=dc0beb0f-83c4-46d5-8684-85af0333edbe","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Lumen offers Service Availability Service Levels for Qualifying Services based on the following Availability Tiers. The published Lumen Service Level Agreement names Lumen SD-WAN Service with Versa Networks, Lumen SD-WAN Service with Cisco Meraki and Lumen SASE Solutions as qualifying services, and carries availability tiers, a four hour incident response commitment, managed device replacement targets, and regional latency, jitter and packet delivery objectives. These are credit-bearing contractual commitments rather than best-effort targets."},"f27_integrated_next_generation_firewall":{"source_url":"https://assets.lumen.com/is/content/Lumen/sase-solutions-service-guide?Creativeid=4af4755b-f89d-476b-a0b7-879ea4015615","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Next Generation Firewall (NGFW) is available as a service license with Fortinet and is powered by FortiOS The firewall function is Fortinet technology licensed and operated by Lumen, so partner_integrated rather than yes. The same guide describes anti-malware, web filtering and firewall, intrusion detection and prevention (IDS/IPS) within the unified threat management set, and the SD-WAN service schedule describes a Security Upgrade providing a set of firewall, web filtering and intrusion prevention. The function is integrated into the delivered platform, but the technology belongs to another vendor."},"f28_full_sase_platform":{"source_url":"https://lumen.com/en-us/services/sase-versa.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a named product - Versa Secure Private Access (VSPA) 'secure remote workforces at the edge with user-centric' access [4]"},"f30_zero_trust_network_access":{"source_url":"https://lumen.com/en-us/services/sase-versa.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a named product - Versa Secure Private Access (VSPA) 'secure remote workforces at the edge with user-centric' access [4]"},"f31_secure_web_gateway":{"source_url":"https://lumen.com/en-us/services/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly as part of the SSE capability list - 'Secure Web Gateway (SWG)' named explicitly [6]"},"f32_casb_capability":{"source_url":"https://lumen.com/en-us/services/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Cloud Access Security Broker (CASB)' named explicitly as SSE-compatible [6] Specific inline-versus-API-mode technical detail not itemised"},"f33_data_loss_prevention":{"source_url":"https://assets.lumen.com/is/content/Lumen/sase-solutions-service-guide?Creativeid=4af4755b-f89d-476b-a0b7-879ea4015615","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"intrusion detection and prevention (IDS/IPS), and data loss prevention DLP is listed on the Lumen SASE product page as one of the Security Service Edge services alongside NGFW, SWG, ZTNA and CASB, and appears in the SASE service guide within the Fortinet-powered feature set, so it is another vendor's engine operated by Lumen. No Lumen page reviewed describes content classification detail, blocking versus flagging behaviour, alerting or exception workflows, so confidence is medium on the depth of the capability rather than on its presence."},"f40_managed_service_assurance":{"source_url":"https://assets.lumen.com/is/content/Lumen/SD-WAN___Managed_Equipment_Service_Guide","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Lumen resources are available 24x7 for support. Graded partial for two reasons. First, the SD-WAN and Managed Equipment service guide evidences 24x7x365 performance management by Lumen skilled operations engineers and continuous network monitoring, which covers the NOC half, but the SASE service guide states that the Pro-Managed service does not include security operations center services, so the SOC half is not part of the standard managed wrap. Second, no source reviewed documents ownership of incidents through to root cause analysis, structured service reviews or change governance as contractual elements; those terms were searched for in both service guides and the service schedule and not found."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:6d66149079a3a4ab68cf17eb","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"yes","transport_logistics":"partial","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"global_managed","curated_uk_basis":"No UK HQ (US); UK delivery is largely via partners following the EMEA divestment to Colt.","sector_review_queue":[{"sector":"financial_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced via a real, named individual testimonial | Not assessed in specific technical detail for this sector beyond the confirmed general testimonial | Not assessed for sector-specific frameworks, though the confirmed comprehensive PCI DSS support (Table 13) is directly relevant | Mahendra Verma, VP and Sr. Network Engineering Manager, Horizon Bank - named individual, named company, direct positive quote on service responsiveness | N/A | The testimonial is disclosed directly by Lumen as a compensated endorsement | A real, named banking-sector customer reference - genuinely credible, specific evidence, reinforced by Lumen's own confirmed, comprehensive PCI DSS support relevant to this exact sector, tempered by the confirmed compensated-endorsement disclosure.","named_evidence":"Mahendra Verma, VP and Sr. Network Engineering Manager, Horizon Bank - named individual, named company, direct positive quote on service responsiveness","evidence_source_ids":["evidence:lumen:17"]},{"sector":"healthcare","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, though not individually-named, customer account | Confirmed DIA (Dedicated Internet Access) and SASE solutions directly improving 'telehealth capabilities' specifically named | HIPAA not confirmed (Table 13) | An anonymous (within the specific snippet reviewed) customer account confirming replacement of aging MPLS/SD-WAN with modern DIA and SASE, directly citing improved 'telehealth capabilities' | N/A | The customer's individual name was not extracted in this specific research pass; the confirmed HIPAA gap remains a specific, worth-flagging limitation | A real, specific, primary-sourced account directly naming telehealth as an improved capability - genuinely concrete evidence for this sector-adjacent use case, even without full individual attribution confirmed in this pass.","named_evidence":"An anonymous (within the specific snippet reviewed) customer account confirming replacement of aging MPLS/SD-WAN with modern DIA and SASE, directly citing improved 'telehealth capabilities'","evidence_source_ids":["evidence:lumen:17"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced via a real, named individual testimonial | Confirmed SASE and EWAS (Enterprise Wide Area Services) capabilities directly relevant to distributed manufacturing operations | Not assessed for sector-specific frameworks | Jeff Pinkerton, VP of IT, Berridge Manufacturing Co. - named individual, named company, direct quote on SASE/EWAS implementation responsiveness | N/A | The testimonial is disclosed directly by Lumen as a compensated endorsement | A real, named, individually-attributable customer reference - genuinely stronger evidence than an anonymised case study, tempered by the confirmed compensated-endorsement disclosure.","named_evidence":"Jeff Pinkerton, VP of IT, Berridge Manufacturing Co. - named individual, named company, direct quote on SASE/EWAS implementation responsiveness","evidence_source_ids":["evidence:lumen:17"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"healthcare":false,"manufacturing":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://lumen.com/en-us/resources/customer-success-stories.html","https://www.lumen.com/en-hk/resources/customer-stories/flux.html"],"qualification":"Recovered Lumen testimonial identifies Valley Cities Behavioral Health Care replacing MPLS/SD-WAN with DIA and SASE. Correct anonymous attribution; compensated supplier-published endorsement. Berridge testimonial explicitly says SASE and EWAS will work together once implementation is complete. It is not evidence of a completed outcome. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"healthcare":"partial","manufacturing":"not_confirmed"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":1,"research_metrics":{"supported":23,"partial":1,"partner_delivered":2,"managed_service_dependent":0,"not_primary":0,"unconfirmed":14,"total":40,"reviewed":26,"completeness_percent":65,"completeness":0.65},"proven_evidence_count":23,"response_panel":null,"best_for":"Healthcare (partial evidence); both","best_for_fields":{"sectors_yes":[],"sectors_partial":["Healthcare"],"regions":[],"size":[],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"versa-networks","name":"Versa Networks","website":"https://versa-networks.com","category":"technology vendor","product_focus":"Inbound SSE, Secure Enterprise Browser, VOS, Versa Analytics","cost_model":"Quote-based subscription; MSP/carrier pricing depends on tenant scale, bandwidth, security package and delivery model.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"partial","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_primary","financial_services":"not_primary","retail_ecommerce":"partial","manufacturing":"partial","energy_utilities":"yes","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"not_primary","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"yes"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":90,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/versa-networks/","shortlist_summary":"Versa Networks built its SASE platform around a single-vendor, single-operating-system architecture from an early starting point - the company was founded in 2012, before the SASE category itself existed, on the thesis that legacy hardware and static WAN architectures were holding enterprises back from the cloud. That heritage shows up directly in VersaONE’s design: one operating system (VOS), one console, one policy engine and one data lake, with a single-pass parallel-processing architecture built to avoid the latency penalty of chaining separate security functions together.","key_differentiators":["Multi-tenancy from the ground up, making Versa a common choice for service providers and carriers building managed SD-WAN and SASE platforms.","Versa Operating System (VOS) provides a converged networking and security software stack across cloud and on-premises delivery.","Often the underlying platform when buyers select a managed SD-WAN service from a carrier or MSP."],"best_fit_for":["Service providers, carriers and MSPs building white-label managed SD-WAN or SASE services.","Enterprises consuming Versa indirectly through a managed provider (e.g. Verizon, Orange).","Buyers who want platform flexibility across cloud-delivered, on-premises and hybrid delivery models."],"watch_outs":["Less well-known to enterprise buyers as a direct purchase; most enterprise consumption is via service providers.","Buyers should confirm exactly which managed provider is delivering the platform and what the operational RACI looks like.","Brand recognition trails Cisco, Palo Alto and Fortinet in enterprise procurement processes."],"evidence_coverage_pct":0.65,"last_verified":"2026-09-01","evidence_source_count":51,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://versa-networks.com/documents/solution-briefs/versa-sase.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"In this model Versa NOC is responsible for managing and maintaining Versa SASE, while the customer IT team is responsible for management and monitoring of the CPEs. Versa does operate a NOC and a hosted, managed head-end and gateway service under its own SLA, so part of the estate is genuinely run by Versa. But its own solution brief places CPE management with the customer IT team in that model, and the alternative model places configuration management and monitoring with a Service Provider. End-to-end design, deploy, change, support and report by Versa itself for the whole service is not evidenced, so partial rather than yes."},"f03_co_managed_service":{"source_url":"https://versa-networks.com/documents/solution-briefs/versa-sase.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"In this model Versa NOC is responsible for managing and maintaining Versa SASE, while the customer IT team is responsible for management and monitoring of the CPEs. This is a textbook split of responsibility: Versa runs the platform and the customer retains CPE operations. Concerto's provider-level and tenant-level roles document the same shared model in the tooling."},"f07_lifecycle_management":{"source_url":"https://versa-networks.com/documents/datasheets/versa-networks-hosted-and-managed-head-end.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Head-end server hardware OS and security patch upgrades and updates For the hosted head-end, Versa documents software upgrades of Director, Analytics, Controller, Concerto and VMS plus OS and security patching, which is lifecycle handled as part of the service. Separately, hardware documentation covers a two-year limited warranty, next-business-day and same-business-day advance replacement, DOA handling and an end-of-life policy. Graded partial rather than yes because branch CPE firmware upgrades and renewals in a typical Versa deployment sit with the customer or the service provider partner, and hardware replacement coverage is a purchased support tier rather than something evidenced as included in the service by default."},"f12_application_aware_routing":{"source_url":"https://versa-networks.com/news/2018/versa-networks-present-adobe-sd-wan-use-case-onug-fall-2018.php","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, per-application SLA-based routing confirmed specifically via the Adobe deployment [19]"},"f17_cellular_and_5g_support":{"source_url":"https://docs.versa-networks.com/Secure_SD-WAN/01_Configuration_from_Director/Common_Configuration/Configure_WWAN","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The term WWAN interfaces refers to LTE, 4G, and 5G interfaces. Documentation covers LTE, 4G and 5G on a VOS WAN port, SIM activation and operator ID checks, and radio quality monitoring via RSRP, RSRQ, RSSI and SINR with banded signal states. It is documented as usable where a branch has no wired connection and alongside wired links, so both primary and failover roles are covered. On the source page the words WWAN interfaces are italicised; the italics add no characters to the rendered text."},"f18_cloud_on_ramp":{"source_url":"https://docs.versa-networks.com/Integrations_and_Solutions/Integrations/Endpoint_Detection_and_Response/Integrate_Versa_SASE_with_CrowdStrike_Falcon","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native - confirmed explicitly for AWS-hosted VOS deployment, described as 'cloud edge deployment such as AWS running VOS' [24]"},"f19_public_cloud_gateways":{"source_url":"https://docs.versa-networks.com/Security_Service_Edge_(SSE)/Configuration_from_Director/Ecosystem/Versa_SASE_Ecosystem","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Versa Cloud Gateways (VCGs) are Versa SASE Gateways which are deployed in Point of Presence (PoP) locations around the world. These are Versa's own gateways running Versa's own VOS software, not a third party's PoPs resold under Versa's name, so yes rather than partner_integrated. They deliver secure internet access, ZTNA, threat protection and DLP as a cloud service, and the SASE client selects the VCG offering lowest latency."},"f20_private_pops_dedicated_pops":{"source_url":"https://versa-networks.com/products/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Versa SASE is delivered via the cloud, on-premises, or as a blended combination of both Versa markets Private SASE and Sovereign SASE as distinct deployment models alongside the shared cloud. Network World, a named-author dated source, reports that Sovereign SASE runs entirely on customer-controlled infrastructure with the customer choosing its own compute, on-premises or in a private cloud. Confidence is medium rather than high because the Sovereign SASE product page itself would not render without JavaScript, so the strongest Tier 1 statement of the claim could not be read directly."},"f21_private_global_backbone":{"source_url":"https://docs.versa-networks.com/Security_Service_Edge_(SSE)/Configuration_from_Director/Ecosystem/Versa_SASE_Ecosystem","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Versa SD-WAN Traffic Engineered network which uses multiple global and regional providers for the underlay. Inter-gateway traffic rides a Versa-controlled traffic-engineered overlay that selects paths on least end-to-end latency and loss, and each VCG is connected to multiple global and multiple regional service providers with peering relationships. But the underlay is explicitly other carriers' capacity, not fibre or circuits owned by Versa. Graded partial: the control plane and path selection are Versa's, the physical backbone is not."},"f24_flexible_edge_form_factors":{"source_url":"https://docs.versa-networks.com/Integrations_and_Solutions/Integrations/Endpoint_Detection_and_Response/Integrate_Versa_SASE_with_CrowdStrike_Falcon","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native - Versa-certified white-box routers (third-party hardware running VOS) confirmed specifically via the Adobe deployment account; branch edge devices, cloud edge deployment, and on-premises appliances all confirmed as supported form factors [24]"},"f25_high_availability_design":{"source_url":"https://versa-networks.com/customers/case-studies/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed at a specific, quantified level via the Adobe case study - 'four-nines of availability for critical services' was an explicit deployment requirement Versa was chosen to meet [18]"},"f26_sla_backed_service_fabric":{"source_url":"https://versa-networks.com/documents/Versa-Hosted-SASE-SLA.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"target Uptime average of 99.999% (\"Uptime SLA Percentage\") measured monthly A published, dated SLA document covering Versa Hosted and Managed Secure Services Edge Gateways, with a tiered service-credit table running from 2 days of credit for uptime below 99.999% up to 24 days below 98.0%, plus a security processing latency commitment of 10ms without TLS inspection and 50ms with anti-virus, malware detection and IPS with TLS decryption. Contractual rather than best-effort, including a two calendar day claim window."},"f33_data_loss_prevention":{"source_url":"https://docs.versa-networks.com/Security_Service_Edge_(SSE)/Configuration_from_Concerto/Configure_Data_Loss_Prevention_in_Concerto","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Data loss prevention (DLP) is a set of tools and processes for detecting and preventing data breaches, cyber exfiltration, and unwanted destruction of sensitive data. Native to the platform and configured from Concerto. Content passing through the organisation's ports and protocols is scanned against match rules, with enforcement actions of Alert, Allow, Block, Reject, Quarantine, Encrypt, Redact or Tokenize, and all actions reported to Versa Analytics for review. Documentation also covers offline DLP, DLP data exfiltration policies and applying Microsoft MIP sensitivity labels."},"f35_soc_siem_soar_integration":{"source_url":"https://docs.versa-networks.com/Integrations_and_Solutions/Integrations/SIEM/Versa_Analytics_and_CrowdStrike_NG-SIEM_Integration","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed and well-evidenced via Versa Analytics' specific, itemised log-type list (flow logs, SD-WAN path and bandwidth usage, CGNAT, DHCP, DNS, SASE-web monitoring, secure access, traffic conditioning, URL filtering, and IDP logs) and confirmed export to CrowdStrike Falcon Next-Gen SIEM [26] Not confirmed"},"f36_centralised_orchestration":{"source_url":"https://versa-networks.com/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via a named practitioner review describing the console's 'ZTP (zero touch provisioning)' capability speeding up implementation [7]"},"f40_managed_service_assurance":{"source_url":"https://versa-networks.com/documents/datasheets/versa-premier-service.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Versa will provide Root-Cause Analysis for customer-reported P1 issues. The NOC half is evidenced: 24x7 monitoring of head-end alarms and application health, a Versa NOC responsible for managing and maintaining Versa SASE, formal root cause analysis on P1 incidents, and scheduled periodic or quarterly customer review meetings. What I did not find on any page I read is a 24x7 SOC performing proactive security monitoring on the customer's behalf, nor a documented change governance process. Graded partial on that gap. Note also that the Premier Service datasheet carries a 2020 copyright."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:05460064bfddb49a73b78910","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"partial","manufacturing":"partial","energy_utilities":"partial","government_public_sector":"partial","education":"partial","transport_logistics":"partial","professional_services":"partial","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). Delivered in the UK through carrier and MSP partners building managed services on Versa.","sector_review_queue":[{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | SASE-ready architecture, TCO reduction relevant to distributed manufacturing operations | Not assessed | A Global-200 pharmaceutical manufacturing company, described as achieving a SASE-ready architecture and TCO savings | Not itemised in detail beyond the Global-200 scale reference | Single case reference, anonymised (described by scale/category rather than named) | A real, credible, if anonymised, large-scale manufacturing reference - worth a direct follow-up to get the specific customer name and quantified outcomes if Netify needs a fully named case study for this sector.","named_evidence":"A Global-200 pharmaceutical manufacturing company, described as achieving a SASE-ready architecture and TCO savings","evidence_source_ids":["evidence:versa-networks:18"]},{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Multi-site security and cloud migration relevant to utility operations | Not assessed | Lambton Area Water Supply Systems (Ontario, Canada) - deployed Versa SASE to secure remote and headquarter offices while migrating sensitive data to cloud environments; a named practitioner quote from a General Manager, Information Systems in Energy and Utilities also references one-touch edge deployment | Named, specific Canadian utility customer | Single named case study, plus one further anonymised named-role quote | A genuinely credible, named, specific utility-sector customer (Lambton Area Water Supply Systems), reinforced by a second, separate energy-and-utilities-specific practitioner quote - reasonably solid sector evidence.","named_evidence":"Lambton Area Water Supply Systems (Ontario, Canada) - deployed Versa SASE to secure remote and headquarter offices while migrating sensitive data to cloud environments; a named practitioner quote from a General Manager, Information Systems in Energy and Utilities also references one-touch edge deployment","evidence_source_ids":["evidence:versa-networks:7","evidence:versa-networks:18"]},{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | SD-WAN/branch capability, cost-reduction focus | Not assessed | A top global retailer (600+ store locations) reporting improved cost savings and reduced operational overhead; a primary food retailer with multiple brands increasing store locations while reducing TCO; a named F100 retailer reclaiming $4M in previously wasted spend | Large-scale, multi-brand deployment evidenced directly | US-centric framing in the sources reviewed; specific named retailers not identified by name (described by category/scale instead) | Genuinely well-evidenced by scale and count (three separate retail-sector references), even though the specific retailer names weren't disclosed in the sources reviewed - a real, if anonymised, sector-fit signal.","named_evidence":"A top global retailer (600+ store locations) reporting improved cost savings and reduced operational overhead; a primary food retailer with multiple brands increasing store locations while reducing TCO; a named F100 retailer reclaiming $4M in previously wasted spend","evidence_source_ids":["evidence:versa-networks:18","evidence:versa-networks:22","evidence:versa-networks:25"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"energy_utilities":false,"manufacturing":false,"retail_ecommerce":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://versa-networks.com/customers/case-studies/","https://versa-networks.com/","https://aitranslatewpml.versa-networks.com/customers/case-studies/","https://versa-networks.com/lp/sase-cost-savings/"],"qualification":"Versa case index expressly identifies Lambton Area Water Supply Systems deploying SASE for remote offices and cloud data. Canadian utility case only. Versa identifies an anonymous Global-200 pharmaceutical manufacturer using Secure SD-WAN. Retain anonymous evidence, not a named reference. Versa documents an unnamed retailer with over 600 stores using Secure SD-WAN. Do not describe this as named customer proof. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"energy_utilities":"yes","manufacturing":"partial","retail_ecommerce":"partial"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":2,"research_metrics":{"supported":22,"partial":4,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":14,"total":40,"reviewed":26,"completeness_percent":65,"completeness":0.65},"proven_evidence_count":22,"response_panel":null,"best_for":"Energy and utilities; Retail and e-commerce (partial evidence); Manufacturing (partial evidence); Small business; platform","best_for_fields":{"sectors_yes":["Energy and utilities"],"sectors_partial":["Retail and e-commerce","Manufacturing"],"regions":[],"size":["Small business"],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"cato-networks","name":"Cato Networks","website":"https://www.catonetworks.com","category":"technology vendor","product_focus":"Cato Browser Extension, Cato Client, Cato DEM, Cato EPP/EDR","cost_model":"Quote-based subscription; typically site/user/bandwidth/security bundle based.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_entity","uk_basis":"The Cato Master Service Agreement, section 1.4, lists this UK contracting party. The entity identified in the buyer’s order determines the actual counterparty; this does not establish site coverage or managed-service scope.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"partner_integrated","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"yes","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"partial","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"yes","small_business":"not_confirmed"},"pricing_units":["per_site","per_user","per_bandwidth","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":100,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/cato-networks/","shortlist_summary":"Cato Networks is frequently scored by us at Netify as being one of the easiest platforms to actually use, and they’re often considered a more integrated offering than most of the competition, which is primarily down to building their SASE solution from the ground up rather than bolting security onto an existing networking product, or the other way round.","key_differentiators":["Single converged platform with no policy or log fragmentation across SD-WAN and security functions.","100+ PoP global private backbone reduces internet variability and provides predictable performance for SaaS-heavy traffic.","Strong story for organisations consolidating multiple point solutions onto one operational platform."],"best_fit_for":["Mid-market and enterprise buyers consolidating SD-WAN and SASE on one platform from a single vendor.","Global organisations with SaaS-heavy traffic patterns that benefit from a private backbone.","Teams without dedicated security operations capacity who want a managed SASE experience."],"watch_outs":["Less suited to best-of-breed buyers wanting Zscaler or Netskope as the SSE layer.","Customer does not own the underlay; circuits sourced separately, so multi-supplier coordination remains.","Less mature than incumbents for very large multinational deployments with heavy legacy MPLS estates."],"evidence_coverage_pct":0.6,"last_verified":"2026-09-01","evidence_source_count":62,"capability_evidence":{"f13_qos_and_traffic_shaping":{"source_url":"https://support.catonetworks.com/hc/en-us/articles/7790698733341","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native - Network Rules let admins assign a bandwidth-priority QoS tier to business-critical traffic, alongside acceleration/optimisation and transport-path settings, confirmed directly in Cato's admin documentation. [46]"},"f14_packet_loss_remediation":{"source_url":"https://support.catonetworks.com/hc/en-us/articles/360001868837","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native - packet duplication for packet loss mitigation, confirmed directly in Cato's own documentation: TCP packets duplicated across active links, UDP packets duplicated across active or standby links. [44] [45] [46]"},"f17_cellular_and_5g_support":{"source_url":"https://support.catonetworks.com/hc/en-us/articles/16308182518173-X1600-Cellular-Connectivity-Troubleshooting","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Socket X1600 now has a hardware version that supports Cellular (LTE/5G) connections Cato's own Learning Center documents integrated LTE/5G on the X1600 Socket, dual SIM management (\"By default, SIM Slot 1 is the active one, while Slot 2 is standby.\") and signal monitoring via RSSI, RSRP, SINR and RSRQ. The platform page corroborates transport choice: \"Customers can choose any mix of fiber, cable, xDSL, and cellular connections.\" All three definition elements (transport, SIM management, signal monitoring) are met."},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://catonetworks.com/platform/digital-experience-monitoring-dem/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Confirmed - DEM's AI-powered engines correlate real-user monitoring and synthetic probing [16] Requires DEM licence"},"f11_active_active_link_utilisation":{"source_url":"https://knowledge.catonetworks.com/docs/hardware","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"Cato Socket WAN links support active/active operation. Link design and policy must be configured for the deployment."},"f25_high_availability_design":{"source_url":"https://knowledge.catonetworks.com/docs/hardware","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"WAN redundancy and optional Socket redundancy are documented. HA Sockets require their own licences; resilience depends on the deployed design."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:0b8c3f42d28c71efefe6ed68","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"partial","education":"yes","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (Israel and US). Delivers in the UK from London and Manchester PoPs; contract direct or through UK partners including Netify routes.","sector_review_queue":[{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit (best-evidenced sector) | Zero-touch branch provisioning, backbone performance, DEM | PCI-DSS Level 1 | Ulta Beauty (large-scale, phased, near-zero-touch, 99.99% cutover success, 10 stores/night); Opkalla-documented jewelry retailer (24 stores, MSP cost reduction) | Backbone/PoP density matters most for geographically distributed store estates | Case evidence is US-centric; UK/EU retail-specific case studies not found in this pass | This is genuinely Cato's best-evidenced sector - Netify can cite the Ulta Beauty story with confidence given it's a named, detailed, metric-rich case study.","named_evidence":"Ulta Beauty (large-scale, phased, near-zero-touch, 99.99% cutover success, 10 stores/night); Opkalla-documented jewelry retailer (24 stores, MSP cost reduction)","evidence_source_ids":["evidence:cato-networks:24","evidence:cato-networks:25"]},{"sector":"education","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Referenced in a customer quote ('reorganize our entire security portfolio... for our students, professors, and administrators') | General SASE consolidation value referenced qualitatively | Not assessed | One qualitative customer quote found (unnamed institution) on catonetworks.com/platform/ | N/A | Quote-level evidence only, not a structured case study with metrics | Treat as a weak signal only - a single unattributed quote is not the same standard of evidence as the Ulta Beauty case study; do not over-weight it.","named_evidence":"One qualitative customer quote found (unnamed institution) on catonetworks.com/platform/","evidence_source_ids":["evidence:cato-networks:9"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"retail_ecommerce":false,"education":false},"reviewed_at":"2026-09-30T15:50:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.catonetworks.com/customers/ulta-beauty-reinvents-network-deliver-seamless-retail-experience/","https://www.catonetworks.com/customers/waseda-university-achieves-universal-secure-remote-learning-and-jumpstarts-digital-transformation-with-cato/"],"qualification":"Ulta Beauty primary case documents a SASE-led cloud SD-WAN transition and staged store rollout. Do not imply the three-year rollout is complete. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation. Waseda University primary case documents Cato secure remote learning in Japan via GlobalDots. Replacement named education evidence; does not validate the original anonymous quotation or UK education suitability.","sectors":{"retail_ecommerce":"yes","education":"partial"},"regions":{}}},"uk_evidence":{"entity":{"status":"evidenced","name":"Cato Networks (UK) Limited","source_urls":["https://www.catonetworks.com/msa/"],"checked_at":"2026-10-01T00:00:00Z","review_due":"2026-12-30T00:00:00Z","qualification":"The Cato Master Service Agreement, section 1.4, lists this UK contracting party. The entity identified in the buyer’s order determines the actual counterparty; this does not establish site coverage or managed-service scope."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":3,"research_metrics":{"supported":24,"partial":0,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":16,"total":40,"reviewed":24,"completeness_percent":60,"completeness":0.6},"proven_evidence_count":24,"response_panel":null,"best_for":"Retail and e-commerce; Education (partial evidence); Large global enterprise; Mid-market; platform","best_for_fields":{"sectors_yes":["Retail and e-commerce"],"sectors_partial":["Education"],"regions":[],"size":["Large global enterprise","Mid-market"],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"uk_entity","label":"UK contracting entity","source_urls":["https://www.catonetworks.com/msa/"],"reviewed_at":"2026-10-01T00:00:00Z","qualification":"The Cato Master Service Agreement, section 1.4, lists this UK contracting party. The entity identified in the buyer’s order determines the actual counterparty; this does not establish site coverage or managed-service scope."}},{"slug":"netskope","name":"Netskope","website":"https://www.netskope.com","category":"technology vendor","product_focus":"Borderless SD-WAN, Cloud Confidence Index (CCI), Netskope Cloud Exchange (CE), Netskope One","cost_model":"Quote-based subscription; modules commonly priced by users, sites, traffic and security functions.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"partial","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"yes","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"yes","retail_ecommerce":"not_primary","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"yes","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":120,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/netskope/","shortlist_summary":"Netskope sits in an interesting middle ground between a pure security-first platform and a fully networked one: unlike the likes of Zscaler, it has invested in its own converged mesh network (NewEdge) and a purpose-built SD-WAN (Borderless SD-WAN, built on the 2022 Infiot acquisition), so the ‘security company bolting on networking’ story is a few years further along than Zscaler’s; unlike Cato, that network is built on peering and interconnects across 67 regions rather than an owned private backbone.","key_differentiators":["Strong CASB heritage; widely recognised as a leading SSE vendor for SaaS-heavy environments.","Borderless WAN (from the Infiot acquisition) extends Netskope into single-vendor SASE for buyers wanting both layers from one platform.","Detailed SaaS application visibility and policy controls."],"best_fit_for":["Enterprises with deep SaaS adoption where CASB and DLP are top procurement priorities.","Buyers comparing single-vendor SASE platforms after starting with SSE.","Organisations selecting Netskope SSE alongside a separate SD-WAN platform via partner integration."],"watch_outs":["Native SD-WAN (Borderless WAN) is newer than dedicated SD-WAN platforms; validate path selection and QoS depth in RFP.","Fully managed service: not confirmed. Confirm who will operate the service and whether management is supplied directly or through a partner.","Premium pricing with modular structure; full SASE bundle costs can scale meaningfully with users and traffic."],"evidence_coverage_pct":0.6,"last_verified":"2026-09-01","evidence_source_count":66,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.netskope.com/press-releases/netskope-enables-msps-to-generate-revenue-faster-with-launch-of-new-catalyst-msp-sp-program-and-netskope-partner-orchestrator","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"A self-service multi-tenant orchestrator for the full SASE and AI product suite that quickly provisions production-ready customer environments. Multi-tenant provisioning and delegated administration across unlimited partner tiers are documented in the June 2026 Catalyst announcement and corroborated by ChannelE2E. Branded or white-label partner portals and reusable customer templates were not evidenced on any page read, so graded partial rather than yes."},"f07_lifecycle_management":{"source_url":"https://www.netskope.com/wp-content/uploads/2022/07/2025-06-Netskope-One-SD-WAN-DS-607-9.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"simple one-click RMA, customized applications The SD-WAN datasheet documents zero-touch activation and one-click hardware RMA, and the platform is cloud-managed from a single console. No page read states that firmware upgrades, patching, renewals or end-of-life planning are performed as part of the service, so graded partial rather than yes."},"f17_cellular_and_5g_support":{"source_url":"https://www.netskope.com/products/wireless-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Reliable, high-performance 5G connectivity for primary, backup, or active-active links delivers sub-second brownout/blackout protection. 5G Standalone is supported as primary, backup or active-active transport. eSIM with on-gateway LPAd covers SIM management, the Converged Gateway carries built-in 4G/5G with Netskope Zero Trust SIM across 400+ networks, and digital experience management reports cellular signal strength and quality."},"f26_sla_backed_service_fabric":{"source_url":"https://www.netskope.com/press-releases/netskope-sets-new-industry-benchmarks-for-cloud-security-performance","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Netskope launches an industry-first SLA committing to less than 50 ms of latency for processing encrypted traffic Contractual commitments cover uptime and availability at five nines plus latency for both decrypted and non-decrypted traffic. The NewEdge datasheet repeats industry-best SLAs for availability and latency. Support response-time and change-handling commitments sit in Support Terms, which were not reachable in this task."},"f40_managed_service_assurance":{"source_url":"https://www.netskope.com/netskope-technical-support","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"We are a global team and operate 24/7/365 Netskope runs a global support organisation on a 24/7/365 basis at Premium and Premium Plus tiers, with technical account management and a focused technical support engineer at Premium Plus. No page read describes a Netskope NOC or SOC proactively monitoring the customer service, owning incidents through to root cause analysis, or running structured service reviews and change governance, so graded partial."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:922007c7966bdb60d5b68da6","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). UK NewEdge presence; delivered direct or via UK security MSPs.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | DLP, CASB for insider-risk and data-loss use cases | Not assessed | JLL (real estate/professional services), MinterEllisonRuddWatts (law firm) | N/A | Two named case studies, reasonably detailed | A genuinely well-evidenced sector for Netskope specifically - two independent, named, detailed case studies covering related professional-services use cases (insider risk, fast SSE rollout).","named_evidence":"JLL (real estate/professional services), MinterEllisonRuddWatts (law firm)","evidence_source_ids":["evidence:netskope:31","evidence:netskope:32"]},{"sector":"financial_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | DLP, CASB, PCI DSS v4.0.1 certification | PCI DSS v4.0.1 explicitly certified; DORA explicitly named on the Compliance Centre | CARE Ratings (credit rating agency, India) | N/A | Single named case study, though the PCI-DSS and DORA compliance evidence is genuinely strong | The best-evidenced sector-compliance combination across all three vendors profiled so far - explicit PCI-DSS and DORA naming, plus a real financial-services case study.","named_evidence":"CARE Ratings (credit rating agency, India)","evidence_source_ids":["evidence:netskope:15","evidence:netskope:30"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"financial_services":false,"professional_services":false},"reviewed_at":"2026-09-30T15:30:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.netskope.com/resources/case-studies/care-ratings","https://www.netskope.com/resources/case-studies/jll","https://www.netskope.com/fr/blog/explaining-the-importance-of-netskopes-recent-expansion-of-newedge-in-the-uk","https://www.netskope.com/wp-content/uploads/2022/12/2025-03-NewEdge-DS-333-11.pdf"],"qualification":"CARE Ratings case confirms Netskope CASB, SWG and Private Access deployment at an Indian rating agency. SSE evidence, not proof of SD-WAN. JLL and MinterEllisonRuddWatts primary cases describe SSE/secure remote access in professional services. No UK delivery inference. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation. Netskope documents UK NewEdge infrastructure; 2025 map names London, Manchester and Dublin. This is cloud security/network presence, not evidence of last-mile circuits, UK contracting entity or an approved managed service for these sites.","sectors":{"financial_services":"yes","professional_services":"yes"},"regions":{"uk_ireland":"partial"}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"partial","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":4,"research_metrics":{"supported":21,"partial":3,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":16,"total":40,"reviewed":24,"completeness_percent":60,"completeness":0.6},"proven_evidence_count":21,"response_panel":null,"best_for":"Financial services; Professional services; platform","best_for_fields":{"sectors_yes":["Financial services","Professional services"],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"palo-alto-networks","name":"Palo Alto Networks Prisma SASE","website":"https://www.paloaltonetworks.com/sase","category":"technology vendor","product_focus":"ADEM, AI Access Security, Enterprise DLP, Precision AI / Strata Copilot","cost_model":"Quote-based subscriptions; appliance/ION and Prisma Access/SASE licensing typically priced by users, bandwidth, locations and term.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"not_confirmed","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"partner_integrated","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"yes","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_confirmed","professional_services":"not_primary","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":100,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/palo-alto-prisma-sase/","shortlist_summary":"Palo Alto Networks isn’t just selling SASE, it’s selling one door into a much larger security estate (NGFWs, Prisma Cloud, Cortex XDR/XSIAM, identity security) that most large enterprises already have some footprint in. That shows up directly in its differentiators: it’s one of the few vendors recognised as a Leader in all three of Gartner’s Single-Vendor SASE, SSE and SD-WAN Magic Quadrants simultaneously, and its ‘platformisation’ commercial strategy rewards multi-product commitment with steep discounts.","key_differentiators":["Prisma SASE converges SD-WAN, cloud-delivered security, and digital experience management (ADEM) under a single platform identity.","Strong threat intelligence and security capability inheritance from the wider Palo Alto Networks portfolio.","Often selected by buyers consolidating from multiple security vendors onto a single SASE platform."],"best_fit_for":["Enterprises with mature security operations that want SASE built around a leading security platform rather than a security layer on top of an SD-WAN platform.","Buyers consolidating CASB, SWG, ZTNA and FWaaS onto one vendor for unified policy.","Organisations with global SaaS-heavy traffic patterns that benefit from Prisma Access PoP coverage."],"watch_outs":["Premium pricing relative to firewall-led SD-WAN vendors; commercial model requires careful scoping by users, bandwidth, locations and term.","Managed delivery is via partners (Orange Business, NTT, others); first-party managed service is not the primary model.","Private global backbone is not vendor-owned; cloud transport uses internet and Prisma Access PoPs."],"evidence_coverage_pct":0.6,"last_verified":"2026-09-01","evidence_source_count":65,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.paloaltonetworks.com/sase/managed-sase","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"MSPs can securely delegate responsibilities while ensuring only authorized users can read or modify critical security configurations. Hierarchical multitenancy and granular role-based delegated administration are evidenced on the Managed SASE page (source 6) and the 2022 MSP press release (source 14), which describes a cloud-based management portal with hierarchical multitenancy using granular role-based access control. Graded partial rather than yes because no evidence of branded or white-label portals and service templates carrying the MSP's own brand was found on the pages reviewed; the Prisma SASE for MSPs datasheet (source 18) is gated and returned no usable text."},"f07_lifecycle_management":{"source_url":"https://docs.paloaltonetworks.com/prisma-access/administration/sase-private-location","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Palo Alto Networks manages sizing, content versioning, monitoring, upgrades, and security subscriptions. For the cloud service and for SASE Private Location, Palo Alto Networks handles sizing, content versioning, upgrades and security subscriptions as part of the service. Graded partial because hardware replacement and RMA, ION appliance firmware handling, renewals and end-of-life planning were not evidenced: the Support Policies page (source 19) is a link index that returned no substantive text, and no RMA or end-of-life policy document was read in this task."},"f19_public_cloud_gateways":{"source_url":"https://docs.paloaltonetworks.com/prisma-access/administration/prisma-access-overview","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"With Prisma Access, Palo Alto Networks deploys and manages the security infrastructure globally to secure your remote networks and mobile users. The PoPs are Palo Alto Networks' own service, sold under its own brand and covered by its own SLA, so this is yes rather than partner_integrated. Recorded for transparency: the compute those PoPs run on is rented from GCP and AWS (source 11), which is a hosting arrangement rather than reselling another vendor's SASE gateway service."},"f20_private_pops_dedicated_pops":{"source_url":"https://docs.paloaltonetworks.com/prisma-access/administration/sase-private-location","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"SASE Private Location enables you to deploy Prisma Access services within your own infrastructure. SASE Private Location is a customer-hosted deployment of Prisma Access services on the customer's own hypervisor and ISP links, with Palo Alto Networks retaining backend management. Corroborated by the sovereignty blog (source 12), which states that for organisations with the most stringent data residency requirements Palo Alto offers SASE Private Location. Colo-Connect (source 9) is a different thing: private connectivity into the shared cloud, not a dedicated PoP."},"f21_private_global_backbone":{"source_url":"https://www.paloaltonetworks.com/blog/sase/the-architecture-behind-prisma-sase-99999-uptime/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Prisma SASE leverages the infrastructure of major hyperscale providers such as Google Cloud Platform (GCP) and Amazon Web Services (AWS). Inter-region transport rides the backbones of Google Cloud and AWS rather than a network owned or controlled by Palo Alto Networks. The same post adds that Prisma SASE benefits from private peering connections between tier 1 cloud providers and other public cloud platforms, SaaS networks and ISPs, which again describes third-party peering. Colo-Connect (source 9) uses GCP interconnect technology, reinforcing the same conclusion. No evidence of Palo Alto-owned fibre, wavelengths or core routing was found."},"f26_sla_backed_service_fabric":{"source_url":"https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/datasheets/support/prisma-access-service-sla.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"If, during any calendar month, the Service availability falls below 99.999%, Customer can submit a claim for credit The published SLA is contractual with service credits and covers three separate measures: service availability at 99.999%, a Monthly Security Processing Latency Percentage at 99.99% and a Monthly SaaS Application Latency Percentage at 99.99%, with credits scaling to 100% where availability falls below 98%. That goes beyond best-effort targets. Support response times and change handling commitments were not evidenced in the SLA text reviewed."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:c7cf7997ec576a63c92818da","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"partial","professional_services":"yes","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). UK Prisma Access presence; delivered direct or via UK partners and carriers.","sector_review_queue":[{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Cost reduction and productivity capabilities relevant to a 'changing market' retail context | Not assessed for sector-specific frameworks | Westfield (shopping centre/retail property operator) | N/A | Single case study; less quantified in the source snippet reviewed than Grupo Bimbo specifically | Westfield is a genuine, named retail-sector customer - weaker in detail than Cato's Ulta Beauty or Zscaler's AutoNation, but a real evidence point rather than a total gap.","named_evidence":"Westfield (shopping centre/retail property operator)","evidence_source_ids":["evidence:palo-alto-prisma-sase:23"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | IoT/OT security, Zero Trust for OT devices, Cortex XDR forensics | Not assessed for sector-specific frameworks | Grupo Bimbo (200+ bakery plants, 35 countries), Colgate-Palmolive (unified IT/OT security) | Global multi-country deployment evidenced via Grupo Bimbo specifically | US-centric/global-brand case evidence; UK/EU manufacturing-specific case studies not found in this pass | By a clear margin the best-evidenced sector across all four vendors profiled - Grupo Bimbo alone provides more quantified, credible manufacturing/OT evidence than any single case study found for the other three vendors.","named_evidence":"Grupo Bimbo (200+ bakery plants, 35 countries), Colgate-Palmolive (unified IT/OT security)","evidence_source_ids":["evidence:palo-alto-prisma-sase:25","evidence:palo-alto-prisma-sase:27"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"manufacturing":false,"retail_ecommerce":false,"transport_logistics":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://paloaltonetworks.com/customers/colgate-palmolive-powers-secure-manufacturing-with-palo-alto-networks","https://paloaltonetworks.com/customers/grupo-bimbo-protects-its-global-connected-supply-chain-with-palo-alto-networks","https://paloaltonetworks.com/customers/westfield-responds-rapidly-to-a-changing-market-with-prisma-sase"],"qualification":"Colgate primary case explicitly identifies Prisma SD-WAN and Prisma Access at a manufacturer. Bimbo corroborates manufacturing security, not a separate logistics sector. Westfield primary case documents Prisma SASE for mall operations and retail access. Evidence relates to a mall operator, not every retail format. Grupo Bimbo is a bakery manufacturer. Its connected supply chain does not make it an independent transport/logistics customer. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"manufacturing":"yes","retail_ecommerce":"yes","transport_logistics":"not_confirmed"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":5,"research_metrics":{"supported":21,"partial":2,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":16,"total":40,"reviewed":24,"completeness_percent":60,"completeness":0.6},"proven_evidence_count":21,"response_panel":null,"best_for":"Retail and e-commerce; Manufacturing; platform","best_for_fields":{"sectors_yes":["Retail and e-commerce","Manufacturing"],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"cisco","name":"Cisco","website":"https://www.cisco.com/site/us/en/solutions/networking/sdwan/index.html","category":"technology vendor","product_focus":"Cisco AI Defence, Cisco Catalyst SD-WAN, Cisco Duo, Cisco ISE","cost_model":"Quote-based subscription/licence + appliance/support; Meraki public SKUs via partners, enterprise pricing varies by platform and term.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"yes","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_primary","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"partial","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"partial","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"not_primary","manufacturing":"yes","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"yes","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/cisco/","shortlist_summary":"Cisco’s own materials describe SASE explicitly as ‘a journey - you can start with SD-WAN or SSE and converge over time’, which is a different pitch to Cato’s, Zscaler’s, Netskope’s or Palo Alto’s single-platform-from-day-one story. In practise, ‘Cisco SASE’ means choosing between Cisco Secure Access (cloud-delivered SSE, evolved from Cisco Umbrella), Cisco Catalyst SD-WAN (the enterprise-grade fabric, formerly Viptela) or Meraki SD-WAN (the simpler, cloud-first option), and Cisco Secure Connect (a turnkey bundle of Secure Access plus Meraki SD-WAN specifically).","key_differentiators":["Broadest platform portfolio in the category, covering Catalyst SD-WAN for enterprise WAN, Meraki MX for cloud-managed branch, and Cisco Secure Access for converged SASE delivery.","Cloud OnRamp provides automated optimisation paths for Microsoft 365, Salesforce, and major cloud providers, with native integration into the Cisco security stack.","Large global partner and integrator ecosystem reduces delivery risk for buyers wanting managed or co-managed delivery."],"best_fit_for":["Enterprises already standardised on Cisco networking who want platform consistency from LAN through WAN to security.","Multinational organisations needing strong vendor presence across regions and a deep partner channel.","Buyers prioritising single-vendor risk consolidation across networking and security."],"watch_outs":["Two distinct SD-WAN product lines (Catalyst and Meraki) means buyers should confirm which fits the target deployment profile and the longer-term roadmap.","Managed delivery is partner-led rather than first-party, so service quality varies meaningfully by integrator.","Private global backbone is not part of the platform; cloud transport relies on internet and partner gateways."],"evidence_coverage_pct":0.575,"last_verified":"2026-09-01","evidence_source_count":66,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://documentation.meraki.com/Platform_Management/Managed_Service_Provider_Resources/Dashboard_Branding_for_MSPs","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Managed Service Providers (MSPs) can now take advantage of custom branding options within the Cisco Meraki Dashboard. All four elements of the definition are evidenced. Branded portals from the Meraki dashboard branding documentation, which also states \"Any logos that are applied to Dashboard should be the logo of the MSP and not of the end customer.\" Tenant isolation and delegated administration from multi-organisation management, corroborated on the Secure Access datasheet: \"Large enterprise customers can manage multiple organizations (orgs) through a single user interface, with central access and license management.\" Branding is configured per organisation and can be cloned to new organisations as a template."},"f14_packet_loss_remediation":{"source_url":"https://investor.cisco.com/news/news-details/2026/Cisco-Redefines-Security-for-the-Agentic-Era-with-AI-Defence-Expansion-and-AI-Aware-SASE/default.aspx","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, specifically confirmed in the AI-traffic context - the February 2026 AI-aware SASE announcement explicitly names 'packet duplication' as an AI traffic optimization technique [25]"},"f19_public_cloud_gateways":{"source_url":"https://documentation.meraki.com/CiscoPlusSecureConnect/Cisco___Secure_Connect_Pre-configuration_Checklist/Data_Centers","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Cisco Secure Connect services operate in the Cisco Umbrella global cloud architecture which is network of data centers located throughout the world interconnected with a high speed, low latency backbone. Yes rather than partner_integrated. This is Cisco's own service infrastructure, not a third party's PoPs that Cisco resells: Cisco owns and operates the Umbrella global cloud architecture, publishes its data centre list, and enforces security and delivers remote access from it. Corroborated by the Umbrella global network page, \"The Cisco Umbrella global cloud architecture serves more than 30,000 customers daily in 190+ countries.\" AWS, Azure and GCP connectivity was disregarded as it does not meet the definition."},"f21_private_global_backbone":{"source_url":"https://documentation.meraki.com/CiscoPlusSecureConnect/Cisco___Secure_Connect_Pre-configuration_Checklist/Data_Centers","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Cisco Secure Connect services operate in the Cisco Umbrella global cloud architecture which is network of data centers located throughout the world interconnected with a high speed, low latency backbone. Partial rather than yes. A global, not national, footprint is clearly evidenced and the documentation states the data centres are interconnected by a backbone. What is not evidenced is the ownership or control test in the definition: no page reviewed states that Cisco owns or controls that backbone rather than buying transit or leased capacity. The Umbrella global cloud architecture page instead emphasises internet peering and anycast, \"Umbrella peers directly with more than 1000 organizations\", which points towards an internet-peering-centric design. Graded partial on the ownership gap. See conflicts."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:3e7b3c72170a8c6cadaf8368","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). Extensive UK channel; Catalyst and Meraki widely delivered as UK managed services.","sector_review_queue":[{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | Distributed-facility SD-WAN and security consolidation; ThousandEyes for multi-site assurance | Not assessed for sector-specific frameworks | Peco Foods (poultry processing, 7,500+ employees, 20 facilities across the Southeast US) | Multi-facility deployment evidenced directly | US-centric case evidence; single company rather than the multi-country breadth of Palo Alto's Grupo Bimbo evidence | A genuinely credible, named, quoted manufacturing case study - not as expansive as Grupo Bimbo's 35-country story, but solid, specific evidence (a 200% user-experience improvement, named IT manager) for a real distributed-facility food-processing operation.","named_evidence":"Peco Foods (poultry processing, 7,500+ employees, 20 facilities across the Southeast US)","evidence_source_ids":["evidence:cisco:31","evidence:cisco:32","evidence:cisco:34","evidence:cisco:35","evidence:cisco:37"]},{"sector":"healthcare","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Cloud-first, hardware-light deployment relevant to multi-site hospitality operators | Not assessed | Mitchells & Butlers (UK pub/restaurant operator) | UK-based customer specifically - directly relevant to Netify's UK-focused work | Single case study | Genuinely useful for Netify specifically: this is the only UK-named customer found across all five vendor profiles produced so far, evidenced by a named Head of Technology and Support quote about cloud-first infrastructure alignment.","named_evidence":"Mitchells & Butlers (UK pub/restaurant operator)","evidence_source_ids":["evidence:cisco:31"]},{"sector":"hospitality_leisure","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Cloud-first, hardware-light deployment relevant to multi-site hospitality operators | Not assessed | Mitchells & Butlers (UK pub/restaurant operator) | UK-based customer specifically - directly relevant to Netify's UK-focused work | Single case study | Genuinely useful for Netify specifically: this is the only UK-named customer found across all five vendor profiles produced so far, evidenced by a named Head of Technology and Support quote about cloud-first infrastructure alignment.","named_evidence":"Mitchells & Butlers (UK pub/restaurant operator)","evidence_source_ids":["evidence:cisco:31"]},{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Fast, low-complexity deployment relevant to smaller professional-services firms specifically | Not assessed | George Sink, P.A. (law firm) | N/A | Single case study, though genuinely specific and quotable (2-hour deployment, named CIO) | A real, credible, if narrow, professional-services proof point - the 2-hour deployment claim specifically is one of the standout pieces of evidence in this entire profile.","named_evidence":"George Sink, P.A. (law firm)","evidence_source_ids":["evidence:cisco:31"]},{"sector":"government_public_sector","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | FedRAMP Moderate across Secure Access, ThousandEyes, Duo and Catalyst SD-WAN together | FedRAMP Moderate (multiple named components) | Indiana Office of Technology (ThousandEyes specifically, not confirmed for the full Secure Access stack) | Coherent multi-component FedRAMP story, capped at Moderate | Weaker than Zscaler's or Palo Alto's FedRAMP High/DoD IL evidence | A genuinely multi-product, coherent public-sector compliance story, though it caps out at a lower assurance level (Moderate) than two of the other four vendors profiled - a specific, worth-stating nuance.","named_evidence":"Indiana Office of Technology (ThousandEyes specifically, not confirmed for the full Secure Access stack)","evidence_source_ids":["evidence:cisco:16","evidence:cisco:17","evidence:cisco:21"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"professional_services":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.cisco.com/c/dam/en/us/products/security/secure-access/customer-highlight-peco-foods.pdf","https://www.cisco.com/site/us/en/about/case-studies-customer-stories/mitchells-butlers.html","https://cisco.com/site/us/en/solutions/secure-access-service-edge-sase/index.html","https://www.cisco.com/c/en/us/products/collateral/plus-as-a-service/george-sink-law-customer-cs.pdf"],"qualification":"Peco Foods is identified as food manufacturing with a Cisco SASE deployment. Manufacturing evidence is US-based. The separate Mitchells and Butlers case documents UK hospitality SASE and Meraki SD-WAN. Regional coverage remains partial: it does not establish coverage of every UK/Ireland site or a contracting entity. Neither case certifies compliance or suitability for a particular estate. Recovered Cisco George Sink PDF: Secure Connect deployed in a law firm; SD-WAN expansion described as a next step. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"manufacturing":"yes","hospitality_leisure":"yes","professional_services":"yes"},"regions":{"uk_ireland":"partial"}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"partial","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":6,"research_metrics":{"supported":21,"partial":1,"partner_delivered":0,"managed_service_dependent":0,"not_primary":1,"unconfirmed":17,"total":40,"reviewed":23,"completeness_percent":58,"completeness":0.575},"proven_evidence_count":21,"response_panel":null,"best_for":"Manufacturing; Professional services; Hospitality and leisure; Large global enterprise; platform","best_for_fields":{"sectors_yes":["Manufacturing","Professional services","Hospitality and leisure"],"sectors_partial":[],"regions":[],"size":["Large global enterprise"],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"check-point","name":"Check Point","website":"https://www.checkpoint.com/harmony/sase","category":"technology vendor","product_focus":"AI Network Firewall / AI Defence Plane, CASB, Check Point Infinity Architecture, Check Point SASE Platform","cost_model":"Quote-based subscription; Microsoft marketplace listing exists but enterprise deployments normally require quote.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"partial","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"not_confirmed","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":80,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/checkpoint/","shortlist_summary":"Check Point’s SASE platform has been through two names in under three years. The underlying technology began life as Perimeter 81, an independent Israeli SSE/ZTNA vendor founded in 2018 that had grown to more than 3,000 customers and a Forrester Zero Trust Wave recognition before Check Point Software Technologies - the much larger, long-established Israeli cybersecurity vendor behind Check Point Firewall-1, founded in 1993 - acquired it for approximately $490 million in a deal announced September 2023.","key_differentiators":["Harmony SASE combines Check Point security heritage with cloud-delivered SASE and optimised SD-WAN performance.","Strong story for organisations already running Check Point firewalls who want to extend into SASE.","Available via Microsoft Azure marketplace for buyers wanting consolidated cloud procurement."],"best_fit_for":["Existing Check Point customers extending firewall investment into SD-WAN and SASE.","Mid-market enterprises consolidating security and SD-WAN under one vendor.","Buyers prioritising security maturity over network-platform maturity."],"watch_outs":["Dynamic path selection: not confirmed; QoS and traffic shaping: not confirmed; Packet loss remediation: not confirmed. Confirm the exact SD-WAN product and required branch behaviour.","Smaller SD-WAN deployment footprint than category leaders; validate scale references.","Managed delivery is partner-led."],"evidence_coverage_pct":0.55,"last_verified":"2026-09-01","evidence_source_count":44,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.checkpoint.com/services/managed-security/managed-firewall/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Managed Firewall Services with 24/7 monitoring, policy management, tuning, patching, upgrades, incident handling, and expert support for Check Point and third-party NGFWs. Check Point sells first-party managed services covering firewall, EDR, vulnerability management and Microsoft 365, with 24/7 monitoring, policy management and incident handling. I did not find a page describing Check Point itself designing, deploying, changing and reporting on the SASE service end to end for the customer, so partial rather than yes. The Managed Firewall as a Service page (register 20) could not be read."},"f03_co_managed_service":{"source_url":"https://www.checkpoint.com/services/managed-security/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Delivering co-managed services with partners and customers for optimal protection through unified collaboration and robust security strategies. Check Point explicitly frames its managed security offer as co-managed, with its experts acting as an extension of the customer team while the customer retains its own operations."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.checkpoint.com/partners/mssp-program/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Leverage true multi-tenancy, a wide range of security services, and full API integration to streamline customer management and accelerate service delivery. Multi-tenant architecture, delegated multi-customer management through one portal and API integration are all stated on the MSSP programme page. I found no statement of branded or white-label portals under the MSP's own brand, which the definition requires, so partial rather than yes."},"f05_professional_services_and_migration_support":{"source_url":"https://www.checkpoint.com/services/professional-services/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"As your security infrastructure becomes more complicated, our Professional Services team can assist you with your security design, deployment, operation, and optimization needs. The same page lists a Jumpstart Program, Maestro Deployment, SmartOptimize, Gateway Health Check and Lifecycle Management Services, and states delivery covers adding new features and layers while ensuring smooth migrations and scheduled updates. Training programmes are listed separately. Explicit runbook and rollback wording was not found."},"f07_lifecycle_management":{"source_url":"https://www.checkpoint.com/support-services/support-plans/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Check Point shall use commercially reasonable efforts to ship the replacement hardware on the same business day, however, shipment my occur on the next business day if required for operational reasons. Support programmes include RMA hardware replacement with same business day shipment and onsite delivery options, plus Latest Hot Fixes & Service Packs and Major Upgrades & Enhancements on every tier, and Lifecycle Management Services is a named professional service. This is a purchased support or services contract rather than something bundled into every subscription. The dedicated lifecycle management page (register 15) could not be read. The quote reproduces the page's own typo."},"f17_cellular_and_5g_support":{"source_url":"https://www.checkpoint.com/harmony/sase/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Sub-second failover to any WAN link: MPLS, 5G, broadband 5G is named as a supported WAN failover transport for SD-WAN, and the NGFW page notes a Wi-Fi 5G option on small business appliances and 1 GbE & 5G wireless secure connectivity on industrial appliances. I found no statement covering SIM management or signal monitoring, which the definition requires, so partial. The Quantum SD-WAN page (register 14) could not be read."},"f19_public_cloud_gateways":{"source_url":"https://www.checkpoint.com/harmony/sase/private-access/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our high-performance network provides fast delivery between corporate sites worldwide thanks to multiple tier-1 links at each point-of-presence (PoP), reserved bandwidth, and peering agreements. Check Point operates its own PoP and data centre estate for SASE internet access, private access and SaaS security, described as 80+ to 85+ global data centres depending on the page. This is Check Point's own infrastructure rather than a resold third party edge, so yes rather than partner_integrated."},"f21_private_global_backbone":{"source_url":"https://www.checkpoint.com/harmony/sase/private-access/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our high-performance network provides fast delivery between corporate sites worldwide thanks to multiple tier-1 links at each point-of-presence (PoP), reserved bandwidth, and peering agreements. The heading above this text is Global Private Backbone, and the SASE overview separately states Private Access delivers high performance with a full mesh global private backbone. The backbone is global rather than national. Check Point describes it as built on purchased tier-1 links, reserved bandwidth and peering rather than fibre it owns, so it is a controlled overlay backbone rather than owned infrastructure."},"f26_sla_backed_service_fabric":{"source_url":"https://www.checkpoint.com/support-services/support-plans/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Get advanced access to our large, self-service knowledge base and a committed 30-minute response time to issues with level one severity. Check Point publishes contractual support SLAs with per-severity response times (30 minutes for Severity 1 across all tiers), 7x24 coverage on Premium and above, and named SLA documents including the Check Point Direct Support Program Service Level Agreement. I found no published availability, latency, jitter or loss commitment for the SASE cloud service, so partial rather than yes."},"f27_integrated_next_generation_firewall":{"source_url":"https://checkpoint.com/harmony/sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, via the confirmed FWaaS capability [24] [28]"},"f33_data_loss_prevention":{"source_url":"https://www.checkpoint.com/harmony/sase/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Inline and API-based enforcement with Application Control for 10,000+ cloud apps, tenant restrictions, DLP, and Threat Prevention powered by ThreatCloud AI The same pages state AI-powered data classification with 800+ predefined data types, and the Internet Access page cites in-browser data loss prevention. Content classification and inline enforcement are clearly evidenced. Explicit alerting and exception workflow detail was not found on the pages read."},"f35_soc_siem_soar_integration":{"source_url":"https://sase.checkpoint.com/solutions/compliance/soc-2","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine technical specificity as part of the platform's SOC 2 Type 2 compliance architecture - 'monitor system activity, view system configuration changes and assign user access controls', with audit trails covering 'the modification, addition, or removal of key system components' [18] Not confirmed"},"f40_managed_service_assurance":{"source_url":"https://www.checkpoint.com/services/managed-security/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our 24/7 global service team will be there whenever and wherever you need them to help make sure your organization is always protected. 24/7 coverage, incident handling and NOC and SOC oriented managed services are stated, and the services pages claim 99% of threats responded to within 1 hour. I found no statement of provider-owned root cause analysis, structured service reviews or change governance, so partial. The Managed Detection and Response page (register 19) could not be read."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:745e1446fdf98dad45f0b532","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"partial","professional_services":"partial","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (Israel/US). Harmony SASE UK presence; delivered via UK security partners.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"requires_confirmation","qualification":"Unknown - not assessed, no case study found, though the platform's confirmed strong, independent review base spans real, named-role practitioners describing use across multiple industries generally | Not assessed in detail by sector | Not assessed | Named-role reviews confirmed generally (e.g. 'Manager, IT Security and Risk Management' at a company with $250M-500M revenue, per Gartner Peer Insights), though not sector-specific to professional services | N/A | General practitioner reviews exist; a sector-specific case study does not | Real, credible, named-role user evidence exists at a general level (Table 9, 11), though not itemised by professional-services sector specifically.","named_evidence":"Named-role reviews confirmed generally (e.g. 'Manager, IT Security and Risk Management' at a company with $250M-500M revenue, per Gartner Peer Insights), though not sector-specific to professional services","evidence_source_ids":["evidence:checkpoint:23"]}],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":7,"research_metrics":{"supported":17,"partial":5,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":18,"total":40,"reviewed":22,"completeness_percent":55,"completeness":0.55},"proven_evidence_count":17,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"aryaka","name":"Aryaka","website":"https://www.aryaka.com","category":"technology vendor","product_focus":"AI>Observe, AI>Secure, Aryaka Cyber Threat Research Lab (CTRL), Aryaka Network Access Point (ANAP)","cost_model":"Quote-based managed service; pricing normally depends on sites, bandwidth, regions, security stack and optimisation.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"partial","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"yes"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_primary","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"partial","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","per_bandwidth","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":40,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/aryaka/","shortlist_summary":"Aryaka is one of the older, more established names in this category - founded 2009, more than 15 years before ‘SASE’ existed as an analyst-defined term, originally as a WAN optimisation and application-acceleration company before evolving into what it now calls ‘Unified SASE as a Service’. That specific phrase matters: Aryaka positions itself, and is described by independent commentary, as the first company to deliver SASE as a fully managed service rather than a self-managed software platform, built around a distinctive single-pass architecture (OnePASS) running over an owned, global private core network spanning more than 40 points of presence across six continents.","key_differentiators":["Unified SASE delivered as a managed service from end to end, including the private global core network and WAN optimisation.","Strong story for global organisations needing predictable performance between regions without internet variability.","Embedded WAN optimisation differentiates from pure cloud-delivered SASE platforms."],"best_fit_for":["Global enterprises wanting SASE delivered as a fully managed service rather than as DIY platform plus tools.","Buyers who need consistent inter-regional performance for chatty applications.","Organisations preferring a vendor that owns the platform and the managed service rather than coordinating multiple parties."],"watch_outs":["Smaller PoP footprint and partner ecosystem than the hyperscale SASE vendors; coverage must match your geographic profile.","DIY / self-managed model: supported. Confirm which operating tasks your team retains and what Aryaka operates.","CASB capability: supported; Data loss prevention: supported. Confirm inspection modes, licences and policy depth in the proposal."],"evidence_coverage_pct":0.5,"last_verified":"2026-09-01","evidence_source_count":46,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.aryaka.com/datasheet/smartmanage-datasheet/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Utilizes the Aryaka Network Management and Control (ANMC) system for scalable, multi-tenant automation and orchestration Multi-tenant orchestration is confirmed at platform level, the partner programme names Managed Service Providers and System Integrators as a partner category, and co-management can be delegated to an Aryaka partner. However I found no vendor statement about white-label or partner-branded portals, delegated administration roles or tenant templates on the partners page or elsewhere, so this falls short of the full definition."},"f17_cellular_and_5g_support":{"source_url":"https://www.aryaka.com/last-mile-connectivity/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka provides truly global last mile services including wireline and 4G/5G wireless connectivity 4G and 5G are confirmed as supported and procurable last mile transport. Graded partial rather than yes because the ANAP appliance datasheet contains no mention of LTE, 5G, cellular, SIM or modem, and the High Availability datasheet describes redundancy only as dual ISP links, so integrated modem, SIM management and signal monitoring are not evidenced in the sources reviewed."},"f19_public_cloud_gateways":{"source_url":"https://www.aryaka.com/products-and-services/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka Secure Remote Access provides integrated, managed VPN as a service connecting users to the nearest Aryaka POP. The gateways are Aryaka's own infrastructure, not a resold third party's. Corroborated by \"a global private network interconnected in a mesh service fabric of over 40 Points of Presence (PoPs) across the globe\" and by the NGFW being hosted on the ANAP and on Aryaka's POP, so SaaS acceleration, remote access and security enforcement all run on vendor operated PoPs."},"f24_flexible_edge_form_factors":{"source_url":"https://aryaka.com/unified-sase-platform/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity - the Aryaka Network Access Point (ANAP), included as part of the service rather than sold as separate hardware [9]"},"f25_high_availability_design":{"source_url":"https://www.aryaka.com/unified-sase-platform/","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"ANAP high-availability configurations are available; validate appliance, circuit and implementation requirements for each site."},"f26_sla_backed_service_fabric":{"source_url":"https://www.aryaka.com/datasheet/smartmanage-datasheet/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Operates 24x7x365 to maintain industry-leading SLAs for uptime, latency, jitter and packet loss globally. Aryaka publishes a full SLA document with per service uptime targets (\"Uptime of 99.999%\" for PrivateCore, NGFW-SWG, PrivateAccess and RemoteUser, and Internet Breakout), a target of \"Packet Loss of less than 0.1%\", per minute probing, monthly measurement and graduated service credits of 5, 10 and 20 percent of Link Service Fees. That is contractual rather than best effort."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.aryaka.com/datasheet/ngfw-swg-solution/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka has built a dedicated security stack on top of our Software Defined Wide Area Network (SD-WAN) architecture The NGFW-SWG is Aryaka authored and runs on both the ANAP and Aryaka POPs, with IPS, anti-malware, application control via inline CASB and DPI, and URL filtering that \"Protects users from accessing malicious URLs using reputation scores for more than 32 billion URLs.\" Note that a separate optional SmartSecure Hosted VM Firewall Service is partner technology (\"The first technology partner providing the NGFW functionality is Palo Alto Networks with its VM series of virtualized NGFWs.\") and the Services Description and Terms references a Check Point EULA, so a partner_integrated firewall option exists alongside the native one. The integrated platform firewall itself is native."},"f31_secure_web_gateway":{"source_url":"https://aryaka.com/sase/sase-architecture/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as part of the unified single-pass stack [6]"},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://aryaka.com/case-study/electronics-company/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, well-evidenced via the confirmed 'greatly improved network performance' customer testimony and the platform's confirmed application-acceleration heritage [22] Not confirmed"},"f40_managed_service_assurance":{"source_url":"https://www.aryaka.com/datasheet/global-connectivity-solution/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka operates its own 24/7 NOC (Network Operations Center) to manage, orchestrate, and monitor all traffic The 24/7 NOC half of the definition is well evidenced: Aryaka runs its own NOCs \"24x7x365 to maintain industry-leading SLAs for uptime, latency, jitter and packet loss globally\", provides \"24x7 proactive Link Monitoring and management of Customer's procured last mile links\" and \"24x7 health monitoring and handle incident management issues related to the ZTNA Gateways\". Graded partial because the Services Description and Terms explicitly excludes a managed SOC from at least one offering: \"managed SOC (Security Operation Center) are not part of the scope of the Managed Firewall Service offering, and Customer is solely responsible for these functions.\" No published evidence found for root cause analysis commitments or structured service review and change governance."},"f02_diy_self_managed_model":{"source_url":"https://www.aryaka.com/use-cases/network-and-security-convergence/","reviewed_at":"2026-10-01T00:00:00Z","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka explicitly offers fully managed, co-managed and self-managed delivery. Confirm the buyer’s retained tasks and service scope; self-management is not evidence of a standalone appliance purchase."},"f01_fully_managed_service":{"source_url":"https://www.aryaka.com/unified-sase-platform/","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"Aryaka-managed delivery is an available service model; scope and responsibilities must be agreed in the service contract."},"f03_co_managed_service":{"source_url":"https://www.aryaka.com/unified-sase-platform/","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"Co-managed delivery is offered; confirm the division of responsibilities with Aryaka or its delivery partner."},"f21_private_global_backbone":{"source_url":"https://www.aryaka.com/unified-sase-platform/","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"Aryaka documents a global private network. This does not establish private last-mile access, every-country coverage or a site-specific SLA."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:be96a103e360c6122afebb8d","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"partial","financial_services":"yes","retail_ecommerce":"partial","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). UK PoP on the private core; managed-service delivery into the UK.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, if smaller-scale, named customer example | SD-WAN reliability and application performance directly relevant | Not assessed for sector-specific frameworks | KAWO (a named social-media start-up customer, described as benefiting from reliable network performance for global users) | N/A | A smaller-scale customer example relative to the strong manufacturing-sector evidence | A real, named customer example exists for this general sector category, though at a smaller scale than the strongest evidence found for manufacturing.","named_evidence":"KAWO (a named social-media start-up customer, described as benefiting from reliable network performance for global users)","evidence_source_ids":["evidence:aryaka:20"]},{"sector":"transport_logistics","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced at a general level | Multi-site, multi-cloud connectivity plausibly relevant | Not assessed for sector-specific frameworks | Confirmed directly as a served sector generally: 'customers span... transportation, logistics... industries with complex multi-site, multi-cloud network requirements' | N/A | General sector confirmation exists without a named individual customer example | A real, primary-sourced confirmation of sector fit, though without a named individual customer example to reinforce it directly.","named_evidence":"Confirmed directly as a served sector generally: 'customers span... transportation, logistics... industries with complex multi-site, multi-cloud network requirements'","evidence_source_ids":["evidence:aryaka:16"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | SD-WAN reliability, multi-site connectivity, and managed operations directly relevant to distributed manufacturing operations | Not assessed for sector-specific frameworks | A named Fortune 1000 chemicals/materials producer (Albemarle Corporation); a detailed, technically specific (if company-name-anonymised) semiconductor-manufacturing case study benchmarked against Cato and VeloCloud; confirmed directly as a served sector generally ('customers span manufacturing... industries') | Global - the named/detailed case studies span facilities in more than 100 countries (Albemarle) and multiple Asia-Pacific/North American sites (the semiconductor case) | The semiconductor case study's company name was withheld | Genuinely the best-evidenced sector in this entire profile - a real, named, large public company (Albemarle) plus a detailed, technically specific anonymised case study together give this sector exceptionally strong, concrete evidence.","named_evidence":"A named Fortune 1000 chemicals/materials producer (Albemarle Corporation); a detailed, technically specific (if company-name-anonymised) semiconductor-manufacturing case study benchmarked against Cato and VeloCloud; confirmed directly as a served sector generally ('customers span manufacturing... industries')","evidence_source_ids":["evidence:aryaka:16","evidence:aryaka:23","evidence:aryaka:24"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"transport_logistics":false},"reviewed_at":"2026-09-30T15:50:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.aryaka.com/case-study/albemarle/","https://www.aryaka.com/solution-brief/regional-network/","https://www.aryaka.com/press/cloud-first-managed-sd-wan-and-sase-pioneer-aryaka-activates-eu-friendly-dublin-services-pop-to-address-growing-customer-demand/","https://www.aryaka.com/docs/Transitex-Case-Study-2020.pdf"],"qualification":"Published manufacturing customer evidence for managed global WAN and last-mile services. Does not establish UK ten-site commercial fit or current supplier availability.  Transitex freight/logistics primary case documents Aryaka SmartSecure Remote Access through Cloud365 for China connectivity. Supports logistics experience with qualification; not proof of full branch SD-WAN, current UK delivery or the original generic claim.","sectors":{"manufacturing":"yes","transport_logistics":"partial"},"regions":{"uk_ireland":"partial"}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"partial","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":8,"research_metrics":{"supported":16,"partial":4,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":20,"total":40,"reviewed":20,"completeness_percent":50,"completeness":0.5},"proven_evidence_count":16,"response_panel":null,"best_for":"Manufacturing; Transport and logistics (partial evidence); both","best_for_fields":{"sectors_yes":["Manufacturing"],"sectors_partial":["Transport and logistics"],"regions":[],"size":[],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"fortinet","name":"Fortinet FortiSASE","website":"https://www.fortinet.com/products/sd-wan","category":"technology vendor","product_focus":"Fabric Connectors, FortiClient, FortiGuard AI-Powered Security Services, FortiManager / FortiAnalyzer","cost_model":"Quote-based appliances/subscriptions/support; public reseller pricing exists for hardware but enterprise managed/SASE bundles require quote.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"partner_integrated","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"yes","financial_services":"not_primary","retail_ecommerce":"not_confirmed","manufacturing":"not_primary","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"partial","transport_logistics":"yes","professional_services":"not_primary","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":170,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/fortinet-fortisase/","shortlist_summary":"FortiSASE runs the same FortiOS operating system, and the same single-pass inspection engine, that has powered Fortinet’s physical FortiGate firewalls for over two decades. That’s a meaningfully different starting point from building a SASE platform natively for the cloud from scratch - the practical result is that FortiGate customers get a consistent policy and inspection model whether traffic is inspected on-premises or in a FortiSASE cloud point of presence, and Fortinet’s own commercial materials lean hard into a ‘Security Fabric’ discount for exactly these existing customers.","key_differentiators":["Native convergence of networking and security on a single operating system (FortiOS) across FortiGate edge, FortiManager and FortiSASE.","Strong story for buyers who want secure SD-WAN and SASE delivered from one vendor platform rather than assembled from partner integrations.","Wide appliance range covering everything from small branch to large data centre, with public hardware pricing visible through resellers."],"best_fit_for":["Security-first buyers who want SD-WAN and SASE under a single policy and log domain.","Mid-market and enterprise organisations that already run FortiGate firewalls and want to extend into SD-WAN and cloud-delivered security.","Buyers comparing single-vendor SASE platforms (alongside Cato, Palo Alto, Cisco) for converged operations."],"watch_outs":["Like Cisco, managed delivery is via partners rather than Fortinet directly; underlay and field operations are not owned by the vendor.","Buyers wanting a private global backbone will need to validate FortiSASE PoP coverage against their geographic footprint.","Best-of-breed buyers may prefer integrating FortiGate SD-WAN with a separate SSE platform (Zscaler, Netskope) rather than adopting full FortiSASE."],"evidence_coverage_pct":0.5,"last_verified":"2026-09-01","evidence_source_count":60,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/managed-fortigate-svc.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Ensure FortiGates, FortiAPs, FortiSwitches and FortiExtenders are quickly and correctly deployed, configured to best practices Fortinet itself operates Managed FortiGate Service (MFGS), in which Fortinet NOC staff carry out deployment, configuration, provisioning and ongoing change management. The solution page adds \"Deployment, configuration, provisioning, and regular changes\" and \"Evaluate, implement, and verify configuration changes\". Note that this is a managed wrap around Fortinet's own appliances rather than an end-to-end managed WAN including circuits; most fully managed Fortinet SD-WAN in the market is delivered by carrier and MSSP partners rather than by Fortinet."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortisase.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The portal offers centralized multi-tenant management and configuration capabilities, enabling MSSPs to efficiently deploy and manage SASE services across their client base. Tenant isolation and delegated administration are evidenced: the FortiSASE datasheet describes an MSSP Portal, and the service provider page states \"Fortinet solutions are multi-tenant from the ground up, enabling MSPs and MSSPs to isolate and manage multiple customer networks from a single administrative console.\" Graded partial rather than yes because no page reviewed evidences branded or white-label portals for the MSP's own brand, and because the FortiSASE MSSP architecture guide qualifies the model by saying each customer gets a separate isolated instance. See conflicts."},"f07_lifecycle_management":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/managed-fortigate-svc.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Let MFGS experts handle your firmware upgrades to maximize effectiveness and minimize risk Firmware upgrade and patching are handled as part of Managed FortiGate Service, which also states \"Automatically trigger patching for vulnerabilities with a severity rating of medium or higher\". The FortiCare support page covers hardware replacement (\"Meet your availability requirements with our Priority RMA Services.\") and describes \"comprehensive lifecycle services\". Explicit end-of-life planning and renewals handling as part of the service were not found."},"f09_encrypted_overlay_fabric":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortinet_secure_sdwan.pdf","reviewed_at":"2026-10-01","review_due":"2026-12-30T00:00:00Z","qualification":"Fortinet documents IPsec tunnel configuration for its SD-WAN overlay. FortiGate Secure SD-WAN supports an IPsec overlay. This is a configurable platform capability; it does not establish a managed service or a deployment-specific throughput/SLA."},"f17_cellular_and_5g_support":{"source_url":"https://www.fortinet.com/products/extender","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"FortiExtender cellular gateways and routers provide secure 5G/LTE connectivity for any deployment. FortiExtender is Fortinet's own product line. The page also states \"Easily provision 5G or LTE wireless WAN, high availability, and failover, as well as out-of-band management (OOB) and private 5G/LTE.\" and \"FortiExtender 5G/LTE Wireless WAN gateways come equipped with Dual SIM and Dual Modem capabilities for fast failover and active/active cellular connectivity.\" covering dual SIM and both primary and failover transport. Signal quality is addressed by \"FortiExtender cellular gateways and routers ensure optimal signal reception, minimal attenuation, and the best experience.\""},"f26_sla_backed_service_fabric":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortisase.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Fortinet delivers 99.999% SLA with latency guarantee for security inspection, which is possible because of global reach with hundreds of security PoPs. Contractual rather than best-effort. Fortinet's own G-Cloud 14 FortiSASE service definition sets out availability tiers (Management Portal 99.99%, Individual Security POPs 99.99%, Overall service in high availability configuration 99.999%) and commits that \"FortiSASE cloud platform is managed by Fortinet on a twenty-four (24) hours a day by seven (7) days a week basis and is monitored for hardware availability, service capacity, and network resource utilization.\" Support response commitments come via \"24 x 7 FortiCare Technical Support\". A latency commitment is claimed alongside uptime. Change handling commitments were not found in the SLA text reviewed."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.fortinet.com/products/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Secure SD-WAN, SSE, zero trust, wireless controller, LTE/5G gateway, and FortiGuard AI-Powered Security Services have the same OS, policy engine, and management plane. Native, not partner_integrated. Fortinet authors FortiOS and the FortiGate NGFW itself, and the SD-WAN function is a feature of the same operating system rather than a bolt-on appliance. The FortiSASE datasheet confirms the cloud-delivered equivalent: \"FortiSASE FWaaS is a cloud-based service that provides hyperscale, next-generation firewall (NGFW) capabilities, including web filtering, advanced threat protection (ATP), intrusion prevention system (IPS), and Domain Name System (DNS) security.\" Stateful firewalling, application control, IPS, malware inspection and URL filtering are all in-platform."},"f33_data_loss_prevention":{"source_url":"https://www.fortinet.com/products/sase","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The FortiSASE DLP feature supports advanced data matching techniques, including pattern recognition and contextual analysis, to effectively prevent accidental data breaches. Native Fortinet capability. The FortiSASE datasheet adds \"Identify, monitor, and protect organization data at rest and in motion. DLP engine backed by FortiGuard AI feeds with over thousands of pre-defined data patterns, updated to protect from day zero.\" and \"DLP allows businesses to identify sensitive information across multiple cloud-based systems, prevent the accidental sharing of data, and monitor and protect data.\" Classification, inspection and blocking are evidenced. Alerting workflows and formal exception or override workflows were not found on the pages reviewed."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:ed65a89afeb5f9b44f4405ca","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"not_confirmed","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). Strong UK channel and FortiSASE PoPs; widely delivered as a UK managed service by BT, Vodafone and UK MSPs.","sector_review_queue":[{"sector":"healthcare","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | Distributed-site SD-WAN and cloud security consolidation at genuine global scale | Not assessed | A named global hospitality operator (4,000+ locations, 325,000+ employees, $19.4B gross annual revenue) reporting a 60% efficiency improvement for network and security teams; separately, IHG Hotels & Resorts is referenced as boosting IT efficiency 'close to 60%' with Fortinet Secure SD-WAN, which may be the same underlying customer story | Global, multi-location deployment evidenced directly at scale | The two hospitality references may describe the same underlying deployment rather than two independent proof points - worth confirming directly rather than double-counting as separate evidence | Genuinely the best-evidenced sector for Fortinet in this profile - specific, large, checkable scale figures (4,000+ locations, 325,000+ employees) and a consistent, repeated 60% efficiency figure across multiple Fortinet materials.","named_evidence":"A named global hospitality operator (4,000+ locations, 325,000+ employees, $19.4B gross annual revenue) reporting a 60% efficiency improvement for network and security teams; separately, IHG Hotels & Resorts is referenced as boosting IT efficiency 'close to 60%' with Fortinet Secure SD-WAN, which may be the same underlying customer story","evidence_source_ids":["evidence:fortinet-fortisase:19","evidence:fortinet-fortisase:21"]},{"sector":"hospitality_leisure","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | Distributed-site SD-WAN and cloud security consolidation at genuine global scale | Not assessed | A named global hospitality operator (4,000+ locations, 325,000+ employees, $19.4B gross annual revenue) reporting a 60% efficiency improvement for network and security teams; separately, IHG Hotels & Resorts is referenced as boosting IT efficiency 'close to 60%' with Fortinet Secure SD-WAN, which may be the same underlying customer story | Global, multi-location deployment evidenced directly at scale | The two hospitality references may describe the same underlying deployment rather than two independent proof points - worth confirming directly rather than double-counting as separate evidence | Genuinely the best-evidenced sector for Fortinet in this profile - specific, large, checkable scale figures (4,000+ locations, 325,000+ employees) and a consistent, repeated 60% efficiency figure across multiple Fortinet materials.","named_evidence":"A named global hospitality operator (4,000+ locations, 325,000+ employees, $19.4B gross annual revenue) reporting a 60% efficiency improvement for network and security teams; separately, IHG Hotels & Resorts is referenced as boosting IT efficiency 'close to 60%' with Fortinet Secure SD-WAN, which may be the same underlying customer story","evidence_source_ids":["evidence:fortinet-fortisase:19","evidence:fortinet-fortisase:21"]},{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Unknown - not assessed in detail, though Fortinet's own customer-story index references a power grid operator by category (not named) deploying a Fortinet SecOps solution for zero-day protection and IT/OT convergence | IT/OT convergence relevant per the referenced use case | Not assessed | Referenced but not independently detailed (unnamed power grid operator) | N/A | Reference exists but wasn't followed up to a named, detailed case study in this pass | A real, relevant use case is referenced in Fortinet's own materials but wasn't independently verified to the same depth as the hospitality or education evidence in this pass.","named_evidence":"Referenced but not independently detailed (unnamed power grid operator)","evidence_source_ids":["evidence:fortinet-fortisase:26"]},{"sector":"education","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | Large-scale, phased deployment (Secure SD-WAN, then NAC, then FortiSASE) at genuine scale | Not assessed for sector-specific frameworks | A named top-five-largest US school district, 375,000+ students and staff | Single-country (US) evidence; UK/EU education-specific case studies not found in this pass | No case-study limitations beyond the single-country evidence noted | A genuinely large, well-evidenced, named-scale customer story - one of the strongest sector-fit findings in this profile, given both the scale (375K+) and the specific, credible multi-stage adoption narrative.","named_evidence":"A named top-five-largest US school district, 375,000+ students and staff","evidence_source_ids":["evidence:fortinet-fortisase:26","evidence:fortinet-fortisase:27"]},{"sector":"transport_logistics","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_supported","qualification":"Unknown - not assessed, no case study found in this pass, though Fortinet's own customer-story index separately references an airport operator and a major bank's remote-ATM/5G deployment | Not assessed in detail | Not assessed | Referenced but not independently detailed in this pass (airport operator, bank ATM network) | N/A | Named but under-detailed references exist and weren't followed up individually in this research pass | A specific, worth-flagging follow-up opportunity - Fortinet's own materials reference relevant transport/financial-infrastructure customers that weren't fully explored in this pass.","named_evidence":"Referenced but not independently detailed in this pass (airport operator, bank ATM network)","evidence_source_ids":["evidence:fortinet-fortisase:26"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"education":false,"healthcare":false,"transport_logistics":false,"hospitality_leisure":false},"reviewed_at":"2026-09-30T15:45:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://fortinet.com/blog/customer-stories","https://fortinet.com/content/dam/fortinet/assets/ebook/eb-sase-customer-stories.pdf","https://www.fortinet.com/customers/the-guidance-center","https://www.fortinet.com/customers/indigo-airlines","https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","https://www.fortinet.com/content/dam/fortinet/assets/case-studies/cs-ihg.pdf"],"qualification":"Fortinet SASE customer-stories PDF page 10 documents an unnamed US school district with 375,000-plus users. Anonymous case only. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation. The Guidance Center is a California mental-health provider using FortiSASE, NOT an NHS organisation. IndiGo documents Secure SD-WAN at airport counters in India. UK Fortinet delivery is evidenced through BT managed service terms; it is partner-dependent, not a commitment from Fortinet or coverage of all UK/Ireland addresses. Recovered IHG primary PDF identifies 4,000 Secure SD-WAN locations and a global MSSP-delivered rollout. UK headquarters do not prove coverage of a particular UK estate. Savings and efficiency figures are forecasts, not measured completed outcomes.","sectors":{"education":"partial","healthcare":"yes","transport_logistics":"yes","hospitality_leisure":"yes"},"regions":{"uk_ireland":"partner_integrated"}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"partner_integrated","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":9,"research_metrics":{"supported":18,"partial":2,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":20,"total":40,"reviewed":20,"completeness_percent":50,"completeness":0.5},"proven_evidence_count":18,"response_panel":null,"best_for":"Healthcare; Transport and logistics; Hospitality and leisure; Education (partial evidence); Large global enterprise; both","best_for_fields":{"sectors_yes":["Healthcare","Transport and logistics","Hospitality and leisure"],"sectors_partial":["Education"],"regions":[],"size":["Large global enterprise"],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"juniper-networks","name":"Juniper Networks","website":"https://www.juniper.net","category":"technology vendor","product_focus":"Juniper AI-Native SD-WAN, Juniper Mist AI / Marvis AI, Juniper Secure Edge, Managed SD-WAN","cost_model":"Quote-based hardware/subscription/support; managed delivery via partners/providers.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"partial","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"partial","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"yes"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"yes","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_primary","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/juniper/","shortlist_summary":"Juniper Networks offer Mist AI with WAN Assurance, delivering AI-driven monitoring and troubleshooting at the WAN edge at a depth that few competitors match. Typically shortlisted by organisations where AIOps and network assurance quality are weighted evaluation criteria rather than SD-WAN feature breadth, and worth examining more closely than the overall score might suggest if AI-driven operations is a primary requirement.","key_differentiators":["Mist AI delivers WAN Assurance, providing AI-driven monitoring and troubleshooting at the WAN edge that few competitors match.","Strong story for buyers who want the WAN integrated with Mist-powered Wi-Fi and access network management.","Juniper SRX security platform integration provides native firewall capability for buyers standardised on Juniper."],"best_fit_for":["Enterprises already running Mist for Wi-Fi or access who want unified AI-driven operations across WAN and LAN.","Buyers prioritising observability and AI-assisted incident triage as a primary purchase criterion.","Organisations with strong network engineering capability who can take advantage of WAN Assurance telemetry."],"watch_outs":["Full SASE platform: partial evidence; CASB capability: not confirmed; Data loss prevention: not confirmed. Confirm the networking and SSE products and whether separate contracts or operators are required.","Managed delivery is via partners; first-party managed service is not the primary model.","Cloud on-ramp and private backbone capabilities are less prominent than dedicated SASE platforms."],"evidence_coverage_pct":0.475,"last_verified":"2026-09-01","evidence_source_count":40,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.juniper.net/us/en/services.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our highly trained experts, backed by AI-Native and automated insights, can help you design, deploy, and proactively manage your network to deliver seamless experiences for all. Juniper Services offers design, deployment and proactive management assistance, but the Juniper pages reviewed position end-to-end managed SD-WAN/SASE as something MSPs and service providers deliver using Juniper technology rather than something Juniper operates itself. The managed SD-WAN page is written to MSPs as the operator. No Juniper page reviewed described Juniper owning day-to-day operations, change execution and service reporting for a customer end to end. Graded partial rather than yes for that reason."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.juniper.net/us/en/solutions/sd-wan/managed-sd-wan.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"engineered specifically for forward-thinking MSPs ready to scale Juniper explicitly targets MSPs with its managed SD-WAN proposition, which is why this is not graded unknown. However none of the three specific tests in the definition were evidenced on pages reviewed: tenant isolation, delegated administration and branded (white-label) portals are not described. The Juniper Mist MSP dashboard documentation URL attempted returned HTTP 404, so multi-tenant administration could not be verified in this task."},"f07_lifecycle_management":{"source_url":"https://www.juniper.net/us/en/services.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Achieve simplicity and reliability at scale across your wired, wireless, and SD-WAN environments with AI-Native operations and support from Juniper Services, using AI for a comprehensive, proactive approach across the full network life cycle. Juniper claims a full network life cycle approach through Juniper Services. The specific components in the definition (hardware replacement/RMA, firmware upgrades, patching, renewals and end-of-life planning handled as part of the service) were not individually evidenced; the technical services page that would carry them returned HTTP 404 on attempt. Graded partial on that basis."},"f10_dynamic_path_selection":{"source_url":"https://juniper.net/content/dam/www/assets/white-papers/us/en/routers/ai-driven-sd-wan-secures-todays-cloud-era-networks.pdf","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via the platform's core, service-based routing architecture - 'sessions are delivered based on identity and context to relevant parties based on real-time policies' [10]"},"f18_cloud_on_ramp":{"source_url":"https://juniper.net/us/en/customers/ambifox-case-study.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a real, named customer deployment spanning two distinct named hyperscalers [25]"},"f19_public_cloud_gateways":{"source_url":"https://www.juniper.net/us/en/solutions/sase.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"full-stack Security Service Edge (SSE) and SD-WAN capabilities that leverage the power of the cloud to optimize both the network and the security experience Juniper operates its own cloud-delivered SSE (Juniper Secure Edge, managed by Juniper Security Director Cloud), so this is Juniper's own service infrastructure rather than a third party's resold platform. Graded partial not yes because no page reviewed named the gateway or PoP locations, the number of locations, or which capabilities (SaaS optimisation, remote access, security enforcement) are enforced at Juniper-operated PoPs. Attempts to reach the Juniper Secure Edge product page redirected to an HPE store page that returned Product Not Found, and the Secure Edge documentation guide URLs returned 404/403."},"f23_multi_cloud_transit_fabric":{"source_url":"https://juniper.net/us/en/customers/ambifox-case-study.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a real, named customer deployment spanning two distinct named hyperscalers [25]"},"f24_flexible_edge_form_factors":{"source_url":"https://juniper.net/us/en/products/routers/session-smart-router.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as genuinely flexible - the Session Smart Router runs as a software-based solution on dedicated Juniper SSR-series hardware, white-box customer-premises equipment, data-centre network servers, or the public cloud [14]"},"f27_integrated_next_generation_firewall":{"source_url":"https://juniper.net/us/en/solutions/sd-wan/managed-sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and confirmed with specific technical detail [15]"},"f28_full_sase_platform":{"source_url":"https://juniper.net/us/en/solutions/secure-ai-native-edge.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Partially confirmed - Universal Zero Trust Network Access (UZTNA) is explicitly described by Juniper's own materials as setting 'the vision for Juniper's view of... UZTNA to address customer needs in the future', a stated roadmap direction rather than a confirmed, fully-realised, currently-shipping capability [11] [17] Explicitly framed as a future-facing vision in Juniper's own primary materials"},"f30_zero_trust_network_access":{"source_url":"https://juniper.net/us/en/solutions/secure-ai-native-edge.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Partially confirmed - Universal Zero Trust Network Access (UZTNA) is explicitly described by Juniper's own materials as setting 'the vision for Juniper's view of... UZTNA to address customer needs in the future', a stated roadmap direction rather than a confirmed, fully-realised, currently-shipping capability [11] [17] Explicitly framed as a future-facing vision in Juniper's own primary materials"},"f36_centralised_orchestration":{"source_url":"https://juniper.net/us/en/customers/ambifox-case-study.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - the platform 'supports zero-touch installation and provisioning for fast setup and administration-with no site visits', evidenced via a real, named customer deployment [25]"},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://juniper.net/content/dam/www/assets/white-papers/us/en/routers/session-smart-routing-how-it-works.pdf","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, via the confirmed SLE architecture (Table 3, 10) [13] Technical depth beyond the named SLE capability itself not itemised in full"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:6302afddee37a3625fa05be4","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US, now HPE). UK channel and delivery via partners and MSPs.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":10,"research_metrics":{"supported":13,"partial":6,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":21,"total":40,"reviewed":19,"completeness_percent":48,"completeness":0.475},"proven_evidence_count":13,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"forcepoint","name":"Forcepoint","website":"https://www.forcepoint.com/product/secure-sd-wan","category":"technology vendor","product_focus":"AI Mesh / Getvisibility, ARIA, Field Programmable SASE Logic (FPSL), FlexEdge Secure SD-WAN","cost_model":"Quote-based appliances/software/subscriptions; managed SD-WAN positioned but pricing public transparency limited.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"partial","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"partial","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"yes","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_primary","financial_services":"not_primary","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"not_primary","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/forcepoint/","shortlist_summary":"Forcepoint’s identity traces back to Websense, founded in 1994, and its whole platform is built around a data-first philosophy rather than a network- or device-first one - the pitch is that policy should follow the data itself, not the network path or the device it happens to be on. That heritage shows up as real, credible analyst recognition specifically for data loss prevention: Frost & Sullivan’s Global DLP Company of the Year for two consecutive years, an IDC MarketScape Leader placement for worldwide DLP in 2025, and a Forrester Wave Strong Performer placement for data security platforms in Q1 2025.","key_differentiators":["FlexEdge Secure SD-WAN combines secure SD-WAN with strong DLP and data security heritage from the wider Forcepoint portfolio.","MultiLink resilience and zero-touch deployment with cloud central management.","Strong story for buyers prioritising data security and DLP as a procurement criterion."],"best_fit_for":["Enterprises with strong data protection and DLP requirements (regulated industries, government).","Organisations wanting secure SD-WAN where data security is the primary decision driver.","Buyers consolidating DLP with SD-WAN under one vendor."],"watch_outs":["Smaller SD-WAN market presence than the leading platforms.","Full SASE platform: supported. Confirm the included networking and security products, licences and service scope.","Managed delivery is partner-led; co-managed and white-label support require partner validation."],"evidence_coverage_pct":0.45,"last_verified":"2026-09-01","evidence_source_count":61,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.forcepoint.com/resources/datasheets/flexedge-secure-sd-wan-manager","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Forcepoint Administrative Domain License enables multiple customer environments to be managed through a single management server. The SD-WAN Manager datasheet evidences tenant isolation and delegated administration: it also states 'Allows division of the environment into isolated configuration domains' and names MSSPs directly. Graded partial rather than yes because no evidence of branded or white-label portals was found on any page reviewed, and the partner programme page contains no MSP, MSSP, white label or multi-tenant terms."},"f05_professional_services_and_migration_support":{"source_url":"https://www.forcepoint.com/services/implementation-packages","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Resources and deliverables aligned to your deployment needs and timeline Packaged implementation services and consulting are published, and the Cybersecurity Services page lists 'Implementation Packages for our award-winning products' and 'Data Security Consulting customized to your organization's needs'. Graded partial because the pages reviewed do not describe discovery, pilots, staging, migration runbooks or rollback plans."},"f07_lifecycle_management":{"source_url":"https://www.forcepoint.com/resources/datasheets/forcepoint-technical-support-offerings","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Next Generation Firewall (NGFW) appliances (both N and S-series) now have RMA support included Hardware replacement is included in the support contract, with an option to 'upgrade to next business day or same day RMA service'. The SD-WAN Manager datasheet adds 'Upgrades and dynamic update packages for managed devices can be automatically downloaded' and 'Remote Upgrades One-click fail-safe remote upgrade of the managed engines'. Graded partial because upgrades and patching are customer-executed platform features rather than work performed for the customer as part of a service, and no end-of-life planning service was found."},"f17_cellular_and_5g_support":{"source_url":"https://www.forcepoint.com/resources/datasheets/forcepoint-ngfw-120-series-appliance","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"For LTE without Wi-Fi, Forcepoint offers the 120L model with LTE support and 125L model with LTE/5G support. The 120 Series datasheet also states 'Optional Wi-Fi and LTE/5G connectivity' and lists supported LTE and 5G NR band tables, so integrated cellular is a shipped hardware capability. SIM management and signal monitoring specifics were not located in the pages reviewed."},"f26_sla_backed_service_fabric":{"source_url":"https://www.forcepoint.com/resources/datasheets/forcepoint-technical-support-offerings","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"24/7 availability for your most critical issues. The Technical Support Offerings datasheet publishes tiered severity response targets ('Severity 1 1 hour' for Essential, 'Severity 1 45 minutes' for Enhanced, 'Severity 1 30 minutes' for Enterprise) and states 'Severity 1 issues use a follow-the-sun approach; Forcepoint technicians are always available'. Graded partial because these are support response commitments only: no uptime percentage, and no latency, jitter, loss or change handling commitments were found in the pages reviewed."},"f32_casb_capability":{"source_url":"https://forcepoint.com/sites/default/files/resources/brochures/whitepaper_forcepoint_one_differentiation_en_0_0_0_0_0.pdf","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed explicitly alongside inline modes [10]"},"f33_data_loss_prevention":{"source_url":"https://forcepoint.com/use-case/incident-and-breach-response","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed - Forcepoint DLP provides 'continuous monitoring' across data at rest, in use, and in transit, per Forcepoint's own materials and independent analyst recognition [36]"},"f34_remote_user_access":{"source_url":"https://forcepoint.com/sites/default/files/resources/brochures/whitepaper_forcepoint_one_differentiation_en_0_0_0_0_0.pdf","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via the CASB/SWG gateway architecture supporting unmanaged devices without requiring an agent [10]"},"f36_centralised_orchestration":{"source_url":"https://cyberdefensemagazine.com/innovator-spotlight-forcepoints-data-security-cloud-redefining-data-protection-in-the-ai-era/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Confirmed as part of ARIA's function - assists in 'creating, refining, and enforcing data protection policies' [25] Same as above"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:e03c3fdaf8448bdd3558a0fd","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"partial","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). UK delivery via security partners; government and defence heritage suits UK public sector.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":11,"research_metrics":{"supported":14,"partial":4,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":22,"total":40,"reviewed":18,"completeness_percent":45,"completeness":0.45},"proven_evidence_count":14,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"zscaler","name":"Zscaler","website":"https://www.zscaler.com","category":"technology vendor","product_focus":"AI Security / GenAI Security, Data Fabric for Security, Risk360, Zero Trust Branch","cost_model":"Quote-based subscription; typically per-user/workload/location modules; SD-WAN integrations may add partner/vendor cost.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":160,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/zscaler/","shortlist_summary":"Zscaler is the vendor that effectively created the SSE category, and it’s still the one most competitors get measured against when it comes to sheer scale and security depth - the Zero Trust Exchange runs across 150+ data centres, processes over 400 billion transactions a day, and holds FedRAMP High authorisation for ZIA and ZPA (other SASE-class vendors also hold FedRAMP High or equivalent for their own components). If you’re a security-first buyer looking to retire VPN concentrators and stitch SWG, CASB, DLP and ZTNA together under one console, Zscaler is one of the most proven single-vendor routes to get there.","key_differentiators":["Category leader in SSE with ZIA, ZPA and ZDX; widely adopted as the security layer in best-of-breed SASE architectures.","Strong ecosystem of SD-WAN partners (Cisco, others) for buyers wanting Zscaler security with a separate SD-WAN platform.","Mature Zero Trust platform with substantial enterprise deployment history."],"best_fit_for":["Enterprises selecting best-of-breed SSE alongside a separate SD-WAN platform.","Security-driven SASE strategies where the SSE layer is the primary architectural decision.","Buyers consolidating multiple security point solutions onto a single SSE vendor."],"watch_outs":["Historically SSE-led; native SD-WAN capability is less mature than dedicated SD-WAN platforms (validate path selection, QoS and packet loss in RFP).","Premium pricing; typically per-user/workload/location with security modules adding cost.","Buyers needing one vendor for both SD-WAN and security may prefer a converged platform (Cato, FortiSASE, Prisma)."],"evidence_coverage_pct":0.45,"last_verified":"2026-09-01","evidence_source_count":81,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.zscaler.com/partners/service-providers","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"We partner with service providers to develop comprehensive managed offers that leverage the Zero Trust Exchange, our industry-leading security platform, to enable profitable managed service provider business models. Zscaler operates the platform itself and sells one first-party managed service (Zscaler MDR, security operations). On its own partner page the comprehensive managed offer is built and delivered by service provider partners, not by Zscaler. No Zscaler page was found describing Zscaler itself designing, deploying, changing and reporting on a customer's end-to-end service, so graded partial rather than yes."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.zscaler.com/blogs/product-insights/streamlining-multi-tenant-management-announcing-integration-multi-tenant","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The Multi-Tenant Portal has long been the cornerstone for Managed Service Providers (MSPs) and large-scale enterprises to oversee multiple Zscaler instances. Tenant isolation, cross-tenant pivoting and centralised delegated administration through ZIdentity are documented for MSPs. Nothing was found on Zscaler's own pages evidencing branded or white-label portals under the partner's own brand, and the definition requires that. The definitive partner portal documentation on help.zscaler.com could not be read because it is a JavaScript-only page (register 23). Graded partial for that reason."},"f17_cellular_and_5g_support":{"source_url":"https://www.zscaler.com/products-and-solutions/zscaler-cellular","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Devices use Zscaler SIMs to steer traffic securely to the Zero Trust Exchange with no need for additional software. Zscaler Cellular provides Zscaler-issued SIMs that carry cellular IoT and mobile device traffic into the Zero Trust Exchange, which covers SIM provisioning and management. The definition also asks for 4G and 5G as primary or failover WAN transport with modem and signal monitoring. Neither the Cellular product page nor the July 2025 cellular press release names 4G, 5G or LTE, the private 5G page concerns securing a customer's private 5G core rather than WAN transport, and the Zero Trust SD-WAN datasheet contains no cellular uplink specification. Graded partial on that gap."},"f19_public_cloud_gateways":{"source_url":"https://www.zscaler.com/press/zscaler-significantly-expands-global-sovereignty-zero-trust-exchange-platform","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Zscaler already operates 160+ data centers and is present in most countries. This is Zscaler's own infrastructure, not a resold third party's, so yes rather than partner_integrated. The reference architecture confirms Zscaler deploys its own ZIA Service Edge devices into those data centres and that users are always directed to the nearest one for traffic processing, which is security enforcement and SaaS access delivered as the vendor's own cloud service."},"f20_private_pops_dedicated_pops":{"source_url":"https://www.zscaler.com/resources/reference-architectures/traffic-forwarding-in-zscaler-internet-access.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"ZIA Private Service Edge and ZIA Virtual Service Edge devices extend the Zscaler cloud into your data center. Directly meets the definition: customer-hosted and dedicated deployments exist alongside the shared multi-tenant Public Service Edges. The March 2026 sovereignty press release additionally describes Private Service Edges as single-tenant, customer-hosted, and Zscaler-managed appliances, plus dedicated control and logging planes in six countries, which covers the sovereign case."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:44562c0b5225f88ac0275492","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"not_confirmed","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). UK PoPs in the Zero Trust Exchange; delivered direct or via UK partners and carriers.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Conditional fit | Not assessed | Not assessed | Mindbody (business software/services company) | N/A | Single case study, not sector-specific in focus | Some evidence exists but isn't a deep sector-specific case.","named_evidence":"Mindbody (business software/services company)","evidence_source_ids":["evidence:zscaler:19"]},{"sector":"government_public_sector","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | FedRAMP High/Moderate, DoD IL5, GovRAMP, CJIS, CMMC Level 2 | FedRAMP High/Moderate, GovRAMP Authorized, CJIS, CMMC Level 2, DoD IL4/IL5 | CSC (public-sector case study, VPN-to-Zero-Trust productivity gains) | Zscaler Government Cloud is a distinct FedRAMP High authorised offering | US-federal-specific; UK/EU public-sector framework listings not found in this pass | By far the best-evidenced sector in this entire profile - genuinely strong, multi-source, dated evidence. The clear standout differentiator versus Cato, which had no equivalent public-sector compliance depth.","named_evidence":"CSC (public-sector case study, VPN-to-Zero-Trust productivity gains)","evidence_source_ids":["evidence:zscaler:20"]},{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | SD-WAN/ZIA for distributed sites, M365 security | Not assessed | AutoNation (retail/automotive dealerships), Baker & Baker (food manufacturing/retail supply) | Multi-site retail benefits from ZIA's direct-to-cloud model avoiding centralised backhaul | US-centric case evidence; UK/EU retail-specific case studies not found in this pass | Reasonably well evidenced via AutoNation specifically, though not as singularly strong as Cato's Ulta Beauty story.","named_evidence":"AutoNation (retail/automotive dealerships), Baker & Baker (food manufacturing/retail supply)","evidence_source_ids":["evidence:zscaler:17","evidence:zscaler:18"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Conditional fit | SD-WAN/branch capability plausibly relevant | Not assessed | Baker & Baker (food manufacturing) | N/A | Single case study, not deeply metric-rich beyond the ransomware-reduction claim | Some evidence exists but is thinner than the retail/public-sector case studies.","named_evidence":"Baker & Baker (food manufacturing)","evidence_source_ids":["evidence:zscaler:17"]},{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Conditional fit | Global remote-access capability plausibly relevant | Not assessed | NOV (oilfield services/energy, 27,500 users, global remote-access rollout during COVID-19) | Global distributed workforce use case well evidenced | Single case study, but a genuinely substantial, named, metric-rich one | NOV is a strong, credible case study for this sector specifically - a real enterprise-scale (27,500-user) deployment with a clear before/after narrative.","named_evidence":"NOV (oilfield services/energy, 27,500 users, global remote-access rollout during COVID-19)","evidence_source_ids":["evidence:zscaler:21"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"energy_utilities":false,"government_public_sector":false,"manufacturing":false,"retail_ecommerce":false,"professional_services":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://zscaler.com/customers/nov","https://zscaler.com/customers/csc","https://zscaler.com/customers/baker-baker","https://zscaler.com/customers/mindbody","https://zscaler.com/customers/autonation"],"qualification":"NOV case documents ZIA/ZPA and zero-trust access for an energy-industry supplier. Do not infer utility-specific compliance or UK fit. CSC is Australian Commonwealth Superannuation Corporation; ZIA/ZPA deployment confirmed. Government-pension context, not a blanket public-sector accreditation. Baker and Baker case documents ZIA/ZPA alongside a separately adopted SD-WAN. Manufacturing evidence; Zscaler is not identified as the SD-WAN provider. Mindbody is a SaaS software business serving wellness firms. Its ZPA deployment does not establish professional-services or healthcare end-buyer sector evidence. AutoNation confirms ZIA deployment across retail locations. Baker and Baker must not be counted as a second retail case; it is manufacturing. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"energy_utilities":"yes","government_public_sector":"yes","manufacturing":"yes","professional_services":"not_confirmed","retail_ecommerce":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":12,"research_metrics":{"supported":15,"partial":3,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":22,"total":40,"reviewed":18,"completeness_percent":45,"completeness":0.45},"proven_evidence_count":15,"response_panel":null,"best_for":"Retail and e-commerce; Manufacturing; Energy and utilities; Government and public sector; platform","best_for_fields":{"sectors_yes":["Retail and e-commerce","Manufacturing","Energy and utilities","Government and public sector"],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"hpe-aruba","name":"HPE Aruba EdgeConnect","website":"https://www.hpe.com/us/en/aruba-edgeconnect-sd-wan.html","category":"technology vendor","product_focus":"Cloud Intelligence, EdgeConnect Orchestrator, First-Packet iQ, HPE Aruba Networking Central","cost_model":"Quote-based subscription/appliance/support; MSP-managed options available through partners/providers.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"not_confirmed","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"partial","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"not_primary","manufacturing":"yes","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_primary","professional_services":"yes","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/hpe-aruba-edgeconnect/","shortlist_summary":"HPE Aruba Networking’s SASE platform is a product of acquisition and integration rather than a single, from-scratch build. The SD-WAN engine, EdgeConnect, was built by Silver Peak Systems (founded 2004, first SD-WAN product shipped 2015) and joined HPE’s Aruba business in a $925 million acquisition completed September 2020.","key_differentiators":["EdgeConnect SD-WAN (acquired with Silver Peak) is positioned as the foundation for single-vendor SASE alongside Aruba SSE.","Strong heritage in WAN optimisation and packet-level performance engineering.","Tight integration with the broader Aruba campus and branch portfolio (LAN, Wi-Fi, NAC) for buyers consolidating end-to-end networking."],"best_fit_for":["Enterprises already running Aruba LAN/Wi-Fi who want WAN and SASE under the same operational tooling.","Buyers prioritising application performance and WAN optimisation in addition to standard SD-WAN routing.","Distributed organisations with branch-heavy footprints where Aruba campus presence is already established."],"watch_outs":["Aruba SSE is newer than the SSE leaders (Zscaler, Netskope); buyers wanting best-of-breed SASE should evaluate the SSE capability set carefully.","Managed delivery is partner-led rather than from HPE directly.","Private global backbone is not vendor-owned; SASE transport uses public cloud gateways."],"evidence_coverage_pct":0.425,"last_verified":"2026-09-01","evidence_source_count":46,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://docs.axissecurity.com/docs/tenants-management","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Managing multiple tenants can be useful when you are an MSSP and you manage several separate clients, or otherwise your company has several organizational units it prefers to keep separate. Tenant isolation and cross-tenant admin roles are documented for HPE Networking SSE, and the same documentation page states this is a limited release feature. No evidence of branded or white-label portals, custom logos or reseller templates was found on the documentation or partner programme pages reviewed, so graded partial rather than yes."},"f18_cloud_on_ramp":{"source_url":"https://hpe.com/us/en/aruba-edgeconnect-sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed for specific named hyperscalers [15] [19]"},"f19_public_cloud_gateways":{"source_url":"https://docs.axissecurity.com/docs/pops","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The HPE Aruba Networking SSE service utilizes both onramps and Points of Presence (PoPs) to enhance connectivity. The PoPs are documented as part of the HPE Aruba Networking SSE service itself, which is HPE's own security service edge infrastructure following the Axis Security acquisition, so this is the vendor's own service infrastructure rather than a resold third party gateway. Several PoP locations carry hyperscaler region names such as Northern Virginia, Oregon and Iowa, which suggests hosting inside public cloud regions, but the service and enforcement layer are HPE's."},"f23_multi_cloud_transit_fabric":{"source_url":"https://hpe.com/us/en/aruba-edgeconnect-sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed for specific named hyperscalers [15] [19]"},"f24_flexible_edge_form_factors":{"source_url":"https://buy.hpe.com/in/en/cloud/private-hybrid-cloud/hpe-aruba-networking-connectivity-saas/hpe-aruba-networking-connectivity/hpe-aruba-networking-edgeconnect-10106-1g-2x-sfp-2x-combo-1g-2x-rj45-poe-sd%E2%80%91wan-gateway/p/s0e22a","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native - physical appliances confirmed at a specific model level (e.g. the EC-10106 gateway, described as 'ideally suited for small branch and remote office environments'), plus virtual appliance deployment [21]"},"f27_integrated_next_generation_firewall":{"source_url":"https://hpe.com/us/en/networking/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, via the SSE platform's confirmed capability set alongside the EdgeConnect-embedded NGFW described above [14]"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:40513952c953a0dcc2253c38","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"not_confirmed","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). EdgeConnect delivered in the UK via HPE partners and MSPs.","sector_review_queue":[{"sector":"education","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Consistent network experience and centralised management relevant to distributed campus/student environments | Not assessed for sector-specific frameworks | A named reference describing a centrally-managed, high-performance network delivering 'a home-from-home experience for Oxford students'; Edmonton Public Library's digital-space modernisation is a related, if not strictly higher-education, public-education-adjacent reference | UK (Oxford) and Canada (Edmonton) - genuine international sector evidence | Both references are qualitative rather than quantified with a specific metric | Two independently named, international, credible references - real sector evidence, though without the specific quantified metrics found for some other sectors in this profile (e.g. Manufacturing's 99%+ uptime, Government's FedRAMP date).","named_evidence":"A named reference describing a centrally-managed, high-performance network delivering 'a home-from-home experience for Oxford students'; Edmonton Public Library's digital-space modernisation is a related, if not strictly higher-education, public-education-adjacent reference","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:30"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | SD-WAN reliability directly relevant to distributed manufacturing operations | Not assessed for sector-specific frameworks | IMMI (99%+ uptime ratio reported across all branches using EdgeConnect as a turn-key, out-of-the-box solution) | N/A | Single case study, though genuinely specific and quantified | A specific, quantified (99%+ uptime), named manufacturing customer reference - genuinely credible, concrete sector evidence.","named_evidence":"IMMI (99%+ uptime ratio reported across all branches using EdgeConnect as a turn-key, out-of-the-box solution)","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:30"]},{"sector":"healthcare","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"requires_confirmation","qualification":"Good fit, evidenced, though without a formal HIPAA attestation confirmed | SD-WAN reliability and DEM plausibly relevant to telehealth/clinical-application performance specifically | HIPAA not confirmed as a formal attestation | Universal Health Services (telehealth, assured network performance and reliability); Hato Hone St John (New Zealand ambulance/healthcare service, digital transformation of healthcare operations); USANA Health Sciences (global efficiency, application performance and savings from Unified SASE, per a named reseller case study) | Named customers in both US and New Zealand markets | No formal HIPAA attestation confirmed despite the named healthcare customer evidence | Two independently named healthcare-sector customers give real, credible sector evidence, though Netify should not assume formal HIPAA compliance without direct confirmation, given this wasn't found in this research pass.","named_evidence":"Universal Health Services (telehealth, assured network performance and reliability); Hato Hone St John (New Zealand ambulance/healthcare service, digital transformation of healthcare operations); USANA Health Sciences (global efficiency, application performance and savings from Unified SASE, per a named reseller case study)","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:14","evidence:hpe-aruba-edgeconnect:22","evidence:hpe-aruba-edgeconnect:29"]},{"sector":"hospitality_leisure","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Consistent network experience and branch/site connectivity relevant to distributed hospitality operations | Not assessed | A named hotel reference: 'Network excellence enables hotel to streamline operational efficiency and drive service innovation' | N/A | Anonymised (described as 'a hotel' without further naming detail in the source reviewed) | A real, if not fully named, hospitality-sector reference - worth a direct follow-up to identify the specific hotel/hotel group if a fully named case study is needed.","named_evidence":"A named hotel reference: 'Network excellence enables hotel to streamline operational efficiency and drive service innovation'","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:30"]},{"sector":"financial_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"requires_confirmation","qualification":"Conditional - one named customer reference exists, but no PCI-DSS or DORA-specific certification was confirmed for the SASE/SSE platform specifically | SD-WAN cost-reduction and application-performance capabilities plausibly relevant | PCI confirmed for Central's cloud infrastructure specifically (Table 13); DORA not confirmed | First Bank (SASE-based SD-WAN, cost reduction, application performance, cloud-smart technology strategy) | N/A | Compliance evidence is narrower than the named customer evidence would suggest is needed for full sector confidence | A real, named financial-services customer exists, though Netify should be precise that platform-wide PCI/DORA-specific certification for the SASE/SSE components specifically wasn't independently confirmed.","named_evidence":"First Bank (SASE-based SD-WAN, cost reduction, application performance, cloud-smart technology strategy)","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:14"]},{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced, and genuinely the platform's best-documented individual case study | The confirmed best-of-breed SD-WAN-plus-third-party-SSE architecture (Table 6) directly relevant to this sector's typical existing security-vendor investments | Not assessed for sector-specific frameworks | Cushman & Wakefield (global commercial real estate services firm) - 'boost global network performance and security with Aruba EdgeConnect SD-WAN edge platform and Zscaler cloud-delivered SASE' | Global deployment implied by the confirmed 'global network performance' framing | Single case study, though it directly demonstrates the platform's most architecturally distinctive capability | Genuinely the most strategically important case study in this entire profile - a real, named, global professional-services customer using the exact best-of-breed (EdgeConnect plus Zscaler) architecture that is this platform's clearest differentiator.","named_evidence":"Cushman & Wakefield (global commercial real estate services firm) - 'boost global network performance and security with Aruba EdgeConnect SD-WAN edge platform and Zscaler cloud-delivered SASE'","evidence_source_ids":["evidence:hpe-aruba-edgeconnect:30","evidence:hpe-aruba-edgeconnect:36"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"financial_services":false,"healthcare":false,"professional_services":false,"hospitality_leisure":false,"manufacturing":false},"reviewed_at":"2026-09-30T15:45:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://hpe.com/us/en/networking/sase.html","https://www.hpe.com/psnow/doc/a50014000enw","https://hpe.com/tw/en/aruba-edgeconnect-sd-wan.html","https://consiliant.com/usana-hpe-aruba-networking-sase-case-study/","https://www.hpe.com/uk/en/aruba-edgeconnect-sd-wan.html.html","https://arubanetworks.com/resources/case-studies","https://hpe.com/psnow/doc/a00108908enw","https://buy.hpe.com/uk/en/p/JZ872A","https://www.hpe.com/psnow/downloadDoc/Finding%20a%20niche%20in%20a%20crowded%20hotel%20sector%20-%20Premier%20Inn%20MENA-a50011126enw.pdf?deepLink=&form=false&hf=regular&id=a50011126enw&isFutureVersion=true&originalObjectName=&prelaunchSection=&preview=false&print=&r=&section=&softrollSection=&ver=1","https://packetpushers.net/podcasts/tech-bytes/tb-global-manufacturer-taps-aruba-edgeconnect-for-sd-wan-wan-optimization/"],"qualification":"Recovered HPE First Bank case documents EdgeConnect SD-WAN at a US bank; no UK regulatory suitability inference. HPE EdgeConnect page explicitly identifies Universal Health Services using SD-WAN for telehealth. USANA reseller story is not evidence of healthcare delivery. HPE EdgeConnect page identifies Cushman and Wakefield application acceleration and MPLS replacement; professional-services sector evidence. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation. HPE UK product material identifies EdgeConnect and Barrett Steel customer deployment; UK store sells EdgeConnect gateways. UK product availability is evidenced; partner, site access circuits and Irish delivery must be confirmed. Region partial, not a managed-service or buyer-fit guarantee. Replacement named evidence: Premier Inn MENA documents EdgeConnect SD-WAN across 11 Middle East hotels. This does not validate the original anonymous hotel quote or prove a UK hotel deployment. Customer interview with IMMI VP of Enterprise Technology documents deployed EdgeConnect linking US data centres and a Chinese plant. HPE-sponsored primary customer account, not independent testing or UK delivery confirmation.","sectors":{"financial_services":"yes","healthcare":"yes","professional_services":"yes","hospitality_leisure":"yes","manufacturing":"yes"},"regions":{"uk_ireland":"partial"}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"partial","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":13,"research_metrics":{"supported":16,"partial":1,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":23,"total":40,"reviewed":17,"completeness_percent":43,"completeness":0.425},"proven_evidence_count":16,"response_panel":null,"best_for":"Healthcare; Financial services; Manufacturing; Professional services; Hospitality and leisure; platform","best_for_fields":{"sectors_yes":["Healthcare","Financial services","Manufacturing","Professional services","Hospitality and leisure"],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"cradlepoint-ericsson","name":"Ericsson Cradlepoint","website":"https://cradlepoint.com","category":"technology vendor / carrier network provider","product_focus":"NetCloud Federal, NetCloud Manager, NetCloud Perimeter, NetCloud Private Networks","cost_model":"Quote-based NetCloud subscriptions + routers/adapters; public hardware pricing may exist through resellers.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"partner_integrated","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/ericsson-cradlepoint/","shortlist_summary":"1 billion. That makes this platform’s identity distinctive within this product category: it sits inside one of the world’s largest telecommunications equipment manufacturers rather than a standalone security company or a private-equity-backed challenger, and its architecture reflects that heritage directly - NetCloud SASE is built cellular-first, with confirmed, specific capabilities like traffic steering based on cellular attributes and 5G standalone network slicing for guaranteed bandwidth that have no real equivalent among fixed-line-oriented competitors.","key_differentiators":["Wireless-first branch architecture from Ericsson with deep 5G expertise; NetCloud provides cellular-centric SD-WAN management.","Strong story for organisations adopting 5G as a primary access medium rather than as a backup.","Network slicing and private 5G integration roadmap is more credible than competitors lacking cellular heritage."],"best_fit_for":["Distributed enterprises with strong cellular/5G access strategy (retail, logistics, transport, public sector).","Buyers consolidating wireless WAN with traditional fixed-line SD-WAN under one operational tool.","Organisations interested in private 5G integration with branch SD-WAN."],"watch_outs":["SASE story is partner-integrated rather than native; SSE capabilities require validation in RFP.","Cloud on-ramp: supported; Multi-cloud transit fabric: not confirmed. Confirm the cloud locations, connectivity pattern and transit design.","Best for cellular-led architectures; less strong as a primary fit for fixed-circuit-heavy estates."],"evidence_coverage_pct":0.375,"last_verified":"2026-09-01","evidence_source_count":38,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://cradlepoint.ericsson.com/about/how-to-buy","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Enterprise Wireless products are sold through our world-class global ecosystem of distributors, resellers, managed service providers, and integrators. Managed service providers are an explicit channel and the partner programme names a service provider category that builds managed offerings on the platform, which implies multi customer operation. However no page reviewed documents tenant isolation, delegated administration, branded portals or templates under the partner's own brand, so this is graded partial rather than yes. NetCloud Manager subaccount structure is referenced in the security page bullets but not in language firm enough to quote for white labelling."},"f05_professional_services_and_migration_support":{"source_url":"https://cradlepoint.ericsson.com/about/how-to-buy","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"These specialized partners have deep knowledge of our products and offer an array of high-value services. Design, integration and implementation services are attributed to the reseller and integrator channel rather than to an Ericsson Cradlepoint professional services organisation. The vendor supplies training and certification directly, but no discovery, pilot, staging, migration runbook or rollback offering was found on the pages reviewed, so the capability is graded as delivered through partners."},"f07_lifecycle_management":{"source_url":"https://cradlepoint.com/products/netcloud-service/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Your wireless edge routers and adapters, or endpoints, include a product warranty for the duration of your active NetCloud Essential or Advanced subscription. Hardware warranty runs for the life of the subscription and the same page states that NetCloud Manager continuously delivers real time cloud and device operating software updates to 5G and LTE endpoints, so firmware and software currency are part of the subscription. End of life planning and renewal management are implied by the subscription continuity wording but are not separately documented."},"f10_dynamic_path_selection":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the named cellular-attribute-based traffic steering capability [15]"},"f13_qos_and_traffic_shaping":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 5G standalone network slicing 'for guaranteed bandwidth' is a specific, named, technically distinctive QoS mechanism [15]"},"f17_cellular_and_5g_support":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"With benefits like traffic steering based on cellular attributes and network slicing for guaranteed bandwidth as networks evolve to 5G standalone, NetCloud SASE enables fast moving organizations to accelerate their transformation. This is the supplier's core competence. The data sheet additionally describes SD-WAN optimising traffic across wired, 5G and LTE, satellite, Wi-Fi as WAN, private APNs and 5G standalone network slices, and the endpoint range is built around integrated cellular modems. Traffic steering on cellular attributes evidences signal level awareness."},"f18_cloud_on_ramp":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via the platform's fully cloud-managed architecture [15]"},"f19_public_cloud_gateways":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via the platform's fully cloud-managed architecture [15]"},"f34_remote_user_access":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and genuinely a core, confirmed architectural principle - 'While other solutions require agents or special browsers, NetCloud SASE uses agent-less isolation-based security' [15]"},"f40_managed_service_assurance":{"source_url":"https://cradlepoint.com/support/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Support is one of the most valuable tools within a NetCloud subscription and is staffed by accredited network engineers Round the clock global support is documented, with centres in Boise, London and Melbourne and direct access to the engineering organisation, and a public NetCloud status page exists for incident notification. What is not documented on any page reviewed is a 24/7 NOC and SOC proactively monitoring the customer's service, incident ownership through to root cause analysis, structured service reviews or change governance, so this falls short of the full definition."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:6810d536693038af740ed4a9","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"not_confirmed","retail_ecommerce":"yes","manufacturing":"partial","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"partial","hospitality_leisure":"partner_integrated"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US, Ericsson-owned). UK delivery via mobile operators and partners.","sector_review_queue":[{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Conditional - evidenced via a single, smaller technographic reference | Not assessed in specific technical detail for this sector | Not assessed for sector-specific frameworks | Roanoke Electric Cooperative (a smaller, US-based utility, confirmed as a real-world NetCloud Manager customer via independent technographic sales-intelligence data) | N/A | A single, smaller-scale technographic reference rather than a full narrative case study | A real, named customer reference exists, though at a smaller scale than the manufacturing/retail technographic references found elsewhere in this table.","named_evidence":"Roanoke Electric Cooperative (a smaller, US-based utility, confirmed as a real-world NetCloud Manager customer via independent technographic sales-intelligence data)","evidence_source_ids":["evidence:ericsson-cradlepoint:20"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via technographic data | SD-WAN and branch connectivity plausibly relevant to distributed manufacturing sites | Not assessed for sector-specific frameworks | JBT Corporation (a $2 billion, 7,000-employee US manufacturer, confirmed as a real-world NetCloud Manager customer via independent technographic sales-intelligence data) | N/A | The evidence here is technographic (confirmed technology usage) rather than a full narrative case study with quoted outcomes | A real, named, large, credible, easily-verifiable customer (JBT Corporation) is confirmed via independent technographic data - genuinely concrete, if not narratively detailed, evidence for this sector.","named_evidence":"JBT Corporation (a $2 billion, 7,000-employee US manufacturer, confirmed as a real-world NetCloud Manager customer via independent technographic sales-intelligence data)","evidence_source_ids":["evidence:ericsson-cradlepoint:20"]},{"sector":"government_public_sector","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | NetCloud Federal, FIPS 140-3 routers, the Pop-Up Network Kit for field-deployable connectivity, and the confirmed multi-carrier active-failover architecture are all directly relevant to this sector's specific requirements | FedRAMP High-level assurance via the confirmed Axon-hosted NetCloud Federal environment; FIPS 140-3 confirmed for select routers | Confirmed directly as a served sector generally, reinforced by a named reseller's specific claim of serving '1,100 unique government agencies across local, state, education, and federal sectors' | US-specific, per the confirmed named-carrier and FedRAMP evidence | General sector confirmation and named-reseller scale evidence exist; a single, narrative, individually-named government-agency case study wasn't found | Genuinely the best-evidenced sector in this entire profile - a specific, precise, primary-sourced compliance pathway (NetCloud Federal/Axon) combined with a real, named reseller's confirmed, quantified government-agency customer count together make this the platform's strongest, most concretely-evidenced sector fit.","named_evidence":"Confirmed directly as a served sector generally, reinforced by a named reseller's specific claim of serving '1,100 unique government agencies across local, state, education, and federal sectors'","evidence_source_ids":["evidence:ericsson-cradlepoint:12","evidence:ericsson-cradlepoint:13","evidence:ericsson-cradlepoint:14"]},{"sector":"transport_logistics","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | The confirmed in-vehicle telemetry API/SDK integration example, multi-carrier active failover, and location-based performance analysis are all directly and specifically relevant to fleet and transportation use cases | Not assessed for sector-specific frameworks | Confirmed directly as a served sector generally; a dedicated 'Transportation' content section on the company's own site reinforces this sector focus specifically | N/A | Real, confirmed sector-specific product content and API examples exist; a named, individual transportation-company case study with quantified outcomes wasn't found | A genuinely well-evidenced sector fit at the product-and-capability level - the confirmed in-vehicle telemetry integration and fleet-specific content demonstrate real, deliberate sector focus, even without a single, quoted named customer story.","named_evidence":"Confirmed directly as a served sector generally; a dedicated 'Transportation' content section on the company's own site reinforces this sector focus specifically","evidence_source_ids":["evidence:ericsson-cradlepoint:12","evidence:ericsson-cradlepoint:15"]},{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via technographic data | SD-WAN and branch/POS connectivity plausibly relevant | Not assessed for sector-specific frameworks | Fuzzy's Taco Shop and Evereve (both confirmed as real-world NetCloud Manager customers via independent technographic sales-intelligence data) | N/A | The evidence here is technographic (confirmed technology usage) rather than a full narrative case study with quoted outcomes | Two real, named, independently-confirmed customers in this sector via technographic data - a real, if not narratively detailed, evidentiary base.","named_evidence":"Fuzzy's Taco Shop and Evereve (both confirmed as real-world NetCloud Manager customers via independent technographic sales-intelligence data)","evidence_source_ids":["evidence:ericsson-cradlepoint:20"]},{"sector":"hospitality_leisure","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via technographic data | SD-WAN and branch/POS connectivity plausibly relevant | Not assessed for sector-specific frameworks | Fuzzy's Taco Shop and Evereve (both confirmed as real-world NetCloud Manager customers via independent technographic sales-intelligence data) | N/A | The evidence here is technographic (confirmed technology usage) rather than a full narrative case study with quoted outcomes | Two real, named, independently-confirmed customers in this sector via technographic data - a real, if not narratively detailed, evidentiary base.","named_evidence":"Fuzzy's Taco Shop and Evereve (both confirmed as real-world NetCloud Manager customers via independent technographic sales-intelligence data)","evidence_source_ids":["evidence:ericsson-cradlepoint:20"]}],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":14,"research_metrics":{"supported":11,"partial":3,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":25,"total":40,"reviewed":15,"completeness_percent":38,"completeness":0.375},"proven_evidence_count":11,"response_panel":null,"best_for":"Sector evidence not yet reviewed; both","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"both","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"arista-velocloud","name":"VeloCloud","website":"https://www.arista.com","category":"technology vendor","product_focus":"Arista AVA, Edge Threat Management (ETM), SSE partner integrations, VeloCloud Orchestrator","cost_model":"Quote-based edge subscriptions/appliances/support; managed services commonly delivered by carriers/MSPs.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partner_integrated","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"not_confirmed","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"partner_integrated","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"partner_integrated","f32_casb_capability":"partner_integrated","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"partner_integrated","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"not_primary","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":150,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/velocloud/","shortlist_summary":"VeloCloud was founded in 2012 as a cloud-delivered SD-WAN pioneer, acquired by VMware in 2017 for approximately $336 million, then came under Broadcom’s ownership when Broadcom completed its roughly $69 billion acquisition of VMware in 2023. Under Broadcom, the product was paired with Symantec’s security stack (Broadcom separately owns Symantec’s enterprise security business) into a single-vendor offering called ‘VMware VeloCloud SASE, secured by Symantec’, announced February 2024.","key_differentiators":["VeloCloud was an early SD-WAN platform with strong cloud-delivered gateway architecture; now under Arista following the 2025 acquisition.","Multi-tenant design has made VeloCloud common in carrier and MSP managed services.","Application-aware routing and dynamic path selection are mature capabilities with substantial deployment history."],"best_fit_for":["Enterprises consuming VeloCloud through a managed service provider (Vodafone UK, others).","Service providers running multi-tenant SD-WAN at scale.","Buyers comfortable with a platform in transition under new ownership."],"watch_outs":["Platform is mid-transition from VMware/Broadcom to Arista; product roadmap, naming and integration story will evolve.","Security and SASE capabilities are largely partner-integrated rather than native.","Direct enterprise sales motion is less established than legacy vendors; most consumption is via managed providers."],"evidence_coverage_pct":0.3,"last_verified":"2026-09-01","evidence_source_count":35,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.arista.com/assets/data/pdf/VeloCloud-SD-WAN-Data-Sheet.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Cloud-native by design, VeloCloud SD-WAN is delivered via a global network of Edge PoPs, either self-managed or as a managed service. Arista authors the platform; the managed-service option is operated by MSP and service-provider partners rather than by Arista end to end. Arista's own press release quotes T&A SYSTEME GmbH, 'a German MSP managing 7500+ sites in 98 countries', and MetTel as the parties running the service for customers. No Arista-run design-to-report managed service was found."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.arista.com/assets/data/pdf/SD-WAN-Solution-Overview.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Enterprises or their managed service providers can define business-level policies that apply enterprise-wide across many Edges Tenant isolation and delegated administration are evidenced by the multitenant Orchestrator, Controller and Gateway architecture and the three-tier RBAC model, and the partner programme carries 'SD-WAN MSP Partner Requirements'. Graded partial rather than yes because no page reviewed described branded or white-label partner portals, which the definition requires."},"f17_cellular_and_5g_support":{"source_url":"https://www.arista.com/assets/data/pdf/Datasheets/VeloCloud-SD-WAN-Edge-7x0-Series.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Dual Physical SIM + single eSIM (single standby) The 7x0 datasheet documents an integrated Telit FN990A28 modem, 'LTE Category Cat-19', carrier aggregation, HSPA+ 3G fallback and a full 5G FR1 band list, with dual physical SIM plus eSIM. The product page states 'integrated WiFi and 5G' and the 4100/5100 page leads with 'Integrated 5G Enterprise-class SD-WAN appliances for branches'. LTE is also listed among supported WAN transports."},"f20_private_pops_dedicated_pops":{"source_url":"https://www.arista.com/assets/data/pdf/SD-WAN-Solution-Overview.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Gateways can be deployed as partner Gateways on the premises of service providers, where they are managed by the service provider Gateways are not restricted to a shared multi-tenant estate: the datasheet describes 'A distributed, global network of gateways, hosted by Arista/service providers or deployed on-premises' and lists 'Partner Gateway Support' as a feature, covering customer-hosted and dedicated partner deployments. No sovereign-region offering was named on the pages reviewed."},"f27_integrated_next_generation_firewall":{"source_url":"https://networkworld.com/article/4199622/arista-debuts-unified-sd-wan-edge-platform.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and specifically confirmed as part of the in-development Edge Threat Management capability - firewalls, segmentation, DNS filtering, geolocation controls, and threat prevention embedded directly on VeloCloud edge devices [17] [21] Not yet generally available - planned for Q4 2026 as of this profile's research"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:f5387b83efff650f5c9acd5b","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). VeloCloud delivered in the UK through carriers including BT and Vodafone.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":15,"research_metrics":{"supported":6,"partial":2,"partner_delivered":4,"managed_service_dependent":0,"not_primary":0,"unconfirmed":28,"total":40,"reviewed":12,"completeness_percent":30,"completeness":0.3},"proven_evidence_count":6,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"opensystems","name":"Open Systems","website":"https://netify.co.uk/marketplace/opensystems/","category":"technology vendor / managed service provider","product_focus":"MDR+ (Managed Detection and Response), Managed SD-WAN / Secure SD-WAN, Managed, Universal SSE, Mission Control","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"yes","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"not_confirmed","uk_support_desk":"not_confirmed","named_tam":"not_confirmed"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/opensystems/","shortlist_summary":"Managed SD-WAN and SASE supported by Open Systems' Mission Control service team.","key_differentiators":["Managed SD-WAN and SASE supported by Open Systems' Mission Control service team."],"best_fit_for":["Buyers comparing a managed operating model for SD-WAN and SASE."],"watch_outs":[],"evidence_coverage_pct":0.2,"last_verified":"2026-09-01","evidence_source_count":37,"capability_evidence":{"f15_local_internet_breakout":{"source_url":"https://open-systems.com/company/customers/mammut/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via real, named customer-deployment detail - 'low-cost and secure internet breakouts' specifically described in the Mammut case study [16]"},"f32_casb_capability":{"source_url":"https://eqtgroup.com/about/current-portfolio/open-systems","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as part of the broader converged security stack [7] Specific inline-versus-API-mode technical detail not itemised"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:3f18bb33f360d5fbfab497d9","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"global_managed","curated_uk_basis":"Confirm UK delivery scope through RFP.","sector_review_queue":[{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, named, well-known customer | Not assessed in specific technical detail for this sector beyond the confirmed WAN-replacement and internet-breakout capabilities evidenced directly | Not assessed for sector-specific frameworks | Mammut (named, well-known international outdoor-apparel brand, with specific, quantified deployment detail: WAN replacement completed in under two months) | N/A | A single, though genuinely well-known, named, and specifically-quantified case study | A real, credible, named customer - Mammut is a well-known international outdoor-apparel brand - reinforced by specific, quantified deployment-timeline detail, making this a genuinely strong reference despite being a single example.","named_evidence":"Mammut (named, well-known international outdoor-apparel brand, with specific, quantified deployment detail: WAN replacement completed in under two months)","evidence_source_ids":["evidence:opensystems:16"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | The confirmed, dedicated OT Firewall product, plus SD-WAN and Mission Control's proactive monitoring, are directly relevant to distributed manufacturing operations | Not assessed for sector-specific frameworks beyond the confirmed general ISO 27001 certification | Mikron (named customer, described directly as strengthening security specifically to 'protect critical production systems'), confirmed directly as a served sector generally | N/A | Real, named customer evidence exists for this sector specifically | Genuinely well-evidenced via both a real, named customer case study directly referencing production-system protection and a dedicated, purpose-built OT Firewall product.","named_evidence":"Mikron (named customer, described directly as strengthening security specifically to 'protect critical production systems'), confirmed directly as a served sector generally","evidence_source_ids":["evidence:opensystems:8"]},{"sector":"transport_logistics","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced via a real, named, quantified customer example | SD-WAN and Mission Control's global, multi-site management capability directly relevant, evidenced via genuine, quantified scale (60+ locations) | Not assessed for sector-specific frameworks | Altana (named customer, connecting 60+ locations worldwide and integrating new acquisitions) | Global, per the confirmed 60+-location customer example | A single, though genuinely specific and quantified, named case study | Genuinely well-evidenced via a real, named, specifically-quantified (60+ locations) customer example directly relevant to large-scale, distributed, multi-site operations.","named_evidence":"Altana (named customer, connecting 60+ locations worldwide and integrating new acquisitions)","evidence_source_ids":["evidence:opensystems:10"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"manufacturing":false,"retail_ecommerce":false,"transport_logistics":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.open-systems.com/company/customers/","https://www.open-systems.com/company/customers/mammut/"],"qualification":"Open Systems labels ALTANA chemicals and documents SASE at 60-plus sites. Correct sector to manufacturing/chemicals, not logistics. Recovered Open Systems customer index identifies Mikron precision manufacturing using SASE. Does not prove every secondary-directory detail. Mammut primary case describes SASE, branch breakouts, VPN and managed network operations for an outdoor retail brand. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"transport_logistics":"not_confirmed","manufacturing":"yes","retail_ecommerce":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"summary_source":"https://open-systems.com/company/","position":16,"research_metrics":{"supported":7,"partial":1,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":32,"total":40,"reviewed":8,"completeness_percent":20,"completeness":0.2},"proven_evidence_count":7,"response_panel":null,"best_for":"Retail and e-commerce; Manufacturing; both","best_for_fields":{"sectors_yes":["Retail and e-commerce","Manufacturing"],"sectors_partial":[],"regions":[],"size":[],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"barracuda-secureedge","name":"Barracuda SecureEdge","website":"https://netify.co.uk/marketplace/barracuda-secureedge/","category":"technology vendor","product_focus":"Barracuda SecureEdge, Barracuda SecureEdge Access, BarracudaONE, Secure Edge Manager","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"not_confirmed","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_primary","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"not_confirmed","uk_support_desk":"not_confirmed","named_tam":"not_confirmed"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/barracuda-secureedge/","shortlist_summary":"SecureEdge combines SD-WAN and cloud security, with an MSP option for multi-tenant management.","key_differentiators":["SecureEdge combines SD-WAN and cloud security, with an MSP option for multi-tenant management."],"best_fit_for":["Buyers and service providers comparing SecureEdge deployment and management options."],"watch_outs":[],"evidence_coverage_pct":0.175,"last_verified":"2026-09-01","evidence_source_count":35,"capability_evidence":{"f05_professional_services_and_migration_support":{"source_url":"https://blog.barracuda.com/2026/03/25/barracudaone-secureedge-access-and-security-service-edge-adoption","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the specifically-named, dated (March 2026) phased-adoption approach - a defined four-step migration path allowing organisations to 'prioritize immediate needs and expand over time' rather than requiring a single, forced cutover [15]"},"f36_centralised_orchestration":{"source_url":"https://barracuda.com/products/network-protection/secureedge","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'With zero-touch deployment capabilities, you can remotely deliver SASE and network security services without sending technicians onsite' [4] [17]"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:74eb1c1b2bff395216330596","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"global_managed","curated_uk_basis":"Confirm UK delivery scope through RFP.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"summary_source":"https://barracuda.com/products/network-protection/secureedge/msp","position":17,"research_metrics":{"supported":6,"partial":1,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":33,"total":40,"reviewed":7,"completeness_percent":18,"completeness":0.175},"proven_evidence_count":6,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}}]},"managed-sd-wan":{"ordered_by":"evidence_coverage_pct desc, provider name asc, slug asc","label":"Managed SD-WAN providers","title":"Managed SD-WAN providers compared","answer":"Compare providers with evidence for managed service delivery and SD-WAN. Check operational responsibilities, connectivity and proposal scope.","url":"https://netify.co.uk/sase/shortlist/managed-sd-wan/","providers":[{"slug":"lumen","name":"Lumen","website":"https://www.lumen.com/en-us/services/sd-wan.html","category":"technology vendor / managed service provider / carrier network provider","product_focus":"Black Lotus Labs, Lumen Managed SASE Solutions, Lumen SASE with Versa, Lumen SD-WAN with Versa Networks","cost_model":"Quote-based; Lumen states fully managed or co-managed SD-WAN, with access/network services priced by requirement.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"partner_integrated","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"partner_integrated","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"partial","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":50,"sla_availability_pct":99.99,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/lumen/","shortlist_summary":"Lumen Technologies has just completed a corporate transformation - on 21 May 2025, Lumen announced the sale of its Mass Markets fiber-to-the-home business - including its Quantum Fiber consumer brand, serving more than 1 million subscribers across 11 states - to AT&T for $5.75 billion in cash, a transaction that closed on 2 February 2026. Lumen’s own CEO, Kate Johnson, described the deal directly as marking the company’s transformation into ‘a Pure Play Enterprise-Focused Technology Infrastructure Company’, retaining its national, regional, state, and metro fiber backbone specifically to support that enterprise focus while divesting the consumer-facing business entirely.","key_differentiators":["Fully managed or co-managed SD-WAN with strong NaaS positioning and integrated network services.","Substantial underlay ownership in North America with global reach.","Co-managed model provides operational flexibility for customers wanting selective control."],"best_fit_for":["North American enterprises wanting integrated managed SD-WAN, access and broader network services from one provider.","Buyers attracted to the NaaS consumption model.","Organisations wanting genuine co-managed delivery rather than pure managed or pure DIY."],"watch_outs":["SASE and security capabilities are largely partner-integrated rather than native; the SSE platform choice needs explicit evaluation.","International delivery depth is less prominent than the dedicated global carriers.","Underlying SD-WAN platform should be confirmed; platform choice affects feature set."],"evidence_coverage_pct":0.65,"last_verified":"2026-09-01","evidence_source_count":31,"capability_evidence":{"f07_lifecycle_management":{"source_url":"https://assets.lumen.com/is/content/Lumen/SD-WAN___Managed_Equipment_Service_Guide","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Lifecycle management – notification of end of sale/end of support. The same service guide lists CPE break/fix (RMA) warranty support for failed devices and processing of return material authorisation replacement requests, plus patch management for all hardware and software. The SD-WAN service schedule states that during the initial service term purchased CPE is eligible for the Managed Device Replacement Service Level in the Lumen Service Level Agreement, so replacement is contractual rather than best effort."},"f10_dynamic_path_selection":{"source_url":"https://lumen.com/en-us/services/sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Route traffic over the most efficient connection for high performance' [3]"},"f12_application_aware_routing":{"source_url":"https://lumen.com/en-us/services/sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Route traffic over the most efficient connection for high performance, and update routing and security rules in real time as network needs change' [3]"},"f13_qos_and_traffic_shaping":{"source_url":"https://docs.lumen.com/readiness/products/sd-wan-versa/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'the ability to intelligently use lower cost Internet connections to achieve MPLS-like QoS' [2]"},"f17_cellular_and_5g_support":{"source_url":"https://lumen.com/en-us/services/sdwan-versa-networks.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name as a supported WAN underlay ('4G/LTE') [5]"},"f18_cloud_on_ramp":{"source_url":"https://docs.lumen.com/readiness/products/sd-wan-versa/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the confirmed 'physical and virtual customer-premises equipment (CPE)' architecture description [2]"},"f19_public_cloud_gateways":{"source_url":"https://ir.lumen.com/news/news-details/2024/Lumen-and-Versa-Expand-Partnership-to-Deliver-a-Sovereign-SASE-Solution/default.aspx","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The Sovereign SASE solution is deployed on dedicated SASE gateways in Lumen's global points of presence (PoPs) or on customer premises, based on the customer's preference and needs. The PoPs are Lumen's own, which is what this field measures, and the SASE product page advertises 50+ low-latency edge nodes in key metro areas. The security software running in them is Versa or Fortinet technology, which does not change the ownership of the infrastructure. One complication is recorded in conflicts: the SASE service guide also describes an option delivered through a global network of VMware SASE points of presence, which would be partner_integrated rather than Lumen-owned."},"f20_private_pops_dedicated_pops":{"source_url":"https://assets.lumen.com/is/content/Lumen/sd-wan-service-schedule?Creativeid=914be424-577f-4a0d-97cd-3c9c00a783e4","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The Lumen SD-WAN with Versa Networks network Controllers are hosted within Lumen facilities, but can also be deployed as private infrastructure in a customer provided environment for an additional charge. Reinforced by the dated May 2024 Versa Sovereign SASE press release, which states the solution is deployed on dedicated SASE gateways in Lumen's global PoPs or on customer premises based on the customer's preference and needs. Customer-hosted, dedicated and sovereign options are therefore documented, not only shared multi-tenant locations."},"f21_private_global_backbone":{"source_url":"https://ir.lumen.com/news/news-details/2024/Lumen-and-Versa-Expand-Partnership-to-Deliver-a-Sovereign-SASE-Solution/default.aspx","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Black Lotus Labs, Lumen's threat research team, leverages its unique visibility into Lumen's global internet backbone using ML algorithms to generate threat intelligence Lumen owns and operates its own global backbone, which is the substance of this field. Confidence is medium rather than high for two reasons: the clearest wording found is incidental to a threat intelligence sentence, and the most explicit owned-fibre statement found, that Lumen operates the largest ultra-low-loss intercity fiber network in North America, is scoped to North America. No page reviewed states as a product property that inter-region SASE or SD-WAN traffic rides the Lumen backbone rather than the public internet."},"f24_flexible_edge_form_factors":{"source_url":"https://lumen.com/en-us/services/sase-versa.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - a named, sized CPE device tier ('Extra Small CPE Device') is confirmed directly as part of Lumen's disclosed pricing structure [4]"},"f25_high_availability_design":{"source_url":"https://lumen.com/en-us/services/sdwan-versa-networks.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - the confirmed service wrapper includes 'appliance/circuit monitoring' and '24/7 support for the entire WAN solution' [5]"},"f26_sla_backed_service_fabric":{"source_url":"https://assets.lumen.com/is/content/Lumen/lumen-service-level-agreementpdf?Creativeid=dc0beb0f-83c4-46d5-8684-85af0333edbe","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Lumen offers Service Availability Service Levels for Qualifying Services based on the following Availability Tiers. The published Lumen Service Level Agreement names Lumen SD-WAN Service with Versa Networks, Lumen SD-WAN Service with Cisco Meraki and Lumen SASE Solutions as qualifying services, and carries availability tiers, a four hour incident response commitment, managed device replacement targets, and regional latency, jitter and packet delivery objectives. These are credit-bearing contractual commitments rather than best-effort targets."},"f27_integrated_next_generation_firewall":{"source_url":"https://assets.lumen.com/is/content/Lumen/sase-solutions-service-guide?Creativeid=4af4755b-f89d-476b-a0b7-879ea4015615","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Next Generation Firewall (NGFW) is available as a service license with Fortinet and is powered by FortiOS The firewall function is Fortinet technology licensed and operated by Lumen, so partner_integrated rather than yes. The same guide describes anti-malware, web filtering and firewall, intrusion detection and prevention (IDS/IPS) within the unified threat management set, and the SD-WAN service schedule describes a Security Upgrade providing a set of firewall, web filtering and intrusion prevention. The function is integrated into the delivered platform, but the technology belongs to another vendor."},"f28_full_sase_platform":{"source_url":"https://lumen.com/en-us/services/sase-versa.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a named product - Versa Secure Private Access (VSPA) 'secure remote workforces at the edge with user-centric' access [4]"},"f30_zero_trust_network_access":{"source_url":"https://lumen.com/en-us/services/sase-versa.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a named product - Versa Secure Private Access (VSPA) 'secure remote workforces at the edge with user-centric' access [4]"},"f31_secure_web_gateway":{"source_url":"https://lumen.com/en-us/services/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly as part of the SSE capability list - 'Secure Web Gateway (SWG)' named explicitly [6]"},"f32_casb_capability":{"source_url":"https://lumen.com/en-us/services/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Cloud Access Security Broker (CASB)' named explicitly as SSE-compatible [6] Specific inline-versus-API-mode technical detail not itemised"},"f33_data_loss_prevention":{"source_url":"https://assets.lumen.com/is/content/Lumen/sase-solutions-service-guide?Creativeid=4af4755b-f89d-476b-a0b7-879ea4015615","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"intrusion detection and prevention (IDS/IPS), and data loss prevention DLP is listed on the Lumen SASE product page as one of the Security Service Edge services alongside NGFW, SWG, ZTNA and CASB, and appears in the SASE service guide within the Fortinet-powered feature set, so it is another vendor's engine operated by Lumen. No Lumen page reviewed describes content classification detail, blocking versus flagging behaviour, alerting or exception workflows, so confidence is medium on the depth of the capability rather than on its presence."},"f40_managed_service_assurance":{"source_url":"https://assets.lumen.com/is/content/Lumen/SD-WAN___Managed_Equipment_Service_Guide","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Lumen resources are available 24x7 for support. Graded partial for two reasons. First, the SD-WAN and Managed Equipment service guide evidences 24x7x365 performance management by Lumen skilled operations engineers and continuous network monitoring, which covers the NOC half, but the SASE service guide states that the Pro-Managed service does not include security operations center services, so the SOC half is not part of the standard managed wrap. Second, no source reviewed documents ownership of incidents through to root cause analysis, structured service reviews or change governance as contractual elements; those terms were searched for in both service guides and the service schedule and not found."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:6d66149079a3a4ab68cf17eb","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"yes","transport_logistics":"partial","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"global_managed","curated_uk_basis":"No UK HQ (US); UK delivery is largely via partners following the EMEA divestment to Colt.","sector_review_queue":[{"sector":"financial_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced via a real, named individual testimonial | Not assessed in specific technical detail for this sector beyond the confirmed general testimonial | Not assessed for sector-specific frameworks, though the confirmed comprehensive PCI DSS support (Table 13) is directly relevant | Mahendra Verma, VP and Sr. Network Engineering Manager, Horizon Bank - named individual, named company, direct positive quote on service responsiveness | N/A | The testimonial is disclosed directly by Lumen as a compensated endorsement | A real, named banking-sector customer reference - genuinely credible, specific evidence, reinforced by Lumen's own confirmed, comprehensive PCI DSS support relevant to this exact sector, tempered by the confirmed compensated-endorsement disclosure.","named_evidence":"Mahendra Verma, VP and Sr. Network Engineering Manager, Horizon Bank - named individual, named company, direct positive quote on service responsiveness","evidence_source_ids":["evidence:lumen:17"]},{"sector":"healthcare","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, though not individually-named, customer account | Confirmed DIA (Dedicated Internet Access) and SASE solutions directly improving 'telehealth capabilities' specifically named | HIPAA not confirmed (Table 13) | An anonymous (within the specific snippet reviewed) customer account confirming replacement of aging MPLS/SD-WAN with modern DIA and SASE, directly citing improved 'telehealth capabilities' | N/A | The customer's individual name was not extracted in this specific research pass; the confirmed HIPAA gap remains a specific, worth-flagging limitation | A real, specific, primary-sourced account directly naming telehealth as an improved capability - genuinely concrete evidence for this sector-adjacent use case, even without full individual attribution confirmed in this pass.","named_evidence":"An anonymous (within the specific snippet reviewed) customer account confirming replacement of aging MPLS/SD-WAN with modern DIA and SASE, directly citing improved 'telehealth capabilities'","evidence_source_ids":["evidence:lumen:17"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced via a real, named individual testimonial | Confirmed SASE and EWAS (Enterprise Wide Area Services) capabilities directly relevant to distributed manufacturing operations | Not assessed for sector-specific frameworks | Jeff Pinkerton, VP of IT, Berridge Manufacturing Co. - named individual, named company, direct quote on SASE/EWAS implementation responsiveness | N/A | The testimonial is disclosed directly by Lumen as a compensated endorsement | A real, named, individually-attributable customer reference - genuinely stronger evidence than an anonymised case study, tempered by the confirmed compensated-endorsement disclosure.","named_evidence":"Jeff Pinkerton, VP of IT, Berridge Manufacturing Co. - named individual, named company, direct quote on SASE/EWAS implementation responsiveness","evidence_source_ids":["evidence:lumen:17"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"healthcare":false,"manufacturing":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://lumen.com/en-us/resources/customer-success-stories.html","https://www.lumen.com/en-hk/resources/customer-stories/flux.html"],"qualification":"Recovered Lumen testimonial identifies Valley Cities Behavioral Health Care replacing MPLS/SD-WAN with DIA and SASE. Correct anonymous attribution; compensated supplier-published endorsement. Berridge testimonial explicitly says SASE and EWAS will work together once implementation is complete. It is not evidence of a completed outcome. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"healthcare":"partial","manufacturing":"not_confirmed"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":1,"research_metrics":{"supported":23,"partial":1,"partner_delivered":2,"managed_service_dependent":0,"not_primary":0,"unconfirmed":14,"total":40,"reviewed":26,"completeness_percent":65,"completeness":0.65},"proven_evidence_count":23,"response_panel":null,"best_for":"Healthcare (partial evidence); both","best_for_fields":{"sectors_yes":[],"sectors_partial":["Healthcare"],"regions":[],"size":[],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"versa-networks","name":"Versa Networks","website":"https://versa-networks.com","category":"technology vendor","product_focus":"Inbound SSE, Secure Enterprise Browser, VOS, Versa Analytics","cost_model":"Quote-based subscription; MSP/carrier pricing depends on tenant scale, bandwidth, security package and delivery model.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"partial","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_primary","financial_services":"not_primary","retail_ecommerce":"partial","manufacturing":"partial","energy_utilities":"yes","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"not_primary","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"yes"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":90,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/versa-networks/","shortlist_summary":"Versa Networks built its SASE platform around a single-vendor, single-operating-system architecture from an early starting point - the company was founded in 2012, before the SASE category itself existed, on the thesis that legacy hardware and static WAN architectures were holding enterprises back from the cloud. That heritage shows up directly in VersaONE’s design: one operating system (VOS), one console, one policy engine and one data lake, with a single-pass parallel-processing architecture built to avoid the latency penalty of chaining separate security functions together.","key_differentiators":["Multi-tenancy from the ground up, making Versa a common choice for service providers and carriers building managed SD-WAN and SASE platforms.","Versa Operating System (VOS) provides a converged networking and security software stack across cloud and on-premises delivery.","Often the underlying platform when buyers select a managed SD-WAN service from a carrier or MSP."],"best_fit_for":["Service providers, carriers and MSPs building white-label managed SD-WAN or SASE services.","Enterprises consuming Versa indirectly through a managed provider (e.g. Verizon, Orange).","Buyers who want platform flexibility across cloud-delivered, on-premises and hybrid delivery models."],"watch_outs":["Less well-known to enterprise buyers as a direct purchase; most enterprise consumption is via service providers.","Buyers should confirm exactly which managed provider is delivering the platform and what the operational RACI looks like.","Brand recognition trails Cisco, Palo Alto and Fortinet in enterprise procurement processes."],"evidence_coverage_pct":0.65,"last_verified":"2026-09-01","evidence_source_count":51,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://versa-networks.com/documents/solution-briefs/versa-sase.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"In this model Versa NOC is responsible for managing and maintaining Versa SASE, while the customer IT team is responsible for management and monitoring of the CPEs. Versa does operate a NOC and a hosted, managed head-end and gateway service under its own SLA, so part of the estate is genuinely run by Versa. But its own solution brief places CPE management with the customer IT team in that model, and the alternative model places configuration management and monitoring with a Service Provider. End-to-end design, deploy, change, support and report by Versa itself for the whole service is not evidenced, so partial rather than yes."},"f03_co_managed_service":{"source_url":"https://versa-networks.com/documents/solution-briefs/versa-sase.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"In this model Versa NOC is responsible for managing and maintaining Versa SASE, while the customer IT team is responsible for management and monitoring of the CPEs. This is a textbook split of responsibility: Versa runs the platform and the customer retains CPE operations. Concerto's provider-level and tenant-level roles document the same shared model in the tooling."},"f07_lifecycle_management":{"source_url":"https://versa-networks.com/documents/datasheets/versa-networks-hosted-and-managed-head-end.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Head-end server hardware OS and security patch upgrades and updates For the hosted head-end, Versa documents software upgrades of Director, Analytics, Controller, Concerto and VMS plus OS and security patching, which is lifecycle handled as part of the service. Separately, hardware documentation covers a two-year limited warranty, next-business-day and same-business-day advance replacement, DOA handling and an end-of-life policy. Graded partial rather than yes because branch CPE firmware upgrades and renewals in a typical Versa deployment sit with the customer or the service provider partner, and hardware replacement coverage is a purchased support tier rather than something evidenced as included in the service by default."},"f12_application_aware_routing":{"source_url":"https://versa-networks.com/news/2018/versa-networks-present-adobe-sd-wan-use-case-onug-fall-2018.php","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, per-application SLA-based routing confirmed specifically via the Adobe deployment [19]"},"f17_cellular_and_5g_support":{"source_url":"https://docs.versa-networks.com/Secure_SD-WAN/01_Configuration_from_Director/Common_Configuration/Configure_WWAN","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The term WWAN interfaces refers to LTE, 4G, and 5G interfaces. Documentation covers LTE, 4G and 5G on a VOS WAN port, SIM activation and operator ID checks, and radio quality monitoring via RSRP, RSRQ, RSSI and SINR with banded signal states. It is documented as usable where a branch has no wired connection and alongside wired links, so both primary and failover roles are covered. On the source page the words WWAN interfaces are italicised; the italics add no characters to the rendered text."},"f18_cloud_on_ramp":{"source_url":"https://docs.versa-networks.com/Integrations_and_Solutions/Integrations/Endpoint_Detection_and_Response/Integrate_Versa_SASE_with_CrowdStrike_Falcon","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native - confirmed explicitly for AWS-hosted VOS deployment, described as 'cloud edge deployment such as AWS running VOS' [24]"},"f19_public_cloud_gateways":{"source_url":"https://docs.versa-networks.com/Security_Service_Edge_(SSE)/Configuration_from_Director/Ecosystem/Versa_SASE_Ecosystem","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Versa Cloud Gateways (VCGs) are Versa SASE Gateways which are deployed in Point of Presence (PoP) locations around the world. These are Versa's own gateways running Versa's own VOS software, not a third party's PoPs resold under Versa's name, so yes rather than partner_integrated. They deliver secure internet access, ZTNA, threat protection and DLP as a cloud service, and the SASE client selects the VCG offering lowest latency."},"f20_private_pops_dedicated_pops":{"source_url":"https://versa-networks.com/products/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Versa SASE is delivered via the cloud, on-premises, or as a blended combination of both Versa markets Private SASE and Sovereign SASE as distinct deployment models alongside the shared cloud. Network World, a named-author dated source, reports that Sovereign SASE runs entirely on customer-controlled infrastructure with the customer choosing its own compute, on-premises or in a private cloud. Confidence is medium rather than high because the Sovereign SASE product page itself would not render without JavaScript, so the strongest Tier 1 statement of the claim could not be read directly."},"f21_private_global_backbone":{"source_url":"https://docs.versa-networks.com/Security_Service_Edge_(SSE)/Configuration_from_Director/Ecosystem/Versa_SASE_Ecosystem","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Versa SD-WAN Traffic Engineered network which uses multiple global and regional providers for the underlay. Inter-gateway traffic rides a Versa-controlled traffic-engineered overlay that selects paths on least end-to-end latency and loss, and each VCG is connected to multiple global and multiple regional service providers with peering relationships. But the underlay is explicitly other carriers' capacity, not fibre or circuits owned by Versa. Graded partial: the control plane and path selection are Versa's, the physical backbone is not."},"f24_flexible_edge_form_factors":{"source_url":"https://docs.versa-networks.com/Integrations_and_Solutions/Integrations/Endpoint_Detection_and_Response/Integrate_Versa_SASE_with_CrowdStrike_Falcon","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native - Versa-certified white-box routers (third-party hardware running VOS) confirmed specifically via the Adobe deployment account; branch edge devices, cloud edge deployment, and on-premises appliances all confirmed as supported form factors [24]"},"f25_high_availability_design":{"source_url":"https://versa-networks.com/customers/case-studies/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed at a specific, quantified level via the Adobe case study - 'four-nines of availability for critical services' was an explicit deployment requirement Versa was chosen to meet [18]"},"f26_sla_backed_service_fabric":{"source_url":"https://versa-networks.com/documents/Versa-Hosted-SASE-SLA.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"target Uptime average of 99.999% (\"Uptime SLA Percentage\") measured monthly A published, dated SLA document covering Versa Hosted and Managed Secure Services Edge Gateways, with a tiered service-credit table running from 2 days of credit for uptime below 99.999% up to 24 days below 98.0%, plus a security processing latency commitment of 10ms without TLS inspection and 50ms with anti-virus, malware detection and IPS with TLS decryption. Contractual rather than best-effort, including a two calendar day claim window."},"f33_data_loss_prevention":{"source_url":"https://docs.versa-networks.com/Security_Service_Edge_(SSE)/Configuration_from_Concerto/Configure_Data_Loss_Prevention_in_Concerto","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Data loss prevention (DLP) is a set of tools and processes for detecting and preventing data breaches, cyber exfiltration, and unwanted destruction of sensitive data. Native to the platform and configured from Concerto. Content passing through the organisation's ports and protocols is scanned against match rules, with enforcement actions of Alert, Allow, Block, Reject, Quarantine, Encrypt, Redact or Tokenize, and all actions reported to Versa Analytics for review. Documentation also covers offline DLP, DLP data exfiltration policies and applying Microsoft MIP sensitivity labels."},"f35_soc_siem_soar_integration":{"source_url":"https://docs.versa-networks.com/Integrations_and_Solutions/Integrations/SIEM/Versa_Analytics_and_CrowdStrike_NG-SIEM_Integration","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed and well-evidenced via Versa Analytics' specific, itemised log-type list (flow logs, SD-WAN path and bandwidth usage, CGNAT, DHCP, DNS, SASE-web monitoring, secure access, traffic conditioning, URL filtering, and IDP logs) and confirmed export to CrowdStrike Falcon Next-Gen SIEM [26] Not confirmed"},"f36_centralised_orchestration":{"source_url":"https://versa-networks.com/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via a named practitioner review describing the console's 'ZTP (zero touch provisioning)' capability speeding up implementation [7]"},"f40_managed_service_assurance":{"source_url":"https://versa-networks.com/documents/datasheets/versa-premier-service.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Versa will provide Root-Cause Analysis for customer-reported P1 issues. The NOC half is evidenced: 24x7 monitoring of head-end alarms and application health, a Versa NOC responsible for managing and maintaining Versa SASE, formal root cause analysis on P1 incidents, and scheduled periodic or quarterly customer review meetings. What I did not find on any page I read is a 24x7 SOC performing proactive security monitoring on the customer's behalf, nor a documented change governance process. Graded partial on that gap. Note also that the Premier Service datasheet carries a 2020 copyright."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:05460064bfddb49a73b78910","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"partial","manufacturing":"partial","energy_utilities":"partial","government_public_sector":"partial","education":"partial","transport_logistics":"partial","professional_services":"partial","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). Delivered in the UK through carrier and MSP partners building managed services on Versa.","sector_review_queue":[{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | SASE-ready architecture, TCO reduction relevant to distributed manufacturing operations | Not assessed | A Global-200 pharmaceutical manufacturing company, described as achieving a SASE-ready architecture and TCO savings | Not itemised in detail beyond the Global-200 scale reference | Single case reference, anonymised (described by scale/category rather than named) | A real, credible, if anonymised, large-scale manufacturing reference - worth a direct follow-up to get the specific customer name and quantified outcomes if Netify needs a fully named case study for this sector.","named_evidence":"A Global-200 pharmaceutical manufacturing company, described as achieving a SASE-ready architecture and TCO savings","evidence_source_ids":["evidence:versa-networks:18"]},{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | Multi-site security and cloud migration relevant to utility operations | Not assessed | Lambton Area Water Supply Systems (Ontario, Canada) - deployed Versa SASE to secure remote and headquarter offices while migrating sensitive data to cloud environments; a named practitioner quote from a General Manager, Information Systems in Energy and Utilities also references one-touch edge deployment | Named, specific Canadian utility customer | Single named case study, plus one further anonymised named-role quote | A genuinely credible, named, specific utility-sector customer (Lambton Area Water Supply Systems), reinforced by a second, separate energy-and-utilities-specific practitioner quote - reasonably solid sector evidence.","named_evidence":"Lambton Area Water Supply Systems (Ontario, Canada) - deployed Versa SASE to secure remote and headquarter offices while migrating sensitive data to cloud environments; a named practitioner quote from a General Manager, Information Systems in Energy and Utilities also references one-touch edge deployment","evidence_source_ids":["evidence:versa-networks:7","evidence:versa-networks:18"]},{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | SD-WAN/branch capability, cost-reduction focus | Not assessed | A top global retailer (600+ store locations) reporting improved cost savings and reduced operational overhead; a primary food retailer with multiple brands increasing store locations while reducing TCO; a named F100 retailer reclaiming $4M in previously wasted spend | Large-scale, multi-brand deployment evidenced directly | US-centric framing in the sources reviewed; specific named retailers not identified by name (described by category/scale instead) | Genuinely well-evidenced by scale and count (three separate retail-sector references), even though the specific retailer names weren't disclosed in the sources reviewed - a real, if anonymised, sector-fit signal.","named_evidence":"A top global retailer (600+ store locations) reporting improved cost savings and reduced operational overhead; a primary food retailer with multiple brands increasing store locations while reducing TCO; a named F100 retailer reclaiming $4M in previously wasted spend","evidence_source_ids":["evidence:versa-networks:18","evidence:versa-networks:22","evidence:versa-networks:25"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"energy_utilities":false,"manufacturing":false,"retail_ecommerce":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://versa-networks.com/customers/case-studies/","https://versa-networks.com/","https://aitranslatewpml.versa-networks.com/customers/case-studies/","https://versa-networks.com/lp/sase-cost-savings/"],"qualification":"Versa case index expressly identifies Lambton Area Water Supply Systems deploying SASE for remote offices and cloud data. Canadian utility case only. Versa identifies an anonymous Global-200 pharmaceutical manufacturer using Secure SD-WAN. Retain anonymous evidence, not a named reference. Versa documents an unnamed retailer with over 600 stores using Secure SD-WAN. Do not describe this as named customer proof. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"energy_utilities":"yes","manufacturing":"partial","retail_ecommerce":"partial"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":2,"research_metrics":{"supported":22,"partial":4,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":14,"total":40,"reviewed":26,"completeness_percent":65,"completeness":0.65},"proven_evidence_count":22,"response_panel":null,"best_for":"Energy and utilities; Retail and e-commerce (partial evidence); Manufacturing (partial evidence); Small business; platform","best_for_fields":{"sectors_yes":["Energy and utilities"],"sectors_partial":["Retail and e-commerce","Manufacturing"],"regions":[],"size":["Small business"],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"check-point","name":"Check Point","website":"https://www.checkpoint.com/harmony/sase","category":"technology vendor","product_focus":"AI Network Firewall / AI Defence Plane, CASB, Check Point Infinity Architecture, Check Point SASE Platform","cost_model":"Quote-based subscription; Microsoft marketplace listing exists but enterprise deployments normally require quote.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"partial","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"not_confirmed","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":80,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/checkpoint/","shortlist_summary":"Check Point’s SASE platform has been through two names in under three years. The underlying technology began life as Perimeter 81, an independent Israeli SSE/ZTNA vendor founded in 2018 that had grown to more than 3,000 customers and a Forrester Zero Trust Wave recognition before Check Point Software Technologies - the much larger, long-established Israeli cybersecurity vendor behind Check Point Firewall-1, founded in 1993 - acquired it for approximately $490 million in a deal announced September 2023.","key_differentiators":["Harmony SASE combines Check Point security heritage with cloud-delivered SASE and optimised SD-WAN performance.","Strong story for organisations already running Check Point firewalls who want to extend into SASE.","Available via Microsoft Azure marketplace for buyers wanting consolidated cloud procurement."],"best_fit_for":["Existing Check Point customers extending firewall investment into SD-WAN and SASE.","Mid-market enterprises consolidating security and SD-WAN under one vendor.","Buyers prioritising security maturity over network-platform maturity."],"watch_outs":["Dynamic path selection: not confirmed; QoS and traffic shaping: not confirmed; Packet loss remediation: not confirmed. Confirm the exact SD-WAN product and required branch behaviour.","Smaller SD-WAN deployment footprint than category leaders; validate scale references.","Managed delivery is partner-led."],"evidence_coverage_pct":0.55,"last_verified":"2026-09-01","evidence_source_count":44,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.checkpoint.com/services/managed-security/managed-firewall/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Managed Firewall Services with 24/7 monitoring, policy management, tuning, patching, upgrades, incident handling, and expert support for Check Point and third-party NGFWs. Check Point sells first-party managed services covering firewall, EDR, vulnerability management and Microsoft 365, with 24/7 monitoring, policy management and incident handling. I did not find a page describing Check Point itself designing, deploying, changing and reporting on the SASE service end to end for the customer, so partial rather than yes. The Managed Firewall as a Service page (register 20) could not be read."},"f03_co_managed_service":{"source_url":"https://www.checkpoint.com/services/managed-security/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Delivering co-managed services with partners and customers for optimal protection through unified collaboration and robust security strategies. Check Point explicitly frames its managed security offer as co-managed, with its experts acting as an extension of the customer team while the customer retains its own operations."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.checkpoint.com/partners/mssp-program/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Leverage true multi-tenancy, a wide range of security services, and full API integration to streamline customer management and accelerate service delivery. Multi-tenant architecture, delegated multi-customer management through one portal and API integration are all stated on the MSSP programme page. I found no statement of branded or white-label portals under the MSP's own brand, which the definition requires, so partial rather than yes."},"f05_professional_services_and_migration_support":{"source_url":"https://www.checkpoint.com/services/professional-services/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"As your security infrastructure becomes more complicated, our Professional Services team can assist you with your security design, deployment, operation, and optimization needs. The same page lists a Jumpstart Program, Maestro Deployment, SmartOptimize, Gateway Health Check and Lifecycle Management Services, and states delivery covers adding new features and layers while ensuring smooth migrations and scheduled updates. Training programmes are listed separately. Explicit runbook and rollback wording was not found."},"f07_lifecycle_management":{"source_url":"https://www.checkpoint.com/support-services/support-plans/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Check Point shall use commercially reasonable efforts to ship the replacement hardware on the same business day, however, shipment my occur on the next business day if required for operational reasons. Support programmes include RMA hardware replacement with same business day shipment and onsite delivery options, plus Latest Hot Fixes & Service Packs and Major Upgrades & Enhancements on every tier, and Lifecycle Management Services is a named professional service. This is a purchased support or services contract rather than something bundled into every subscription. The dedicated lifecycle management page (register 15) could not be read. The quote reproduces the page's own typo."},"f17_cellular_and_5g_support":{"source_url":"https://www.checkpoint.com/harmony/sase/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Sub-second failover to any WAN link: MPLS, 5G, broadband 5G is named as a supported WAN failover transport for SD-WAN, and the NGFW page notes a Wi-Fi 5G option on small business appliances and 1 GbE & 5G wireless secure connectivity on industrial appliances. I found no statement covering SIM management or signal monitoring, which the definition requires, so partial. The Quantum SD-WAN page (register 14) could not be read."},"f19_public_cloud_gateways":{"source_url":"https://www.checkpoint.com/harmony/sase/private-access/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our high-performance network provides fast delivery between corporate sites worldwide thanks to multiple tier-1 links at each point-of-presence (PoP), reserved bandwidth, and peering agreements. Check Point operates its own PoP and data centre estate for SASE internet access, private access and SaaS security, described as 80+ to 85+ global data centres depending on the page. This is Check Point's own infrastructure rather than a resold third party edge, so yes rather than partner_integrated."},"f21_private_global_backbone":{"source_url":"https://www.checkpoint.com/harmony/sase/private-access/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our high-performance network provides fast delivery between corporate sites worldwide thanks to multiple tier-1 links at each point-of-presence (PoP), reserved bandwidth, and peering agreements. The heading above this text is Global Private Backbone, and the SASE overview separately states Private Access delivers high performance with a full mesh global private backbone. The backbone is global rather than national. Check Point describes it as built on purchased tier-1 links, reserved bandwidth and peering rather than fibre it owns, so it is a controlled overlay backbone rather than owned infrastructure."},"f26_sla_backed_service_fabric":{"source_url":"https://www.checkpoint.com/support-services/support-plans/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Get advanced access to our large, self-service knowledge base and a committed 30-minute response time to issues with level one severity. Check Point publishes contractual support SLAs with per-severity response times (30 minutes for Severity 1 across all tiers), 7x24 coverage on Premium and above, and named SLA documents including the Check Point Direct Support Program Service Level Agreement. I found no published availability, latency, jitter or loss commitment for the SASE cloud service, so partial rather than yes."},"f27_integrated_next_generation_firewall":{"source_url":"https://checkpoint.com/harmony/sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, via the confirmed FWaaS capability [24] [28]"},"f33_data_loss_prevention":{"source_url":"https://www.checkpoint.com/harmony/sase/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Inline and API-based enforcement with Application Control for 10,000+ cloud apps, tenant restrictions, DLP, and Threat Prevention powered by ThreatCloud AI The same pages state AI-powered data classification with 800+ predefined data types, and the Internet Access page cites in-browser data loss prevention. Content classification and inline enforcement are clearly evidenced. Explicit alerting and exception workflow detail was not found on the pages read."},"f35_soc_siem_soar_integration":{"source_url":"https://sase.checkpoint.com/solutions/compliance/soc-2","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine technical specificity as part of the platform's SOC 2 Type 2 compliance architecture - 'monitor system activity, view system configuration changes and assign user access controls', with audit trails covering 'the modification, addition, or removal of key system components' [18] Not confirmed"},"f40_managed_service_assurance":{"source_url":"https://www.checkpoint.com/services/managed-security/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our 24/7 global service team will be there whenever and wherever you need them to help make sure your organization is always protected. 24/7 coverage, incident handling and NOC and SOC oriented managed services are stated, and the services pages claim 99% of threats responded to within 1 hour. I found no statement of provider-owned root cause analysis, structured service reviews or change governance, so partial. The Managed Detection and Response page (register 19) could not be read."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:745e1446fdf98dad45f0b532","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"partial","professional_services":"partial","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (Israel/US). Harmony SASE UK presence; delivered via UK security partners.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"requires_confirmation","qualification":"Unknown - not assessed, no case study found, though the platform's confirmed strong, independent review base spans real, named-role practitioners describing use across multiple industries generally | Not assessed in detail by sector | Not assessed | Named-role reviews confirmed generally (e.g. 'Manager, IT Security and Risk Management' at a company with $250M-500M revenue, per Gartner Peer Insights), though not sector-specific to professional services | N/A | General practitioner reviews exist; a sector-specific case study does not | Real, credible, named-role user evidence exists at a general level (Table 9, 11), though not itemised by professional-services sector specifically.","named_evidence":"Named-role reviews confirmed generally (e.g. 'Manager, IT Security and Risk Management' at a company with $250M-500M revenue, per Gartner Peer Insights), though not sector-specific to professional services","evidence_source_ids":["evidence:checkpoint:23"]}],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":3,"research_metrics":{"supported":17,"partial":5,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":18,"total":40,"reviewed":22,"completeness_percent":55,"completeness":0.55},"proven_evidence_count":17,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"att-business","name":"AT&T Business","website":"https://www.business.att.com/products/sd-wan.html","category":"managed service provider / carrier network provider","product_focus":"AT&T Dynamic Defence with Palo Alto Networks, AT&T Managed SASE with Cisco, AT&T Managed SD-WAN, AT&T Network as a Service (NaaS)","cost_model":"Quote-based managed service; access circuits, security, platform and managed service wrapped into term contract.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"partial","f27_integrated_next_generation_firewall":"partner_integrated","f28_full_sase_platform":"partner_integrated","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":1600,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/att/","shortlist_summary":"AT&T is one of the largest telecommunications companies in the United States, reporting trailing-twelve-month revenue of approximately $120.7 billion as of Q1 2026, with fixed-line enterprise services (including the SD-WAN and SASE proposition covered in this profile) accounting for roughly 14% of total revenue. AT&T’s SASE strategy is built on two named, current, dated technology partnerships.","key_differentiators":["Major US carrier-led managed SD-WAN portfolio with multi-vendor platform options (including Fortinet for AT&T SASE).","Strong North American underlay ownership with global delivery via international partnerships.","AT&T SASE unifies SD-WAN with network security as a converged managed service."],"best_fit_for":["US-headquartered enterprises wanting integrated carrier-led SD-WAN and SASE.","Buyers wanting Fortinet SASE delivered as a managed service rather than DIY.","Organisations prioritising carrier-grade SLAs and managed service maturity."],"watch_outs":["Underlying platform varies by service tier; buyers should confirm which platform supports the proposed scope.","International delivery depth depends on partnerships outside North America.","Commercial structure typically bundles access, security and platform; line-item costing requires explicit RFP."],"evidence_coverage_pct":0.525,"last_verified":"2026-09-01","evidence_source_count":29,"capability_evidence":{"f05_professional_services_and_migration_support":{"source_url":"https://www.business.att.com/content/dam/attbusiness/briefs/sd-wan-product-brief.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Engineers also support initial installations and LAN migrations and create and fine-tune business policies. The Managed SD-WAN product brief also states \"AT&T supports the entire continuum of the customer lifecycle from design and delivery to ongoing network management.\" and assigns \"Dedicated resources are assigned to each implementation, including project managers\". Discovery, pilots, staging, runbooks and rollback plans are not itemised in the material reviewed, so the grade rests on the design, installation and LAN migration wording."},"f07_lifecycle_management":{"source_url":"https://www.business.att.com/categories/att-managed-services.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"With comprehensive support and maintenance included, your systems and connectivity services stay smooth and efficient. Maintenance is stated to be included in AT&T managed services, and the FlexWare brief covers AT&T managed universal CPE. No AT&T page reviewed names hardware replacement, firmware upgrades, patching, renewals or end-of-life planning. The words \"maintenance\", \"replacement\" and \"firmware\" do not appear in the Managed SD-WAN product brief, and \"lifecycle\" does not appear on the managed services category page. Graded partial on that gap."},"f10_dynamic_path_selection":{"source_url":"https://business.att.com/products/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Intelligent network routing and optimization with SD-WAN' and 'Improve performance, reliability, and reduce latency with intelligent routing and local breakout capabilities' [4]"},"f12_application_aware_routing":{"source_url":"https://business.att.com/products/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Intelligent network routing and optimization with SD-WAN' named as a core managed-service capability [4]"},"f15_local_internet_breakout":{"source_url":"https://business.att.com/products/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'local breakout capabilities' named specifically alongside intelligent routing [4]"},"f17_cellular_and_5g_support":{"source_url":"https://www.business.att.com/content/dam/attbusiness/briefs/att-sase-branch-with-fortinet-solution-brief.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Moving to a more distributed cloud connectivity model means you can use widely available, low-cost options for connectivity such as broadband, 4G/LTE, and 5G. The Fortinet brief also states \"Fortinet extenders provide an LTE-based backup WAN connection. They can also serve as a primary connection to kiosks, retail pop-up stores, small branch offices, point of sale systems, and other locations.\", which covers both primary and failover use. AT&T is itself the mobile network operator. SIM management and signal monitoring were not evidenced on the pages read; the attempted AT&T managed wireless WAN PDF returned unreadable binary."},"f18_cloud_on_ramp":{"source_url":"https://business.att.com/categories/network-as-a-service.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Support multiple clouds by creating an integrated network that brings together your data centres, public clouds, and private clouds in a hybrid environment' and confirmed 'multicloud connectivity' named directly for the Cisco-based offering [2] [8] Specific, named hyperscaler cloud on-ramp partnerships weren't itemised by name"},"f23_multi_cloud_transit_fabric":{"source_url":"https://business.att.com/categories/network-as-a-service.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Support multiple clouds by creating an integrated network that brings together your data centres, public clouds, and private clouds in a hybrid environment' and confirmed 'multicloud connectivity' named directly for the Cisco-based offering [2] [8] Specific, named hyperscaler cloud on-ramp partnerships weren't itemised by name"},"f25_high_availability_design":{"source_url":"https://business.att.com/content/dam/attbusiness/briefs/next-generation-networking-use-case.pdf","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - AT&T's own use-case materials confirm 'SLAs for equipment availability' as a standard commercial commitment [17]"},"f26_sla_backed_service_fabric":{"source_url":"https://www.business.att.com/products/dedicated-internet.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"AT&T Dedicated Internet access is perfect for businesses that require the fastest speeds available and protection from outages with world-class Service Level Agreements (SLAs) supported by 24/7 active monitoring. Contractual SLAs with service credits are published for the underlying AT&T Dedicated Internet access service, and the SLA credit quick guide points to the ADI Service Guide for the objectives. No SLA covering the managed SD-WAN or SASE service itself was reachable: the AT&T Service Guide Library at serviceguidenew.att.com could not be fetched, and the strings \"SLA\" and \"service level agreement\" do not appear in the Managed SD-WAN product brief or the Palo Alto Networks SASE brief. Graded partial for that reason."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.business.att.com/content/dam/attbusiness/briefs/att-sase-branch-with-fortinet-solution-brief.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"AT&T Business next-generation firewalls with Fortinet enable one of the fastest application steering methods in the industry. Fortinet technology, branded and managed by AT&T. The same brief lists \"SSL/TLS inspection and threat protection for visibility and prevention against malware.\", \"Web filtering service to enforce internet security and reduce complexity.\" and \"Complete threat protection anti-virus, and intrusion prevention system (IPS)\", so the full NGFW feature set is present but is another vendor's. The FlexWare brief confirms multi-vendor sourcing: \"Supports a variety of secure virtual firewall vendor designs, including Palo Alto, Fortinet, and Juniper.\""},"f30_zero_trust_network_access":{"source_url":"https://business.att.com/products/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Helps ensure that only the right team members have access to the right apps, no matter where they access the network' and 'enforce strict identity verification regardless of location' [4]"},"f31_secure_web_gateway":{"source_url":"https://business.att.com/products/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as part of both named SASE architecture descriptions (Cisco and Palo Alto Networks-based) [4] Capability specifics depend on which underlying platform (Cisco or Palo Alto) is proposed"},"f32_casb_capability":{"source_url":"https://business.att.com/learn/articles/sase-vs-sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name as a core SASE architecture component in AT&T's own materials [7] Specific inline-versus-API-mode technical detail not itemised per platform"},"f36_centralised_orchestration":{"source_url":"https://business.att.com/categories/network-as-a-service.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'Software-defined networking (SDN) and network function virtualization (NFV) technologies enable zero-touch provisioning and seamlessly automate service changes' [8]"},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://business.att.com/products/sase.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Enhanced observability and reporting from the edge to the cloud' is named specifically as a core managed-services capability [4] A distinctly-branded DEM product name wasn't itemised"},"f40_managed_service_assurance":{"source_url":"https://www.business.att.com/content/dam/attbusiness/briefs/att-sase-branch-with-fortinet-solution-brief.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Dedicated experts at the AT&T SNOC use rich SD-WAN analytics to help you fine-tune your business and security policies to improve user experiences. AT&T evidences a security network operations centre and round-the-clock proactive monitoring: \"With 24/7/365 proactive and reactive support, businesses can ensure continuous monitoring and troubleshooting across their connectivity solutions, including managed IT services, SD-WAN, and business Wi-Fi solutions.\" and \"At completion of installation, customers experience a world-class tiered support model available 24/7 to manage their global solution.\" No page reviewed evidences root cause analysis ownership, structured service reviews or change governance, and the AT&T SOC page proved to be about SOC optimisation consulting rather than a managed SOC. Graded partial on those gaps."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:64f133e38f967549cea8daf5","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"not_confirmed","hospitality_leisure":"yes"},"curated_uk_delivery":"global_managed","curated_uk_basis":"No UK HQ (US). UK sites served through AT&T's global managed network and partners, not UK-native infrastructure.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":4,"research_metrics":{"supported":15,"partial":3,"partner_delivered":3,"managed_service_dependent":0,"not_primary":0,"unconfirmed":19,"total":40,"reviewed":21,"completeness_percent":53,"completeness":0.525},"proven_evidence_count":15,"response_panel":null,"best_for":"Sector evidence not yet reviewed; Large global enterprise; managed","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":["Large global enterprise"],"service_model":"managed","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"aryaka","name":"Aryaka","website":"https://www.aryaka.com","category":"technology vendor","product_focus":"AI>Observe, AI>Secure, Aryaka Cyber Threat Research Lab (CTRL), Aryaka Network Access Point (ANAP)","cost_model":"Quote-based managed service; pricing normally depends on sites, bandwidth, regions, security stack and optimisation.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"partial","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"yes"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_primary","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"partial","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","per_bandwidth","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":40,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/aryaka/","shortlist_summary":"Aryaka is one of the older, more established names in this category - founded 2009, more than 15 years before ‘SASE’ existed as an analyst-defined term, originally as a WAN optimisation and application-acceleration company before evolving into what it now calls ‘Unified SASE as a Service’. That specific phrase matters: Aryaka positions itself, and is described by independent commentary, as the first company to deliver SASE as a fully managed service rather than a self-managed software platform, built around a distinctive single-pass architecture (OnePASS) running over an owned, global private core network spanning more than 40 points of presence across six continents.","key_differentiators":["Unified SASE delivered as a managed service from end to end, including the private global core network and WAN optimisation.","Strong story for global organisations needing predictable performance between regions without internet variability.","Embedded WAN optimisation differentiates from pure cloud-delivered SASE platforms."],"best_fit_for":["Global enterprises wanting SASE delivered as a fully managed service rather than as DIY platform plus tools.","Buyers who need consistent inter-regional performance for chatty applications.","Organisations preferring a vendor that owns the platform and the managed service rather than coordinating multiple parties."],"watch_outs":["Smaller PoP footprint and partner ecosystem than the hyperscale SASE vendors; coverage must match your geographic profile.","DIY / self-managed model: supported. Confirm which operating tasks your team retains and what Aryaka operates.","CASB capability: supported; Data loss prevention: supported. Confirm inspection modes, licences and policy depth in the proposal."],"evidence_coverage_pct":0.5,"last_verified":"2026-09-01","evidence_source_count":46,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.aryaka.com/datasheet/smartmanage-datasheet/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Utilizes the Aryaka Network Management and Control (ANMC) system for scalable, multi-tenant automation and orchestration Multi-tenant orchestration is confirmed at platform level, the partner programme names Managed Service Providers and System Integrators as a partner category, and co-management can be delegated to an Aryaka partner. However I found no vendor statement about white-label or partner-branded portals, delegated administration roles or tenant templates on the partners page or elsewhere, so this falls short of the full definition."},"f17_cellular_and_5g_support":{"source_url":"https://www.aryaka.com/last-mile-connectivity/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka provides truly global last mile services including wireline and 4G/5G wireless connectivity 4G and 5G are confirmed as supported and procurable last mile transport. Graded partial rather than yes because the ANAP appliance datasheet contains no mention of LTE, 5G, cellular, SIM or modem, and the High Availability datasheet describes redundancy only as dual ISP links, so integrated modem, SIM management and signal monitoring are not evidenced in the sources reviewed."},"f19_public_cloud_gateways":{"source_url":"https://www.aryaka.com/products-and-services/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka Secure Remote Access provides integrated, managed VPN as a service connecting users to the nearest Aryaka POP. The gateways are Aryaka's own infrastructure, not a resold third party's. Corroborated by \"a global private network interconnected in a mesh service fabric of over 40 Points of Presence (PoPs) across the globe\" and by the NGFW being hosted on the ANAP and on Aryaka's POP, so SaaS acceleration, remote access and security enforcement all run on vendor operated PoPs."},"f24_flexible_edge_form_factors":{"source_url":"https://aryaka.com/unified-sase-platform/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity - the Aryaka Network Access Point (ANAP), included as part of the service rather than sold as separate hardware [9]"},"f25_high_availability_design":{"source_url":"https://www.aryaka.com/unified-sase-platform/","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"ANAP high-availability configurations are available; validate appliance, circuit and implementation requirements for each site."},"f26_sla_backed_service_fabric":{"source_url":"https://www.aryaka.com/datasheet/smartmanage-datasheet/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Operates 24x7x365 to maintain industry-leading SLAs for uptime, latency, jitter and packet loss globally. Aryaka publishes a full SLA document with per service uptime targets (\"Uptime of 99.999%\" for PrivateCore, NGFW-SWG, PrivateAccess and RemoteUser, and Internet Breakout), a target of \"Packet Loss of less than 0.1%\", per minute probing, monthly measurement and graduated service credits of 5, 10 and 20 percent of Link Service Fees. That is contractual rather than best effort."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.aryaka.com/datasheet/ngfw-swg-solution/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka has built a dedicated security stack on top of our Software Defined Wide Area Network (SD-WAN) architecture The NGFW-SWG is Aryaka authored and runs on both the ANAP and Aryaka POPs, with IPS, anti-malware, application control via inline CASB and DPI, and URL filtering that \"Protects users from accessing malicious URLs using reputation scores for more than 32 billion URLs.\" Note that a separate optional SmartSecure Hosted VM Firewall Service is partner technology (\"The first technology partner providing the NGFW functionality is Palo Alto Networks with its VM series of virtualized NGFWs.\") and the Services Description and Terms references a Check Point EULA, so a partner_integrated firewall option exists alongside the native one. The integrated platform firewall itself is native."},"f31_secure_web_gateway":{"source_url":"https://aryaka.com/sase/sase-architecture/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as part of the unified single-pass stack [6]"},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://aryaka.com/case-study/electronics-company/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, well-evidenced via the confirmed 'greatly improved network performance' customer testimony and the platform's confirmed application-acceleration heritage [22] Not confirmed"},"f40_managed_service_assurance":{"source_url":"https://www.aryaka.com/datasheet/global-connectivity-solution/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka operates its own 24/7 NOC (Network Operations Center) to manage, orchestrate, and monitor all traffic The 24/7 NOC half of the definition is well evidenced: Aryaka runs its own NOCs \"24x7x365 to maintain industry-leading SLAs for uptime, latency, jitter and packet loss globally\", provides \"24x7 proactive Link Monitoring and management of Customer's procured last mile links\" and \"24x7 health monitoring and handle incident management issues related to the ZTNA Gateways\". Graded partial because the Services Description and Terms explicitly excludes a managed SOC from at least one offering: \"managed SOC (Security Operation Center) are not part of the scope of the Managed Firewall Service offering, and Customer is solely responsible for these functions.\" No published evidence found for root cause analysis commitments or structured service review and change governance."},"f02_diy_self_managed_model":{"source_url":"https://www.aryaka.com/use-cases/network-and-security-convergence/","reviewed_at":"2026-10-01T00:00:00Z","review_due":"2026-12-30T00:00:00Z","qualification":"Aryaka explicitly offers fully managed, co-managed and self-managed delivery. Confirm the buyer’s retained tasks and service scope; self-management is not evidence of a standalone appliance purchase."},"f01_fully_managed_service":{"source_url":"https://www.aryaka.com/unified-sase-platform/","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"Aryaka-managed delivery is an available service model; scope and responsibilities must be agreed in the service contract."},"f03_co_managed_service":{"source_url":"https://www.aryaka.com/unified-sase-platform/","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"Co-managed delivery is offered; confirm the division of responsibilities with Aryaka or its delivery partner."},"f21_private_global_backbone":{"source_url":"https://www.aryaka.com/unified-sase-platform/","reviewed_at":"2026-09-19T00:00:00.000Z","review_due":"2026-10-19T00:00:00.000Z","qualification":"Aryaka documents a global private network. This does not establish private last-mile access, every-country coverage or a site-specific SLA."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:be96a103e360c6122afebb8d","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"partial","financial_services":"yes","retail_ecommerce":"partial","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). UK PoP on the private core; managed-service delivery into the UK.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, if smaller-scale, named customer example | SD-WAN reliability and application performance directly relevant | Not assessed for sector-specific frameworks | KAWO (a named social-media start-up customer, described as benefiting from reliable network performance for global users) | N/A | A smaller-scale customer example relative to the strong manufacturing-sector evidence | A real, named customer example exists for this general sector category, though at a smaller scale than the strongest evidence found for manufacturing.","named_evidence":"KAWO (a named social-media start-up customer, described as benefiting from reliable network performance for global users)","evidence_source_ids":["evidence:aryaka:20"]},{"sector":"transport_logistics","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced at a general level | Multi-site, multi-cloud connectivity plausibly relevant | Not assessed for sector-specific frameworks | Confirmed directly as a served sector generally: 'customers span... transportation, logistics... industries with complex multi-site, multi-cloud network requirements' | N/A | General sector confirmation exists without a named individual customer example | A real, primary-sourced confirmation of sector fit, though without a named individual customer example to reinforce it directly.","named_evidence":"Confirmed directly as a served sector generally: 'customers span... transportation, logistics... industries with complex multi-site, multi-cloud network requirements'","evidence_source_ids":["evidence:aryaka:16"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | SD-WAN reliability, multi-site connectivity, and managed operations directly relevant to distributed manufacturing operations | Not assessed for sector-specific frameworks | A named Fortune 1000 chemicals/materials producer (Albemarle Corporation); a detailed, technically specific (if company-name-anonymised) semiconductor-manufacturing case study benchmarked against Cato and VeloCloud; confirmed directly as a served sector generally ('customers span manufacturing... industries') | Global - the named/detailed case studies span facilities in more than 100 countries (Albemarle) and multiple Asia-Pacific/North American sites (the semiconductor case) | The semiconductor case study's company name was withheld | Genuinely the best-evidenced sector in this entire profile - a real, named, large public company (Albemarle) plus a detailed, technically specific anonymised case study together give this sector exceptionally strong, concrete evidence.","named_evidence":"A named Fortune 1000 chemicals/materials producer (Albemarle Corporation); a detailed, technically specific (if company-name-anonymised) semiconductor-manufacturing case study benchmarked against Cato and VeloCloud; confirmed directly as a served sector generally ('customers span manufacturing... industries')","evidence_source_ids":["evidence:aryaka:16","evidence:aryaka:23","evidence:aryaka:24"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"transport_logistics":false},"reviewed_at":"2026-09-30T15:50:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.aryaka.com/case-study/albemarle/","https://www.aryaka.com/solution-brief/regional-network/","https://www.aryaka.com/press/cloud-first-managed-sd-wan-and-sase-pioneer-aryaka-activates-eu-friendly-dublin-services-pop-to-address-growing-customer-demand/","https://www.aryaka.com/docs/Transitex-Case-Study-2020.pdf"],"qualification":"Published manufacturing customer evidence for managed global WAN and last-mile services. Does not establish UK ten-site commercial fit or current supplier availability.  Transitex freight/logistics primary case documents Aryaka SmartSecure Remote Access through Cloud365 for China connectivity. Supports logistics experience with qualification; not proof of full branch SD-WAN, current UK delivery or the original generic claim.","sectors":{"manufacturing":"yes","transport_logistics":"partial"},"regions":{"uk_ireland":"partial"}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"partial","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":5,"research_metrics":{"supported":16,"partial":4,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":20,"total":40,"reviewed":20,"completeness_percent":50,"completeness":0.5},"proven_evidence_count":16,"response_panel":null,"best_for":"Manufacturing; Transport and logistics (partial evidence); both","best_for_fields":{"sectors_yes":["Manufacturing"],"sectors_partial":["Transport and logistics"],"regions":[],"size":[],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"fortinet","name":"Fortinet FortiSASE","website":"https://www.fortinet.com/products/sd-wan","category":"technology vendor","product_focus":"Fabric Connectors, FortiClient, FortiGuard AI-Powered Security Services, FortiManager / FortiAnalyzer","cost_model":"Quote-based appliances/subscriptions/support; public reseller pricing exists for hardware but enterprise managed/SASE bundles require quote.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"partner_integrated","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"yes","financial_services":"not_primary","retail_ecommerce":"not_confirmed","manufacturing":"not_primary","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"partial","transport_logistics":"yes","professional_services":"not_primary","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"not_confirmed"},"pop_count":170,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/fortinet-fortisase/","shortlist_summary":"FortiSASE runs the same FortiOS operating system, and the same single-pass inspection engine, that has powered Fortinet’s physical FortiGate firewalls for over two decades. That’s a meaningfully different starting point from building a SASE platform natively for the cloud from scratch - the practical result is that FortiGate customers get a consistent policy and inspection model whether traffic is inspected on-premises or in a FortiSASE cloud point of presence, and Fortinet’s own commercial materials lean hard into a ‘Security Fabric’ discount for exactly these existing customers.","key_differentiators":["Native convergence of networking and security on a single operating system (FortiOS) across FortiGate edge, FortiManager and FortiSASE.","Strong story for buyers who want secure SD-WAN and SASE delivered from one vendor platform rather than assembled from partner integrations.","Wide appliance range covering everything from small branch to large data centre, with public hardware pricing visible through resellers."],"best_fit_for":["Security-first buyers who want SD-WAN and SASE under a single policy and log domain.","Mid-market and enterprise organisations that already run FortiGate firewalls and want to extend into SD-WAN and cloud-delivered security.","Buyers comparing single-vendor SASE platforms (alongside Cato, Palo Alto, Cisco) for converged operations."],"watch_outs":["Like Cisco, managed delivery is via partners rather than Fortinet directly; underlay and field operations are not owned by the vendor.","Buyers wanting a private global backbone will need to validate FortiSASE PoP coverage against their geographic footprint.","Best-of-breed buyers may prefer integrating FortiGate SD-WAN with a separate SSE platform (Zscaler, Netskope) rather than adopting full FortiSASE."],"evidence_coverage_pct":0.5,"last_verified":"2026-09-01","evidence_source_count":60,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/managed-fortigate-svc.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Ensure FortiGates, FortiAPs, FortiSwitches and FortiExtenders are quickly and correctly deployed, configured to best practices Fortinet itself operates Managed FortiGate Service (MFGS), in which Fortinet NOC staff carry out deployment, configuration, provisioning and ongoing change management. The solution page adds \"Deployment, configuration, provisioning, and regular changes\" and \"Evaluate, implement, and verify configuration changes\". Note that this is a managed wrap around Fortinet's own appliances rather than an end-to-end managed WAN including circuits; most fully managed Fortinet SD-WAN in the market is delivered by carrier and MSSP partners rather than by Fortinet."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortisase.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The portal offers centralized multi-tenant management and configuration capabilities, enabling MSSPs to efficiently deploy and manage SASE services across their client base. Tenant isolation and delegated administration are evidenced: the FortiSASE datasheet describes an MSSP Portal, and the service provider page states \"Fortinet solutions are multi-tenant from the ground up, enabling MSPs and MSSPs to isolate and manage multiple customer networks from a single administrative console.\" Graded partial rather than yes because no page reviewed evidences branded or white-label portals for the MSP's own brand, and because the FortiSASE MSSP architecture guide qualifies the model by saying each customer gets a separate isolated instance. See conflicts."},"f07_lifecycle_management":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/managed-fortigate-svc.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Let MFGS experts handle your firmware upgrades to maximize effectiveness and minimize risk Firmware upgrade and patching are handled as part of Managed FortiGate Service, which also states \"Automatically trigger patching for vulnerabilities with a severity rating of medium or higher\". The FortiCare support page covers hardware replacement (\"Meet your availability requirements with our Priority RMA Services.\") and describes \"comprehensive lifecycle services\". Explicit end-of-life planning and renewals handling as part of the service were not found."},"f09_encrypted_overlay_fabric":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortinet_secure_sdwan.pdf","reviewed_at":"2026-10-01","review_due":"2026-12-30T00:00:00Z","qualification":"Fortinet documents IPsec tunnel configuration for its SD-WAN overlay. FortiGate Secure SD-WAN supports an IPsec overlay. This is a configurable platform capability; it does not establish a managed service or a deployment-specific throughput/SLA."},"f17_cellular_and_5g_support":{"source_url":"https://www.fortinet.com/products/extender","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"FortiExtender cellular gateways and routers provide secure 5G/LTE connectivity for any deployment. FortiExtender is Fortinet's own product line. The page also states \"Easily provision 5G or LTE wireless WAN, high availability, and failover, as well as out-of-band management (OOB) and private 5G/LTE.\" and \"FortiExtender 5G/LTE Wireless WAN gateways come equipped with Dual SIM and Dual Modem capabilities for fast failover and active/active cellular connectivity.\" covering dual SIM and both primary and failover transport. Signal quality is addressed by \"FortiExtender cellular gateways and routers ensure optimal signal reception, minimal attenuation, and the best experience.\""},"f26_sla_backed_service_fabric":{"source_url":"https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortisase.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Fortinet delivers 99.999% SLA with latency guarantee for security inspection, which is possible because of global reach with hundreds of security PoPs. Contractual rather than best-effort. Fortinet's own G-Cloud 14 FortiSASE service definition sets out availability tiers (Management Portal 99.99%, Individual Security POPs 99.99%, Overall service in high availability configuration 99.999%) and commits that \"FortiSASE cloud platform is managed by Fortinet on a twenty-four (24) hours a day by seven (7) days a week basis and is monitored for hardware availability, service capacity, and network resource utilization.\" Support response commitments come via \"24 x 7 FortiCare Technical Support\". A latency commitment is claimed alongside uptime. Change handling commitments were not found in the SLA text reviewed."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.fortinet.com/products/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Secure SD-WAN, SSE, zero trust, wireless controller, LTE/5G gateway, and FortiGuard AI-Powered Security Services have the same OS, policy engine, and management plane. Native, not partner_integrated. Fortinet authors FortiOS and the FortiGate NGFW itself, and the SD-WAN function is a feature of the same operating system rather than a bolt-on appliance. The FortiSASE datasheet confirms the cloud-delivered equivalent: \"FortiSASE FWaaS is a cloud-based service that provides hyperscale, next-generation firewall (NGFW) capabilities, including web filtering, advanced threat protection (ATP), intrusion prevention system (IPS), and Domain Name System (DNS) security.\" Stateful firewalling, application control, IPS, malware inspection and URL filtering are all in-platform."},"f33_data_loss_prevention":{"source_url":"https://www.fortinet.com/products/sase","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The FortiSASE DLP feature supports advanced data matching techniques, including pattern recognition and contextual analysis, to effectively prevent accidental data breaches. Native Fortinet capability. The FortiSASE datasheet adds \"Identify, monitor, and protect organization data at rest and in motion. DLP engine backed by FortiGuard AI feeds with over thousands of pre-defined data patterns, updated to protect from day zero.\" and \"DLP allows businesses to identify sensitive information across multiple cloud-based systems, prevent the accidental sharing of data, and monitor and protect data.\" Classification, inspection and blocking are evidenced. Alerting workflows and formal exception or override workflows were not found on the pages reviewed."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:ed65a89afeb5f9b44f4405ca","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"not_confirmed","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). Strong UK channel and FortiSASE PoPs; widely delivered as a UK managed service by BT, Vodafone and UK MSPs.","sector_review_queue":[{"sector":"healthcare","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | Distributed-site SD-WAN and cloud security consolidation at genuine global scale | Not assessed | A named global hospitality operator (4,000+ locations, 325,000+ employees, $19.4B gross annual revenue) reporting a 60% efficiency improvement for network and security teams; separately, IHG Hotels & Resorts is referenced as boosting IT efficiency 'close to 60%' with Fortinet Secure SD-WAN, which may be the same underlying customer story | Global, multi-location deployment evidenced directly at scale | The two hospitality references may describe the same underlying deployment rather than two independent proof points - worth confirming directly rather than double-counting as separate evidence | Genuinely the best-evidenced sector for Fortinet in this profile - specific, large, checkable scale figures (4,000+ locations, 325,000+ employees) and a consistent, repeated 60% efficiency figure across multiple Fortinet materials.","named_evidence":"A named global hospitality operator (4,000+ locations, 325,000+ employees, $19.4B gross annual revenue) reporting a 60% efficiency improvement for network and security teams; separately, IHG Hotels & Resorts is referenced as boosting IT efficiency 'close to 60%' with Fortinet Secure SD-WAN, which may be the same underlying customer story","evidence_source_ids":["evidence:fortinet-fortisase:19","evidence:fortinet-fortisase:21"]},{"sector":"hospitality_leisure","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | Distributed-site SD-WAN and cloud security consolidation at genuine global scale | Not assessed | A named global hospitality operator (4,000+ locations, 325,000+ employees, $19.4B gross annual revenue) reporting a 60% efficiency improvement for network and security teams; separately, IHG Hotels & Resorts is referenced as boosting IT efficiency 'close to 60%' with Fortinet Secure SD-WAN, which may be the same underlying customer story | Global, multi-location deployment evidenced directly at scale | The two hospitality references may describe the same underlying deployment rather than two independent proof points - worth confirming directly rather than double-counting as separate evidence | Genuinely the best-evidenced sector for Fortinet in this profile - specific, large, checkable scale figures (4,000+ locations, 325,000+ employees) and a consistent, repeated 60% efficiency figure across multiple Fortinet materials.","named_evidence":"A named global hospitality operator (4,000+ locations, 325,000+ employees, $19.4B gross annual revenue) reporting a 60% efficiency improvement for network and security teams; separately, IHG Hotels & Resorts is referenced as boosting IT efficiency 'close to 60%' with Fortinet Secure SD-WAN, which may be the same underlying customer story","evidence_source_ids":["evidence:fortinet-fortisase:19","evidence:fortinet-fortisase:21"]},{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Unknown - not assessed in detail, though Fortinet's own customer-story index references a power grid operator by category (not named) deploying a Fortinet SecOps solution for zero-day protection and IT/OT convergence | IT/OT convergence relevant per the referenced use case | Not assessed | Referenced but not independently detailed (unnamed power grid operator) | N/A | Reference exists but wasn't followed up to a named, detailed case study in this pass | A real, relevant use case is referenced in Fortinet's own materials but wasn't independently verified to the same depth as the hospitality or education evidence in this pass.","named_evidence":"Referenced but not independently detailed (unnamed power grid operator)","evidence_source_ids":["evidence:fortinet-fortisase:26"]},{"sector":"education","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | Large-scale, phased deployment (Secure SD-WAN, then NAC, then FortiSASE) at genuine scale | Not assessed for sector-specific frameworks | A named top-five-largest US school district, 375,000+ students and staff | Single-country (US) evidence; UK/EU education-specific case studies not found in this pass | No case-study limitations beyond the single-country evidence noted | A genuinely large, well-evidenced, named-scale customer story - one of the strongest sector-fit findings in this profile, given both the scale (375K+) and the specific, credible multi-stage adoption narrative.","named_evidence":"A named top-five-largest US school district, 375,000+ students and staff","evidence_source_ids":["evidence:fortinet-fortisase:26","evidence:fortinet-fortisase:27"]},{"sector":"transport_logistics","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_supported","qualification":"Unknown - not assessed, no case study found in this pass, though Fortinet's own customer-story index separately references an airport operator and a major bank's remote-ATM/5G deployment | Not assessed in detail | Not assessed | Referenced but not independently detailed in this pass (airport operator, bank ATM network) | N/A | Named but under-detailed references exist and weren't followed up individually in this research pass | A specific, worth-flagging follow-up opportunity - Fortinet's own materials reference relevant transport/financial-infrastructure customers that weren't fully explored in this pass.","named_evidence":"Referenced but not independently detailed in this pass (airport operator, bank ATM network)","evidence_source_ids":["evidence:fortinet-fortisase:26"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"education":false,"healthcare":false,"transport_logistics":false,"hospitality_leisure":false},"reviewed_at":"2026-09-30T15:45:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://fortinet.com/blog/customer-stories","https://fortinet.com/content/dam/fortinet/assets/ebook/eb-sase-customer-stories.pdf","https://www.fortinet.com/customers/the-guidance-center","https://www.fortinet.com/customers/indigo-airlines","https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","https://www.fortinet.com/content/dam/fortinet/assets/case-studies/cs-ihg.pdf"],"qualification":"Fortinet SASE customer-stories PDF page 10 documents an unnamed US school district with 375,000-plus users. Anonymous case only. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation. The Guidance Center is a California mental-health provider using FortiSASE, NOT an NHS organisation. IndiGo documents Secure SD-WAN at airport counters in India. UK Fortinet delivery is evidenced through BT managed service terms; it is partner-dependent, not a commitment from Fortinet or coverage of all UK/Ireland addresses. Recovered IHG primary PDF identifies 4,000 Secure SD-WAN locations and a global MSSP-delivered rollout. UK headquarters do not prove coverage of a particular UK estate. Savings and efficiency figures are forecasts, not measured completed outcomes.","sectors":{"education":"partial","healthcare":"yes","transport_logistics":"yes","hospitality_leisure":"yes"},"regions":{"uk_ireland":"partner_integrated"}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"partner_integrated","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":6,"research_metrics":{"supported":18,"partial":2,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":20,"total":40,"reviewed":20,"completeness_percent":50,"completeness":0.5},"proven_evidence_count":18,"response_panel":null,"best_for":"Healthcare; Transport and logistics; Hospitality and leisure; Education (partial evidence); Large global enterprise; both","best_for_fields":{"sectors_yes":["Healthcare","Transport and logistics","Hospitality and leisure"],"sectors_partial":["Education"],"regions":[],"size":["Large global enterprise"],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"juniper-networks","name":"Juniper Networks","website":"https://www.juniper.net","category":"technology vendor","product_focus":"Juniper AI-Native SD-WAN, Juniper Mist AI / Marvis AI, Juniper Secure Edge, Managed SD-WAN","cost_model":"Quote-based hardware/subscription/support; managed delivery via partners/providers.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"partial","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"partial","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"yes"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"yes","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_primary","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/juniper/","shortlist_summary":"Juniper Networks offer Mist AI with WAN Assurance, delivering AI-driven monitoring and troubleshooting at the WAN edge at a depth that few competitors match. Typically shortlisted by organisations where AIOps and network assurance quality are weighted evaluation criteria rather than SD-WAN feature breadth, and worth examining more closely than the overall score might suggest if AI-driven operations is a primary requirement.","key_differentiators":["Mist AI delivers WAN Assurance, providing AI-driven monitoring and troubleshooting at the WAN edge that few competitors match.","Strong story for buyers who want the WAN integrated with Mist-powered Wi-Fi and access network management.","Juniper SRX security platform integration provides native firewall capability for buyers standardised on Juniper."],"best_fit_for":["Enterprises already running Mist for Wi-Fi or access who want unified AI-driven operations across WAN and LAN.","Buyers prioritising observability and AI-assisted incident triage as a primary purchase criterion.","Organisations with strong network engineering capability who can take advantage of WAN Assurance telemetry."],"watch_outs":["Full SASE platform: partial evidence; CASB capability: not confirmed; Data loss prevention: not confirmed. Confirm the networking and SSE products and whether separate contracts or operators are required.","Managed delivery is via partners; first-party managed service is not the primary model.","Cloud on-ramp and private backbone capabilities are less prominent than dedicated SASE platforms."],"evidence_coverage_pct":0.475,"last_verified":"2026-09-01","evidence_source_count":40,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.juniper.net/us/en/services.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our highly trained experts, backed by AI-Native and automated insights, can help you design, deploy, and proactively manage your network to deliver seamless experiences for all. Juniper Services offers design, deployment and proactive management assistance, but the Juniper pages reviewed position end-to-end managed SD-WAN/SASE as something MSPs and service providers deliver using Juniper technology rather than something Juniper operates itself. The managed SD-WAN page is written to MSPs as the operator. No Juniper page reviewed described Juniper owning day-to-day operations, change execution and service reporting for a customer end to end. Graded partial rather than yes for that reason."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.juniper.net/us/en/solutions/sd-wan/managed-sd-wan.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"engineered specifically for forward-thinking MSPs ready to scale Juniper explicitly targets MSPs with its managed SD-WAN proposition, which is why this is not graded unknown. However none of the three specific tests in the definition were evidenced on pages reviewed: tenant isolation, delegated administration and branded (white-label) portals are not described. The Juniper Mist MSP dashboard documentation URL attempted returned HTTP 404, so multi-tenant administration could not be verified in this task."},"f07_lifecycle_management":{"source_url":"https://www.juniper.net/us/en/services.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Achieve simplicity and reliability at scale across your wired, wireless, and SD-WAN environments with AI-Native operations and support from Juniper Services, using AI for a comprehensive, proactive approach across the full network life cycle. Juniper claims a full network life cycle approach through Juniper Services. The specific components in the definition (hardware replacement/RMA, firmware upgrades, patching, renewals and end-of-life planning handled as part of the service) were not individually evidenced; the technical services page that would carry them returned HTTP 404 on attempt. Graded partial on that basis."},"f10_dynamic_path_selection":{"source_url":"https://juniper.net/content/dam/www/assets/white-papers/us/en/routers/ai-driven-sd-wan-secures-todays-cloud-era-networks.pdf","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via the platform's core, service-based routing architecture - 'sessions are delivered based on identity and context to relevant parties based on real-time policies' [10]"},"f18_cloud_on_ramp":{"source_url":"https://juniper.net/us/en/customers/ambifox-case-study.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a real, named customer deployment spanning two distinct named hyperscalers [25]"},"f19_public_cloud_gateways":{"source_url":"https://www.juniper.net/us/en/solutions/sase.html","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"full-stack Security Service Edge (SSE) and SD-WAN capabilities that leverage the power of the cloud to optimize both the network and the security experience Juniper operates its own cloud-delivered SSE (Juniper Secure Edge, managed by Juniper Security Director Cloud), so this is Juniper's own service infrastructure rather than a third party's resold platform. Graded partial not yes because no page reviewed named the gateway or PoP locations, the number of locations, or which capabilities (SaaS optimisation, remote access, security enforcement) are enforced at Juniper-operated PoPs. Attempts to reach the Juniper Secure Edge product page redirected to an HPE store page that returned Product Not Found, and the Secure Edge documentation guide URLs returned 404/403."},"f23_multi_cloud_transit_fabric":{"source_url":"https://juniper.net/us/en/customers/ambifox-case-study.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a real, named customer deployment spanning two distinct named hyperscalers [25]"},"f24_flexible_edge_form_factors":{"source_url":"https://juniper.net/us/en/products/routers/session-smart-router.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as genuinely flexible - the Session Smart Router runs as a software-based solution on dedicated Juniper SSR-series hardware, white-box customer-premises equipment, data-centre network servers, or the public cloud [14]"},"f27_integrated_next_generation_firewall":{"source_url":"https://juniper.net/us/en/solutions/sd-wan/managed-sd-wan.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and confirmed with specific technical detail [15]"},"f28_full_sase_platform":{"source_url":"https://juniper.net/us/en/solutions/secure-ai-native-edge.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Partially confirmed - Universal Zero Trust Network Access (UZTNA) is explicitly described by Juniper's own materials as setting 'the vision for Juniper's view of... UZTNA to address customer needs in the future', a stated roadmap direction rather than a confirmed, fully-realised, currently-shipping capability [11] [17] Explicitly framed as a future-facing vision in Juniper's own primary materials"},"f30_zero_trust_network_access":{"source_url":"https://juniper.net/us/en/solutions/secure-ai-native-edge.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Partially confirmed - Universal Zero Trust Network Access (UZTNA) is explicitly described by Juniper's own materials as setting 'the vision for Juniper's view of... UZTNA to address customer needs in the future', a stated roadmap direction rather than a confirmed, fully-realised, currently-shipping capability [11] [17] Explicitly framed as a future-facing vision in Juniper's own primary materials"},"f36_centralised_orchestration":{"source_url":"https://juniper.net/us/en/customers/ambifox-case-study.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - the platform 'supports zero-touch installation and provisioning for fast setup and administration-with no site visits', evidenced via a real, named customer deployment [25]"},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://juniper.net/content/dam/www/assets/white-papers/us/en/routers/session-smart-routing-how-it-works.pdf","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, via the confirmed SLE architecture (Table 3, 10) [13] Technical depth beyond the named SLE capability itself not itemised in full"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:6302afddee37a3625fa05be4","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US, now HPE). UK channel and delivery via partners and MSPs.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":7,"research_metrics":{"supported":13,"partial":6,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":21,"total":40,"reviewed":19,"completeness_percent":48,"completeness":0.475},"proven_evidence_count":13,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"orange-business","name":"Orange Business","website":"https://www.orange-business.com","category":"carrier network provider / integrator","product_focus":"Orange Business Evolution Platform, Orange Business SASE with Palo Alto Networks Prisma SASE, Orange Business and Fortinet SASE, Orange Cyberdefense Managed SASE","cost_model":"Quote-based managed service; costs driven by access circuits, countries, vendor platform, security services and SLAs.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"partner_integrated","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"yes"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":400,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/orangebusiness/","shortlist_summary":"Orange Business is the enterprise services arm of Orange S.A., one of the largest telecommunications groups in Europe, headquartered in France and listed on Euronext Paris. Orange Business itself traces its lineage to Equant and Global One before being formally established on 1 June 2006, and was renamed from Orange Business Services to Orange Business on 16 February 2023; Frédéric Schepens serves as CEO (appointed July 2024), leading approximately 30,000 employees.","key_differentiators":["Global managed network leadership with strong service assurance, NOC depth and field operations.","Multi-vendor managed SD-WAN and SASE delivery (including Palo Alto Networks managed SASE via Orange Cyberdefense).","Strong UK and EMEA presence with established enterprise managed service track record."],"best_fit_for":["Multinational enterprises wanting a single global managed provider for SD-WAN, SASE and access.","Buyers prioritising service ownership, RCA quality and change governance over best-of-breed platform selection.","Organisations needing access circuit sourcing alongside SD-WAN platform delivery."],"watch_outs":["Platform choice depends on which Orange-supported vendor is selected; underlying platform fit and roadmap should be evaluated independently.","Commercial model is bespoke; rate cards and change costs need careful scoping.","DIY/self-managed model is not the primary positioning."],"evidence_coverage_pct":0.475,"last_verified":"2026-09-01","evidence_source_count":36,"capability_evidence":{"f07_lifecycle_management":{"source_url":"https://www.orange-business.com/en/solutions/internet-networks/flexible-sd-wan-international","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our Service Level Agreements (SLAs) guarantee 100% site availability and quick issue resolution within five hours. Break-fix and repair commitments are documented (five hour issue resolution on Flexible SD-WAN, \"4-hour guaranteed time to repair (GTTR)\" on Galerie, \"5 hour Guaranteed Time To Repair\" on Business VPN), and Orange performs on-site installation. No page reviewed states that firmware upgrades, patching, licence renewals or end-of-life planning are included in the service, so this is graded partial rather than yes."},"f10_dynamic_path_selection":{"source_url":"https://documentation.evolutionplatform.orange-business.com/docs/services/networking/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'adaptive routing mechanisms' and 'centralized controllers to direct network traffic in an intelligent and efficient manner'"},"f12_application_aware_routing":{"source_url":"https://documentation.evolutionplatform.orange-business.com/docs/services/networking/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'centralized controllers to direct network traffic in an intelligent and efficient manner... to make the most of your network resources'"},"f13_qos_and_traffic_shaping":{"source_url":"https://documentation.evolutionplatform.orange-business.com/docs/services/networking/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'dynamic bandwidth management' named explicitly"},"f17_cellular_and_5g_support":{"source_url":"https://orange-business.com/en/products/categories/internet-and-networks","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'wireless options' named explicitly as a supported underlay type"},"f18_cloud_on_ramp":{"source_url":"https://documentation.evolutionplatform.orange-business.com/docs/services/networking/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'SD-WAN also simplifies cloud connectivity, seamlessly integrating your cloud services with your network' Specific, named hyperscaler cloud on-ramp partnerships weren't itemised by name"},"f19_public_cloud_gateways":{"source_url":"https://www.orange-business.com/en/solutions/internet-networks/business-vpn-internet","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Orange Business has invested in 16 global Internet gateways on five continents. These are Orange's own gateways, not a third party's: \"These distributed Internet gateways break traffic out closer to the user to eliminate the latency caused by the long physical distances between the user, the gateway and the destination web site.\" Orange also publishes \"400 Points of Presence globally\" and operates the Galerie cloud gateway service. Caveat: the security enforcement running in the SASE PoPs is partner technology (Palo Alto Networks, Fortinet), so the gateway estate is Orange's own but the security stack inside it is not."},"f21_private_global_backbone":{"source_url":"https://www.orange-business.com/en/solutions/network-solutions","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Orange Business uses its own network to create the digital services of tomorrow. Corroborated by the Galerie statement that \"Your sites, traffic and data are not exposed to the public Internet\", by the network solutions page claim \"#1 Global voice and data network\", by \"400 Points of Presence globally\" and by \"global reach covering 220 countries and territories\". This is a genuinely international backbone rather than a single-country network."},"f23_multi_cloud_transit_fabric":{"source_url":"https://documentation.evolutionplatform.orange-business.com/docs/services/networking/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'SD-WAN also simplifies cloud connectivity, seamlessly integrating your cloud services with your network' Specific, named hyperscaler cloud on-ramp partnerships weren't itemised by name"},"f26_sla_backed_service_fabric":{"source_url":"https://www.orange-business.com/en/solutions/internet-networks/flexible-sd-wan-international","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our Service Level Agreements (SLAs) guarantee 100% site availability and quick issue resolution within five hours. Availability and time-to-repair commitments are published across Flexible SD-WAN, Business VPN (\"99.95% site availability\" and \"5 hour Guaranteed Time To Repair\") and Galerie (\"Orange Business commits to 100% Galerie availability and 4-hour guaranteed time to repair (GTTR)\"). Latency, jitter and loss commitments and change-handling SLAs were not found on the pages reviewed."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.orange-business.com/en/solutions/security/secure-gateway","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Secure Gateway consists of a new-generation firewall at the heart of the service The firewall function is present but the technology belongs to third parties Orange resells and manages. The Secure Gateway page names Fortinet and Palo Alto as its partners, the Fortinet partner page states \"Orange Business has chosen Fortinet Secure SD-WAN to enhance the Flexible SD-WAN offering, providing clients of all sizes worldwide with a security-focused solution\", and the Palo Alto press release names \"Prisma® SASE (Prisma Access + Prisma SD-WAN)\". Orange authors the management and service wrapper, not the firewall engine, hence partner_integrated rather than yes."},"f31_secure_web_gateway":{"source_url":"https://orange-business.com/en/news-and-events/articles/orange-powers-digital-trust-sase-sd-wan-strategies","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'augmenting industry-leading SSE capabilities from partners such as Netskope, Palo Alto, Zscaler, and Fortinet' Specific platform-by-platform packaging detail not itemised"},"f40_managed_service_assurance":{"source_url":"https://www.orange-business.com/en/solutions/security/secure-gateway","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Personalized services fully managed and supervised by our experts 24x7 Corroborated by \"Managed Firewall is ISO 20000 certified, and our SOCs are 27001 certified\" on the same page, by \"24/7/365 continuous monitoring of security systems worldwide\" and \"3,000+ multi-skilled cybersecurity experts\" on the Belgian SASE page, and by \"6 Major Service Centers covering all continents\" on the network solutions page. Round-the-clock NOC and SOC monitoring is well evidenced; formal root cause analysis ownership and structured service review or change governance are not explicitly stated on the pages reviewed, hence medium confidence."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:6d1e16776f3ed56135779cac","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"partial","education":"partial","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_entity","curated_uk_basis":"UK contracting entity (Orange Business UK) of a French parent, with UK delivery.","sector_review_queue":[{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, genuinely the best-evidenced sector in this entire profile | Confirmed global SD-WAN deployment directly supporting a genuinely major industrial conglomerate's broader cloud-migration and digitisation strategy | Not assessed for sector-specific frameworks | Siemens - named, major global industrial conglomerate, named Orange executive quote (John Isch, Director, Connectivity Solutions for the Americas), confirmed as a long-standing partnership | Global, implied via Siemens' own confirmed global operations | The confirmed case study is dated (2022); current-state deployment specifics weren't independently re-confirmed | A real, named, individually-attributable customer reference - genuinely strong evidence of large-enterprise deployment capability, reinforced by a named executive quote describing a long-standing, strategic partnership.","named_evidence":"Siemens - named, major global industrial conglomerate, named Orange executive quote (John Isch, Director, Connectivity Solutions for the Americas), confirmed as a long-standing partnership","evidence_source_ids":[]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"manufacturing":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.orange-business.com/en/press/orange-business-services-delivers-flexible-sd-wan-siemens-worldwide-majority-corporate"],"qualification":"Recovered Orange Siemens release confirms Cisco-based Flexible SD-WAN at corporate locations. No manufacturing-OT suitability or UK quote inference. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"manufacturing":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":8,"research_metrics":{"supported":16,"partial":2,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":21,"total":40,"reviewed":19,"completeness_percent":48,"completeness":0.475},"proven_evidence_count":16,"response_panel":null,"best_for":"Manufacturing; Large global enterprise; managed","best_for_fields":{"sectors_yes":["Manufacturing"],"sectors_partial":[],"regions":[],"size":["Large global enterprise"],"service_model":"managed","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"bt-business","name":"BT","website":"https://business.bt.com/networks-digital-services/sd-wan","category":"managed service provider / carrier network provider","product_focus":"Agile Connect, BT Managed Fortinet Firewall, BT Managed SASE (Fortinet-based), BT Managed SASE (Meraki-based)","cost_model":"Quote-based managed service; includes access, CPE, vendor stack and service tier options.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_hq","uk_basis":"BT Group plc is headquartered at 1 Braham Street, London; UK managed SD-WAN is published by BT Business.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"partial","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"partner_integrated","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"partial","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"partner_integrated","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"partial","f38_observability_and_digital_experience_monitoring":"partial","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"yes","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"yes","retail_ecommerce":"not_confirmed","manufacturing":"not_primary","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":140,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"yes","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/bt/","shortlist_summary":"BT is not a single-platform SASE company, but the UK’s largest telecommunications operator and managed service provider, delivering SASE as one service line within a vastly larger, publicly-listed (LSE: BT.A) group.","key_differentiators":["UK market leader for managed SD-WAN with deep access circuit ownership and field engineering capability.","Multi-vendor platform support (Cisco, VMware/Broadcom, Fortinet, Palo Alto, Meraki) gives buyers platform choice within one managed service.","Strong global SD-WAN and SASE delivery via BT Global for multinational requirements."],"best_fit_for":["UK enterprises wanting a single supplier for SD-WAN platform, access circuits, security and field operations.","Multinational organisations with a UK headquarters needing global delivery via BT Global.","Buyers prioritising underlay accountability and field engineering depth alongside SD-WAN delivery."],"watch_outs":["Platform choice and packaging vary; buyers should confirm which vendor platform is being proposed and why.","DIY/self-managed model is not BT's primary positioning.","Co-managed model and customer control boundaries should be confirmed via RACI and portal demo."],"evidence_coverage_pct":0.45,"last_verified":"2026-09-01","evidence_source_count":30,"capability_evidence":{"f09_encrypted_overlay_fabric":{"source_url":"https://business.bt.com/content/dam/bt-business/pdfs/networks-cloud-digital-services/sd-wan/bt-secure-sd-wan-datasheet.pdf","reviewed_at":"2026-10-01","review_due":"2026-12-30T00:00:00Z","qualification":"BT describes an accelerated IPsec overlay in its managed Fortinet Secure SD-WAN service. BT Secure SD-WAN uses Fortinet IPsec tunnels between branches, data centres and cloud. This evidence applies to that service option; confirm the platform, scope and throughput in the proposal."},"f10_dynamic_path_selection":{"source_url":"https://business.bt.com/networks-digital-services/sd-wan-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'elastic SD-WAN' dynamically steers traffic, and 'traffic is prioritised from your devices to the SASE cloud node, avoiding public internet congestion' [5] [6]"},"f17_cellular_and_5g_support":{"source_url":"https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Active-Active Mobile Data Access is only available over 5G where 5G is available to you. 5G and 4G are contractually defined transport, with a fallback ladder: the annex defines Mobile Network as a 5G or 4G communication network, 4G where 5G is not available and 3G where 4G is not available. SIM management is covered both ways, with a Customer Managed Mobile Data Access option where the customer provides the SIM. Two caveats worth carrying: Part B limits BT-provided Mobile Data Access to UK sites only, and BT explicitly disclaims mobile network degradation, congestion and interference. Signal monitoring specifically is not evidenced."},"f19_public_cloud_gateways":{"source_url":"https://business.bt.com/content/dam/bt-business/pdfs/terms-and-conditions/service-schedules/BT-fortinet-SD-WAN-service-schedule-part-B-31-01-2025-v3.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The service is only available with the FortiSASE PoPs plus selected PoPs. This is the key ownership call. The cloud security enforcement points are Fortinet's FortiSASE PoPs, not BT infrastructure, so partner_integrated rather than yes. Computer Weekly (Tier 2, named author, dated) confirms the SSE functions of firewall as a service, secure web gateway, CASB and ZTNA come from Fortinet technology. Do not confuse this with BT's Global Fabric PoPs, which BT does operate itself but which are a cloud interconnect fabric rather than a SaaS optimisation or security enforcement gateway service."},"f21_private_global_backbone":{"source_url":"https://newsroom.bt.com/bts-global-fabric-goes-live-with-customer-traffic/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Global Fabric will be available to customers internationally via 140 PoPs hosted in the world's top cloud locations located in 40 countries. Graded partial, and the reason matters. BT clearly operates a genuinely global, BT-controlled PoP footprint across 40 countries and markets it as deterministic in contrast to the public internet, which is more than a single-country network. What I could not evidence from any Tier 1 or Tier 2 source is that BT owns the inter-region fibre between those PoPs. Analysys Mason (Tier 3, so it cannot carry a grade) states the opposite, that Global Fabric rides partner fibre networks. That unresolved gap between control of the platform and ownership of the transmission caps this at partial. Recorded in conflicts. Note also that Global Fabric is a separate product from the Fortinet SD-WAN/SASE service and the schedules do not place SASE traffic on it."},"f27_integrated_next_generation_firewall":{"source_url":"https://newsroom.bt.com/bt-launches-a-new-managed-sase-service-powered-by-fortinet/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Fortinet Next-Generation Firewalls provide enterprise security at any edge, and at any scale on all WAN and LAN traffic as it passes through. The NGFW is Fortinet's technology that BT bundles and manages, so partner_integrated by definition even though it is tightly integrated into BT's managed service. The Managed Fortinet annex refers to 'Fortinet Security Options' configured against agreed design with applicable licence subscriptions, confirming a licensed third-party stack. The functional elements are evidenced: the Managed Cisco SD-WAN annex documents URL filtering by whitelist, blacklist, category and reputation, and Computer Weekly confirms firewall as a service alongside SWG, CASB and ZTNA. BT also offers Palo Alto Prisma and VMware variants, so the underlying firewall vendor varies by build."},"f28_full_sase_platform":{"source_url":"https://business.bt.com/networks-digital-services/sd-wan-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine sector-specific detail - explicitly named for financial services as 'secure, identity-based access through ZTNA' supporting data residency [5] [6]"},"f30_zero_trust_network_access":{"source_url":"https://business.bt.com/networks-digital-services/sd-wan-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine sector-specific detail - explicitly named for financial services as 'secure, identity-based access through ZTNA' supporting data residency [5] [6]"},"f31_secure_web_gateway":{"source_url":"https://newsroom.bt.com/bt-launches-a-new-managed-sase-service-powered-by-fortinet/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as part of the current, Fortinet-based managed SASE expansion [2] Capability specifics depend on which underlying platform (Fortinet vs. Meraki) is proposed"},"f32_casb_capability":{"source_url":"https://business.bt.com/networks-digital-services/sd-wan-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine sector-specific detail - explicitly named for retail, combined with elastic SD-WAN 'to dynamically steer traffic and safeguard payment and customer data' [5] [6] Specific inline-versus-API-mode technical detail not itemised"},"f12_application_aware_routing":{"source_url":"https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"Fortinet annex clause 2.5 documents application-aware routing. BT implements agreed categories; two enabling links optimise operation."},"f24_flexible_edge_form_factors":{"source_url":"https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"Physical and virtual SD-WAN devices are documented. Cloud deployment and customer-provided devices depend on the order and compatibility."},"f11_active_active_link_utilisation":{"grade":"partial","source_url":"https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"Active-active mobile access is an optional 5G service. This does not establish active-active operation across all access types."},"f37_customer_portal_and_rbac":{"grade":"partial","source_url":"https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"Customer monitoring and reporting portals are documented in clauses 2.3 and 2.8. Granular role-based permissions remain unconfirmed."},"f38_observability_and_digital_experience_monitoring":{"grade":"partial","source_url":"https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"The portal exposes application performance, flows and troubleshooting. These findings do not establish a full digital experience monitoring service."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:59b8c21f282ae65477c1c3f8","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"partial","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"not_confirmed","transport_logistics":"yes","professional_services":"partial","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"uk_hq","curated_uk_basis":"UK headquartered (BT Group). UK contract holder with owned UK access, UK NOC and SOC, and named UK support.","sector_review_queue":[{"sector":"financial_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | ZTNA-based identity-first access, data-residency support via localised traffic paths, and a real, detailed (anonymised) case study directly in this sector | PCI DSS and DORA not independently confirmed (Table 13), though data residency is confirmed directly for this sector specifically | A real, detailed, primary-sourced (anonymised) global financial-services customer case study, describing Agile Connect plus BT Managed Fortinet Firewall deployment | Multi-country deployment confirmed directly in the case study | The named certification gaps (PCI DSS, DORA) are worth flagging directly for this specific sector | Genuinely the best-evidenced sector in this entire profile - both specific, named sector-relevant product positioning (ZTNA, data residency) and a real, detailed case study exist together, even without the customer's name disclosed.","named_evidence":"A real, detailed, primary-sourced (anonymised) global financial-services customer case study, describing Agile Connect plus BT Managed Fortinet Firewall deployment","evidence_source_ids":["evidence:bt:6","evidence:bt:17"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{},"reviewed_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://business.bt.com/insights/case-studies/financial-services-sd-wan/","https://business.bt.com/networks-digital-services/sd-wan-sase/sase/","https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","https://www.bt.com/about/contact-bt","https://find-and-update.company-information.service.gov.uk/company/04190816","https://business.bt.com/networks-digital-services/sd-wan/"],"qualification":"BT documents managed Agile Connect SD-WAN and Fortinet Firewall for a global banking organisation. Does not verify DORA/PCI compliance or a manufacturing deployment.  BT publishes UK managed SASE infrastructure and a Managed Fortinet SD-WAN annex defining Territory as UK. This establishes UK offering, not every UK or Irish address, a specific contracting arrangement or Netify response commitment. Combined UK/Ireland region stays partial. UK review update (supersedes earlier UK-region qualification): UK headquarters and a published UK SD-WAN offering are confirmed. This is not a quote, site serviceability check or confirmation of the legal entity signing a particular order. The combined UK/Ireland yes flag records UK delivery evidence; Irish coverage must be checked separately.","sectors":{"financial_services":"yes"},"regions":{"uk_ireland":"yes"}}},"uk_evidence":{"entity":{"status":"evidenced","name":null,"source_urls":["https://business.bt.com/insights/case-studies/financial-services-sd-wan/","https://business.bt.com/networks-digital-services/sd-wan-sase/sase/","https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","https://www.bt.com/about/contact-bt","https://find-and-update.company-information.service.gov.uk/company/04190816","https://business.bt.com/networks-digital-services/sd-wan/"],"checked_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","qualification":"BT Group plc is headquartered at 1 Braham Street, London; UK managed SD-WAN is published by BT Business."},"regional_delivery":{"status":"yes","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":9,"research_metrics":{"supported":11,"partial":4,"partner_delivered":3,"managed_service_dependent":0,"not_primary":0,"unconfirmed":22,"total":40,"reviewed":18,"completeness_percent":45,"completeness":0.45},"proven_evidence_count":11,"response_panel":null,"best_for":"Financial services; UK and Ireland; managed","best_for_fields":{"sectors_yes":["Financial services"],"sectors_partial":[],"regions":["UK and Ireland"],"size":[],"service_model":"managed","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"uk_hq","label":"UK headquartered","source_urls":["https://business.bt.com/insights/case-studies/financial-services-sd-wan/","https://business.bt.com/networks-digital-services/sd-wan-sase/sase/","https://business.bt.com/content/dam/bt-business/pdfs/terms/managed-services/btl-bte-frtnt-sdwan-annex-to-mngd-srvcs-sch.pdf","https://www.bt.com/about/contact-bt","https://find-and-update.company-information.service.gov.uk/company/04190816","https://business.bt.com/networks-digital-services/sd-wan/"],"reviewed_at":"2026-09-30T19:56:00Z","qualification":"BT Group plc is headquartered at 1 Braham Street, London; UK managed SD-WAN is published by BT Business."}},{"slug":"gtt","name":"GTT","website":"https://www.gtt.net/services/secure-networking/managed-sd-wan","category":"hybrid provider","product_focus":"GTT Envision, GTT Managed SD-WAN, GTT Secure Connect, Secure Connect with HPE (Aruba/EdgeConnect/SSE)","cost_model":"Quote-based managed service; GTT public page answers cost only as consultative/requirement-based.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"yes","f33_data_loss_prevention":"partner_integrated","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"yes","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":400,"sla_availability_pct":99.99,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/gtt/","shortlist_summary":"GTT Communications is a specialist, purely networking-and-security-focused global provider rather than a diversified telecom conglomerate with mobile, broadband, and media businesses attached. Founded in 1998, listed on the NYSE in 2013, renamed GTT Communications in January 2014, and now headquartered in Arlington, Virginia, GTT operates a global Tier 1 IP backbone spanning more than 600 points of presence and connecting more than 3,500 cities.","key_differentiators":["Tier 1 global backbone provides strong international transit capability alongside managed SD-WAN.","Vendor-agnostic SD-WAN delivery (multiple platform options) with the Envision management platform.","Recognised as a leader for SASE and managed SD-WAN by industry analysts."],"best_fit_for":["Multinational enterprises needing strong international backbone alongside managed SD-WAN.","Buyers wanting platform flexibility within a managed service.","Organisations consolidating global transit, SD-WAN and SASE under one provider."],"watch_outs":["SASE depth depends heavily on the chosen platform partner; native SSE capabilities are not primary positioning.","Security stack is largely partner-integrated.","Commercial model is consultative; ensure cost lines for managed changes, security and SLAs are explicit."],"evidence_coverage_pct":0.45,"last_verified":"2026-09-01","evidence_source_count":37,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.gtt.net/services/secure-networking/managed-sd-wan/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"We manage the underlay (network) and the cloud-based overlay (SD-WAN) as a unified service GTT positions Managed SD-WAN as an end to end managed service covering circuit installation, hardware delivery, zero touch provisioning and 24/7/365 proactive monitoring under one bill and one support team. Corroborated by the GTT SD-WAN datasheet (register 18, Tier 3 host) which states GTT experts design, implement, install and optimise the service."},"f07_lifecycle_management":{"source_url":"https://www.gtt.net/envision/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Lifecycle operations for SD-WAN/SASE, internet, voice, cloud connect, plus performance tuning and change control GTT Envision advertises lifecycle operations and change control, and Professional Services covers 'throughout the lifecycle of your deployment'. Graded partial because exact string checks on the Managed SD-WAN page returned ABSENT for both 'firmware' and 'hardware replacement', and no published statement was found on patching, renewals or end of life planning being included in the service."},"f09_encrypted_overlay_fabric":{"source_url":"https://www.gtt.net/resources/glossary/what-is-sd-wan-meaning-benefits-how-it-works/","reviewed_at":"2026-10-01","review_due":"2026-12-30T00:00:00Z","qualification":"GTT describes its managed SD-WAN service and encrypted connectivity. GTT documents encrypted connectivity within its managed SD-WAN offering. Confirm the selected technology, tunnel configuration, resilience and throughput for each site."},"f10_dynamic_path_selection":{"source_url":"https://gtt.net/resources/glossary/what-is-sd-wan-meaning-benefits-how-it-works/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'SD-WAN dynamically routes traffic across any connection based on real-time performance and policy' [10]"},"f12_application_aware_routing":{"source_url":"https://gtt.net/resources/glossary/what-is-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'SD-WAN intelligently manages traffic across multiple network paths using centralized policies and real-time performance data' [7]"},"f13_qos_and_traffic_shaping":{"source_url":"https://gtt.net/resources/glossary/what-is-sd-wan-meaning-benefits-how-it-works/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'centralized control, visibility and built-in security, making it more scalable and cloud-friendly' [10]"},"f17_cellular_and_5g_support":{"source_url":"https://www.gtt.net/services/managed-networking/internet/5g-services/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Dual SIM capability allows automatic switching between carrier networks during localized outages GTT publishes a 5G Fixed Wireless Access service supporting primary and failover use ('Deploy automatic failover for primary circuits'), multi-carrier SIM handling, and feeding 'reliable underlay connectivity into SD-WAN and SASE architectures'. The Managed SD-WAN page lists access types 'fiber, broadband, 4G/5G'. Signal monitoring specifically was not evidenced."},"f21_private_global_backbone":{"source_url":"https://www.gtt.net/services/secure-networking/managed-sd-wan/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"GTT owns and operates one of the world's largest global Tier 1 IP backbones GTT is a Tier 1 IP transit operator. The Fortinet press release (register 16) describes a 'top-ranked, global, Tier 1 IP backbone, which spans more than 260 cities on six continents', and the Connect page claims the '4th largest global IP backbone'. This is genuinely global rather than single-country, so yes rather than partial."},"f25_high_availability_design":{"source_url":"https://businesswire.com/news/home/20250318895249/en/Radisson-Hotel-Group-Selects-GTT-for-Global-SASE-Deployment","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and genuinely well-evidenced via a real, named customer example - 'wireless access for enhanced business continuity and resiliency', reinforced by confirmed '24/7 monitoring' [16]"},"f27_integrated_next_generation_firewall":{"source_url":"https://gtt.net/services/secure-networking/sase-secure-connect/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Firewall-as-a-Service (FWaaS)' named explicitly, reinforced by a confirmed 'Managed Firewall at branch locations' specifically for the Radisson deployment [9] [16]"},"f30_zero_trust_network_access":{"source_url":"https://businesswire.com/news/home/20250318895249/en/Radisson-Hotel-Group-Selects-GTT-for-Global-SASE-Deployment","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and repeatedly by name - 'Zero Trust Network Access' named explicitly across multiple sources, including the confirmed Radisson deployment specifically [3] [16]"},"f32_casb_capability":{"source_url":"https://businesswire.com/news/home/20250318895249/en/Radisson-Hotel-Group-Selects-GTT-for-Global-SASE-Deployment","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Cloud Access Security Broker' named explicitly, and confirmed directly again as 'Cloud Access Service Brokerage' in the named Radisson case study [3] [16] Specific inline-versus-API-mode technical detail not itemised"},"f33_data_loss_prevention":{"source_url":"https://www.gtt.net/services/secure-networking/cloud-security/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"prevents sensitive data from being exposed or exfiltrated by identifying, monitoring, and GTT's Cloud Security page lists 'Data Loss Protection (DLP)' as one of six SSE services, and the CASB page states it leverages data loss prevention technologies. Graded partner_integrated because the SSE stack is explicitly Fortinet and Palo Alto Networks technology per the SASE page. Alerting and exception workflow detail was not found. Quote is a verified substring of the DLP service description; the full sentence continues with enforcing policies on data across users, devices, applications, and networks."},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://businesswire.com/news/home/20250318895249/en/Radisson-Hotel-Group-Selects-GTT-for-Global-SASE-Deployment","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name via the specifically-named EnvisionDX platform component - 'DX' framing itself directly implies digital-experience-monitoring focus, reinforced by confirmed '24/7 monitoring and access to ticketing support' for the named Radisson deployment [16]"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:42a49360534e96d4228b2a27","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"partial","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"not_confirmed","transport_logistics":"yes","professional_services":"partial","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_entity","curated_uk_basis":"UK contracting entity with UK operations on a Tier 1 backbone; UK and EMEA delivery is established.","sector_review_queue":[{"sector":"hospitality_leisure","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, genuinely the best-evidenced sector in this entire profile | Confirmed global managed SD-WAN and distributed security architecture (FWaaS, SWG, CASB, ZTNA) directly deployed and confirmed operational across a real, named, large-scale hospitality customer | Not assessed for sector-specific frameworks, though PCI DSS relevance is high given payment-card handling typical of this sector, and was not independently confirmed (Table 13) | Radisson Hotel Group - named, major global hospitality brand, named senior customer executive quote (Adolfo Sanchez, SVP & CIO), 800-plus hotels and offices across four regions, extensively corroborated across at least eight independent publications | Asia-Pacific, Europe, Middle East, Africa, confirmed directly | The confirmed PCI DSS gap is a specific, worth-flagging limitation for this sector specifically, given typical payment-card handling requirements | Genuinely one of the strongest sector-fit findings in this entire profile - a real, detailed, large-scale, extensively-corroborated named case study with a senior customer executive quote.","named_evidence":"Radisson Hotel Group - named, major global hospitality brand, named senior customer executive quote (Adolfo Sanchez, SVP & CIO), 800-plus hotels and offices across four regions, extensively corroborated across at least eight independent publications","evidence_source_ids":["evidence:gtt:16","evidence:gtt:17"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"hospitality_leisure":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://businesswire.com/news/home/20250318895249/en/Radisson-Hotel-Group-Selects-GTT-for-Global-SASE-Deployment","https://gtt.net/about-us/press-releases/radisson-hotel-group-selects-gtt-for-global-sase-deployment/"],"qualification":"GTT Radisson release confirms selection and rollout of managed SASE/SD-WAN for hotels. This is an implementation announcement, not proof of all 800 hotels completed. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"hospitality_leisure":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":10,"research_metrics":{"supported":14,"partial":2,"partner_delivered":2,"managed_service_dependent":0,"not_primary":0,"unconfirmed":22,"total":40,"reviewed":18,"completeness_percent":45,"completeness":0.45},"proven_evidence_count":14,"response_panel":null,"best_for":"Hospitality and leisure; both","best_for_fields":{"sectors_yes":["Hospitality and leisure"],"sectors_partial":[],"regions":[],"size":[],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"zscaler","name":"Zscaler","website":"https://www.zscaler.com","category":"technology vendor","product_focus":"AI Security / GenAI Security, Data Fabric for Security, Risk360, Zero Trust Branch","cost_model":"Quote-based subscription; typically per-user/workload/location modules; SD-WAN integrations may add partner/vendor cost.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":160,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/zscaler/","shortlist_summary":"Zscaler is the vendor that effectively created the SSE category, and it’s still the one most competitors get measured against when it comes to sheer scale and security depth - the Zero Trust Exchange runs across 150+ data centres, processes over 400 billion transactions a day, and holds FedRAMP High authorisation for ZIA and ZPA (other SASE-class vendors also hold FedRAMP High or equivalent for their own components). If you’re a security-first buyer looking to retire VPN concentrators and stitch SWG, CASB, DLP and ZTNA together under one console, Zscaler is one of the most proven single-vendor routes to get there.","key_differentiators":["Category leader in SSE with ZIA, ZPA and ZDX; widely adopted as the security layer in best-of-breed SASE architectures.","Strong ecosystem of SD-WAN partners (Cisco, others) for buyers wanting Zscaler security with a separate SD-WAN platform.","Mature Zero Trust platform with substantial enterprise deployment history."],"best_fit_for":["Enterprises selecting best-of-breed SSE alongside a separate SD-WAN platform.","Security-driven SASE strategies where the SSE layer is the primary architectural decision.","Buyers consolidating multiple security point solutions onto a single SSE vendor."],"watch_outs":["Historically SSE-led; native SD-WAN capability is less mature than dedicated SD-WAN platforms (validate path selection, QoS and packet loss in RFP).","Premium pricing; typically per-user/workload/location with security modules adding cost.","Buyers needing one vendor for both SD-WAN and security may prefer a converged platform (Cato, FortiSASE, Prisma)."],"evidence_coverage_pct":0.45,"last_verified":"2026-09-01","evidence_source_count":81,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.zscaler.com/partners/service-providers","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"We partner with service providers to develop comprehensive managed offers that leverage the Zero Trust Exchange, our industry-leading security platform, to enable profitable managed service provider business models. Zscaler operates the platform itself and sells one first-party managed service (Zscaler MDR, security operations). On its own partner page the comprehensive managed offer is built and delivered by service provider partners, not by Zscaler. No Zscaler page was found describing Zscaler itself designing, deploying, changing and reporting on a customer's end-to-end service, so graded partial rather than yes."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.zscaler.com/blogs/product-insights/streamlining-multi-tenant-management-announcing-integration-multi-tenant","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The Multi-Tenant Portal has long been the cornerstone for Managed Service Providers (MSPs) and large-scale enterprises to oversee multiple Zscaler instances. Tenant isolation, cross-tenant pivoting and centralised delegated administration through ZIdentity are documented for MSPs. Nothing was found on Zscaler's own pages evidencing branded or white-label portals under the partner's own brand, and the definition requires that. The definitive partner portal documentation on help.zscaler.com could not be read because it is a JavaScript-only page (register 23). Graded partial for that reason."},"f17_cellular_and_5g_support":{"source_url":"https://www.zscaler.com/products-and-solutions/zscaler-cellular","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Devices use Zscaler SIMs to steer traffic securely to the Zero Trust Exchange with no need for additional software. Zscaler Cellular provides Zscaler-issued SIMs that carry cellular IoT and mobile device traffic into the Zero Trust Exchange, which covers SIM provisioning and management. The definition also asks for 4G and 5G as primary or failover WAN transport with modem and signal monitoring. Neither the Cellular product page nor the July 2025 cellular press release names 4G, 5G or LTE, the private 5G page concerns securing a customer's private 5G core rather than WAN transport, and the Zero Trust SD-WAN datasheet contains no cellular uplink specification. Graded partial on that gap."},"f19_public_cloud_gateways":{"source_url":"https://www.zscaler.com/press/zscaler-significantly-expands-global-sovereignty-zero-trust-exchange-platform","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Zscaler already operates 160+ data centers and is present in most countries. This is Zscaler's own infrastructure, not a resold third party's, so yes rather than partner_integrated. The reference architecture confirms Zscaler deploys its own ZIA Service Edge devices into those data centres and that users are always directed to the nearest one for traffic processing, which is security enforcement and SaaS access delivered as the vendor's own cloud service."},"f20_private_pops_dedicated_pops":{"source_url":"https://www.zscaler.com/resources/reference-architectures/traffic-forwarding-in-zscaler-internet-access.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"ZIA Private Service Edge and ZIA Virtual Service Edge devices extend the Zscaler cloud into your data center. Directly meets the definition: customer-hosted and dedicated deployments exist alongside the shared multi-tenant Public Service Edges. The March 2026 sovereignty press release additionally describes Private Service Edges as single-tenant, customer-hosted, and Zscaler-managed appliances, plus dedicated control and logging planes in six countries, which covers the sovereign case."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:44562c0b5225f88ac0275492","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"not_confirmed","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). UK PoPs in the Zero Trust Exchange; delivered direct or via UK partners and carriers.","sector_review_queue":[{"sector":"professional_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Conditional fit | Not assessed | Not assessed | Mindbody (business software/services company) | N/A | Single case study, not sector-specific in focus | Some evidence exists but isn't a deep sector-specific case.","named_evidence":"Mindbody (business software/services company)","evidence_source_ids":["evidence:zscaler:19"]},{"sector":"government_public_sector","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | FedRAMP High/Moderate, DoD IL5, GovRAMP, CJIS, CMMC Level 2 | FedRAMP High/Moderate, GovRAMP Authorized, CJIS, CMMC Level 2, DoD IL4/IL5 | CSC (public-sector case study, VPN-to-Zero-Trust productivity gains) | Zscaler Government Cloud is a distinct FedRAMP High authorised offering | US-federal-specific; UK/EU public-sector framework listings not found in this pass | By far the best-evidenced sector in this entire profile - genuinely strong, multi-source, dated evidence. The clear standout differentiator versus Cato, which had no equivalent public-sector compliance depth.","named_evidence":"CSC (public-sector case study, VPN-to-Zero-Trust productivity gains)","evidence_source_ids":["evidence:zscaler:20"]},{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced | SD-WAN/ZIA for distributed sites, M365 security | Not assessed | AutoNation (retail/automotive dealerships), Baker & Baker (food manufacturing/retail supply) | Multi-site retail benefits from ZIA's direct-to-cloud model avoiding centralised backhaul | US-centric case evidence; UK/EU retail-specific case studies not found in this pass | Reasonably well evidenced via AutoNation specifically, though not as singularly strong as Cato's Ulta Beauty story.","named_evidence":"AutoNation (retail/automotive dealerships), Baker & Baker (food manufacturing/retail supply)","evidence_source_ids":["evidence:zscaler:17","evidence:zscaler:18"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Conditional fit | SD-WAN/branch capability plausibly relevant | Not assessed | Baker & Baker (food manufacturing) | N/A | Single case study, not deeply metric-rich beyond the ransomware-reduction claim | Some evidence exists but is thinner than the retail/public-sector case studies.","named_evidence":"Baker & Baker (food manufacturing)","evidence_source_ids":["evidence:zscaler:17"]},{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Conditional fit | Global remote-access capability plausibly relevant | Not assessed | NOV (oilfield services/energy, 27,500 users, global remote-access rollout during COVID-19) | Global distributed workforce use case well evidenced | Single case study, but a genuinely substantial, named, metric-rich one | NOV is a strong, credible case study for this sector specifically - a real enterprise-scale (27,500-user) deployment with a clear before/after narrative.","named_evidence":"NOV (oilfield services/energy, 27,500 users, global remote-access rollout during COVID-19)","evidence_source_ids":["evidence:zscaler:21"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"energy_utilities":false,"government_public_sector":false,"manufacturing":false,"retail_ecommerce":false,"professional_services":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://zscaler.com/customers/nov","https://zscaler.com/customers/csc","https://zscaler.com/customers/baker-baker","https://zscaler.com/customers/mindbody","https://zscaler.com/customers/autonation"],"qualification":"NOV case documents ZIA/ZPA and zero-trust access for an energy-industry supplier. Do not infer utility-specific compliance or UK fit. CSC is Australian Commonwealth Superannuation Corporation; ZIA/ZPA deployment confirmed. Government-pension context, not a blanket public-sector accreditation. Baker and Baker case documents ZIA/ZPA alongside a separately adopted SD-WAN. Manufacturing evidence; Zscaler is not identified as the SD-WAN provider. Mindbody is a SaaS software business serving wellness firms. Its ZPA deployment does not establish professional-services or healthcare end-buyer sector evidence. AutoNation confirms ZIA deployment across retail locations. Baker and Baker must not be counted as a second retail case; it is manufacturing. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"energy_utilities":"yes","government_public_sector":"yes","manufacturing":"yes","professional_services":"not_confirmed","retail_ecommerce":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":11,"research_metrics":{"supported":15,"partial":3,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":22,"total":40,"reviewed":18,"completeness_percent":45,"completeness":0.45},"proven_evidence_count":15,"response_panel":null,"best_for":"Retail and e-commerce; Manufacturing; Energy and utilities; Government and public sector; platform","best_for_fields":{"sectors_yes":["Retail and e-commerce","Manufacturing","Energy and utilities","Government and public sector"],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"colt-technology-services","name":"Colt Technology Services","website":"https://www.colt.net/products/networking/sd-wan","category":"carrier network provider","product_focus":"Colt SASE Gateway solution, Colt SD WAN, Colt SD WAN Remote Access, Partner IP Access (Blue Wireless)","cost_model":"Quote-based managed service; access, SD-WAN/SASE design, data sovereignty and service options drive pricing.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_entity","uk_basis":"Colt Technology Services Group Limited, company 03232904, is registered at Colt House, 20 Great Eastern Street, London. Colt publishes a London SD-WAN deployment.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"yes","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"partial","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"yes","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"yes","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":99.9,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"yes","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/colt/","shortlist_summary":"Colt Technology Services is a long-established, European-anchored network operator, founded in 1992 as City of London Telecommunications and headquartered in London. Since 2015 Colt has been privately owned by Fidelity International (Eight Roads’ current specific role to be reconfirmed), and its network footprint expanded materially through a significant acquisition of Lumen Technologies’ Europe, Middle East and Africa business for $1.8 billion, completed November 2022, reinforcing Colt’s own confirmed network scale of more than 30 countries, more than 50 metropolitan area networks, and more than 32,000 on-net buildings, all delivered over its own named Colt IQ Network platform.","key_differentiators":["SD-WAN and SASE with strong European data sovereignty positioning.","Managed and co-managed delivery options with management portal access.","Enterprise-grade connectivity heritage with substantial European network ownership."],"best_fit_for":["European enterprises prioritising data residency, sovereignty and regulatory alignment.","Buyers wanting genuine co-managed delivery rather than pure managed or pure DIY.","Organisations consolidating European connectivity with SD-WAN under one provider."],"watch_outs":["Global delivery depth outside Europe is less prominent than the largest global carriers.","CASB capability: not confirmed; Data loss prevention: not confirmed. Ask Colt to identify the SSE platform, licences and operational responsibilities.","Underlying SD-WAN platform should be explicitly confirmed in RFP."],"evidence_coverage_pct":0.425,"last_verified":"2026-09-01","evidence_source_count":26,"capability_evidence":{"f03_co_managed_service":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Customers can choose to do (add/edit/delete) all their policy configurations anytime via the secure Colt SD WAN portal This is a textbook shared-responsibility split: Colt runs the platform, CPE and support while the customer retains live policy and change rights through the portal. The guide also states customers can add branch sites in hours and upgrade bandwidth in real time themselves."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"For the Wholesale SD WAN service, both wholesale customers and end customers will benefit from a customized look and feel, setting wholesale customer's own logo, background image, links and contact details, so that their end-customer experience doesn't differ from the rest of their services offered. All four elements of the definition are evidenced on one page: branded portal (logo, background, links), delegated administration (the carrier holds end-customer credentials and handles resets), tenant isolation (IPC* tenant identifiers in Versa Director) and hierarchy templates (customizable portal, branding and further hierarchy levels). Colt sells this explicitly as a Wholesale SD WAN solution for partners to resell."},"f09_encrypted_overlay_fabric":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-10-01","review_due":"2026-12-30T00:00:00Z","qualification":"Colt documents an encrypted overlay over private MPLS and public Internet underlay. The Colt Versa SD-WAN service guide documents an encrypted overlay using IPsec. Encryption configuration and throughput must be established for the chosen service design."},"f15_local_internet_breakout":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'secure local internet breakout' named explicitly as a core integrated-firewall capability [4]"},"f17_cellular_and_5g_support":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Colt SD WAN services can be provided over public internet – broadband Internet and business internet – dedicated internet access (DIA) connectivity (using any and all transport technologies like xDSL, wireless 3G/4G/LTE/5G (only available in EU for Colt provided SIMs, no limitation for customer-owned), Ethernet or traditional MPLS regardless of whether Colt is providing that underlying connectivity or not. 4G and 5G are supported as transport, and SIM management is evidenced both ways: Colt provided SIMs (EU only) or customer-owned SIMs with no geographic limitation. A separate wireless option is delivered with Blue Wireless, a Singapore-based company, supplying a Cradlepoint mobile router with dual SIM, data, installation, operation and an SLA. Confidence is medium because the guide also states that by default 3G/4G/5G circuits should be used as backup only where fixed Internet and MPLS are available, and because no published evidence of signal monitoring was found. Note the sentence quoted is reproduced as printed, including its unclosed parenthesis and en dashes."},"f18_cloud_on_ramp":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the confirmed uCPE architecture, described as 'bringing cloud computing benefits from data centres to edge computing at customer' sites [4]"},"f19_public_cloud_gateways":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the confirmed uCPE architecture, described as 'bringing cloud computing benefits from data centres to edge computing at customer' sites [4]"},"f20_private_pops_dedicated_pops":{"source_url":"https://www.colt.net/products/networking/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Sovereign SASE keeps data within its own network and in specific regions, avoiding third-party transfers and boosting control. Colt markets a Sovereign SASE deployment model and a Versa Hosted SASE Solution, and the product page describes sovereign SASE as a model where the organisation or a service provider hosts all components. That evidences regional and sovereign data control. Graded partial rather than yes because no page found describes a customer-hosted or single-tenant dedicated PoP as an orderable option with defined commercials; the published claim is about data residency within Colt's own network, which is not the same as a dedicated PoP."},"f24_flexible_edge_form_factors":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'uCPE allows customers to licence, manage, and monitor functions with flexible network options', with a specifically-named 'blue wireless CPE' attachable to 'any of the current standard Versa CPEs' [4]"},"f25_high_availability_design":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Active/Active operation' and the confirmed dual resilient SIM architecture for the named Blue Wireless partnership specifically [4] [6]"},"f26_sla_backed_service_fabric":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"SLA (for on-net circuits) | 99.90% | 99.90% | 99.95% | 99.90% | 99.95% | 99.90% | 99.95% The service guide publishes a contractual availability SLA differentiated by site package, 99.90% for XS/S/M/L and 99.95% for the S Plus, M Plus and L Plus tiers, and the guide is a service-guide-grade document rather than marketing. The wireless option is separately stated to guarantee 50% of contract speed. Confidence is medium on two counts: the SLA applies to on-net circuits only, and no published response-time, change-handling, latency, jitter or loss commitments were found. The quote is a table row, so a verifier should expect it rendered as a table rather than prose."},"f27_integrated_next_generation_firewall":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'Colt SD WAN provides an integrated firewall with SD WAN which provides secure local internet breakout, provides DDoS protection and ability to create firewall policies and rules through customer portal' [4]"},"f28_full_sase_platform":{"source_url":"https://coltonlinehelp.colt.net/sd-wan-external-service-guide/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and genuinely well-evidenced via Colt's own confirmed, substantial network scale combined with a confirmed, long-standing platform partnership [4]"},"f30_zero_trust_network_access":{"source_url":"https://colt.net/resources/insights/colt-technology-services-brings-together-sd-wan-and-sse-features-in-new-integrated-full-sase-solution","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed with genuine specificity via a named product - Colt SD WAN Remote Access, 'based on Versa Secure Access (VSA)' [2]"},"f31_secure_web_gateway":{"source_url":"https://colt.net/resources/insights/colt-technology-services-brings-together-sd-wan-and-sse-features-in-new-integrated-full-sase-solution","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Versa Secure Web Gateway, a secure web access solution that offers organisations protection from malware and threats' [2]"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:a584a69d43415d71a6eb57d0","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"partial","energy_utilities":"not_confirmed","government_public_sector":"partial","education":"yes","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_hq","curated_uk_basis":"UK headquartered (London). UK contracting entity with owned UK metro fibre and UK support.","sector_review_queue":[{"sector":"financial_services","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via real, verbatim customer testimony | Confirmed real customer testimony directly describing Colt as 'an industry leader that provides a wide range of technology product portfolios and solutions which can best fit the financial customer's unique requirements' | PCI DSS not confirmed (Table 13); the confirmed August 2025 security incident is a specific, worth-flagging consideration for this sector particularly | A real, verbatim, independently-hosted (Gartner Peer Insights) customer review specifically naming financial-sector fit | N/A | The confirmed PCI DSS gap and the confirmed security incident are both specific, worth-flagging considerations for this sector specifically, given its typical compliance sensitivity | A real, specific, sector-relevant customer testimony exists, tempered directly by the confirmed compliance gaps and the confirmed security incident - Netify recommends financial-services buyers specifically raise both points directly with Colt.","named_evidence":"A real, verbatim, independently-hosted (Gartner Peer Insights) customer review specifically naming financial-sector fit","evidence_source_ids":["evidence:colt:7"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"financial_services":true},"reviewed_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.colt.net/customer-stories/byblos-bank-europe","https://www.colt.net/customer-stories/leading-global-investment-bank","https://docs.colt.net/legal/terms-and-conditions","https://docs.colt.net/legal/colt-group-of-companies","https://find-and-update.company-information.service.gov.uk/company/03232904"],"qualification":" Named Byblos Bank Europe case documents Colt SD-WAN at Brussels, London and Paris with Zscaler access services. Establishes financial-services deployment and London delivery; not nationwide or Irish access availability. Separate anonymous investment bank evidence is qualified and does not replace the named case. UK review update (supersedes earlier UK-region qualification): The named UK group entity operates the website; the trading-company list separately identifies Colt Technology Services (02452736) in England and Wales. The group entity is not assumed to sign each service contract. The Byblos Bank Europe case includes London SD-WAN delivery. Actual trading entity, each site and Irish coverage require order-specific confirmation.","sectors":{"financial_services":"yes"},"regions":{"uk_ireland":"yes"}}},"uk_evidence":{"entity":{"status":"evidenced","name":null,"source_urls":["https://www.colt.net/customer-stories/byblos-bank-europe","https://www.colt.net/customer-stories/leading-global-investment-bank","https://docs.colt.net/legal/terms-and-conditions","https://docs.colt.net/legal/colt-group-of-companies","https://find-and-update.company-information.service.gov.uk/company/03232904"],"checked_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","qualification":"Colt Technology Services Group Limited, company 03232904, is registered at Colt House, 20 Great Eastern Street, London. Colt publishes a London SD-WAN deployment."},"regional_delivery":{"status":"yes","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":12,"research_metrics":{"supported":16,"partial":1,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":23,"total":40,"reviewed":17,"completeness_percent":43,"completeness":0.425},"proven_evidence_count":16,"response_panel":null,"best_for":"Financial services; UK and Ireland; Large global enterprise; managed","best_for_fields":{"sectors_yes":["Financial services"],"sectors_partial":[],"regions":["UK and Ireland"],"size":["Large global enterprise"],"service_model":"managed","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"uk_entity","label":"UK contracting entity","source_urls":["https://www.colt.net/customer-stories/byblos-bank-europe","https://www.colt.net/customer-stories/leading-global-investment-bank","https://docs.colt.net/legal/terms-and-conditions","https://docs.colt.net/legal/colt-group-of-companies","https://find-and-update.company-information.service.gov.uk/company/03232904"],"reviewed_at":"2026-09-30T19:56:00Z","qualification":"Colt Technology Services Group Limited, company 03232904, is registered at Colt House, 20 Great Eastern Street, London. Colt publishes a London SD-WAN deployment."}},{"slug":"vodafone-business","name":"Vodafone Business","website":"https://vb2b.vodafone.com/business/products/fixed-connectivity/sd-wan","category":"managed service provider / carrier network provider","product_focus":"Fortinet-based Secure Networking, Vodafone Business Managed Network Services, Vodafone Business Network as a Service (NaaS), Vodafone Business SASE","cost_model":"Quote-based managed service; carrier access, SD-WAN platform, security services and country coverage determine costs.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_entity","uk_basis":"Vodafone Limited, company 01471587, identifies its registered office in Newbury; the Optos SD-WAN case includes UK operations.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"partner_integrated","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"partner_integrated","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"yes"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"yes","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"yes","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"not_confirmed","manufacturing":"not_primary","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"yes","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":212,"sla_availability_pct":99.99,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"yes","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/vodafone/","shortlist_summary":"Vodafone Group is a vast, multinational telecommunications operator - for the financial year ended 31 March 2024, Vodafone Group reported total revenue of €36.7 billion, with Vodafone Business specifically operating across all of Vodafone’s markets, addressing a claimed €160 billion addressable market, serving 5 million customers, managing 198 million IoT connections (FY24 figure), and contributing 24% of Group service revenue. Against that scale, the managed SD-WAN and SASE proposition examined in this profile is one product line within a much larger enterprise business.","key_differentiators":["Strong UK and European market presence with NaaS positioning and integrated mobile/fixed access.","VeloCloud-based managed SD-WAN in the UK with broader Vodafone international footprint.","Tight integration with Vodafone mobile services for buyers prioritising cellular and 5G access."],"best_fit_for":["UK and European enterprises wanting carrier-led SD-WAN with strong mobile and 5G integration.","Buyers consolidating fixed and mobile access alongside SD-WAN platform delivery.","Organisations attracted to the NaaS consumption model."],"watch_outs":["Underlying platform varies by region (VeloCloud in UK, others elsewhere); ensure consistency for multinational deployment.","Security and SASE capabilities are largely partner-integrated.","Commercial structure bundles access, mobile and platform; line-item costing requires explicit RFP."],"evidence_coverage_pct":0.425,"last_verified":"2026-09-01","evidence_source_count":42,"capability_evidence":{"f07_lifecycle_management":{"source_url":"https://www.vodafone.com/news/newsroom/technology/vodafone-business-and-fortinet-expand-global-partnership-to-secure-hybrid-work","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Vodafone Business Secure Firewall with Fortinet delivers a comprehensive managed security service to setup, operate, run, manage and maintain customer firewalls in a highly secure manner. Graded partial, and the gap matters. What is documented is estate scale and ongoing maintenance: the datasheet claims 45,000 managed CPEs, includes Release Management and Vulnerability Management in the managed service list, and states Zero-touch provisioning reduces engineer time on site. Release and Vulnerability Management reasonably imply firmware upgrades and patching in service. What I could not evidence anywhere is the harder half of the definition: hardware replacement or RMA, renewals, and end-of-life planning. None of those terms appear in the datasheet or on any product page reviewed. A buyer should treat hardware refresh and EoL as an open contractual question rather than assume it is included."},"f17_cellular_and_5g_support":{"source_url":"https://d3bql97l1ytoxn.cloudfront.net/app_resources/401786/documentation/1435542_1720420681871_en-US.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Replace expensive private links with low-cost internet/5G Graded partial rather than yes because the evidence establishes only the transport half of the definition. The datasheet positions 5G as a substitute for private circuits and lists 4/5G among access options, so cellular as primary or failover transport is evidenced. I found no published detail on integrated versus external modems, SIM management, or signal monitoring. This is a case where prior knowledge would be tempting, since Vodafone is a mobile network operator and self-evidently manages SIMs at scale, but no page I fetched in this task documents SIM management as part of the SD-WAN service, so I have not graded it."},"f18_cloud_on_ramp":{"source_url":"https://vodafone.co.uk/business/sdn/secure-access-service-edge","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'secure overlay connectivity between customer sites and extending to cloud service provider environments e.g. Microsoft Azure, Amazon Web Services' [2]"},"f19_public_cloud_gateways":{"source_url":"https://www.vodafone.co.uk/newscentre/press-release/zscaler-smes-cloud/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Vodafone Business Secure Gateway Access is underpinned by the Zscaler Zero Trust Exchange™ Platform. This is the distinction the definition is built around, and it falls clearly on the partner side. The cloud enforcement points behind Vodafone Business Secure Access Gateway ZIA and ZPA are Zscaler's, and the 2025 Fortinet announcement adds FortiSASE, described by Fortinet as FortiSASE cloud-based security solutions. Both are another company's PoP estate that Vodafone resells and manages. Vodafone Cloud Connect was also checked and offers connectivity to AWS, Google Cloud, IBM, Microsoft Azure and Oracle, which the definition expressly excludes as evidence. No Vodafone-operated shared SASE gateway estate was found."},"f21_private_global_backbone":{"source_url":"https://www.vodafone.co.uk/business/sdn/secure-access-service-edge","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our range of access networks is available in 192 countries using our enhanced internet backbone, reducing the number of hops and providing resilience. Graded yes because the possessive is doing real work: our enhanced internet backbone is Vodafone-owned or controlled infrastructure, and the stated scope is global rather than national, which clears the bar the definition sets against single-country networks. The datasheet corroborates with We cover underlay, overlay, local access and wider services within the solution to 192 countries. Confidence is held at medium for two reasons. First, Vodafone describes it as an internet backbone rather than a private MPLS core in the current material, so the predictable latency and loss characteristic is asserted only indirectly through reducing the number of hops. Second, the 2014 release makes clear the reach is a mix of directly operated and partner networks, so not every one of the 192 countries rides Vodafone-owned fibre. Between regions on Vodafone's own core, the capability holds."},"f23_multi_cloud_transit_fabric":{"source_url":"https://vodafone.co.uk/business/sdn/secure-access-service-edge","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'secure overlay connectivity between customer sites and extending to cloud service provider environments e.g. Microsoft Azure, Amazon Web Services' [2]"},"f26_sla_backed_service_fabric":{"source_url":"https://d3bql97l1ytoxn.cloudfront.net/app_resources/401786/documentation/1435542_1720420681871_en-US.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our managed and co-managed services are backed up by the broadest range of SLAs in line with our vision for an excellent customer experience Graded yes on the existence of contractual commitments, which is what this field measures, and it is distinct from the sla_availability_pct field where the published number is much weaker. The datasheet also states Bundle our underlay for E2E SLAs, which is a meaningful claim: because Vodafone supplies the access circuits as well as the overlay, it can commit end to end rather than only on the overlay. The 2025 Fortinet announcement independently confirms various service-level guarantees as a purchasable management option. Change handling is covered by Change Management in the managed service list. Latency, jitter and loss targets were not found published."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.vodafone.com/news/newsroom/technology/vodafone-business-and-fortinet-expand-global-partnership-to-secure-hybrid-work","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Vodafone Business Secure Firewall with Fortinet delivers a comprehensive managed security service to setup, operate, run, manage and maintain customer firewalls in a highly secure manner. Fortinet technology, operated by Vodafone, so partner_integrated per the definition rather than yes. Fortinet's own release confirms the services integrate Fortinet's industry-leading software-defined wide area network (SD-WAN) and FortiSASE cloud-based security solutions. The datasheet's Inbuilt encryption and firewalls protects data and branches shows the firewall is integrated into the SD-WAN edge rather than sold as a separate appliance, which satisfies the integration half of the test, but the technology is not Vodafone's. I did not find a Vodafone page enumerating the individual NGFW functions (application control, IPS, malware inspection, URL filtering) by name, so that breakdown rests on the Fortinet product identification rather than on a Vodafone feature list."},"f30_zero_trust_network_access":{"source_url":"https://vodafone.co.uk/business/sdn/secure-access-service-edge","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - Zscaler is described specifically as delivering 'private application connectivity through a zero-trust architecture' [2]"},"f31_secure_web_gateway":{"source_url":"https://vodafone.co.uk/business/sdn/secure-access-service-edge","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as part of the Zscaler-based SASE partnership [2] Capability specifics depend on which underlying platform (Zscaler or Fortinet) is proposed"},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://vodafone.com/news/newsroom/technology/vodafone-business-and-fortinet-expand-global-partnership-to-secure-hybrid-work","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'a single view across network health visibility, performance dashboards, and customisable reports' [5] A distinctly-branded DEM product name wasn't itemised"},"f40_managed_service_assurance":{"source_url":"https://d3bql97l1ytoxn.cloudfront.net/app_resources/401786/documentation/1435542_1720420681871_en-US.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our global service desk and regional operations centres run 24x7x365 The network operations half is well evidenced by the datasheet quote plus 24/7 Incidents Support and Proactive incidents in the managed service list. The security operations half is evidenced from the Tier 2 G-Cloud filing by VODAFONE LIMITED, whose support levels field reads 24 x7 x 365 Security Operations Centre, although note that filing covers Managed SOC and SIEM rather than SD-WAN. Incident ownership through to root cause is supported by Problem Management appearing as a distinct line item alongside incident handling, which is the ITIL construct for root cause work, and change governance by Change Management. Confidence is medium rather than high because the phrase root cause analysis does not itself appear on any page fetched, and structured service reviews are implied by Service Management in the list rather than described."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:cf05ef06bacc5b079425816a","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"partial"},"curated_uk_delivery":"uk_hq","curated_uk_basis":"UK headquartered (Vodafone, Newbury). UK contracting entity with UK support desks and fixed-mobile UK assets.","sector_review_queue":[],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{},"reviewed_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Codex primary-source review","source_urls":["https://www.vodafone.co.uk/privacy","https://www.vodafone.co.uk/business/case-studies/sd-wan-keeps-optos-connected-worldwide"],"qualification":"UK review update (supersedes earlier UK-region qualification): Vodafone Limited UK entity and UK SD-WAN delivery evidence are confirmed. Group branding does not determine the contracting entity for an individual quote. Irish coverage, address availability and current supplier fit require confirmation.","sectors":{},"regions":{"uk_ireland":"yes"}}},"uk_evidence":{"entity":{"status":"evidenced","name":null,"source_urls":["https://www.vodafone.co.uk/privacy","https://www.vodafone.co.uk/business/case-studies/sd-wan-keeps-optos-connected-worldwide"],"checked_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","qualification":"Vodafone Limited, company 01471587, identifies its registered office in Newbury; the Optos SD-WAN case includes UK operations."},"regional_delivery":{"status":"yes","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":13,"research_metrics":{"supported":11,"partial":3,"partner_delivered":3,"managed_service_dependent":0,"not_primary":0,"unconfirmed":23,"total":40,"reviewed":17,"completeness_percent":43,"completeness":0.425},"proven_evidence_count":11,"response_panel":null,"best_for":"Sector evidence not yet reviewed; UK and Ireland; Large global enterprise; Mid-market; managed","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":["UK and Ireland"],"size":["Large global enterprise","Mid-market"],"service_model":"managed","signoff":""},"editorial":null,"uk_status":{"status":"uk_entity","label":"UK contracting entity","source_urls":["https://www.vodafone.co.uk/privacy","https://www.vodafone.co.uk/business/case-studies/sd-wan-keeps-optos-connected-worldwide"],"reviewed_at":"2026-09-30T19:56:00Z","qualification":"Vodafone Limited, company 01471587, identifies its registered office in Newbury; the Optos SD-WAN case includes UK operations."}},{"slug":"ntt","name":"NTT DATA","website":"https://www.nttglobal.net/services/sd-wan","category":"carrier network provider","product_focus":"Managed Campus Networks with Prisma SASE, Managed Internet Connectivity, Managed IoT and Network as a Service (NaaS), Managed Network Security","cost_model":"Quote-based managed service; global design/delivery/support, SD-WAN vendor and security stack determine cost.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"partial","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"yes"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"yes","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"yes","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":75,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/ntt-data/","shortlist_summary":"NTT DATA is a massive, globally-established IT services and network provider, founded in Japan in 1988 as a spinoff of Nippon Telegraph and Telephone (NTT), and now operating in more than 70 countries with approximately 190,000 employees. A significant, current corporate event is worth understanding first: on 8 May 2025, NTT, Inc. 75% acceptance, and following shareholder approval on 29 August 2025, NTT DATA Group was formally delisted from the Tokyo Stock Exchange on 26 September 2025, becoming a wholly-owned subsidiary of NTT, Inc.","key_differentiators":["24x7 managed SD-WAN delivery via global operations centres with strong portal visibility.","Managed SASE partnership with Palo Alto Networks (Prisma SASE) for buyers wanting that platform under managed service.","Strong global delivery footprint including APAC, EMEA and Americas."],"best_fit_for":["Multinational enterprises wanting truly global managed delivery with consistent operations across regions.","Buyers wanting Prisma SASE consumed as a fully managed service.","Organisations prioritising managed service maturity and global SOC/NOC depth."],"watch_outs":["Platform fit depends on which vendor is being proposed (Palo Alto, Zscaler, others); evaluate platform independently.","Commercial complexity is meaningful at global scale; ensure scope and RACI are explicit.","DIY/self-managed model is not the primary positioning."],"evidence_coverage_pct":0.4,"last_verified":"2026-09-01","evidence_source_count":32,"capability_evidence":{"f03_co_managed_service":{"source_url":"https://www.nttglobal.net/services/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Customers have the option to self-manage via a web portal or NTT can offer managed services. The published wording describes an either/or choice (customer self-manages via portal, OR NTT manages) rather than an explicitly shared-responsibility co-managed model. The NTT DATA/Cisco managed SASE brochure describes people-augmented, technology-augmented and hybrid operating models, which implies shared operation, but no page reviewed states which policy or change rights the customer retains. Graded partial rather than yes for that reason."},"f05_professional_services_and_migration_support":{"source_url":"https://dam.nttdata.com/api/public/content/GLOBAL-MNS-brochure","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'Move from outdated, end-of-life infrastructure to a modern, scalable network - with a tailored roadmap built around your current environment and future needs'"},"f07_lifecycle_management":{"source_url":"https://www.nttglobal.net/services/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"NTT's Infrastructure Management Services provide full life cycle: architecture, design, implementation, upgrades, and full proactive 24×7 management of a customer's global network and security infrastructure. Quote uses a multiplication sign in 24×7 as printed on the page. Upgrades and full lifecycle management are stated as part of the service. The NTT DATA/Cisco SASE brochure adds decommissioning and refresh to the same lifecycle. Hardware replacement and end-of-life planning are not named in those exact terms."},"f09_encrypted_overlay_fabric":{"source_url":"https://dam.nttdata.com/api/public/content/Guide-NTT-DATA-and-Cisco-together-we-make-you-unbeatable-perspective-compressed?v=3f355dc9","reviewed_at":"2026-10-01","review_due":"2026-12-30T00:00:00Z","qualification":"NTT DATA and Cisco describe an encrypted SD-WAN customer deployment and their managed SD-WAN services. NTT DATA documents an encrypted SD-WAN deployment with Cisco and managed services using Viptela/Meraki. Evidence establishes this delivery option, not every NTT platform or UK site availability."},"f13_qos_and_traffic_shaping":{"source_url":"https://services.global.ntt/en-us","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - SD-WAN networks 'can use additional resources to adapt to changes in demand and prioritize business-critical traffic'"},"f17_cellular_and_5g_support":{"source_url":"https://www.nttglobal.net/services/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Unrivaled performance and connectivity options: MPLS, Ethernet, Local Internet, Broadband, LTE/4G in over 190 countries. LTE/4G is named as a supported transport option alongside MPLS, Ethernet, internet and broadband. 5G is not named on the SD-WAN service page, the platform page or the security page, and no page reviewed mentions SIM management or signal monitoring. NTT DATA does market a separate Private 5G service, but that is a private cellular network offering rather than evidence of 5G WAN transport in the SD-WAN service, so it is not used to lift this grade."},"f19_public_cloud_gateways":{"source_url":"https://www.nttglobal.net/services/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Secure Web Gateways located at 75+ globally distributed Local Cloud Centers (LCCs) closer to client locations to protect customers from Internet threats. The Local Cloud Centers are NTT's own distributed infrastructure delivering secure web gateway enforcement as a cloud service, which meets the definition of vendor-operated shared gateways. Separately the page describes optimised connectivity to AWS, Azure and Oracle Cloud, but per the definition that cloud onramp capability is not counted as evidence here. The security functions enforced at these gateways may use partner technology, which is graded separately under sse_layer_ownership."},"f21_private_global_backbone":{"source_url":"https://www.gin.ntt.net/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Our dual-stack Tier-1 Global IP Network spans the Americas, Asia, Europe and Oceania on a single autonomous system number (AS2914). NTT owns and operates a Tier 1 global IP backbone under AS2914 spanning four continents, and publishes contractual inter-region latency, loss and jitter figures for it, which is the strongest form of evidence for this field. Caveat: this is the Global IP Network transit product; none of the SD-WAN or SASE pages reviewed states that SD-WAN inter-region traffic is carried on AS2914 by default rather than over the public internet."},"f26_sla_backed_service_fabric":{"source_url":"https://www.gin.ntt.net/support-center/service-level-agreements-slas/our-global-ip-network/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"The Global IP Network Backbone will be available to the customer free of Network Outages 100% of the time. NTT publishes a contractual SLA for its Global IP Network covering availability, region-by-region latency, packet loss (average monthly not exceeding 0.1%) and jitter. Confidence is medium because this SLA document covers the IP backbone product; no published SLA percentage or response and change-handling commitment specific to the managed SD-WAN or managed SASE service was located on the pages reviewed."},"f27_integrated_next_generation_firewall":{"source_url":"https://nttdata.com/global/en/services/enterprise-networking/managed-network-services","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, via the confirmed Managed Network Security product line and the confirmed underlying platform partnerships"},"f30_zero_trust_network_access":{"source_url":"https://services.global.ntt/en-us/campaigns/managed-campus-networks-with-prisma-sase","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'zero trust, identity-level security to strengthen the protection of enterprise digital resources and IT applications, no matter where employees access them'"},"f38_observability_and_digital_experience_monitoring":{"source_url":"https://nttdata.com/global/en/insights/reports/ntt-data-is-a-leader-in-managed-network-services","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'Full-stack observability that gives you real-time visibility and analytics for faster resolution and enhanced end-user experiences' A distinctly-branded DEM product name wasn't itemised"},"f40_managed_service_assurance":{"source_url":"https://www.nttglobal.net/services/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"NTT's SD-WAN Services are managed by world-class Global Operations Centers that perform 24×7 predictive modeling, monitoring and management Quote uses a multiplication sign in 24×7 as printed on the page. NTT states 24x7 proactive monitoring and management from Global Operations Centers acting as a single point of contact, and the NTT DATA/Cisco brochure states that its ISO-certified operations and ITIL-aligned processes ensure service excellence in all areas, which implies formal change governance. Confidence is medium because no page reviewed explicitly commits to owning incidents through to root cause analysis or to structured periodic service reviews; NTT DATA's SPEKTRA platform page references AI-based root cause analysis as a platform feature but that wording was not independently verified as a contractual service commitment."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:f32cd79b051e6620156e54b6","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_entity","curated_uk_basis":"UK contracting entity (NTT DATA UK) of a Japanese parent, with UK delivery and operations.","sector_review_queue":[{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, named customer reference with IoT-specific detail | Confirmed IoT gateway deployment connecting 'sensors and water metres to the regional LoRaWAN network', via the named Cisco partnership specifically | Not assessed for sector-specific frameworks | CILE (Compagnie Intercommunale Liégeoise des Eaux) - named, real Belgian water utility, with specific, named technical partnership detail (Cisco, LoRaWAN) | Belgium, confirmed directly | This reference centres on IoT/sensor connectivity specifically rather than core SD-WAN/SASE; direct sector-fit evidence for the core service examined in this profile is more limited | A real, named, technically-specific customer reference exists for adjacent IoT/NaaS capability; direct evidence for the core SD-WAN/SASE service specifically in this sector is comparatively thinner.","named_evidence":"CILE (Compagnie Intercommunale Liégeoise des Eaux) - named, real Belgian water utility, with specific, named technical partnership detail (Cisco, LoRaWAN)","evidence_source_ids":[]},{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, named customer reference | Confirmed 'intelligent, software-defined network' enabling data access, collaboration, and secure remote work | Not assessed for sector-specific frameworks | Frucor Suntory - named, real beverage manufacturing company, brief but real customer reference | Not itemised by specific country/region | The confirmed reference is brief relative to the detailed Pick n Pay case study; specific quantified outcomes weren't itemised for this reference specifically | A real, named customer reference exists, though with less narrative and quantified detail than the confirmed Pick n Pay case study.","named_evidence":"Frucor Suntory - named, real beverage manufacturing company, brief but real customer reference","evidence_source_ids":[]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, named customer reference | Confirmed 'intelligent, software-defined network' enabling data access, collaboration, and secure remote work | Not assessed for sector-specific frameworks | Frucor Suntory - named, real beverage manufacturing company, brief but real customer reference | Not itemised by specific country/region | The confirmed reference is brief relative to the detailed Pick n Pay case study; specific quantified outcomes weren't itemised for this reference specifically | A real, named customer reference exists, though with less narrative and quantified detail than the confirmed Pick n Pay case study.","named_evidence":"Frucor Suntory - named, real beverage manufacturing company, brief but real customer reference","evidence_source_ids":[]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"retail_ecommerce":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://services.global.ntt/en-us/campaigns/infrastructure-services"],"qualification":"Recovered NTT Pick n Pay case: Fortinet managed SD-WAN across retail stores; South Africa, not proof of UK delivery. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"retail_ecommerce":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":14,"research_metrics":{"supported":12,"partial":3,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":24,"total":40,"reviewed":16,"completeness_percent":40,"completeness":0.4},"proven_evidence_count":12,"response_panel":null,"best_for":"Retail and e-commerce; Large global enterprise; managed","best_for_fields":{"sectors_yes":["Retail and e-commerce"],"sectors_partial":[],"regions":[],"size":["Large global enterprise"],"service_model":"managed","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"verizon-business","name":"Verizon Business","website":"https://www.verizon.com/business/resources/lp/secure-access-service-edge","category":"managed service provider / carrier network provider","product_focus":"RingCentral (voice/UC integration), Verizon Managed SD Branch, Verizon Managed SD WAN, Verizon SASE Management","cost_model":"Quote-based managed service; typically platform, access, security bundle, sites/users/bandwidth/term.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"partner_integrated","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"partner_integrated","f28_full_sase_platform":"partner_integrated","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"yes"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"partial","financial_services":"not_primary","retail_ecommerce":"not_confirmed","manufacturing":"partial","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/verizon/","shortlist_summary":"6 billion in revenue in 2023 (2025 consensus estimates are approximately $134-135 billion) and serving nearly all of the Fortune 500 - and its managed SD-WAN and SASE proposition sits within Verizon Business, itself organised into three named customer groups (Enterprise and Public Sector, Business Markets and Other, and Wholesale).","key_differentiators":["Global carrier-led managed SASE and SD-WAN with strong North American presence and international delivery.","Versa Networks partnership provides multi-tenant SD-WAN platform with security, routing and analytics under managed service.","Established reputation as a SASE managed services leader in industry analyst rankings."],"best_fit_for":["North American and multinational enterprises wanting carrier-led managed SD-WAN and SASE.","Buyers comfortable with Versa as the underlying platform via managed delivery.","Organisations prioritising service maturity and global delivery capability."],"watch_outs":["Platform is largely Versa-based; buyers wanting platform optionality should evaluate alternatives.","Commercial model is bespoke; cost transparency and change governance require careful contracting.","DIY/self-managed model is not the primary positioning."],"evidence_coverage_pct":0.4,"last_verified":"2026-09-01","evidence_source_count":37,"capability_evidence":{"f13_qos_and_traffic_shaping":{"source_url":"https://verizon.com/business/resources/lp/secure-access-service-edge/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'increase your overall performance through a combination of caching, application organization' and prioritisation mechanisms [18]"},"f17_cellular_and_5g_support":{"source_url":"https://www.verizon.com/business/products/networks/managed-network-services/managed-sd-branch/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Whether you have Verizon wireline or wireless access, SD Branch can support both. Graded partial rather than yes. Wireless access as a supported transport is stated plainly, and the same page describes a wireless backup option, which covers the failover half of the definition. However the words '5G', '4G' and 'LTE' do not appear in this context, and SIM management and signal monitoring were not found on any page reviewed (sources 3, 4, 8, 9, 21). Verizon is of course a mobile network operator, but that is prior knowledge and cannot be graded from; only what the pages state is reflected here."},"f18_cloud_on_ramp":{"source_url":"https://verizon.com/business/answers/what-is-cloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the specifically-named Virtual Network Services (VNS) platform and its VNS Application Edge capability [6]"},"f19_public_cloud_gateways":{"source_url":"https://www.verizon.com/business/en-gb/products/security/network-cloud-security/advanced-secure-access-service-edge/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Integrates network operation centers (NOCs) and security operation centers (SOCs) with our Managed SD WAN and Virtual Network Services (VNS), and supports Versa, Cisco cEdge and vEdge, Zscaler ZIA, Zscaler ZPA and Palo Alto Prisma Access. This is the pivotal judgement in the record. The cloud gateways that actually enforce security and deliver remote access in Verizon's SASE service are Zscaler Internet Access, Zscaler Private Access and Palo Alto Prisma Access, all of which run on those vendors' own global PoP estates, not Verizon's. Verizon's service guide carries a Zscaler product description (source 12) confirming it resells those subscriptions. Verizon operates substantial infrastructure of its own, but that is the MPLS and IP transport layer, not a Verizon-built cloud security edge, so the definition forces partner_integrated rather than yes. An identical vendor list was found on both the UK and US product pages, so this is not a regional arrangement."},"f21_private_global_backbone":{"source_url":"https://www.verizon.com/business/products/networks/connectivity/private-ip/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Private IP is a MultiProtocol Label Switching (MPLS) network that connects locations and clouds around the globe in 185+ countries. Comfortably meets the definition and is not a single-country case. Verizon operates a genuinely global MPLS backbone reaching 185+ countries, the Private IP page states 'Traffic is completely separated from the public internet to help keep it secure', and source 11 carries the ownership claim 'we own and operate one of the largest and most reliable networks on the planet'. Inter-region predictability is contractually underwritten by the Private IP SLA (source 7), which commits to jitter of '< 5 ms' PE to PE for EF class and a packet delivery ratio of '99.995%' for EF, exactly the sort of between-PoP commitment the definition contemplates."},"f26_sla_backed_service_fabric":{"source_url":"https://www.verizon.com/business/service_guide/reg/NaaS-SLA-2026JAN15-mk.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"This SLA only applies to Verizon managed NaaS components on a NaaS Order. Among the strongest evidence in this record because it rests on contractual documents rather than marketing pages. Three separate published SLAs were read. The NaaS SLA (source 6) commits to tiered site availability, to repair response of '3.5 hours (US)' or '4 hours (rest of world)' for managed devices, and to proactive incident notification 'within 15 minutes of opening such Priority 1 Trouble Ticket'. The Private IP SLA adds latency, jitter and packet delivery ratio standards. This is contractual rather than best-effort, covering uptime, response and incident handling together."},"f27_integrated_next_generation_firewall":{"source_url":"https://www.verizon.com/business/resources/technology-partners/versa-integrated-solutions/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Intrusion detection and prevention services (IDS/IPS) The full NGFW feature set is present in the delivered service: the Versa partner page lists IDS/IPS alongside 'Antispam, antimalware and URL filtering' and DLP, and the SASE pages describe firewall as a service. But every one of those functions is another company's technology that Verizon bundles and manages, named on Verizon's own pages as Versa, Cisco cEdge and vEdge, Palo Alto Prisma Access and Zscaler, with the SASE landing page adding Netskope and Viptela. No evidence was found of a Verizon-authored firewall engine. Under the definition's explicit instruction, third-party firewall technology that the supplier resells or bundles grades partner_integrated, not yes."},"f30_zero_trust_network_access":{"source_url":"https://verizon.com/business/products/security/network-cloud-security/sase-management/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - Zscaler Private Access (ZPA) named directly [2]"},"f31_secure_web_gateway":{"source_url":"https://verizon.com/business/products/security/network-cloud-security/sase-management/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as part of the multi-platform SASE architecture [2] Capability specifics depend on which underlying platform is proposed"},"f32_casb_capability":{"source_url":"https://verizon.com/business/products/security/network-cloud-security/sase-management/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name as a core SASE architecture component described in Verizon's own SASE definition materials [2] Specific inline-versus-API-mode technical detail not itemised per platform"},"f40_managed_service_assurance":{"source_url":"https://www.verizon.com/business/resources/technology-partners/versa-integrated-solutions/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Support provided by Verizon's Network Operations Center (NOC) and Security Operations Center (SOC) teams Both a NOC and a SOC are Verizon's own and wrap the partner technology, which is the core of the definition. Proactive ownership is contractual rather than merely claimed: the NaaS SLA commits Verizon to open a trouble ticket for each Priority 1 incident and notify the customer within 15 minutes. The SOC services page adds 'Gain 24/7 access to monitoring, extensive global threat visibility and expert analysis', and SD Branch confirms '24/7/365 access to Managed SD Branch reporting'. Confidence is medium rather than high because two named elements of the definition, formal root cause analysis and structured periodic service reviews with change governance, were not found verbatim on any page reviewed."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:f524b565e57fd0343b667af0","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"yes","transport_logistics":"partial","professional_services":"partial","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"uk_entity","curated_uk_basis":"UK contracting entity (Verizon Business has UK operations), though US headquartered, with real UK and European delivery.","sector_review_queue":[{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real (if anonymised) case study | SD-WAN and network segmentation directly relevant to protecting sensitive manufacturing data and streamlining traffic | Not assessed for sector-specific frameworks | A real, detailed (anonymised) 'global manufacturer' case study confirming data protection and traffic streamlining | N/A | The case study is real and specific in its narrative but does not disclose the customer's name | Real, credible sector-fit evidence via a genuine case study, reinforced by Verizon's own dedicated manufacturing-sector SD-WAN use-case content.","named_evidence":"A real, detailed (anonymised) 'global manufacturer' case study confirming data protection and traffic streamlining","evidence_source_ids":["evidence:verizon:17","evidence:verizon:20"]},{"sector":"government_public_sector","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | Confirmed FedRAMP-authorized products, direct collaboration with Cisco during the authorization process, and confirmed government-traffic-specific network segmentation capability (Table 4) | FedRAMP confirmed at the specific, quantified case-study level (Table 13) | A real, detailed, quantified (anonymised) federal-agency case study: 20,000-plus users across 70 US locations | United States, per the confirmed case study | The confirmed case study describes a UC/collaboration deployment specifically, rather than confirmed blanket FedRAMP authorization for the core SD-WAN/SASE service | Genuinely the best-evidenced sector in this entire profile - a real, detailed, quantified case study with specific, named technology partners (Cisco) and a precise deployment scale.","named_evidence":"A real, detailed, quantified (anonymised) federal-agency case study: 20,000-plus users across 70 US locations","evidence_source_ids":["evidence:verizon:19"]},{"sector":"healthcare","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real (if anonymised) case study reference | Not assessed in specific technical detail for this sector beyond the confirmed SASE deployment reference | HIPAA not confirmed (Table 13) - a specific, worth-flagging gap for this sector specifically | A real, referenced (anonymised) 'large healthcare business' SASE deployment optimising security operations | N/A | The case study is referenced only briefly, without the same narrative depth as the manufacturing or federal examples | Real sector-fit evidence exists, though this specific case study reference is less detailed than the confirmed manufacturing and federal examples; the confirmed absence of a HIPAA attestation is a specific, worth-flagging gap for this sector.","named_evidence":"A real, referenced (anonymised) 'large healthcare business' SASE deployment optimising security operations","evidence_source_ids":["evidence:verizon:21"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"manufacturing":false,"healthcare":false,"government_public_sector":false},"reviewed_at":"2026-09-30T15:40:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://verizon.com/business/resources/customer-success-stories/federal-agency/","https://verizon.com/business/resources/articles/s/three-sd-wan-use-cases-for-enterprises/","https://verizon.com/business/resources/customer-success-stories/manufacturing-giant/","https://www.verizon.com/business/resources/articles/sase-helps-healthcare-business-privacy-concerns.pdf"],"qualification":"Verizon federal-agency page is secure cloud video collaboration for 20,000 users. The linked case is not SD-WAN/SASE evidence. Verizon manufacturing case explicitly describes SD-WAN design, rollout and traffic segmentation; manufacturer is unnamed. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation. Recovered primary anonymous healthcare SASE deployment: 200 sites, supplier managed. Does not establish UK/NHS delivery or a named customer.","sectors":{"government_public_sector":"not_confirmed","manufacturing":"partial","healthcare":"partial"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":15,"research_metrics":{"supported":11,"partial":1,"partner_delivered":4,"managed_service_dependent":0,"not_primary":0,"unconfirmed":24,"total":40,"reviewed":16,"completeness_percent":40,"completeness":0.4},"proven_evidence_count":11,"response_panel":null,"best_for":"Healthcare (partial evidence); Manufacturing (partial evidence); Large global enterprise; managed","best_for_fields":{"sectors_yes":[],"sectors_partial":["Healthcare","Manufacturing"],"regions":[],"size":["Large global enterprise"],"service_model":"managed","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"cradlepoint-ericsson","name":"Ericsson Cradlepoint","website":"https://cradlepoint.com","category":"technology vendor / carrier network provider","product_focus":"NetCloud Federal, NetCloud Manager, NetCloud Perimeter, NetCloud Private Networks","cost_model":"Quote-based NetCloud subscriptions + routers/adapters; public hardware pricing may exist through resellers.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"partner_integrated","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"partial"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"not_confirmed","android":"not_confirmed","linux":"yes","chromeos":"yes","agentless":"yes"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/ericsson-cradlepoint/","shortlist_summary":"1 billion. That makes this platform’s identity distinctive within this product category: it sits inside one of the world’s largest telecommunications equipment manufacturers rather than a standalone security company or a private-equity-backed challenger, and its architecture reflects that heritage directly - NetCloud SASE is built cellular-first, with confirmed, specific capabilities like traffic steering based on cellular attributes and 5G standalone network slicing for guaranteed bandwidth that have no real equivalent among fixed-line-oriented competitors.","key_differentiators":["Wireless-first branch architecture from Ericsson with deep 5G expertise; NetCloud provides cellular-centric SD-WAN management.","Strong story for organisations adopting 5G as a primary access medium rather than as a backup.","Network slicing and private 5G integration roadmap is more credible than competitors lacking cellular heritage."],"best_fit_for":["Distributed enterprises with strong cellular/5G access strategy (retail, logistics, transport, public sector).","Buyers consolidating wireless WAN with traditional fixed-line SD-WAN under one operational tool.","Organisations interested in private 5G integration with branch SD-WAN."],"watch_outs":["SASE story is partner-integrated rather than native; SSE capabilities require validation in RFP.","Cloud on-ramp: supported; Multi-cloud transit fabric: not confirmed. Confirm the cloud locations, connectivity pattern and transit design.","Best for cellular-led architectures; less strong as a primary fit for fixed-circuit-heavy estates."],"evidence_coverage_pct":0.375,"last_verified":"2026-09-01","evidence_source_count":38,"capability_evidence":{"f04_multi_tenant_msp_white_label_support":{"source_url":"https://cradlepoint.ericsson.com/about/how-to-buy","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Enterprise Wireless products are sold through our world-class global ecosystem of distributors, resellers, managed service providers, and integrators. Managed service providers are an explicit channel and the partner programme names a service provider category that builds managed offerings on the platform, which implies multi customer operation. However no page reviewed documents tenant isolation, delegated administration, branded portals or templates under the partner's own brand, so this is graded partial rather than yes. NetCloud Manager subaccount structure is referenced in the security page bullets but not in language firm enough to quote for white labelling."},"f05_professional_services_and_migration_support":{"source_url":"https://cradlepoint.ericsson.com/about/how-to-buy","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"These specialized partners have deep knowledge of our products and offer an array of high-value services. Design, integration and implementation services are attributed to the reseller and integrator channel rather than to an Ericsson Cradlepoint professional services organisation. The vendor supplies training and certification directly, but no discovery, pilot, staging, migration runbook or rollback offering was found on the pages reviewed, so the capability is graded as delivered through partners."},"f07_lifecycle_management":{"source_url":"https://cradlepoint.com/products/netcloud-service/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Your wireless edge routers and adapters, or endpoints, include a product warranty for the duration of your active NetCloud Essential or Advanced subscription. Hardware warranty runs for the life of the subscription and the same page states that NetCloud Manager continuously delivers real time cloud and device operating software updates to 5G and LTE endpoints, so firmware and software currency are part of the subscription. End of life planning and renewal management are implied by the subscription continuity wording but are not separately documented."},"f10_dynamic_path_selection":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via the named cellular-attribute-based traffic steering capability [15]"},"f13_qos_and_traffic_shaping":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 5G standalone network slicing 'for guaranteed bandwidth' is a specific, named, technically distinctive QoS mechanism [15]"},"f17_cellular_and_5g_support":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"With benefits like traffic steering based on cellular attributes and network slicing for guaranteed bandwidth as networks evolve to 5G standalone, NetCloud SASE enables fast moving organizations to accelerate their transformation. This is the supplier's core competence. The data sheet additionally describes SD-WAN optimising traffic across wired, 5G and LTE, satellite, Wi-Fi as WAN, private APNs and 5G standalone network slices, and the endpoint range is built around integrated cellular modems. Traffic steering on cellular attributes evidences signal level awareness."},"f18_cloud_on_ramp":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via the platform's fully cloud-managed architecture [15]"},"f19_public_cloud_gateways":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed via the platform's fully cloud-managed architecture [15]"},"f34_remote_user_access":{"source_url":"https://cradlepoint.com/products/netcloud-sase/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and genuinely a core, confirmed architectural principle - 'While other solutions require agents or special browsers, NetCloud SASE uses agent-less isolation-based security' [15]"},"f40_managed_service_assurance":{"source_url":"https://cradlepoint.com/support/","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Support is one of the most valuable tools within a NetCloud subscription and is staffed by accredited network engineers Round the clock global support is documented, with centres in Boise, London and Melbourne and direct access to the engineering organisation, and a public NetCloud status page exists for incident notification. What is not documented on any page reviewed is a 24/7 NOC and SOC proactively monitoring the customer's service, incident ownership through to root cause analysis, structured service reviews or change governance, so this falls short of the full definition."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:6810d536693038af740ed4a9","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"not_confirmed","retail_ecommerce":"yes","manufacturing":"partial","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"partial","hospitality_leisure":"partner_integrated"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US, Ericsson-owned). UK delivery via mobile operators and partners.","sector_review_queue":[{"sector":"energy_utilities","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Conditional - evidenced via a single, smaller technographic reference | Not assessed in specific technical detail for this sector | Not assessed for sector-specific frameworks | Roanoke Electric Cooperative (a smaller, US-based utility, confirmed as a real-world NetCloud Manager customer via independent technographic sales-intelligence data) | N/A | A single, smaller-scale technographic reference rather than a full narrative case study | A real, named customer reference exists, though at a smaller scale than the manufacturing/retail technographic references found elsewhere in this table.","named_evidence":"Roanoke Electric Cooperative (a smaller, US-based utility, confirmed as a real-world NetCloud Manager customer via independent technographic sales-intelligence data)","evidence_source_ids":["evidence:ericsson-cradlepoint:20"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via technographic data | SD-WAN and branch connectivity plausibly relevant to distributed manufacturing sites | Not assessed for sector-specific frameworks | JBT Corporation (a $2 billion, 7,000-employee US manufacturer, confirmed as a real-world NetCloud Manager customer via independent technographic sales-intelligence data) | N/A | The evidence here is technographic (confirmed technology usage) rather than a full narrative case study with quoted outcomes | A real, named, large, credible, easily-verifiable customer (JBT Corporation) is confirmed via independent technographic data - genuinely concrete, if not narratively detailed, evidence for this sector.","named_evidence":"JBT Corporation (a $2 billion, 7,000-employee US manufacturer, confirmed as a real-world NetCloud Manager customer via independent technographic sales-intelligence data)","evidence_source_ids":["evidence:ericsson-cradlepoint:20"]},{"sector":"government_public_sector","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | NetCloud Federal, FIPS 140-3 routers, the Pop-Up Network Kit for field-deployable connectivity, and the confirmed multi-carrier active-failover architecture are all directly relevant to this sector's specific requirements | FedRAMP High-level assurance via the confirmed Axon-hosted NetCloud Federal environment; FIPS 140-3 confirmed for select routers | Confirmed directly as a served sector generally, reinforced by a named reseller's specific claim of serving '1,100 unique government agencies across local, state, education, and federal sectors' | US-specific, per the confirmed named-carrier and FedRAMP evidence | General sector confirmation and named-reseller scale evidence exist; a single, narrative, individually-named government-agency case study wasn't found | Genuinely the best-evidenced sector in this entire profile - a specific, precise, primary-sourced compliance pathway (NetCloud Federal/Axon) combined with a real, named reseller's confirmed, quantified government-agency customer count together make this the platform's strongest, most concretely-evidenced sector fit.","named_evidence":"Confirmed directly as a served sector generally, reinforced by a named reseller's specific claim of serving '1,100 unique government agencies across local, state, education, and federal sectors'","evidence_source_ids":["evidence:ericsson-cradlepoint:12","evidence:ericsson-cradlepoint:13","evidence:ericsson-cradlepoint:14"]},{"sector":"transport_logistics","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced | The confirmed in-vehicle telemetry API/SDK integration example, multi-carrier active failover, and location-based performance analysis are all directly and specifically relevant to fleet and transportation use cases | Not assessed for sector-specific frameworks | Confirmed directly as a served sector generally; a dedicated 'Transportation' content section on the company's own site reinforces this sector focus specifically | N/A | Real, confirmed sector-specific product content and API examples exist; a named, individual transportation-company case study with quantified outcomes wasn't found | A genuinely well-evidenced sector fit at the product-and-capability level - the confirmed in-vehicle telemetry integration and fleet-specific content demonstrate real, deliberate sector focus, even without a single, quoted named customer story.","named_evidence":"Confirmed directly as a served sector generally; a dedicated 'Transportation' content section on the company's own site reinforces this sector focus specifically","evidence_source_ids":["evidence:ericsson-cradlepoint:12","evidence:ericsson-cradlepoint:15"]},{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via technographic data | SD-WAN and branch/POS connectivity plausibly relevant | Not assessed for sector-specific frameworks | Fuzzy's Taco Shop and Evereve (both confirmed as real-world NetCloud Manager customers via independent technographic sales-intelligence data) | N/A | The evidence here is technographic (confirmed technology usage) rather than a full narrative case study with quoted outcomes | Two real, named, independently-confirmed customers in this sector via technographic data - a real, if not narratively detailed, evidentiary base.","named_evidence":"Fuzzy's Taco Shop and Evereve (both confirmed as real-world NetCloud Manager customers via independent technographic sales-intelligence data)","evidence_source_ids":["evidence:ericsson-cradlepoint:20"]},{"sector":"hospitality_leisure","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via technographic data | SD-WAN and branch/POS connectivity plausibly relevant | Not assessed for sector-specific frameworks | Fuzzy's Taco Shop and Evereve (both confirmed as real-world NetCloud Manager customers via independent technographic sales-intelligence data) | N/A | The evidence here is technographic (confirmed technology usage) rather than a full narrative case study with quoted outcomes | Two real, named, independently-confirmed customers in this sector via technographic data - a real, if not narratively detailed, evidentiary base.","named_evidence":"Fuzzy's Taco Shop and Evereve (both confirmed as real-world NetCloud Manager customers via independent technographic sales-intelligence data)","evidence_source_ids":["evidence:ericsson-cradlepoint:20"]}],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":16,"research_metrics":{"supported":11,"partial":3,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":25,"total":40,"reviewed":15,"completeness_percent":38,"completeness":0.375},"proven_evidence_count":11,"response_panel":null,"best_for":"Sector evidence not yet reviewed; both","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"both","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"virgin-media-o2","name":"Virgin Media O2 Business","website":"https://netify.co.uk/marketplace/virgin-media-o2/","category":"managed service provider / carrier network provider","product_focus":"8x8 Voice for Teams, Cloud Infrastructure as a Service / Platform as a Service, Managed Detection and Response, Success Agreement","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_entity","uk_basis":"Virgin Media Business Limited, company 01785381, publishes its registered office in Reading and UK business network service terms.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"partial","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"partial","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"partial","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"yes","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"not_confirmed","uk_support_desk":"not_confirmed","named_tam":"not_confirmed"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/virgin-media-o2/","shortlist_summary":"Managed connectivity and SD-WAN with Zscaler-based SASE; confirm the current contracting entity and scope.","key_differentiators":["Managed connectivity and SD-WAN with Zscaler-based SASE; confirm the current contracting entity and scope."],"best_fit_for":["Buyers comparing managed connectivity and partner-delivered cloud security."],"watch_outs":[],"evidence_coverage_pct":0.35,"last_verified":"2026-09-01","evidence_source_count":39,"capability_evidence":{"f10_dynamic_path_selection":{"source_url":"https://virginmediao2business.co.uk/connectivity/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'automatically path adjustment based on real-time conditions with dynamic application-aware routing' [10] [13]"},"f12_application_aware_routing":{"source_url":"https://virginmediao2business.co.uk/connectivity/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'automatically path adjustment based on real-time conditions with dynamic application-aware routing' [10] [13]"},"f13_qos_and_traffic_shaping":{"source_url":"https://virginmediao2business.co.uk/connectivity/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'prioritising applications, focussing on critical services' and 'boost peak time performance and cut the need for MPLS circuits' [10] [13]"},"f17_cellular_and_5g_support":{"source_url":"https://virginmediao2business.co.uk/connectivity/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name as a supported WAN underlay [10] [13]"},"f18_cloud_on_ramp":{"source_url":"https://virginmediao2business.co.uk/connectivity/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'connecting directly to cloud apps including AWS, Azure and Google Cloud' [10] [13]"},"f23_multi_cloud_transit_fabric":{"source_url":"https://virginmediao2business.co.uk/connectivity/sd-wan/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'connecting directly to cloud apps including AWS, Azure and Google Cloud' [10] [13]"},"f05_professional_services_and_migration_support":{"grade":"partial","source_url":"https://www.virginmediabusiness.co.uk/connectivity/sdwan/sdwan-end-to-end-service/","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"VMO2 describes experts supporting network and cloud migration with customer teams. A site trial is offered; rollback and training scope require confirmation."},"f16_mpls_coexistence_and_migration":{"source_url":"https://www.virginmediabusiness.co.uk/connectivity/sdwan/sdwan-how-it-works/","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"Service gateways connect existing MPLS IP VPN and new SD-WAN networks during transition. Confirm the design for each site."},"f37_customer_portal_and_rbac":{"grade":"partial","source_url":"https://www.virginmediabusiness.co.uk/pdf/legal-documents/vmbusiness-service-schedule-sdwan-v5.0.pdf","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"Clause 14 and Appendix 1 document customer portals and individual user access. Granular role-based permissions remain unconfirmed."},"f26_sla_backed_service_fabric":{"grade":"partial","source_url":"https://www.virginmediabusiness.co.uk/pdf/legal-documents/vmbusiness-service-schedule-sdwan-v5.0.pdf","reviewed_at":"2026-10-10T00:00:00Z","review_due":"2027-01-08T00:00:00Z","qualification":"Appendix 2 provides conditional service gateway targets and credits. This is not a blanket end-to-end performance guarantee."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:121d7b6c883b7450e2526ed3","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"global_managed","curated_uk_basis":"Confirm UK delivery scope through RFP.","sector_review_queue":[],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{},"reviewed_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Codex primary-source review","source_urls":["https://www.virginmediabusiness.co.uk/legal/terms-and-conditions/","https://www.virginmediabusiness.co.uk/legal/privacy-policy/"],"qualification":"UK review update (supersedes earlier UK-region qualification): The published business terms name Virgin Media Business Limited and include SD-WAN and UK managed IPVPN schedules. This is evidence of a UK contracting entity, not confirmation of a specific estate, Irish availability, response commitment or the entity used for a separate O2 service.","sectors":{},"regions":{"uk_ireland":"yes"}}},"uk_evidence":{"entity":{"status":"evidenced","name":null,"source_urls":["https://www.virginmediabusiness.co.uk/legal/terms-and-conditions/","https://www.virginmediabusiness.co.uk/legal/privacy-policy/"],"checked_at":"2026-09-30T19:56:00Z","review_due":"2026-10-30T00:00:00Z","qualification":"Virgin Media Business Limited, company 01785381, publishes its registered office in Reading and UK business network service terms."},"regional_delivery":{"status":"yes","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"summary_source":"https://virginmediabusiness.co.uk/connectivity/sdwan/","position":17,"research_metrics":{"supported":10,"partial":4,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":26,"total":40,"reviewed":14,"completeness_percent":35,"completeness":0.35},"proven_evidence_count":10,"response_panel":null,"best_for":"Sector evidence not yet reviewed; UK and Ireland; Large global enterprise; managed","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":["UK and Ireland"],"size":["Large global enterprise"],"service_model":"managed","signoff":""},"editorial":null,"uk_status":{"status":"uk_entity","label":"UK contracting entity","source_urls":["https://www.virginmediabusiness.co.uk/legal/terms-and-conditions/","https://www.virginmediabusiness.co.uk/legal/privacy-policy/"],"reviewed_at":"2026-09-30T19:56:00Z","qualification":"Virgin Media Business Limited, company 01785381, publishes its registered office in Reading and UK business network service terms."}},{"slug":"comcast-business","name":"Comcast Business","website":"https://business.comcast.com","category":"managed service provider / carrier network provider","product_focus":"Comcast Business CASB, Comcast Business FWaaS, Comcast Business Managed SD-WAN, Comcast Business SASE","cost_model":"Quote-based managed/co-managed service; access, SD-WAN, SASE and SOC/AIOps elements drive cost.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"not_confirmed","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"partial","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"partner_integrated","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"partner_integrated","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"yes","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_primary","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/comcastbusiness/","shortlist_summary":"Comcast Business’s managed SD-WAN and SASE proposition traces its specialist technical foundation to Masergy, a managed SD-WAN and SASE vendor founded in 2000 in Plano, Texas, which Comcast Business acquired in 2021 to, in the words of Comcast Business’s then-President Bill Stemper, ‘instantly and dramatically amplify our growth in the global enterprise market’.","key_differentiators":["SASE combining SD-WAN and security available fully managed or co-managed, drawing on Masergy AIOps heritage.","Recognised as a leading managed SD-WAN provider by industry analysts.","Strong North American underlay ownership with international delivery via partners."],"best_fit_for":["North American enterprises wanting managed or co-managed SD-WAN and SASE from a single carrier.","Buyers attracted to the AIOps capabilities inherited from the Masergy acquisition.","Organisations prioritising co-managed delivery with shared operational control."],"watch_outs":["International delivery depth depends on partnerships outside North America.","Underlying platform choice should be confirmed; service depth varies by selected platform.","Commercial model bundles access, SD-WAN, SASE and SOC elements; explicit line-item costing required."],"evidence_coverage_pct":0.3,"last_verified":"2026-09-01","evidence_source_count":24,"capability_evidence":{"f07_lifecycle_management":{"source_url":"https://business.comcast.com/enterprise/products-services/sd-wan-solutions/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Equipment replacement SLA ,  24x7x4 (On-Net) and 8X5XNBD (Off-Net) Hardware replacement is contractually covered as part of the managed service. No statement found on the pages reviewed covering firmware upgrades, patching, renewals or end-of-life planning, so graded partial. CPE is Fortinet hardware per the Masergy product sheet."},"f17_cellular_and_5g_support":{"source_url":"https://business.comcast.com/enterprise/products-services/sd-wan-solutions/sd-wan","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Help keep your network running with 4G LTE backup. 4G LTE is documented as a backup transport. No evidence found on the pages reviewed for 5G, for cellular as a primary transport, or for SIM management and signal monitoring, so graded partial."},"f19_public_cloud_gateways":{"source_url":"https://corporate.comcast.com/press/releases/comcast-business-fortinet-secure-enterprise-application-access-sase-sse-solutions","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Comcast Business Secure Gateways are hosted across the United States at Equinix data centers, offering up to 10 gigabits per second (Gbps) of cloud connectivity for public, private, or hybrid cloud deployments. Comcast Business brands and operates the Secure Gateways, but the enforcement stack is Fortinet technology and the hosting fabric is Equinix, per the same release: \"Fortinet's security-driven networking technology and Equinix's flexible cloud connection Equinix Fabric™ for a complete secure network service.\" Under the definition this is partner_integrated, not yes. Footprint stated as United States only."},"f27_integrated_next_generation_firewall":{"source_url":"https://business.comcast.com/resources/enterprise/articles/uniting-managed-sase-and-connectivity-for-scalable-networking-and-security","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Firewall as a Service: Next-generation Firewall for network traffic inspection and security'"},"f28_full_sase_platform":{"source_url":"https://business.comcast.com/enterprise/products-services/secure-networking/sase","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'Zero-trust network access (ZTNA): Verifies the identity of every user and device before allowing them to access internal resources by setting up one-to-one encrypted connections'"},"f30_zero_trust_network_access":{"source_url":"https://business.comcast.com/enterprise/products-services/secure-networking/sase","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly and with genuine specificity - 'Zero-trust network access (ZTNA): Verifies the identity of every user and device before allowing them to access internal resources by setting up one-to-one encrypted connections'"},"f31_secure_web_gateway":{"source_url":"https://business.comcast.com/resources/enterprise/articles/uniting-managed-sase-and-connectivity-for-scalable-networking-and-security","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name as a core SASE component - 'Secure Web Gateway (SWG): On-premise or cloud-based Internet traffic filtering'"},"f32_casb_capability":{"source_url":"https://business.comcast.com/resources/enterprise/articles/uniting-managed-sase-and-connectivity-for-scalable-networking-and-security","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'Cloud Access Security Broker (CASB): To secure access to cloud applications' Specific inline-versus-API-mode technical detail not itemised"},"f33_data_loss_prevention":{"source_url":"https://corporate.comcast.com/press/releases/comcast-business-fortinet-secure-enterprise-application-access-sase-sse-solutions","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Firewall-as-a-Service (FWaaS), Intrusion Prevention (IPS), Data Loss Prevention (DLP), Cloud Access Security Brokers (CASB), and Zero Trust Network Access (ZTNA). DLP is named as part of the SASE/SSE offer but is delivered on Fortinet's security-driven networking technology, so partner_integrated rather than yes. No detail found on classification depth, blocking versus flagging, alerting or exception workflows."}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:eb912a1b099feb573967e73d","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"yes"},"curated_uk_delivery":"global_managed","curated_uk_basis":"No UK HQ (US). UK delivery via the Masergy global platform and partners.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":18,"research_metrics":{"supported":8,"partial":2,"partner_delivered":2,"managed_service_dependent":0,"not_primary":0,"unconfirmed":28,"total":40,"reviewed":12,"completeness_percent":30,"completeness":0.3},"proven_evidence_count":8,"response_panel":null,"best_for":"Sector evidence not yet reviewed; managed","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"managed","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"arista-velocloud","name":"VeloCloud","website":"https://www.arista.com","category":"technology vendor","product_focus":"Arista AVA, Edge Threat Management (ETM), SSE partner integrations, VeloCloud Orchestrator","cost_model":"Quote-based edge subscriptions/appliances/support; managed services commonly delivered by carriers/MSPs.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"partner_integrated","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"not_confirmed","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"partner_integrated","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"partner_integrated","f32_casb_capability":"partner_integrated","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"partner_integrated","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_primary","manufacturing":"not_primary","energy_utilities":"not_primary","government_public_sector":"not_confirmed","education":"not_primary","transport_logistics":"not_primary","professional_services":"not_primary","hospitality_leisure":"not_primary"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":150,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/velocloud/","shortlist_summary":"VeloCloud was founded in 2012 as a cloud-delivered SD-WAN pioneer, acquired by VMware in 2017 for approximately $336 million, then came under Broadcom’s ownership when Broadcom completed its roughly $69 billion acquisition of VMware in 2023. Under Broadcom, the product was paired with Symantec’s security stack (Broadcom separately owns Symantec’s enterprise security business) into a single-vendor offering called ‘VMware VeloCloud SASE, secured by Symantec’, announced February 2024.","key_differentiators":["VeloCloud was an early SD-WAN platform with strong cloud-delivered gateway architecture; now under Arista following the 2025 acquisition.","Multi-tenant design has made VeloCloud common in carrier and MSP managed services.","Application-aware routing and dynamic path selection are mature capabilities with substantial deployment history."],"best_fit_for":["Enterprises consuming VeloCloud through a managed service provider (Vodafone UK, others).","Service providers running multi-tenant SD-WAN at scale.","Buyers comfortable with a platform in transition under new ownership."],"watch_outs":["Platform is mid-transition from VMware/Broadcom to Arista; product roadmap, naming and integration story will evolve.","Security and SASE capabilities are largely partner-integrated rather than native.","Direct enterprise sales motion is less established than legacy vendors; most consumption is via managed providers."],"evidence_coverage_pct":0.3,"last_verified":"2026-09-01","evidence_source_count":35,"capability_evidence":{"f01_fully_managed_service":{"source_url":"https://www.arista.com/assets/data/pdf/VeloCloud-SD-WAN-Data-Sheet.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Cloud-native by design, VeloCloud SD-WAN is delivered via a global network of Edge PoPs, either self-managed or as a managed service. Arista authors the platform; the managed-service option is operated by MSP and service-provider partners rather than by Arista end to end. Arista's own press release quotes T&A SYSTEME GmbH, 'a German MSP managing 7500+ sites in 98 countries', and MetTel as the parties running the service for customers. No Arista-run design-to-report managed service was found."},"f04_multi_tenant_msp_white_label_support":{"source_url":"https://www.arista.com/assets/data/pdf/SD-WAN-Solution-Overview.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Enterprises or their managed service providers can define business-level policies that apply enterprise-wide across many Edges Tenant isolation and delegated administration are evidenced by the multitenant Orchestrator, Controller and Gateway architecture and the three-tier RBAC model, and the partner programme carries 'SD-WAN MSP Partner Requirements'. Graded partial rather than yes because no page reviewed described branded or white-label partner portals, which the definition requires."},"f17_cellular_and_5g_support":{"source_url":"https://www.arista.com/assets/data/pdf/Datasheets/VeloCloud-SD-WAN-Edge-7x0-Series.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Dual Physical SIM + single eSIM (single standby) The 7x0 datasheet documents an integrated Telit FN990A28 modem, 'LTE Category Cat-19', carrier aggregation, HSPA+ 3G fallback and a full 5G FR1 band list, with dual physical SIM plus eSIM. The product page states 'integrated WiFi and 5G' and the 4100/5100 page leads with 'Integrated 5G Enterprise-class SD-WAN appliances for branches'. LTE is also listed among supported WAN transports."},"f20_private_pops_dedicated_pops":{"source_url":"https://www.arista.com/assets/data/pdf/SD-WAN-Solution-Overview.pdf","reviewed_at":"2026-07-29","review_due":"2026-12-30T00:00:00Z","qualification":"Gateways can be deployed as partner Gateways on the premises of service providers, where they are managed by the service provider Gateways are not restricted to a shared multi-tenant estate: the datasheet describes 'A distributed, global network of gateways, hosted by Arista/service providers or deployed on-premises' and lists 'Partner Gateway Support' as a feature, covering customer-hosted and dedicated partner deployments. No sovereign-region offering was named on the pages reviewed."},"f27_integrated_next_generation_firewall":{"source_url":"https://networkworld.com/article/4199622/arista-debuts-unified-sd-wan-edge-platform.html","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, and specifically confirmed as part of the in-development Edge Threat Management capability - firewalls, segmentation, DNS filtering, geolocation controls, and threat prevention embedded directly on VeloCloud edge devices [17] [21] Not yet generally available - planned for Q4 2026 as of this profile's research"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:f5387b83efff650f5c9acd5b","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"yes"},"curated_uk_delivery":"uk_pops_partner","curated_uk_basis":"No UK HQ (US). VeloCloud delivered in the UK through carriers including BT and Vodafone.","sector_review_queue":[],"resolution":"source_review_required"},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"position":19,"research_metrics":{"supported":6,"partial":2,"partner_delivered":4,"managed_service_dependent":0,"not_primary":0,"unconfirmed":28,"total":40,"reviewed":12,"completeness_percent":30,"completeness":0.3},"proven_evidence_count":6,"response_panel":null,"best_for":"Sector evidence not yet reviewed; platform","best_for_fields":{"sectors_yes":[],"sectors_partial":[],"regions":[],"size":[],"service_model":"platform","signoff":""},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"expereo","name":"Expereo","website":"https://netify.co.uk/marketplace/expereo/","category":"managed service provider / carrier network provider","product_focus":"Expereo Enhanced Internet, Expereo Managed SD-WAN, Expereo SD-WAN/SASE with Cato Networks, Starlink (via Expereo, authorised reseller)","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"not_confirmed","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"partner_integrated","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"not_confirmed","uk_support_desk":"not_confirmed","named_tam":"not_confirmed"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/expereo/","shortlist_summary":"Managed SD-WAN and internet connectivity, with Cato Networks as a named partner for managed SASE.","key_differentiators":["Managed SD-WAN and internet connectivity, with Cato Networks as a named partner for managed SASE."],"best_fit_for":["Buyers comparing managed internet connectivity alongside SD-WAN and partner-delivered SASE."],"watch_outs":[],"evidence_coverage_pct":0.25,"last_verified":"2026-09-01","evidence_source_count":28,"capability_evidence":{"f10_dynamic_path_selection":{"source_url":"https://expereo.com/resources/brochures/sd-wan","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly by name - 'AI-enabled dynamic routing for reliable and predictable networks'"},"f13_qos_and_traffic_shaping":{"source_url":"https://expereo.com/services/sd-wan","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Easier management with the ability to set routing, traffic thresholds and access policies to suit your business'"},"f27_integrated_next_generation_firewall":{"source_url":"https://expereo.com/sd-wan","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly - 'Includes integrated security features such as encryption and firewall capabilities'"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:42ce68f10f362e6b0e6440bf","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"global_managed","curated_uk_basis":"Confirm UK delivery scope through RFP.","sector_review_queue":[{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced via a second, distinct, real case study within the same corporate family | Confirmed network-complexity reduction and resilience improvement across a real customer spanning 100 sites worldwide | Not assessed for sector-specific frameworks | Kingspan Light, Air + Water - named individual, named company, direct quote (Fergal Moore, Divisional Head of Infrastructure & Cyber Security) on removing network complexity and boosting resilience across 100 sites worldwide | Global, confirmed directly ('100 Sites Worldwide') | None significant identified beyond the general, profile-wide compliance considerations | A second, real, named, individually-attributable customer reference - genuinely reinforcing the manufacturing-sector fit confirmed by the first Kingspan case study, within a short, recent time window (December 2025 and February 2026).","named_evidence":"Kingspan Light, Air + Water - named individual, named company, direct quote (Fergal Moore, Divisional Head of Infrastructure & Cyber Security) on removing network complexity and boosting resilience across 100 sites worldwide","evidence_source_ids":[]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"manufacturing":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.expereo.com/resources/press-releases/kingspan-insulation-chooses-expereo-to-unify-connectivity-and-accelerate-growth-across-90-global-sites"],"qualification":"Recovered Expereo Kingspan Insulation release explicitly documents SD-WAN and underlay at 90 facilities including factories. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"manufacturing":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"summary_source":"https://catonetworks.com/news/expereo-selects-cato-networks-for-delivering-managed-sase-services-worldwide/","position":20,"research_metrics":{"supported":8,"partial":1,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":30,"total":40,"reviewed":10,"completeness_percent":25,"completeness":0.25},"proven_evidence_count":8,"response_panel":null,"best_for":"Manufacturing; Large global enterprise; managed","best_for_fields":{"sectors_yes":["Manufacturing"],"sectors_partial":[],"regions":[],"size":["Large global enterprise"],"service_model":"managed","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}},{"slug":"opensystems","name":"Open Systems","website":"https://netify.co.uk/marketplace/opensystems/","category":"technology vendor / managed service provider","product_focus":"MDR+ (Managed Detection and Response), Managed SD-WAN / Secure SD-WAN, Managed, Universal SSE, Mission Control","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"not_confirmed","uk_basis":"UK contracting entity is not confirmed by the published Neon provider record.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"not_confirmed","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"not_confirmed","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"not_confirmed","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"yes","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"not_confirmed","f35_soc_siem_soar_integration":"not_confirmed","f36_centralised_orchestration":"not_confirmed","f37_customer_portal_and_rbac":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"not_confirmed","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Statuses use the current published Neon provider record."},"resilience":{"disaster_recovery":"not_confirmed","note":"Status uses current published Neon high availability evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"not_confirmed","google_workspace":"yes"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"not_confirmed","uk_support_desk":"not_confirmed","named_tam":"not_confirmed"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/opensystems/","shortlist_summary":"Managed SD-WAN and SASE supported by Open Systems' Mission Control service team.","key_differentiators":["Managed SD-WAN and SASE supported by Open Systems' Mission Control service team."],"best_fit_for":["Buyers comparing a managed operating model for SD-WAN and SASE."],"watch_outs":[],"evidence_coverage_pct":0.2,"last_verified":"2026-09-01","evidence_source_count":37,"capability_evidence":{"f15_local_internet_breakout":{"source_url":"https://open-systems.com/company/customers/mammut/","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed directly via real, named customer-deployment detail - 'low-cost and secure internet breakouts' specifically described in the Mammut case study [16]"},"f32_casb_capability":{"source_url":"https://eqtgroup.com/about/current-portfolio/open-systems","reviewed_at":"2026-07-22T00:00:00.000Z","review_due":"2026-12-30T00:00:00Z","qualification":"Native, confirmed as part of the broader converged security stack [7] Specific inline-versus-API-mode technical detail not itemised"}},"projection_provenance":{"contract":"projection-review/1","governed_revision":"revision:3f18bb33f360d5fbfab497d9","curated_reviewed_at":"2026-09-01","curated_sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"curated_uk_delivery":"global_managed","curated_uk_basis":"Confirm UK delivery scope through RFP.","sector_review_queue":[{"sector":"retail_ecommerce","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Good fit, evidenced via a real, named, well-known customer | Not assessed in specific technical detail for this sector beyond the confirmed WAN-replacement and internet-breakout capabilities evidenced directly | Not assessed for sector-specific frameworks | Mammut (named, well-known international outdoor-apparel brand, with specific, quantified deployment detail: WAN replacement completed in under two months) | N/A | A single, though genuinely well-known, named, and specifically-quantified case study | A real, credible, named customer - Mammut is a well-known international outdoor-apparel brand - reinforced by specific, quantified deployment-timeline detail, making this a genuinely strong reference despite being a single example.","named_evidence":"Mammut (named, well-known international outdoor-apparel brand, with specific, quantified deployment detail: WAN replacement completed in under two months)","evidence_source_ids":["evidence:opensystems:16"]},{"sector":"manufacturing","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, extensively evidenced | The confirmed, dedicated OT Firewall product, plus SD-WAN and Mission Control's proactive monitoring, are directly relevant to distributed manufacturing operations | Not assessed for sector-specific frameworks beyond the confirmed general ISO 27001 certification | Mikron (named customer, described directly as strengthening security specifically to 'protect critical production systems'), confirmed directly as a served sector generally | N/A | Real, named customer evidence exists for this sector specifically | Genuinely well-evidenced via both a real, named customer case study directly referencing production-system protection and a dedicated, purpose-built OT Firewall product.","named_evidence":"Mikron (named customer, described directly as strengthening security specifically to 'protect critical production systems'), confirmed directly as a served sector generally","evidence_source_ids":["evidence:opensystems:8"]},{"sector":"transport_logistics","reason":"Strong case-study evidence and non-positive suitability require source-level review","support_state":"not_confirmed","qualification":"Strong fit, evidenced via a real, named, quantified customer example | SD-WAN and Mission Control's global, multi-site management capability directly relevant, evidenced via genuine, quantified scale (60+ locations) | Not assessed for sector-specific frameworks | Altana (named customer, connecting 60+ locations worldwide and integrating new acquisitions) | Global, per the confirmed 60+-location customer example | A single, though genuinely specific and quantified, named case study | Genuinely well-evidenced via a real, named, specifically-quantified (60+ locations) customer example directly relevant to large-scale, distributed, multi-site operations.","named_evidence":"Altana (named customer, connecting 60+ locations worldwide and integrating new acquisitions)","evidence_source_ids":["evidence:opensystems:10"]}],"resolution":"reviewed_override","active_review":{"uk_sector_evidence":{"manufacturing":false,"retail_ecommerce":false,"transport_logistics":false},"reviewed_at":"2026-09-30T00:00:00Z","review_due":"2026-10-30T00:00:00Z","reviewer":"Sector evidence: source-reviewed","sector_signoff":{"status":"pending","label":"Sector evidence: source-reviewed","signed_off_by":null,"signed_off_at":null},"source_urls":["https://www.open-systems.com/company/customers/","https://www.open-systems.com/company/customers/mammut/"],"qualification":"Open Systems labels ALTANA chemicals and documents SASE at 60-plus sites. Correct sector to manufacturing/chemicals, not logistics. Recovered Open Systems customer index identifies Mikron precision manufacturing using SASE. Does not prove every secondary-directory detail. Mammut primary case describes SASE, branch breakouts, VPN and managed network operations for an outdoor retail brand. This is sector experience only; scope, UK delivery and suitability for the buyer require separate confirmation.","sectors":{"transport_logistics":"not_confirmed","manufacturing":"yes","retail_ecommerce":"yes"},"regions":{}}},"uk_evidence":{"entity":{"status":"not_researched","name":null,"source_urls":[],"checked_at":null,"review_due":null,"qualification":"UK contracting entity is not confirmed by the published Neon provider record."},"regional_delivery":{"status":"not_confirmed","scope":"Published UK and Ireland regional evidence. Confirm delivery to each UK site separately; this is not contracting-entity evidence."},"buyer_contract":{"status":"requires_supplier_confirmation","qualification":"Confirm the legal counterparty, delivery partner, operator and support responsibilities in the proposal and order."}},"summary_source":"https://open-systems.com/company/","position":21,"research_metrics":{"supported":7,"partial":1,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":32,"total":40,"reviewed":8,"completeness_percent":20,"completeness":0.2},"proven_evidence_count":7,"response_panel":null,"best_for":"Retail and e-commerce; Manufacturing; both","best_for_fields":{"sectors_yes":["Retail and e-commerce","Manufacturing"],"sectors_partial":[],"regions":[],"size":[],"service_model":"both","signoff":"Sector evidence: source-reviewed"},"editorial":null,"uk_status":{"status":"not_confirmed","label":"UK entity not yet reviewed","source_urls":[],"reviewed_at":null,"qualification":null}}]}},"service":{"description":"Use Netify to request comparable proposals, demos and pre-sales contacts from SD-WAN and SASE providers. You choose which providers we approach and approve the brief they receive.","commission":"Suppliers pay Netify when an introduction leads to business. This does not affect how providers are ordered.","response_target":{"proposals":null,"working_days":null},"response_panel":[],"research_requires_identity":false,"supplier_disclosure_requires_recipient_consent":true},"market_record":"https://netify.co.uk/sase/shortlist/market-record.json/","interactiveSurfaces":[{"id":"sourcing","kind":"sourcing-service","url":"https://netify.co.uk/sase/shortlist/","description":"Use Netify to request comparable proposals, demos and pre-sales contacts from SD-WAN and SASE providers. You choose which providers we approach and approve the brief they receive."},{"id":"mcp-server","kind":"mcp","url":"https://netify.co.uk/sase/api/mcp/","tools":["prepare_sourcing_plan","request_comparable_proposals","get_sourcing_request_status"],"description":"Open research and request-specific sourcing actions. No account or publication prerequisite. Supplier disclosure requires confirmed buyer identity and recipient consent."}],"distributions":{"json":"https://netify.co.uk/sase/shortlist/data.json","csv":"https://netify.co.uk/sase/shortlist/data.csv"}}