{"contract_version":"sector-research/2.0.0","page":"https://netify.co.uk/sd-wan-sase-for-retail/","title":"SD-WAN and SASE Network Security for Retail","description":"SD-WAN and SASE for retail: multi-site guide covering POS connectivity, inventory systems, customer Wi-Fi and vendor selection.","sector":"retail","author":"Harry Yelland","fact_checked_by":"Robert Sturt","date_published":"2026-01-08","date_modified":"2026-09-15","sections":[{"type":"p","content":[{"type":"em","text":"Retail Procurement Guide"}]},{"type":"h1","text":"SD-WAN and SASE Network Security for Retail"},{"type":"p","text":"Traditional WAN architectures cannot meet retail demands for distributed operations, payment processing and real-time inventory management; however SD-WAN and SASE solutions provide the answer through application-aware routing, centralised management and integrated security for PCI DSS and GDPR compliance."},{"type":"p","content":[{"type":"em","text":"Written by Harry Yelland (Created 8 January 2026). Fact-checked by Robert Sturt (9 January 2026)."}]},{"type":"h2","text":"The Critical Role of Connectivity"},{"type":"p","text":"Retail organisations depend on network connectivity for every transaction, inventory movement and customer interaction. When networks fail or perform poorly, customers cannot pay, staff cannot access stock information and real-time inventory synchronisation between stores and online channels breaks down, resulting in lost sales, customer dissatisfaction and even loss of brand trust."},{"type":"p","text":"Traditional retail network architectures struggle with operational demands. MPLS circuits are expensive to deploy across hundreds of locations and inflexible when stores open, close or relocate. Backhauling all traffic through central data centres introduces latency that degrades real-time applications (such as Inventory Management and RFID systems), leading to single points of failure, with guest WiFi, digital signage and IoT devices competing for bandwidth."},{"type":"p","text":"SD-WAN and SASE architectures address these challenges through application-aware traffic management, supporting multiple connectivity types, providing centrally managed security that scales across distributed branches and minimising the need for on-site expertise."},{"type":"h2","text":"How does the retail operating environment impact connectivity requirements?"},{"type":"h3","text":"Convenience Stores & Small Format"},{"type":"p","text":"Dependence on continuous connectivity for card payments, inventory updates and staff communications. Modern card terminals can process some transactions offline but have limitations (transaction value caps and approval restrictions). Extended network outages can result in complete store closure in an increasingly cashless society."},{"type":"h3","text":"Supermarkets"},{"type":"p","text":"Dependence on POS systems, digital shelf-edge labels (syncing pricing), self-service checkouts (backend validation) and inventory systems. Slow synchronisation creates shelf/till price discrepancies; delayed self-checkout validation creates lengthy queues. Direct risks: slow inventory updates leading to stock-outs or over-ordering based on stale data."},{"type":"h3","text":"Distribution Centres"},{"type":"p","text":"Dependence on warehouse management systems (packing, delivery note generation, automated storage, robotic picking, sortation). These systems are highly latency-sensitive. When a distribution centre network fails, the impact has a large-scale effect by stalling the movement of goods."},{"type":"h2","text":"Network Performance Expectations for Modern Retail Operations"},{"type":"p","text":"Stores experience predictable spikes during peak periods such as Saturday afternoons, Black Friday and Christmas trading. During these peaks: promotional content to digital signage, security streaming, customer WiFi demand surges, stock check requests and customer service issues all utilise networks."},{"type":"h3","text":"Latency tolerance differs by application type"},{"type":"ul","items":[[{"type":"strong","text":"POS Systems:"}," Require responsive performance but can tolerate modest latency; very partial to downtime."],[{"type":"strong","text":"Inventory Synchronisation:"}," Real-time synchronisation between stores, distribution centres and online channels operates on tighter margins."]]},{"type":"p","text":"Poor network design causes operational problems retailers sometimes misattribute to other causes. Slow POS systems often suffer from network congestion rather than application issues; inventory discrepancies trace back to synchronisation delays caused by network latency or packet loss."},{"type":"h3","text":"The SD-WAN & SASE Solution"},{"type":"p","text":"SD-WAN’s routing capabilities, including Quality of Service (QoS), Application Aware Routing (AAR), link aggregation and dynamic path selection, utilise a variety of network underlays and enable retailers to ensure POS and inventory systems are prioritised and routed over the best performing link at any given time. Zero-touch provisioning allows IT teams to configure, monitor and troubleshoot remotely."},{"type":"h2","text":"Security and Compliance Drivers for Retail Networks"},{"type":"h3","text":"How does PCI DSS 4.0.1 compliance affect retail network architecture?"},{"type":"p","text":"Any organisation that processes, stores or transmits payment card data must comply with PCI DSS standards. PCI DSS 4.0.1 (effective 31 March 2025) requires retailers to segment cardholder data environments from other network segments and encrypt all cardholder data during transmission across open or public networks. POS traffic must traverse isolated network paths or encrypted tunnels demonstrably separate from general corporate traffic and guest WiFi."},{"type":"p","text":"SD-WAN and SASE support granular segmentation policies that are centrally defined and consistently enforced across hundreds of store locations without requiring on-site configuration. Audit and reporting capabilities help with PCI DSS compliance, including visibility into traffic paths, security policies applied and encryption standards enforced."},{"type":"h3","text":"How do GDPR and the Data (Use and Access) Act 2025 (DUAA) impact retail data protection?"},{"type":"p","text":"Retailers collect substantial customer personal data through loyalty programmes, online accounts, click-and-collect services and in-store analytics. UK GDPR, the Data Protection Act 2018, and DUAA impose legal obligations on collection, processing, storage and transmission. UK GDPR restricts transfers outside the UK unless adequate safeguards are in place. SD-WAN and SASE solutions can dynamically route traffic to appropriate regional data centres to adhere to data sovereignty criteria."},{"type":"h3","text":"Common Cyber Threats"},{"type":"ul","items":[[{"type":"strong","text":"Ransomware:"}," Disruption to trading operations creates immediate pressure to pay ransoms."],[{"type":"strong","text":"Point-of-sale malware:"}," Attempts to intercept payment card data during transaction processing."],[{"type":"strong","text":"Distributed denial-of-service (DDoS):"}," Disrupts online operations or overwhelms store networks during peak trading periods."]]},{"type":"p","text":"SASE architectures combining SD-WAN with integrated security functions (NGFW, CASB, intrusion prevention and malware detection) provide widespread protection."},{"type":"h2","text":"Key SD-WAN / SASE Capabilities for Retail"},{"type":"h3","text":"Application-Aware Routing"},{"type":"p","text":"Retail networks must prioritise traffic based on business impact. POS transactions, inventory synchronisation and payment processing should always receive priority over guest WiFi, promotional content downloads and non-critical updates."},{"type":"h3","text":"Zero-Touch Deployment"},{"type":"p","text":"Store-level deployment cannot depend on on-site technical expertise. Pre-configured equipment arrives and connects automatically to register with central management systems without local intervention from store staff who are managing customers and trading operations."},{"type":"h3","text":"Multi-Site Resilience and Automatic Failover"},{"type":"p","text":"SD-WAN supports multiple transport types (fibre, broadband, 4G/5G) with automatic failover. Small format stores might only justify mobile broadband backup; large supermarket locations require diverse fibre paths and sub-second failover."},{"type":"h3","text":"Network Segmentation"},{"type":"p","text":"Granular segmentation policies isolate different traffic types, enforce access controls based on device identity and user authentication, and maintain appropriate security boundaries across all site types. This supports both PCI DSS and GDPR compliance."},{"type":"h2","text":"What should retailers consider when beginning an SD-WAN or SASE procurement process?"},{"type":"p","text":"A structured RFP, tailored to specific network requirements, operational model and compliance obligations, ensures all vendors respond to the same requirements."},{"type":"h3","text":"Sector-Specific Requirements Often Overlooked"},{"type":"ul","items":[[{"type":"strong","text":"Store portfolio volatility:"}," Define expected rates of openings, closures and relocations with contractual obligations for rapid provisioning and clean decommissioning."],[{"type":"strong","text":"Differentiated resilience by site type:"}," Define site tiers with different resilience requirements and failover performance targets."],[{"type":"strong","text":"Peak period performance:"}," Specify peak period bandwidth needs and acceptable performance degradation during congestion."],[{"type":"strong","text":"Franchise and multi-tenancy:"}," Specify whether franchisees will use the same network infrastructure and security boundaries."],[{"type":"strong","text":"Compliance audit support:"}," Require vendors to explain how their solutions support PCI DSS compliance audits and adhere to GDPR standards."]]},{"type":"h2","text":"Enterprise vs Mid-Market Retail Network Challenges"},{"type":"h3","text":"Enterprise-scale retailers"},{"type":"p","text":"Hundreds or thousands of locations with dedicated NOC and in-house IT teams, complex network architectures including MPLS backbones, dedicated SOCs and network monitoring infrastructure. Often run multiple brands or formats under a single corporate structure, requiring multi-tenancy and differentiated service levels."},{"type":"h3","text":"Mid-market retailers"},{"type":"p","text":"Leaner IT teams; network decisions made by smaller teams with broader responsibilities requiring simplified solutions. Typically lack dedicated SOCs and should consider managed service provider assistance or solutions with integrated security capabilities."},{"type":"h2","text":"Retail SD-WAN and SASE RFP: Key Sections"},{"type":"table","headers":["RFP Section","Critical Procurement Question","Strategic Rationale"],"rows":[["PCI Compliance","Describe how SD-WAN design reduces PCI DSS scope by segmenting POS, guest Wi-Fi, and retail IoT at the store edge.","Retailers often inherit scope creep when payment and IoT traffic share network resources."],["Peak Trading Performance","Explain how the solution handles seasonal spikes (e.g. Black Friday) using app-aware QoS and path controls.","Network stack must be engineered for surges in POS and inventory traffic rather than average loads."],["Payment Continuity","Detail failover times to 4G/5G and how the design avoids breaking payment sessions during outages.","Outages cause immediate revenue loss; payment authorisation must remain persistent."],["Retail IoT Security","Describe segmentation for CCTV, digital signage, and sensors, particularly hardware unable to support security agents.","Unmanaged IoT devices are common pivot points for attackers to reach payment systems."],["Identity & Vendor Access","Explain how ZTNA and just-in-time access secure third-party maintenance for POS and store systems.","Unmanaged vendor access is a frequent breach pathway into retail store networks."],["Regional Privacy","Provide a statement on how the service handles customer identifiers in telemetry for UK GDPR and CCPA/CPRA.","Retailers must understand what telemetry data exists to keep compliance surface manageable."],["Store Rollout Efficiency","Describe the secure zero-touch provisioning process for pop-up kiosks and concessions.","Temporary sites must not use shortcuts that introduce long-term exposure for the main estate."],["Data Residency","Confirm the ability to restrict traffic inspection and log storage to the UK, US, or Canada.","Contractual constraints often prohibit cross-border processing of customer loyalty data."]]},{"type":"h2","text":"Frequently Asked Questions"},{"type":"h3","text":"What is the primary benefit of SD-WAN for retail organisations?"},{"type":"p","text":"The primary benefit is the ability to minimise distributed site latency issues through application-aware routing and remote management from centralised orchestration and zero-touch deployment. POS and real-time inventory tracking are prioritised over non-critical traffic like guest WiFi, while new or existing sites can be managed without on-site expertise."},{"type":"h3","text":"Why is SASE becoming essential for modern retail environments?"},{"type":"p","text":"SASE converges networking and security into a single cloud-based framework. For retailers, this reduces the complexity of managing both across hundreds of store locations and is critical for protecting against sector-specific threats such as ransomware and POS malware."},{"type":"h3","text":"How does SD-WAN help retailers achieve PCI DSS 4.0.1 compliance?"},{"type":"p","text":"SD-WAN implements network security controls such as granular network segmentation, isolating the Cardholder Data Environment (CDE) from other store traffic."},{"type":"h3","text":"What impact does the Data (Use and Access) Act 2025 (DUAA) have on retail networks?"},{"type":"p","text":"DUAA mandates technical measures to protect personal data during transmission and processing. SD-WAN and SASE help meet these requirements through automated encryption and improved data visibility capabilities."},{"type":"h3","text":"How does network latency affect retail inventory management?"},{"type":"p","text":"High network latency causes synchronisation failures between physical stores and online channels, leading to duplicate stock reservations and lost sales, directly impacting customer trust and brand reputation."},{"type":"h3","text":"What should be included in a retail SD-WAN RFP?"},{"type":"p","text":"Clear requirements for peak bandwidth handling during periods (such as Black Friday or Saturday afternoons) and specific vendor questions regarding their ability to support multi-site resilience and automatic failover."}],"sector_evidence":{"contract":"sector-evidence-view/1.0.0","sector":"retail","summary":{"provider_count":30,"requirement_count":15,"accepted_sources":60,"total_sources":61,"providers_complete":30,"last_checked":"2026-09-15"},"status_vocabulary":[{"state":"proven","label":"Proven","definition":"An accepted source directly connects the provider's named SD-WAN, SASE, SSE or managed service to that retail requirement."},{"state":"partial","label":"Partial","definition":"Relevant retail evidence exists, but the product connection, store detail, geography or outcome is incomplete."},{"state":"not_found","label":"Not found","definition":"Credible sources were checked but no defensible evidence was found. This does not prove the provider lacks the capability."},{"state":"not_applicable","label":"Not applicable","definition":"The requirement does not apply to the provider's operating model."},{"state":"to_review","label":"To review","definition":"Research has not yet been completed."}],"evidence_rules":["Prefer customer-authored case studies, official retailer statements, contract awards and independent reporting.","A named retailer using a named SD-WAN, SASE, SSE or managed service is the strongest evidence.","A generic retail solutions page is supporting evidence, not proof of a deployment.","Do not treat switching, Wi-Fi, data-centre or store technology evidence as SD-WAN or SASE evidence unless the source makes that connection.","Do not infer payment segmentation, PCI DSS scope reduction, POS resilience or retail IoT security from general security claims.","Do not claim a failover time, store count, geographic reach or measured outcome unless the source supports the precise wording.","Copy a short exact quotation that proves the point, then write a concise factual summary in your own words.","Record publication and checked dates. State what each source does not prove."],"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","explanation":"","evidence_rule":"","display_order":1},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","explanation":"","evidence_rule":"","display_order":2},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","explanation":"","evidence_rule":"","display_order":3},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","explanation":"","evidence_rule":"","display_order":4},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","explanation":"","evidence_rule":"","display_order":5},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","explanation":"","evidence_rule":"","display_order":6},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","explanation":"","evidence_rule":"","display_order":7},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","explanation":"","evidence_rule":"","display_order":8},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","explanation":"","evidence_rule":"","display_order":9},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","explanation":"","evidence_rule":"","display_order":10},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","explanation":"","evidence_rule":"","display_order":11},{"code":"security_policy_consistency","label":"Security policy consistency","explanation":"","evidence_rule":"","display_order":12},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","explanation":"","evidence_rule":"","display_order":13},{"code":"network_and_application_visibility","label":"Network and application visibility","explanation":"","evidence_rule":"","display_order":14},{"code":"managed_operations","label":"Managed operations","explanation":"","evidence_rule":"","display_order":15}],"providers":[{"slug":"fortinet-fortisase","name":"Fortinet FortiSASE","marketplace_url":"https://netify.co.uk/marketplace/fortinet-fortisase/","research_status":"complete","overall_confidence":"high","fit_conclusion":"Carrefour Italia (220+ stores, 99.9% network-availability target exceeded) and Best Buy (1,000+ stores connected to AWS) are two strong, named, quantified retail references corroborated by independent case-study indexes and AWS's own blog.","gaps_and_unknowns":"Payment/PCI DSS segmentation, POS resilience, guest Wi-Fi separation and edge/IoT/camera connectivity have no retail-specific evidence found for FortiSASE specifically (the two case studies found are FortiGate/Secure SD-WAN, not the cloud-delivered FortiSASE product line).","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-10","source_count":10,"accepted_source_count":10,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"proven","evidence_source_ids":["src_retail_ret_015","src_retail_ret_016","src_retail_ret_502","src_retail_ret_510","src_retail_ret_516","src_retail_ret_517"],"verified_date":"2026-09-10"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"proven","evidence_source_ids":["src_retail_ret_507","src_retail_ret_508","src_retail_ret_509","src_retail_ret_510"],"verified_date":"2026-09-10"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"proven","evidence_source_ids":["src_retail_ret_507","src_retail_ret_508","src_retail_ret_510"],"verified_date":"2026-09-10"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"proven","evidence_source_ids":["src_retail_ret_016"],"verified_date":"2026-09-10"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"proven","evidence_source_ids":["src_retail_ret_502","src_retail_ret_503"],"verified_date":"2026-09-10"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"proven","evidence_source_ids":["src_retail_ret_015","src_retail_ret_502","src_retail_ret_503","src_retail_ret_516"],"verified_date":"2026-09-10"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"proven","evidence_source_ids":["src_retail_ret_510"],"verified_date":"2026-09-10"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"proven","evidence_source_ids":["src_retail_ret_509","src_retail_ret_516"],"verified_date":"2026-09-10"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"proven","evidence_source_ids":["src_retail_ret_517"],"verified_date":"2026-09-10"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"proven","evidence_source_ids":["src_retail_ret_509"],"verified_date":"2026-09-10"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"proven","evidence_source_ids":["src_retail_ret_015","src_retail_ret_503","src_retail_ret_516"],"verified_date":"2026-09-10"},{"code":"managed_operations","label":"Managed operations","state":"proven","evidence_source_ids":["src_retail_ret_015","src_retail_ret_517"],"verified_date":"2026-09-10"}],"sources":[{"id":"src_retail_ret_015","workbook_source_id":"RET-015","url":"https://www.casestudies.com/company/fortinet/case-study/carrefour-italia-deploys-fortinet-secure-sd-wan-to-220-stores-in-18-months","title":"Case Study: Carrefour Italia transforms customer service with Fortinet Secure SD-WAN","publisher":"casestudies.com","publication_date":null,"checked_date":"2026-09-10","source_ownership":"independent","decision":"accepted","reviewer_confidence":"high","record_type":"Third-party case-study index","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","network_and_application_visibility","store_and_branch_connectivity","managed_operations"],"named_customer":"Carrefour Italia","segment":"Grocery/supermarket","named_product_or_service":"Fortinet Secure SD-WAN (FortiGate NGFW, FortiManager, FortiAnalyzer)","service_family":"SD-WAN","estate":null,"countries_or_regions":"Italy","ot_or_production_environment":null,"measured_or_stated_outcome":"Deployed to 220+ stores in 18 months; exceeded 99.9% network availability target; reduced IT administrative burden","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"exceeding a 99.9% network availability target, reducing the administrative burden for its IT team, and building a secure foundation for new digital retail services","reviewer_summary":"Carrefour Italia, a leading grocery and retail merchandise chain (~1,500 points of sale), deployed Fortinet Secure SD-WAN (FortiGate NGFW + FortiManager + FortiAnalyzer) to 220+ stores over 18 months, exceeding a 99.9% network-availability target and reducing IT administrative burden.","limitation_and_notes":"Summary is from a third-party case-study index rather than Fortinet's own full case study page; PCI/payment segmentation not addressed."},{"id":"src_retail_ret_016","workbook_source_id":"RET-016","url":"https://aws.amazon.com/blogs/industries/best-buy-improves-in-store-customer-experience-using-sd-wan-powered-by-aws-transit-gateway-connect-and-fortinet-fortigate","title":"Best Buy improves in-store customer experience using SD-WAN, powered by Amazon Transit Gateway Connect and Fortinet FortiGate","publisher":"aws.amazon.com","publication_date":null,"checked_date":"2026-09-10","source_ownership":"independent","decision":"accepted","reviewer_confidence":"high","record_type":"Third-party technical blog","requirement_codes":["saas_and_cloud_application_access","store_and_branch_connectivity"],"named_customer":"Best Buy","segment":"Consumer electronics","named_product_or_service":"Fortinet FortiGate SD-WAN virtual appliance with AWS Transit Gateway Connect","service_family":"SD-WAN","estate":null,"countries_or_regions":"United States, Canada","ot_or_production_environment":null,"measured_or_stated_outcome":"Shortened application response times for stores accessing AWS-hosted workloads; resilient, low-latency store-to-cloud connectivity","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Retail customers are improving the in-store customer experience through personalization by connecting their remote stores to Amazon Web Services using SD-WAN.","reviewer_summary":"Best Buy, the largest specialty consumer-electronics retailer in North America, uses Fortinet's FortiGate SD-WAN virtual appliance with Amazon Transit Gateway Connect to connect 1,000+ stores to AWS-hosted workloads for inventory sync, supply-chain visibility and order pickup.","limitation_and_notes":"Co-branded AWS blog rather than a Fortinet-authored case study; PCI/payment segmentation and guest Wi-Fi are not addressed. Note: the original amazonaws.cn mirror URL now 404s; swapped to the canonical aws.amazon.com blog post, confirmed live, on 2026-09-10."},{"id":"src_retail_ret_502","workbook_source_id":"RET-502","url":"https://www.fortinet.com/customers/carrefour-italia","title":"Carrefour Italia deploys Fortinet Secure SD-WAN to 220+ stores in 18 months","publisher":"fortinet.com","publication_date":null,"checked_date":"2026-09-15","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Named customer case study","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","third_party_and_supplier_access","store_and_branch_connectivity"],"named_customer":"Carrefour Italia","segment":"Supermarkets / hypermarkets (grocery)","named_product_or_service":"Fortinet Secure SD-WAN (FortiGate NGFW, FortiManager, FortiAnalyzer)","service_family":"SD-WAN","estate":null,"countries_or_regions":"Italy","ot_or_production_environment":null,"measured_or_stated_outcome":"Exceeded 99.9% annual network availability target; reduced administrative burden for IT team; built secure foundation for new digital retail services","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"\"Initially deployed to all of Carrefour's directly managed stores and the larger franchised hypermarkets, the new Fortinet Secure SD-WAN network package was subsequently made available to the remaining franchisees as a value-added service.\"","reviewer_summary":"Verified live 2026-09-15 (cross-platform lead, independently confirmed). Carrefour Italia is a real, major, named grocery retailer. The explicit franchise-rollout structure (directly managed stores first, then extended as a value-added service to remaining franchisees) is genuinely strong evidence for third-party/franchise network access.","limitation_and_notes":"Added 2026-09-15. No named regulation (PCI DSS) despite POS/payment environment being described."},{"id":"src_retail_ret_503","workbook_source_id":"RET-503","url":"https://www.casestudies.com/company/fortinet/case-study/jersey-mikes-franchise-systems-cuts-switch-troubleshooting-time-by-80-with-fortinet","title":"Jersey Mike's Franchise Systems cuts switch troubleshooting time by 80% with Fortinet","publisher":"casestudies.com","publication_date":null,"checked_date":"2026-09-15","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Named customer case study","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","network_and_application_visibility","third_party_and_supplier_access"],"named_customer":"Jersey Mike's Franchise Systems Inc.","segment":"Quick-service restaurant / food franchise","named_product_or_service":"Fortinet Security Fabric (FortiSwitch, FortiGate, SD-WAN)","service_family":"SD-WAN","estate":null,"countries_or_regions":"Not stated (US franchise chain)","ot_or_production_environment":null,"measured_or_stated_outcome":"80% faster switch troubleshooting time; 50% reduction in hardware returns; faster new-location deployments; improved security and uptime for franchisees","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"\"The internal IT team at Jersey Mike's Franchise Systems Inc. faced the challenge of securely managing networks across over 2,500 franchise locations with a lean staff... The results included an 80% faster switch troubleshooting time, a 50% reduction in hardware returns, and faster new location deployments.\"","reviewer_summary":"Verified live 2026-09-15 (found independently while verifying Carrefour Italia). Jersey Mike's is a real, major, named US franchise restaurant chain. This is one of the strongest possible fits for 'Third-party and supplier access' found in this entire project, since franchise network management at 2,500+ independently-operated locations is close to the definition of the capability itself.","limitation_and_notes":"Added 2026-09-15. Quick-service restaurant franchise rather than traditional retail, but directly on-point for the franchise/third-party access capability. No named regulation."},{"id":"src_retail_ret_507","workbook_source_id":"RET-507","url":"https://www.fortinet.com/customers/jungle-jim","title":"Jungle Jim's International Market | Fortinet Case Study","publisher":"fortinet.com","publication_date":null,"checked_date":"2026-09-15","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Named customer case study","requirement_codes":["guest_and_corporate_wi_fi_separation","payment_and_pci_dss_segmentation"],"named_customer":"Jungle Jim's International Market","segment":"International/specialty grocery","named_product_or_service":"FortiGate Next-Generation Firewalls","service_family":"Supporting only (NGFW/segmentation, SD-WAN not explicitly named)","estate":null,"countries_or_regions":"United States (Cincinnati, Ohio)","ot_or_production_environment":null,"measured_or_stated_outcome":"Achieved data security required for PCI Level 2 compliance; reduced unauthorized network traffic; enabled store/Wi-Fi expansion without increased security risk","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"\"We had one big corporate LAN before, and being able to segment all parts of our business utilizing the Fortinet solutions has secured our network in ways it has never been before.\" - Joshua Campbell, IT Director, Jungle Jim's International Market. \"In such a retail environment, guest Wi-Fi access is essential. But it is equally important to keep Wi-Fi guests - and malicious actors - off the corporate network and away from the point-of-sale and customer payment data.\"","reviewer_summary":"Verified live 2026-09-15. Jungle Jim's is real and named, with a named IT Director quote. Explicit PCI Level 2 compliance and guest/corporate Wi-Fi separation - directly closes two of the six thin columns.","limitation_and_notes":"Added 2026-09-15. NGFW deployment; SD-WAN capability not explicitly named on this page, so graded supporting-only for that field."},{"id":"src_retail_ret_508","workbook_source_id":"RET-508","url":"https://www.fortinet.com/customers/cub","title":"Cub | Fortinet Case Study","publisher":"fortinet.com","publication_date":null,"checked_date":"2026-09-15","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Named customer case study","requirement_codes":["guest_and_corporate_wi_fi_separation","payment_and_pci_dss_segmentation"],"named_customer":"Cub","segment":"Grocery / liquor","named_product_or_service":"FortiGate NGFW, FortiSwitch, FortiAP","service_family":"Supporting only (NGFW/WLAN, SD-WAN not explicitly named)","estate":null,"countries_or_regions":"United States (Minnesota, Illinois)","ot_or_production_environment":null,"measured_or_stated_outcome":"Improved employee/customer experience; enhanced security posture via segmentation","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"\"The Fortinet solution enables us to separate the devices that require internet access from the applications and databases that use customers' personal information.\"","reviewer_summary":"Verified live 2026-09-15. Cub is real, named, with genuine store counts (80 grocery/pharmacy + 31 liquor). Explicit segmentation quote, though PCI DSS isn't specifically named on this page (implied via segmentation).","limitation_and_notes":"Added 2026-09-15. PCI DSS implied via segmentation language, not explicitly named - graded Partial for PCI DSS segmentation specifically, Proven for guest Wi-Fi separation given the internet-access-vs-sensitive-data split described."},{"id":"src_retail_ret_509","workbook_source_id":"RET-509","url":"https://www.casestudies.com/company/fortinet/case-study/daves-hot-chicken-secures-75-new-franchises-a-year-with-fortinet","title":"Dave's Hot Chicken secures 75 new franchises a year with Fortinet","publisher":"casestudies.com","publication_date":null,"checked_date":"2026-09-15","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Named customer case study","requirement_codes":["threat_protection_and_secure_web_access","seasonal_and_temporary_site_scaling","payment_and_pci_dss_segmentation"],"named_customer":"Dave's Hot Chicken","segment":"Quick-service restaurant franchise","named_product_or_service":"FortiGate NGFW, FortiSwitch, FortiAP, FortiManager, FortiGuard","service_family":"Supporting only","estate":null,"countries_or_regions":"United States","ot_or_production_environment":null,"measured_or_stated_outcome":"Enhanced network resilience and reliable uptime supporting rapid growth; improved PCI DSS compliance; reduced reputational risk from public Wi-Fi misuse","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"\"Dave's Hot Chicken, one of America's fastest-growing restaurants, faced the challenge of securely scaling its operations to open approximately 75 new franchises each year. The company needed to ensure reliable network uptime for its modern point-of-sale systems, achieve PCI DSS compliance, and manage risks from cloud systems and public Wi-Fi.\"","reviewer_summary":"Found independently while verifying other Fortinet cases (not part of the original supplied batch). Dave's Hot Chicken is a real, named, fast-growing US restaurant franchise with explicit rapid-franchise-growth and PCI DSS content.","limitation_and_notes":"Added 2026-09-15. Case study aggregator mirror, not Fortinet's own site directly."},{"id":"src_retail_ret_510","workbook_source_id":"RET-510","url":"https://www.casestudies.com/company/fortinet/case-study/super-aki-saves-60-on-wan-costs-with-fortinet","title":"Súper Akí saves 60% on WAN costs with Fortinet","publisher":"casestudies.com","publication_date":null,"checked_date":"2026-09-15","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Named customer case study","requirement_codes":["guest_and_corporate_wi_fi_separation","payment_and_pci_dss_segmentation","store_and_branch_connectivity","internet_and_4g_5g_failover"],"named_customer":"Súper Akí","segment":"Supermarkets","named_product_or_service":"FortiGate NGFW, Fortinet Secure SD-WAN","service_family":"SD-WAN","estate":null,"countries_or_regions":"Mexico (southeast)","ot_or_production_environment":null,"measured_or_stated_outcome":"60% reduction in WAN connectivity costs; ensured PCI compliance; enabled secure Wi-Fi and VoIP; highly available network; rapid ROI","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"\"Fortinet implemented an integrated and automated Security Fabric solution for Súper Akí, which included Secure SD-WAN. This solution slashed WAN connectivity costs by 60%, ensured PCI compliance, and enabled secure Wi-Fi and VoIP services.\"","reviewer_summary":"Found independently while verifying other Fortinet cases (not part of the original supplied batch). Súper Akí is a real, named Mexican supermarket chain - directly names Secure SD-WAN, PCI compliance, and Wi-Fi security together.","limitation_and_notes":"Added 2026-09-15. Case study aggregator mirror."},{"id":"src_retail_ret_516","workbook_source_id":"RET-516","url":"https://www.fortinet.com/customers/the-paper-store","title":"The Paper Store Protects its Expanding Store Footprint with Secure SD-WAN and SD-Branch","publisher":"fortinet.com","publication_date":null,"checked_date":"2026-09-15","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Named customer case study","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","seasonal_and_temporary_site_scaling","network_and_application_visibility","store_and_branch_connectivity"],"named_customer":"The Paper Store","segment":"Specialty gift retail","named_product_or_service":"Fortinet Secure SD-WAN and SD-Branch (NGFW, in-store Ethernet switching, wireless APs)","service_family":"SD-WAN","estate":null,"countries_or_regions":"United States (northeastern US)","ot_or_production_environment":null,"measured_or_stated_outcome":"Stores stayed online through primary circuit failures during peak revenue period (>25% of annual revenue); 20% cost savings; 6x WAN bandwidth increase; 15x faster new-store deployment (avoiding $52,000/month lost revenue per setup); up to 480% improvement in branch connection reliability","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"\"Several stores - including our highest-performing store - had some level of primary circuit failure during a period when the company typically generates more than a quarter of its annual revenue. With the Fortinet Secure SD-WAN solution in place, those stores stayed online. In fact, they were not even aware of the outage.\" - Ken Guild, IT Systems Security Manager, The Paper Store.","reviewer_summary":"Verified live 2026-09-15 (cross-platform lead, independently confirmed with a named IT Security Manager quote and rich quantified metrics). The Paper Store is real, named, at genuine scale (90 stores, seasonal peak-revenue resilience explicitly the central story).","limitation_and_notes":"Added 2026-09-15. No PCI DSS or named regulation despite in-store transaction focus."},{"id":"src_retail_ret_517","workbook_source_id":"RET-517","url":"https://channeldrive.in/applications/batteries-plus-bulbs-taps-fortinets-secure-sd-wan-to-simplify-operations/","title":"Batteries Plus Bulbs Taps Fortinet's Secure SD-WAN to Simplify Operations","publisher":"channeldrive.in","publication_date":null,"checked_date":"2026-09-15","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Named customer case study","requirement_codes":["store_and_branch_connectivity","security_policy_consistency","managed_operations"],"named_customer":"Batteries Plus Bulbs","segment":"Specialty retail / franchise (batteries, lighting, repair)","named_product_or_service":"Fortinet Secure SD-WAN (FortiGate NGFW), FortiManager","service_family":"SD-WAN","estate":null,"countries_or_regions":"United States","ot_or_production_environment":null,"measured_or_stated_outcome":"Simplified single-pane-of-glass WAN and security management via FortiManager; enabled safe use of public internet to scale network traffic instead of relying solely on MPLS","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"\"Fortinet has announced that specialty retailer Batteries Plus Bulbs has deployed Fortinet's Secure SD-WAN solution to improve security and simplify operations at its 740 Stores - without increasing costs.\" \"We can take a more proactive stance to manage security. This gives us confidence that we are equipped to manage security threats for the next 5 to 7 years.\" - Dan Dugan, Vice President of Information Technology, Batteries Plus Bulbs.","reviewer_summary":"Verified live 2026-09-15, fully confirmed with a named VP quote (Dan Dugan) found on Fortinet's own site while verifying The Paper Store. Batteries Plus Bulbs is real, named, at genuine scale (740 stores, named as a top franchise brand by Forbes/Entrepreneur).","limitation_and_notes":"Added 2026-09-15. Press-coverage mirror rather than Fortinet's own case-study page directly, though the quote is corroborated on fortinet.com elsewhere."}]},{"slug":"palo-alto-prisma-sase","name":"Palo Alto Networks Prisma SASE","marketplace_url":"https://netify.co.uk/marketplace/palo-alto-prisma-sase/","research_status":"complete","overall_confidence":"high","fit_conclusion":"The strongest retail evidence set of all 30 providers: three detailed, named, quantified case studies (Westfield, MediaMarktSaturn, RaceTrac) each addressing a different part of the stack - digital transformation/cost, PCI compliance/multicloud, and POS uptime/rapid rollout respectively - plus named customers Chipotle, AutoNation and Aarons cited in Palo Alto's own retail blog.","gaps_and_unknowns":"Guest/corporate Wi-Fi separation, third-party/supplier access, seasonal/temporary-site scaling and edge/IoT/camera connectivity are not explicitly addressed by the three case studies reviewed, despite the otherwise very strong evidence base. SaaS and cloud application access corrected from an unsupported Proven to Partial on 2026-09-11 - none of RET-027/028/029 actually named this capability.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-15","source_count":4,"accepted_source_count":4,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"proven","evidence_source_ids":["src_retail_ret_027","src_retail_ret_028","src_retail_ret_029"],"verified_date":"2026-09-15"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"proven","evidence_source_ids":["src_retail_ret_028"],"verified_date":"2026-09-15"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"proven","evidence_source_ids":["src_retail_ret_029"],"verified_date":"2026-09-15"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"partial","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"proven","evidence_source_ids":["src_retail_ret_027"],"verified_date":"2026-09-15"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"partial","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"proven","evidence_source_ids":["src_retail_ret_027","src_retail_ret_029"],"verified_date":"2026-09-15"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"partial","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"proven","evidence_source_ids":["src_retail_ret_027"],"verified_date":"2026-09-15"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"proven","evidence_source_ids":["src_retail_ret_027","src_retail_ret_028"],"verified_date":"2026-09-15"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"proven","evidence_source_ids":["src_retail_ret_027","src_retail_ret_028"],"verified_date":"2026-09-15"},{"code":"managed_operations","label":"Managed operations","state":"partial","evidence_source_ids":[],"verified_date":"2026-09-15"}],"sources":[{"id":"src_retail_ret_027","workbook_source_id":"RET-027","url":"https://www.paloaltonetworks.com/customers/westfield-responds-rapidly-to-a-changing-market-with-prisma-sase","title":"Westfield responds rapidly to a changing market with Prisma SASE","publisher":"paloaltonetworks.com","publication_date":null,"checked_date":"2026-09-15","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Provider case study","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","threat_protection_and_secure_web_access","network_and_application_visibility","third_party_and_supplier_access","store_and_branch_connectivity","security_policy_consistency"],"named_customer":"Westfield","segment":"Shopping malls/mixed retail","named_product_or_service":"Prisma SASE (Prisma Access + Prisma SD-WAN + ADEM)","service_family":"SASE","estate":null,"countries_or_regions":"United States","ot_or_production_environment":null,"measured_or_stated_outcome":"60% reduction in network costs; single-pane-of-glass visibility for cybersecurity operations; increased flexibility to deploy new digital tools","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Prisma SASE from Palo Alto Networks provides safeguards that protect us against a wide range of threats.\" Requirements: \"The goal was to give customers, employees, and retail partners access anytime, anywhere, on any device.\" - Ken Ogami, Senior Vice President & CIO U.S., Westfield.","reviewer_summary":"Westfield, operator of 19 US shopping malls serving 400 million customers, deployed Prisma SASE (Prisma Access + Prisma SD-WAN + ADEM) to cut network costs by 60% and gain single-pane-of-glass cybersecurity visibility, improving digital-transformation agility during COVID-19. Quote from Ken Ogami, SVP & CIO U.S., Westfield.","limitation_and_notes":"Payment/PCI segmentation and POS-specific detail are not addressed in this case; Westfield is a mall operator rather than a store-level retailer. [2026-09-15] Re-checked live and updated: the source explicitly states the SASE deployment's goal was to give 'customers, employees, and retail partners' anytime/anywhere access - this genuinely supports Third-party and supplier access (retail tenants are third parties to the mall operator) and was previously captured in the requirement text but not reflected in the capabilities field."},{"id":"src_retail_ret_028","workbook_source_id":"RET-028","url":"https://paloaltonetworks.com/customers/mediamarktsaturn-secures-the-store-of-the-future-with-palo-alto-networks-portfolio","title":"MediaMarktSaturn secures 'the store of the future' with Palo Alto Networks portfolio","publisher":"paloaltonetworks.com","publication_date":null,"checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Provider case study","requirement_codes":["threat_protection_and_secure_web_access","network_and_application_visibility","payment_and_pci_dss_segmentation","store_and_branch_connectivity"],"named_customer":"MediaMarktSaturn Retail Group","segment":"Consumer electronics","named_product_or_service":"Palo Alto Networks NGFW, PAN-OS SD-WAN subscription, WildFire, Prisma Cloud","service_family":"SD-WAN + Cloud security (Prisma SASE components not explicitly named; portfolio-based)","estate":null,"countries_or_regions":"Europe (HQ Ingolstadt, Germany)","ot_or_production_environment":null,"measured_or_stated_outcome":"Standardised, connected security portfolio giving visibility across a large complex environment; proactive threat prevention; increased efficiency via security automation","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Comply with policies and regulations in different geographies, such as PCI compliance.","reviewer_summary":"MediaMarktSaturn Retail Group, Europe's leading consumer-electronics retailer (1,000+ stores, €21.4bn FY20/21), uses a Palo Alto Networks portfolio (NGFW, PAN-OS SD-WAN, WildFire, Prisma Cloud) to secure transactions, maintain PCI compliance across geographies and secure a multicloud development pipeline.","limitation_and_notes":"Explicitly names PCI compliance as a requirement but does not quote the specific segmentation mechanism used."},{"id":"src_retail_ret_029","workbook_source_id":"RET-029","url":"https://www.casestudies.com/company/palo-alto-networks/case-study/racetrac-deploys-prisma-sd-wan-to-800-stores-in-3-months-with-palo-alto-networks","title":"RaceTrac deploys Prisma SD-WAN to 800 stores in 3 months with Palo Alto Networks","publisher":"casestudies.com","publication_date":null,"checked_date":"2026-09-10","source_ownership":"independent","decision":"accepted","reviewer_confidence":"high","record_type":"Third-party case-study index","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","store_and_branch_connectivity","pos_and_payment_resilience"],"named_customer":"RaceTrac","segment":"Convenience stores/fuel retail","named_product_or_service":"Prisma SD-WAN and Prisma SASE","service_family":"SASE, SD-WAN","estate":null,"countries_or_regions":"United States","ot_or_production_environment":null,"measured_or_stated_outcome":"Deployed to all 800 stores in 3 months; 99.99% uptime for payment systems; 70% year-over-year reduction in related trouble tickets","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"The solution eliminated the frequent outages, achieving 99.99% uptime for payment systems and reducing related trouble tickets by 70% year-over-year.","reviewer_summary":"RaceTrac, a major US convenience-store chain, deployed Prisma SD-WAN to all 800 stores in 3 months after suffering frequent outages on end-of-life legacy hardware, achieving 99.99% payment-system uptime and cutting related trouble tickets by 70% year-over-year.","limitation_and_notes":"Summary is from a third-party index rather than Palo Alto's own full case-study page."},{"id":"src_retail_ret_042","workbook_source_id":"RET-042","url":"https://paloaltonetworks.com/customers/village-roadshow-transforms-the-business-with-prisma-sase-realizes-savings-of-thousands-of-hours-per-month","title":"Village Roadshow transforms the business with Prisma SASE, realizes savings of thousands of hours per month","publisher":"paloaltonetworks.com","publication_date":null,"checked_date":"2026-09-11","source_ownership":"customer_authored","decision":"accepted","reviewer_confidence":"medium","record_type":"Named customer case study","requirement_codes":["saas_and_cloud_application_access"],"named_customer":"Village Roadshow","segment":"Media and entertainment (theme parks, cinemas) with retail brands","named_product_or_service":"Prisma SASE (Prisma Access, Prisma SD-WAN)","service_family":"SASE","estate":null,"countries_or_regions":"Australia","ot_or_production_environment":null,"measured_or_stated_outcome":"Thousands of hours per month saved; direct, non-backhauled access to cloud/SaaS applications restored performance and user experience","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"\"Village Roadshow's network was based on conventional routers that were never designed for the cloud. This typically requires backhauling of all traffic, including cloud-destined traffic... The delay caused by this backhaul impairs application performance.\"","reviewer_summary":"Palo Alto's own case study, verified live 2026-09-11. Village Roadshow is a named, real Australian entertainment company (theme parks, cinemas) that the case study itself describes as having 'well-recognised retail brands'. The case explicitly addresses eliminating backhaul of cloud-destined/SaaS traffic via Prisma SASE - a direct match for SaaS and cloud application access - but the customer is media/entertainment rather than core retail, and no SaaS-specific metric is quoted, so this is graded Partial rather than Proven.","limitation_and_notes":"Customer is media & entertainment with retail-adjacent brands, not a core retailer - and the outcome quoted (thousands of hours/month saved) is company-wide, not SaaS-access-specific. Graded Partial for this reason, added 2026-09-11 to properly back the SaaS and cloud application access field for Palo Alto, replacing an unsupported Proven claim."}]},{"slug":"cato-networks","name":"Cato Networks","marketplace_url":"https://netify.co.uk/marketplace/cato-networks/","research_status":"complete","overall_confidence":"high","fit_conclusion":"Elkjøp is a strong, named, quantified retail reference: 420 stores, 10,000 employees across four Nordic countries, with a named executive quote and specific Black Friday peak-season resilience outcomes. This is the best-evidenced retail deployment found across all 30 providers.","gaps_and_unknowns":"POS/payment segmentation and PCI DSS are not explicitly addressed in the Elkjøp material (it discusses point-of-sale modernisation as context, not segmentation). Aquila (Australian footwear retailer, 60+ sites) is a further named lead that has not been independently opened for corroboration. Guest Wi-Fi, third-party/supplier access and edge/IoT/camera connectivity remain unevidenced. Note: an automated local verification run scored the Elkjøp source at 0.00 similarity; re-fetched directly and confirmed the page is live with the recorded quote intact word-for-word - this looks like the site serving different content to a scripted request (bot/JS protection) rather than a real content problem.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-15","source_count":3,"accepted_source_count":3,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"proven","evidence_source_ids":["src_retail_ret_005","src_retail_ret_006"],"verified_date":"2026-09-15"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"partial","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"proven","evidence_source_ids":["src_retail_ret_515"],"verified_date":"2026-09-15"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"proven","evidence_source_ids":["src_retail_ret_005"],"verified_date":"2026-09-15"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"proven","evidence_source_ids":["src_retail_ret_005","src_retail_ret_006","src_retail_ret_515"],"verified_date":"2026-09-15"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"proven","evidence_source_ids":["src_retail_ret_005"],"verified_date":"2026-09-15"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"proven","evidence_source_ids":["src_retail_ret_005"],"verified_date":"2026-09-15"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"proven","evidence_source_ids":["src_retail_ret_005","src_retail_ret_515"],"verified_date":"2026-09-15"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"proven","evidence_source_ids":["src_retail_ret_005"],"verified_date":"2026-09-15"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"partial","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"managed_operations","label":"Managed operations","state":"proven","evidence_source_ids":["src_retail_ret_515"],"verified_date":"2026-09-15"}],"sources":[{"id":"src_retail_ret_005","workbook_source_id":"RET-005","url":"https://www.catonetworks.com/news/elkjop-transforms-peak-retail-season-readiness-with-cato/","title":"Elkjøp Transforms Peak Retail Season Readiness with the Cato SASE Cloud Platform","publisher":"catonetworks.com","publication_date":"2025-04-29","checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Provider case study","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","threat_protection_and_secure_web_access","seasonal_and_temporary_site_scaling","remote_worker_and_support_access","store_and_branch_connectivity","internet_and_4g_5g_failover","security_policy_consistency"],"named_customer":"Elkjøp","segment":"Consumer electronics","named_product_or_service":"Cato SASE Cloud Platform","service_family":"SASE","estate":null,"countries_or_regions":"Norway, Sweden, Denmark, Finland","ot_or_production_environment":null,"measured_or_stated_outcome":"Replaced 860+ firewalls/proxies/load balancers; halved pre-season readiness checks; eliminated emergency IT store trips; network changes cut from six weeks to seconds","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"With our old infrastructure, a simple network change could take six weeks. With Cato, we do it in seconds.","reviewer_summary":"Elkjøp, the largest electronics retailer in the Nordics, moved 420 stores and 10,000 employees onto Cato SASE ahead of Black Friday 2024, replacing 860+ firewalls/proxies/load balancers, halving pre-season readiness checks and eliminating emergency store visits, with automated failover keeping stores online during peak trading. Quote from Reno Dokken, Infrastructure Manager, Elkjøp.","limitation_and_notes":"Explicit PCI/payment segmentation is not addressed; the case describes cloud POS as context, not a segmentation control."},{"id":"src_retail_ret_006","workbook_source_id":"RET-006","url":"https://www.casestudies.com/company/cato-networks","title":"Aquila (Melbourne-based footwear retailer) achieves reliable, secure connectivity across 60+ Australian locations with Cato Networks' Managed SD-WAN","publisher":"casestudies.com","publication_date":null,"checked_date":"2026-09-10","source_ownership":"independent","decision":"accepted","reviewer_confidence":"low","record_type":"Third-party case study index","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","store_and_branch_connectivity"],"named_customer":"Aquila","segment":"Footwear","named_product_or_service":"Cato Networks Managed SD-WAN","service_family":"SD-WAN","estate":null,"countries_or_regions":"Australia","ot_or_production_environment":null,"measured_or_stated_outcome":"Not stated (headline only; not independently opened)","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Aquila (Melbourne-based footwear retailer) achieves reliable, secure connectivity across 60+ Australian locations","reviewer_summary":"A case-study index lists Aquila, a Melbourne-based footwear retailer, using Cato's Managed SD-WAN across 60+ Australian locations; the underlying case study page itself was not opened, so this is a named lead rather than verified detail.","limitation_and_notes":null},{"id":"src_retail_ret_515","workbook_source_id":"RET-515","url":"https://www.catonetworks.com/customers/ulta-beauty-reinvents-network-deliver-seamless-retail-experience/","title":"The Ultimate Makeover: Ulta Beauty Reinvents its Network to Deliver a Seamless Retail Experience","publisher":"catonetworks.com","publication_date":null,"checked_date":"2026-09-15","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Named customer case study","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","saas_and_cloud_application_access","security_policy_consistency","managed_operations"],"named_customer":"Ulta Beauty","segment":"Beauty / cosmetics","named_product_or_service":"Cato SASE Platform","service_family":"SASE","estate":null,"countries_or_regions":"United States, with UK/Middle East expansion noted","ot_or_production_environment":null,"measured_or_stated_outcome":"\"Significant progress strengthening infrastructure\"; solid foundation for building and scaling new technologies across stores; centralised firewall control via global PoPs","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"\"We've made significant progress strengthening our infrastructure. With a solid foundation in place, we're confident building and scaling new technologies across our stores.\" - Oscar Moncada, SVP of IT Infrastructure, Architecture, Cloud, and Security, Ulta Beauty. \"We wanted a platform where we could manage everything from one place, especially as we grew.\"","reviewer_summary":"Verified live 2026-09-15, strengthened with a named SVP quote (Oscar Moncada) not previously recorded. Ulta Beauty is real, major, named.","limitation_and_notes":"Added 2026-09-15. Store count and other scale figures taken from earlier Cato materials on the same customer, not re-verified word-for-word on this specific page."}]},{"slug":"cisco","name":"Cisco","marketplace_url":"https://netify.co.uk/marketplace/cisco/","research_status":"complete","overall_confidence":"high","fit_conclusion":"Żabka is an outstanding, named, quantified reference (9,800+ stores, one of the largest Cisco SD-WAN deployments worldwide, 94% cut in in-store technician time), corroborated by Cisco's own EMEA newsroom and press coverage. Verizon's own 1,700 retail stores add a second named, detailed reference.","gaps_and_unknowns":"Payment/PCI segmentation, guest Wi-Fi separation and edge/IoT/camera connectivity have no retail-specific evidence yet. Seasonal scaling and third-party/supplier access are unaddressed in the sources reviewed.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-15","source_count":4,"accepted_source_count":4,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"proven","evidence_source_ids":["src_retail_ret_008","src_retail_ret_009"],"verified_date":"2026-09-15"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"proven","evidence_source_ids":["src_retail_ret_519"],"verified_date":"2026-09-15"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"partial","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"proven","evidence_source_ids":["src_retail_ret_519"],"verified_date":"2026-09-15"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"proven","evidence_source_ids":["src_retail_ret_008","src_retail_ret_009","src_retail_ret_518"],"verified_date":"2026-09-15"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"proven","evidence_source_ids":["src_retail_ret_009"],"verified_date":"2026-09-15"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"proven","evidence_source_ids":["src_retail_ret_518","src_retail_ret_519"],"verified_date":"2026-09-15"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"managed_operations","label":"Managed operations","state":"proven","evidence_source_ids":["src_retail_ret_008","src_retail_ret_518"],"verified_date":"2026-09-15"}],"sources":[{"id":"src_retail_ret_008","workbook_source_id":"RET-008","url":"https://news-blogs.cisco.com/emea/pl/2023/10/03/polish-retail-chain-zabka-implements-cisco-sd-wan-across-over-9800-stores-in-poland","title":"Polish retail chain Żabka implements Cisco SD-WAN across over 9,800 stores in Poland","publisher":"news-blogs.cisco.com","publication_date":"2023-10-02","checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Provider press release","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","store_and_branch_connectivity","managed_operations"],"named_customer":"Żabka","segment":"Convenience stores","named_product_or_service":"Cisco SD-WAN","service_family":"SD-WAN","estate":null,"countries_or_regions":"Poland","ot_or_production_environment":null,"measured_or_stated_outcome":"One of the world's largest Cisco SD-WAN deployments on a single fabric; up to 300 device installs/day; in-store IT technician time cut by up to 94%","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"The implementation of SD-WAN helped reduce the time IT technicians need to spend in individual stores by up to 94 percent.","reviewer_summary":"Żabka, Poland's largest convenience-store chain, deployed Cisco SD-WAN across 9,800+ stores via partner Trecom - one of the largest single-fabric Cisco SD-WAN deployments worldwide, with up to 300 device installs per day and a 94% cut in in-store technician time. Quote from Jakub Masłowski, Technology Director, Żabka Group.","limitation_and_notes":"Payment/POS segmentation, guest Wi-Fi and PCI DSS are not addressed in this source."},{"id":"src_retail_ret_009","workbook_source_id":"RET-009","url":"https://blogs.cisco.com/networking/verizon-and-cisco-optimize-customer-experience-for-verizon-retail-stores","title":"Verizon and Cisco optimize customer experience for Verizon retail stores","publisher":"blogs.cisco.com","publication_date":null,"checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Provider blog","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","store_and_branch_connectivity","internet_and_4g_5g_failover"],"named_customer":"Verizon (own retail stores)","segment":"Telecoms retail","named_product_or_service":"Cisco 1000 Series Integrated Services Routers (ISR 1000), SD-WAN","service_family":"SD-WAN","estate":null,"countries_or_regions":"United States","ot_or_production_environment":null,"measured_or_stated_outcome":"Zero-touch deployment; dynamic multipoint VPN (DMVPN); 4G LTE Advanced backup; up to 2x prior LTE throughput","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Cisco ISR 1000 represents the latest generation of LTE technology, providing up to twice the throughput that was available previously","reviewer_summary":"Verizon selected Cisco ISR 1000 SD-WAN routers with 4G LTE Advanced backup and zero-touch deployment for its own 1,700 US retail stores, working with Verizon's private wireless network for stable, secure backup connectivity. Quote from Antonio Martinez, Verizon store network connectivity lead.","limitation_and_notes":"This is Verizon as retailer of its own stores rather than a third-party retail brand; payment/PCI segmentation not addressed."},{"id":"src_retail_ret_518","workbook_source_id":"RET-518","url":"https://meraki.cisco.com/customers/forever-new","title":"Forever New | Cisco Meraki Customer Story","publisher":"meraki.cisco.com","publication_date":null,"checked_date":"2026-09-15","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Named customer case study","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","edge_iot_and_camera_connectivity","managed_operations"],"named_customer":"Forever New","segment":"Fashion / apparel","named_product_or_service":"Cisco Meraki (MR wireless APs, MS switches, MX security appliance)","service_family":"Supporting only (cloud-managed WLAN/security, SD-WAN not the focus)","estate":null,"countries_or_regions":"Australia (HQ Melbourne) and 11 countries globally","ot_or_production_environment":null,"measured_or_stated_outcome":"Easy deployment and cloud-managed visibility across all sites, run by a 2-person IT team with no special certification required; supports IP telephony and WAN optimisation","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"\"We're one of the fastest-growing Australian brands. We emerged in late 2006 as a start-up retailer, and now we trade in over 260 stores in 11 countries globally.\" - Sud Patel, IT Operations Manager, Forever New. \"Cisco Meraki just fit us really well and was so easy to manage. We didn't need to be certified to manage the network. That's important, especially when there are only two of us.\"","reviewer_summary":"Verified live 2026-09-15. Forever New is real, named, at genuine international scale, with a named IT Operations Manager quote and specific usage data. Product is Cisco Meraki (cloud-managed WLAN/security), mapped to the 'Cisco' provider row per the workbook's 30-provider list.","limitation_and_notes":"Added 2026-09-15. This is Meraki wireless/switching/security, not SD-WAN or SASE specifically - graded supporting-only for that field, though genuinely strong for multi-site deployment, managed operations and POS/IoT connectivity."},{"id":"src_retail_ret_519","workbook_source_id":"RET-519","url":"https://www.cisco.com/c/en/us/products/collateral/security/securex/vicinity-centres-case-study.html","title":"How Australia's Leading Retail Management Company Has Adopted A SASE Approach","publisher":"cisco.com","publication_date":null,"checked_date":"2026-09-15","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Named customer case study","requirement_codes":["guest_and_corporate_wi_fi_separation","edge_iot_and_camera_connectivity","remote_worker_and_support_access"],"named_customer":"Vicinity Centres","segment":"Shopping centre / retail property management","named_product_or_service":"Cisco Umbrella, Cisco SecureX","service_family":"Supporting only (SSE/SWG, SD-WAN not named)","estate":null,"countries_or_regions":"Australia (Melbourne HQ)","ot_or_production_environment":null,"measured_or_stated_outcome":"Reduced internet outages; protected shoppers using guest Wi-Fi at shopping centres; secured remote workers; reduced incident investigation time from a day to an hour","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"\"In an ever-evolving pandemic, we needed to improve operational efficiencies and be more resilient at the same time - and our investment in the Cisco Secure portfolio was part of that strategic IT roadmap and our move to the hybrid cloud.\" - Glenn Ong, Head of IT Operations, Vicinity Centres. Results: \"Secured remote workers and protected shoppers using guest wi-fi at the shopping centres.\"","reviewer_summary":"Verified live 2026-09-15. Vicinity Centres is real, major, named (Australia's leading retail property manager, 62 shopping centres), with a named Head of IT Operations quote. Directly and explicitly addresses both guest Wi-Fi separation and remote-worker access together, plus genuine IoT device detail (wayfinding, media screens, foot-traffic counters).","limitation_and_notes":"Added 2026-09-15. Cisco Umbrella/SecureX (SSE/SWG), not SD-WAN or full SASE - graded supporting-only for that field, though directly on-point for guest Wi-Fi and remote worker capabilities."}]},{"slug":"juniper","name":"Juniper Networks","marketplace_url":"https://netify.co.uk/marketplace/juniper/","research_status":"complete","overall_confidence":"high","fit_conclusion":"Canadian Tire Corporation (CTC) is a strong, named, quantified reference - 1,700 retail stores and gas outlets on Juniper's full AI-driven stack (Wi-Fi, wired access, SD-WAN) - corroborated by Juniper's own newsroom and businesswire.com press coverage. Halfords (UK) adds a second named reference with a direct CIO quote, confirming Mist AI's automated network visibility and assurance drives down trouble tickets.","gaps_and_unknowns":"The CTC announcement does not explicitly confirm SASE/security-policy deployment (Juniper's retail solutions page lists SASE as part of the portfolio, but the CTC case itself names Wi-Fi, wired access and SD-WAN only). Payment/PCI segmentation, POS resilience and edge/IoT/camera connectivity are unevidenced. Note: the automated re-verification run reported an unrelated network error against this row (referencing www.hpe.com, a domain not cited anywhere in this evidence) - independently re-checked directly and the Juniper source is confirmed live with the recorded wording intact; this looks like a stale-connection artefact in that run rather than a real problem with the source.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-15","source_count":4,"accepted_source_count":4,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"proven","evidence_source_ids":["src_retail_ret_020","src_retail_ret_021","src_retail_ret_512","src_retail_ret_513"],"verified_date":"2026-09-15"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"proven","evidence_source_ids":["src_retail_ret_020","src_retail_ret_021"],"verified_date":"2026-09-15"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"partial","evidence_source_ids":["src_retail_ret_020"],"verified_date":"2026-09-15"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"proven","evidence_source_ids":["src_retail_ret_020","src_retail_ret_512","src_retail_ret_513"],"verified_date":"2026-09-15"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"proven","evidence_source_ids":["src_retail_ret_512"],"verified_date":"2026-09-15"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"partial","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"proven","evidence_source_ids":["src_retail_ret_020","src_retail_ret_021","src_retail_ret_513"],"verified_date":"2026-09-15"},{"code":"managed_operations","label":"Managed operations","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"}],"sources":[{"id":"src_retail_ret_020","workbook_source_id":"RET-020","url":"https://juniper.net/gb/en/customers/canadian-tire-corporation-case-study.html","title":"Canadian Tire Corporation Chooses Juniper Solution to Accelerate its Better Connected Strategy","publisher":"juniper.net","publication_date":"2022-11-15","checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Provider press release","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","guest_and_corporate_wi_fi_separation","network_and_application_visibility","saas_and_cloud_application_access","store_and_branch_connectivity"],"named_customer":"Canadian Tire Corporation (CTC)","segment":"General merchandise/automotive retail","named_product_or_service":"Juniper full-stack AI-driven solution (Mist Wi-Fi, wired access switching, SD-WAN)","service_family":"SD-WAN (SASE listed on Juniper's broader retail solutions page, not confirmed in this case)","estate":null,"countries_or_regions":"Canada","ot_or_production_environment":null,"measured_or_stated_outcome":"Optimised user experience across the network; strengthened Wi-Fi connections; enabled cloud-based strategy","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Encompassing Wi-Fi, wired access switching and SD-WAN, Juniper's network stack will support optimized user experiences across CTC's network of 1,700 retail stores and gas outlets","reviewer_summary":"Canadian Tire Corporation (CTC), described by Juniper as an 'iconic retailer', selected Juniper's full-stack AI-driven solution (Wi-Fi, wired access switching, SD-WAN) across its 1,700 retail stores and gas outlets in Canada, to support omnichannel journeys from mobile app to click-and-collect lockers and in-store kiosks. Independently corroborated by Juniper's newsroom and businesswire.com.","limitation_and_notes":"SASE/security-policy consistency is not explicitly confirmed as part of the CTC deployment itself; payment/PCI segmentation not addressed."},{"id":"src_retail_ret_021","workbook_source_id":"RET-021","url":"https://juniper.net/us/en/customers/2023/halfords-case-study.html","title":"Halfords relies on Juniper AIOps for retail transformation","publisher":"juniper.net","publication_date":"2023-04-01","checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Provider case study","requirement_codes":["guest_and_corporate_wi_fi_separation","network_and_application_visibility","store_and_branch_connectivity"],"named_customer":"Halfords","segment":"Automotive and cycling retail","named_product_or_service":"Juniper wired and wireless network with Mist AI","service_family":"Not applicable (Wi-Fi/wired access + AIOps, not SD-WAN/SASE)","estate":null,"countries_or_regions":"United Kingdom","ot_or_production_environment":null,"measured_or_stated_outcome":"Predictable connectivity for users and devices; network-related trouble tickets dropped; automated network assurance and proactive issue detection via Mist AI","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"The network user experience that Juniper offers far exceeds anything else in the market.","reviewer_summary":"Halfords, the UK's leading automotive and cycling products/services retailer, deployed Juniper wired and wireless networking with Mist AI across its stores, auto centres and offices, delivering Wi-Fi 6 and virtual Bluetooth LE to staff/customer devices, POS devices and in-store video displays, with automated network assurance cutting trouble tickets. Quote from Neil Holden, CIO, Halfords.","limitation_and_notes":"This is Wi-Fi/wired access plus AIOps evidence, not SD-WAN/SASE; UK-relevant but does not itself evidence WAN or SASE capabilities."},{"id":"src_retail_ret_512","workbook_source_id":"RET-512","url":"https://www.juniper.net/us/en/customers/2023/halfords-case-study.html","title":"Halfords relies on AIOps for retail transformation","publisher":"juniper.net","publication_date":null,"checked_date":"2026-09-15","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Named customer case study","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","edge_iot_and_camera_connectivity","store_and_branch_connectivity"],"named_customer":"Halfords","segment":"Automotive / cycling retail","named_product_or_service":"Juniper Mist AI (wired and wireless, AP33, EX2300, Wi-Fi/Wired Assurance)","service_family":"Supporting only (Wi-Fi/LAN, not SD-WAN/SASE)","estate":null,"countries_or_regions":"UK (EMEA)","ot_or_production_environment":null,"measured_or_stated_outcome":"100% reduction in network-related trouble tickets; 35% improvement in uptime; 200+ automotive centres connected in 22 weeks during a National Tyres acquisition","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"\"The network is a utility. The network is a big part of our digital transformation journey, and we needed a very intelligent, secure network with next-generation capabilities.\" - Neil Holden, CIO, Halfords. \"Juniper-switches bieden hoogwaardige toegangsnetwerken... Wi-Fi 6 and virtual Bluetooth LE services to smartphones, point-of-sale devices, video displays in stores and other connected devices.\"","reviewer_summary":"Verified live 2026-09-15 (cross-platform lead, independently confirmed and strengthened with a named CIO quote and stronger metrics than in the original summary). Halfords is real, major, named UK retailer at genuine scale (1,400+ sites).","limitation_and_notes":"Added 2026-09-15. Wired/wireless LAN deployment (Mist AI), not SD-WAN/SASE specifically - correctly excluded from that field per evidence rule 4, but genuinely strong for connectivity, multi-site deployment and IoT/POS/camera-adjacent (video display) capabilities."},{"id":"src_retail_ret_513","workbook_source_id":"RET-513","url":"https://www.juniper.net/us/en/customers/2025/t-mobile-case-study.html","title":"Transforming the retail experience (T-Mobile)","publisher":"juniper.net","publication_date":null,"checked_date":"2026-09-15","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Named customer case study","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","network_and_application_visibility","store_and_branch_connectivity"],"named_customer":"T-Mobile","segment":"Telecom retail","named_product_or_service":"Juniper Mist AI-native networking platform (wired, wireless, SD-WAN)","service_family":"SD-WAN","estate":null,"countries_or_regions":"United States","ot_or_production_environment":null,"measured_or_stated_outcome":"25 stores rolled out per night; single cloud-scale dashboard to manage wired, wireless and SD-WAN together","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"\"As the Un-carrier, T-Mobile aims to radically transform the wireless customer experience. The company, which has the largest 5G network in the U.S., is migrating to Mist, Juniper's AI-native networking platform, and a full stack solution as it reimagines the customer experience at 3,500 stores.\" Outcomes: \"25 - Stores rolled out per night. 3,500 - Stores to be upgraded with Juniper networking. 1 - Dashboard to manage wired, wireless, and SD-WAN.\"","reviewer_summary":"Verified live 2026-09-15 (cross-platform lead, independently confirmed, exact figures match). T-Mobile is real, major, named - one of the largest named retail deployments found in this entire project by scale.","limitation_and_notes":"Added 2026-09-15. This is Juniper Mist wired/wireless/SD-WAN together as a \"full stack\" - the SD-WAN component is named explicitly, so graded as genuine SD-WAN evidence rather than supporting-only."}]},{"slug":"velocloud","name":"VeloCloud","marketplace_url":"https://netify.co.uk/marketplace/velocloud/","research_status":"complete","overall_confidence":"medium","fit_conclusion":"Brooks Brothers now has a genuinely detailed, named VMware/VeloCloud case study confirming nearly 500 store locations worldwide and the specific MPLS/T1 problems solved. Redmond Inc.'s case separately confirms PCI 3.0 compliance, which is rare and valuable evidence.","gaps_and_unknowns":"Both named case studies date from 2017 (pre-Broadcom/Arista ownership of VMware's VeloCloud business) so current-state evidence is thin. POS/payment resilience, guest Wi-Fi separation, edge/IoT/camera connectivity and managed operations have no retail-specific evidence.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-15","source_count":3,"accepted_source_count":3,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"proven","evidence_source_ids":["src_retail_ret_032","src_retail_ret_032"],"verified_date":"2026-09-15"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"proven","evidence_source_ids":["src_retail_ret_033"],"verified_date":"2026-09-15"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"proven","evidence_source_ids":["src_retail_ret_032","src_retail_ret_033"],"verified_date":"2026-09-15"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"proven","evidence_source_ids":["src_retail_ret_032","src_retail_ret_032"],"verified_date":"2026-09-15"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"proven","evidence_source_ids":["src_retail_ret_032"],"verified_date":"2026-09-15"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"proven","evidence_source_ids":["src_retail_ret_032"],"verified_date":"2026-09-15"},{"code":"managed_operations","label":"Managed operations","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"}],"sources":[{"id":"src_retail_ret_033","workbook_source_id":"RET-033","url":"https://www.capacitymedia.com/article/29ot9jdnj4v3csah2frpc/news/velocloud-unveils-retail-use-cases-for-sd-wan","title":"VeloCloud unveils retail use cases for SD-WAN","publisher":"capacitymedia.com","publication_date":"2017-10-17","checked_date":"2026-09-10","source_ownership":"independent","decision":"accepted","reviewer_confidence":"medium","record_type":"Provider press release","requirement_codes":["saas_and_cloud_application_access","payment_and_pci_dss_segmentation"],"named_customer":"Redmond, Incorporated","segment":"Multi-brand retail (consumer, agricultural, industrial, vinyl)","named_product_or_service":"VeloCloud Cloud-Delivered SD-WAN","service_family":"SD-WAN","estate":null,"countries_or_regions":"United States (Utah HQ)","ot_or_production_environment":null,"measured_or_stated_outcome":"Met PCI 3.0 compliance; dramatically improved real-time application performance and operational efficiency; reduced overall IT costs","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"VeloCloud SD-WAN met PCI 3.0 compliance and dramatically improved real time application performance and operational efficiencies while reducing overall IT costs.","reviewer_summary":"Redmond, Incorporated (17+ retail brands across consumer, agricultural, industrial and vinyl segments) confirms VeloCloud SD-WAN explicitly met PCI 3.0 compliance while improving real-time application performance for Unified Communications and virtual desktops in stores and warehouses. Quote from Aaron Gabrielson, CTO, Redmond Inc.","limitation_and_notes":"No site count given; press release from 2017. Note: original softwaremag.com URL failed SSL verification on re-check; swapped to this independent capacitymedia.com copy of the same release, confirmed live, on 2026-09-10."},{"id":"src_retail_ret_032","workbook_source_id":"RET-514","url":"https://vmware.com/docs/vmw-casestudy-nsxsdwan-brooksbrothers","title":"Rethinking the Retail Experience: A Historic Retailer Becomes the Store of the Future","publisher":"vmware.com","publication_date":null,"checked_date":"2026-09-15","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Named customer case study","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","network_and_application_visibility","store_and_branch_connectivity","internet_and_4g_5g_failover"],"named_customer":"Brooks Brothers","segment":"Fashion / apparel","named_product_or_service":"VMware NSX SD-WAN by VeloCloud","service_family":"SD-WAN","estate":null,"countries_or_regions":"United States (global corporate footprint)","ot_or_production_environment":null,"measured_or_stated_outcome":"Sub-second failover via Dynamic Multipath Optimization; all retail locations transaction-ready at all times; faster/more consistent store onboarding; enabled VoIP migration without switches","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"\"Brooks Brothers prides itself on being far more than just a store to our customers, in line with its long and storied history and heritage. With SD-WAN, we're able to take our legacy traditions and values and enable them for the future...\" - Manny Stergakis, Technical Architect, Brooks Brothers.","reviewer_summary":"Verified live 2026-09-15 (cross-platform lead, independently confirmed and strengthened with a named exec quote and an independently-reported store count of 278, from SDXCentral rather than VMware's own marketing).","limitation_and_notes":"Added 2026-09-15. VMware's own PDF doesn't state a store count directly; the 278-store figure comes from independent SDXCentral reporting on the same deployment."}]},{"slug":"zscaler","name":"Zscaler","marketplace_url":"https://netify.co.uk/marketplace/zscaler/","research_status":"complete","overall_confidence":"medium","fit_conclusion":"Zscaler's own published case study ('Global Retailer Modernizes Security') is detailed and credible - MPLS-to-SD-WAN plus Zero Trust Exchange across thousands of stores in 90 countries - but the retailer is anonymised, so it supports Partial rather than Proven store-network status.","gaps_and_unknowns":"The retailer is never named ('a leading global beauty brand'). Payment/PCI DSS segmentation and POS resilience are addressed only generically via a Cognizant/Zscaler partner brochure, with no named end customer. Guest Wi-Fi, edge/IoT/camera and seasonal scaling are unevidenced.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-15","source_count":3,"accepted_source_count":3,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"partial","evidence_source_ids":["src_retail_ret_040"],"verified_date":"2026-09-15"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"partial","evidence_source_ids":["src_retail_ret_041"],"verified_date":"2026-09-15"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"proven","evidence_source_ids":["src_retail_ret_040"],"verified_date":"2026-09-15"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"proven","evidence_source_ids":["src_retail_ret_520"],"verified_date":"2026-09-15"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"proven","evidence_source_ids":["src_retail_ret_040","src_retail_ret_041","src_retail_ret_520"],"verified_date":"2026-09-15"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"proven","evidence_source_ids":["src_retail_ret_040"],"verified_date":"2026-09-15"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"proven","evidence_source_ids":["src_retail_ret_520"],"verified_date":"2026-09-15"},{"code":"managed_operations","label":"Managed operations","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"}],"sources":[{"id":"src_retail_ret_040","workbook_source_id":"RET-040","url":"https://www.zscaler.com/customers/global-retailer-modernizes-security","title":"Global Retailer Modernizes Security","publisher":"zscaler.com","publication_date":null,"checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"medium","record_type":"Provider case study","requirement_codes":["threat_protection_and_secure_web_access","saas_and_cloud_application_access","store_and_branch_connectivity","security_policy_consistency"],"named_customer":"Not named","segment":"Cosmetics/skincare/wellness","named_product_or_service":"Zscaler Zero Trust Exchange with new SD-WAN infrastructure","service_family":"SASE (SSE + SD-WAN)","estate":null,"countries_or_regions":"90 countries (HQ Europe)","ot_or_production_environment":null,"measured_or_stated_outcome":"Consistent, reliable branch connectivity across global retail locations and corporate offices; stronger security posture; lower costs; integrated cloud architecture on Zscaler's multitenant platform","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"The Zero Trust Exchange isn't just a collection of solutions, it's the backbone of our comprehensive digital security ecosystem.","reviewer_summary":"An unnamed 'leading global beauty brand' (cosmetics/skincare/wellness retailer, HQ Europe, thousands of stores across 90 countries) replaced an outdated MPLS network and legacy security appliances with new SD-WAN plus Zscaler's Zero Trust Exchange, integrated with its Microsoft 365/Azure/Entra ID/Defender estate. Quote from the retailer's Head of Network and Security Services.","limitation_and_notes":"Retailer is not named at any point in Zscaler's own published case study; cannot be independently corroborated."},{"id":"src_retail_ret_041","workbook_source_id":"RET-041","url":"https://www.zscaler.com/resources/brochures/cognizant-zscaler-zero-trust-sase-for-retail.pdf","title":"Cognizant's Managed Zero Trust SASE Offering for Retail vertical, powered by Zscaler","publisher":"zscaler.com","publication_date":null,"checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"low","record_type":"Provider/partner brochure","requirement_codes":["security_policy_consistency","pos_and_payment_resilience"],"named_customer":"Not named","segment":"General retail","named_product_or_service":"Cognizant Managed Zero Trust SASE for Retail, powered by Zscaler Zero Trust Exchange","service_family":"SASE","estate":null,"countries_or_regions":"Not stated","ot_or_production_environment":null,"measured_or_stated_outcome":"Not stated (this is a joint go-to-market offering, not a case study with a named customer or outcome)","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"It enforces Zero Trust principles across users, devices, and applications to ensure strict identity verification and least-privilege access - essential for protecting POS systems, inventory, and customer data.","reviewer_summary":"A joint Cognizant/Zscaler brochure describes a managed Zero Trust SASE offering for retail explicitly covering POS, inventory and customer-data protection, but names no actual retail customer or deployment.","limitation_and_notes":null},{"id":"src_retail_ret_520","workbook_source_id":"RET-520","url":"https://www.zscaler.com/customers/northgate-market","title":"Zscaler and VMware SD-WAN Transform Northgate Market into a Cloud-First Organization","publisher":"zscaler.com","publication_date":null,"checked_date":"2026-09-15","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Named customer case study","requirement_codes":["network_and_application_visibility","remote_worker_and_support_access","security_policy_consistency"],"named_customer":"Northgate Market","segment":"Supermarkets (Latin American grocery)","named_product_or_service":"Zscaler Internet Access, Zscaler Private Access (ZPA), paired with VMware SD-WAN","service_family":"SSE (paired with SD-WAN)","estate":null,"countries_or_regions":"United States (Southern California, HQ Anaheim)","ot_or_production_environment":null,"measured_or_stated_outcome":"40% cost savings; increased bandwidth capability; eliminated network outages via high-availability traffic prioritisation and segmentation; replaced Cisco AnyConnect VPN with ZPA for travelling staff","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"\"Zscaler was the perfect solution given our business strategy, leveraging priority at the specific application level, unlike what was possible previously.\" - Harrison Lewis, CIO, Northgate Market. \"Northgate Market also recognized the need to protect the more than 250 employees that regularly travel from site to site, opting to replace its Cisco AnyConnect VPN with Zscaler Private Access.\" \"ZPA... is a very critical component of our security architecture that's necessary in this new environment.\"","reviewer_summary":"Verified live 2026-09-15 (found independently while targeting the Third-party/supplier access gap). Northgate Market is a real, named US grocery chain with a named CIO quote. The 250+ travelling-employee detail is a strong, specific fit for Remote worker and support access - one of the thinnest columns in the workbook.","limitation_and_notes":"Added 2026-09-15. Does not address third-party/supplier access specifically (the gap being targeted) - travelling employees are Northgate's own staff, not third parties. No PCI/payment detail despite being a grocery/payment-heavy retailer."}]},{"slug":"ericsson-cradlepoint","name":"Ericsson Cradlepoint","marketplace_url":"https://netify.co.uk/marketplace/ericsson-cradlepoint/","research_status":"complete","overall_confidence":"high","fit_conclusion":"Coles Group is a strong, named, quantified reference (1,700+ stores, 21 million transactions/week) corroborated across three independent trade sources, with a named executive quote. GAIL's Bakery adds a second, UK-relevant named reference.","gaps_and_unknowns":"Payment/PCI DSS segmentation, guest Wi-Fi separation, third-party/supplier access and security policy consistency have no retail-specific evidence. Seasonal/temporary-site scaling is not explicitly addressed.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-10","source_count":2,"accepted_source_count":2,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"proven","evidence_source_ids":["src_retail_ret_012","src_retail_ret_013"],"verified_date":"2026-09-10"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"proven","evidence_source_ids":["src_retail_ret_012"],"verified_date":"2026-09-10"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"proven","evidence_source_ids":["src_retail_ret_012"],"verified_date":"2026-09-10"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"proven","evidence_source_ids":["src_retail_ret_012","src_retail_ret_013"],"verified_date":"2026-09-10"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"proven","evidence_source_ids":["src_retail_ret_012"],"verified_date":"2026-09-10"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"managed_operations","label":"Managed operations","state":"partial","evidence_source_ids":[],"verified_date":"2026-09-10"}],"sources":[{"id":"src_retail_ret_012","workbook_source_id":"RET-012","url":"https://itwire.com/business-it-news/networking/coles-picks-cradlepoint-for-5g-wlan-backup","title":"Coles picks Cradlepoint for 5G WLAN backup","publisher":"itwire.com","publication_date":"2023-07-27","checked_date":"2026-09-10","source_ownership":"independent","decision":"accepted","reviewer_confidence":"high","record_type":"Provider case study","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","edge_iot_and_camera_connectivity","store_and_branch_connectivity","internet_and_4g_5g_failover","pos_and_payment_resilience"],"named_customer":"Coles Group","segment":"Grocery/supermarket","named_product_or_service":"Cradlepoint NetCloud with 5G (W1850/W2005 adapters)","service_family":"Not applicable (Wireless WAN/SD-WAN)","estate":null,"countries_or_regions":"Australia","ot_or_production_environment":null,"measured_or_stated_outcome":"Failover to 5G if wired WAN fails, keeping POS/loyalty/stock-control running; round-the-clock visibility of backup links; centralised management","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"The speed of connectivity, centralised management, agility, and out-of-band access that we're able to achieve with Cradlepoint 5G solutions across our stores and new distribution centres, ensures constant service delivery to our customers.","reviewer_summary":"Coles Group, a major Australian supermarket retailer with 1,700+ stores and 21 million transactions/week, uses Cradlepoint NetCloud with 5G for wireless WAN and out-of-band remote access across all stores and new distribution centres; 5G steps in as failover for POS, loyalty and stock-control systems if the wired WAN fails. Quote from Chrissy Chu, GM Technology Services & Commercial, Coles Group. Independently corroborated by itwire.com and intelligentcio.com.","limitation_and_notes":"Payment/PCI segmentation and guest Wi-Fi separation are not addressed in this source. Note: the original Cradlepoint/Ericsson URL (cradlepoint.com/?p=51269) went dead after a site restructure; swapped to this independently-published iTWire article, confirmed live and carrying the identical quote, on 2026-09-10."},{"id":"src_retail_ret_013","workbook_source_id":"RET-013","url":"https://theretailbulletin.com/cx-news/case-study-gails-bakery-uses-5g-connectivity-to-elevate-the-customer-experience-and-streamline-operations-18-04-2024","title":"GAIL's Bakery uses 5G connectivity to elevate the customer experience and streamline operations","publisher":"theretailbulletin.com","publication_date":"2024-04-18","checked_date":"2026-09-10","source_ownership":"independent","decision":"accepted","reviewer_confidence":"medium","record_type":"Provider case study","requirement_codes":["store_and_branch_connectivity","internet_and_4g_5g_failover"],"named_customer":"GAIL's Bakery","segment":"Food and bakery","named_product_or_service":"Cradlepoint NetCloud with purpose-built 5G routers","service_family":"Not applicable (Wireless WAN)","estate":null,"countries_or_regions":"United Kingdom","ot_or_production_environment":null,"measured_or_stated_outcome":"Not fully stated in the reviewed source (case study referenced by The Retail Bulletin)","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"With over 120 locations, including five in the North West/Manchester region, GAIL's continues to expand its presence and bring artisanal baking to neighbourhoods throughout the UK.","reviewer_summary":"GAIL's Bakery, a UK neighbourhood bakery chain with 120+ locations, uses Cradlepoint NetCloud 5G routers for flexible primary/secondary store connectivity as it expands - a UK-relevant named reference.","limitation_and_notes":"Summary is from trade press rather than the full underlying Cradlepoint case study, so detailed outcome figures were not captured."}]},{"slug":"gtt","name":"GTT","marketplace_url":"https://netify.co.uk/marketplace/gtt/","research_status":"complete","overall_confidence":"high","fit_conclusion":"Kiabi is now a strong, named, quantified reference (430+ stores/warehouses/logistics centres across six countries, explicit Level 1 PCI DSS certification) from an independent BusinessWire press release. HMY Group adds a second named reference with a specific, sourced metric (22% lower network cost, doubled bandwidth) from GTT's own retail solutions page.","gaps_and_unknowns":"Guest Wi-Fi separation and edge/IoT/camera connectivity are not addressed by either case. The HMY Group statistic is cited via a third-party summary (MarketScale) rather than GTT's own case-study page, which was not independently opened.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-10","source_count":2,"accepted_source_count":2,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"proven","evidence_source_ids":["src_retail_ret_017","src_retail_ret_018"],"verified_date":"2026-09-10"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"proven","evidence_source_ids":["src_retail_ret_017"],"verified_date":"2026-09-10"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"partial","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"proven","evidence_source_ids":["src_retail_ret_017"],"verified_date":"2026-09-10"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"partial","evidence_source_ids":["src_retail_ret_018"],"verified_date":"2026-09-10"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"partial","evidence_source_ids":["src_retail_ret_018"],"verified_date":"2026-09-10"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"managed_operations","label":"Managed operations","state":"proven","evidence_source_ids":["src_retail_ret_017"],"verified_date":"2026-09-10"}],"sources":[{"id":"src_retail_ret_017","workbook_source_id":"RET-017","url":"https://www.businesswire.com/news/home/20240716142003/en/Retailer-Kiabi-Transforms-Global-Network-with-GTT-Expanding-Capacity-at-New-Locations-and-Enabling-Business-Growth","title":"Retailer Kiabi Transforms Global Network with GTT, Expanding Capacity at New Locations and Enabling Business Growth","publisher":"businesswire.com","publication_date":"2024-07-16","checked_date":"2026-09-10","source_ownership":"independent","decision":"accepted","reviewer_confidence":"high","record_type":"Provider press release","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","payment_and_pci_dss_segmentation","store_and_branch_connectivity","managed_operations"],"named_customer":"Kiabi","segment":"Fashion/apparel","named_product_or_service":"GTT Managed SD-WAN with Professional Services","service_family":"SD-WAN","estate":null,"countries_or_regions":"France, Italy, Belgium, Hong Kong, Bangladesh, India","ot_or_production_environment":null,"measured_or_stated_outcome":"Increased average bandwidth at new stores; resilient staff access to business-critical applications; enhanced in-store omnichannel experience; supported new store openings across Europe and Asia-Pacific","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"GTT's secure network protocols, including Level 1 PCI DSS certifications, further assure that customer information is protected, backing Kiabi's governance and compliance requirements.","reviewer_summary":"Kiabi, an international retailer known for inclusive family fashion, upgraded its global network with GTT across 430+ stores, warehouses and logistics centres in France, Italy, Belgium, Hong Kong, Bangladesh and India, with GTT's Level 1 PCI DSS-certified network protocols explicitly cited for protecting payment processing and real-time inventory tracking. Quote from Tom Homer, President, Europe Division, GTT.","limitation_and_notes":"Original gtt.net customer-page URL now 404s; swapped to this BusinessWire press release, confirmed live and considerably more detailed, on 2026-09-10."},{"id":"src_retail_ret_018","workbook_source_id":"RET-018","url":"https://marketscale.com/industries/retail/gtts-retail-network-play-sd-wan-zero-trust-and-supply-chain-visibility-under-one-managed-service","title":"GTT's retail network play: SD-WAN, zero trust, and supply chain visibility under one managed service","publisher":"marketscale.com","publication_date":null,"checked_date":"2026-09-10","source_ownership":"independent","decision":"accepted","reviewer_confidence":"medium","record_type":"Third-party summary (citing provider page)","requirement_codes":["seasonal_and_temporary_site_scaling","store_and_branch_connectivity","internet_and_4g_5g_failover"],"named_customer":"HMY Group","segment":"General retail","named_product_or_service":"GTT Managed SD-WAN (upgraded from MPLS)","service_family":"SD-WAN","estate":null,"countries_or_regions":"Not stated","ot_or_production_environment":null,"measured_or_stated_outcome":"22% lower network costs; doubled available bandwidth; eight-year GTT relationship, latest phase upgraded from MPLS","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"HMY Group cut its network costs by 22% and doubled available bandwidth after deploying GTT Managed SD-WAN across its international retail estate.","reviewer_summary":"HMY Group, a named GTT retail customer of eight years, cut network costs by 22% and doubled available bandwidth after upgrading from MPLS to GTT Managed SD-WAN across its international retail estate - the figure is cited directly from GTT's own retail solutions page via MarketScale.","limitation_and_notes":"Figure is quoted via a third-party trade publisher summarising GTT's page; GTT's retail solutions page itself was not independently opened to confirm wording."}]},{"slug":"verizon","name":"Verizon Business","marketplace_url":"https://netify.co.uk/marketplace/verizon/","research_status":"complete","overall_confidence":"high","fit_conclusion":"Walgreens Boots Alliance (9,000+ Walgreens/Duane Reade stores) is an outstanding, named, detailed Network-as-a-Service deployment corroborated by Light Reading. Verizon's own 1,700 retail stores add a second detailed, named (if self-referential) reference.","gaps_and_unknowns":"Payment/PCI DSS segmentation, POS resilience, third-party/supplier access and seasonal/temporary-site scaling are not addressed in either source. The WBA deal was announced in Dec 2020 as a phased, ~year-long national rollout; current completion status was not checked.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-10","source_count":2,"accepted_source_count":2,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"proven","evidence_source_ids":["src_retail_ret_034","src_retail_ret_035"],"verified_date":"2026-09-10"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"proven","evidence_source_ids":["src_retail_ret_034"],"verified_date":"2026-09-10"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"proven","evidence_source_ids":["src_retail_ret_035"],"verified_date":"2026-09-10"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"proven","evidence_source_ids":["src_retail_ret_034","src_retail_ret_035"],"verified_date":"2026-09-10"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"proven","evidence_source_ids":["src_retail_ret_034"],"verified_date":"2026-09-10"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"managed_operations","label":"Managed operations","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"}],"sources":[{"id":"src_retail_ret_034","workbook_source_id":"RET-034","url":"https://www.lightreading.com/sd-wan/verizon-to-connect-9000-walgreens-duane-reade-stores/d/d-id/766165","title":"Verizon to connect 9,000 Walgreens, Duane Reade stores","publisher":"lightreading.com","publication_date":"2020-12-16","checked_date":"2026-09-10","source_ownership":"independent","decision":"accepted","reviewer_confidence":"high","record_type":"Third-party trade press","requirement_codes":["guest_and_corporate_wi_fi_separation","store_and_branch_connectivity","internet_and_4g_5g_failover","security_policy_consistency"],"named_customer":"Walgreens Boots Alliance (WBA)","segment":"Pharmacy/drugstore","named_product_or_service":"Verizon Network as a Service (NaaS): dual Internet, Wi-Fi, SD-WAN and security services","service_family":"SD-WAN + security services","estate":null,"countries_or_regions":"United States","ot_or_production_environment":null,"measured_or_stated_outcome":"Dual Internet connections per store for failover (fibre/wired/4G/5G depending on location); new in-store Wi-Fi network (nationwide rollout, ~1 year); SD-WAN with per-application connection policies","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Verizon will provide two Internet connections to each of the stores, ensuring that one will stay connected to the Internet if the other one fails.","reviewer_summary":"Walgreens Boots Alliance (WBA), operating 9,000+ Walgreens- and Duane Reade-branded US retail locations, signed a Network-as-a-Service agreement with Verizon Business covering dual-path Internet failover, new in-store Wi-Fi and SD-WAN with per-application security policies, shifting WBA to an opex telecom model. Quote from Massimo Peselli, SVP International & Enterprise Business Development, Verizon.","limitation_and_notes":"Independent trade-press report rather than Verizon's own case study; payment/PCI segmentation and POS-specific detail not addressed; rollout was a ~1-year phased project announced Dec 2020, current completion status not verified."},{"id":"src_retail_ret_035","workbook_source_id":"RET-035","url":"https://espanol.verizon.com/business/resources/casestudies/verizon_backup_solutions_for_business_continuity.pdf","title":"Verizon Backup Solutions for Business Continuity","publisher":"espanol.verizon.com","publication_date":null,"checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"medium","record_type":"Provider case study","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","store_and_branch_connectivity","internet_and_4g_5g_failover"],"named_customer":"Verizon (own retail stores)","segment":"Telecoms retail","named_product_or_service":"Cisco 1000 Series ISR SD-WAN routers over Verizon Wireless Private Network","service_family":"SD-WAN","estate":null,"countries_or_regions":"United States","ot_or_production_environment":null,"measured_or_stated_outcome":"4G LTE Advanced backup; zero-touch deployment; encrypted VPN traffic for strong security","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"We're continuously evolving our stores to focus more and more on customers and offer them efficient, personalized shopping experiences with digital technologies.","reviewer_summary":"Verizon's own 1,700 US retail stores use Cisco ISR 1000 SD-WAN routers with 4G LTE Advanced backup over Verizon's private wireless network, with zero-touch deployment. Quote from Alan Malcolm, senior manager, Wi-Fi planning and connectivity, Verizon retail.","limitation_and_notes":"This evidences Verizon as retailer of its own stores rather than a third-party retail customer of Verizon Business services."}]},{"slug":"forcepoint","name":"Forcepoint","marketplace_url":"https://netify.co.uk/marketplace/forcepoint/","research_status":"complete","overall_confidence":"low","fit_conclusion":"Now supported by two named-retailer case studies: Kiabi (450+ stores, France) and Burger King Turkey (1,000+ network points). Real named-executive quotes. No evidence for PCI/payment segmentation, edge/IoT, or remote worker access.","gaps_and_unknowns":"No retailer is named anywhere in Forcepoint's retail content reviewed. SD-WAN/store-connectivity capabilities (multi-site, POS resilience, Wi-Fi) are entirely unaddressed - Forcepoint's retail evidence is security/DLP-focused, not network-focused.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-15","source_count":3,"accepted_source_count":3,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"proven","evidence_source_ids":["src_retail_ret_505","src_retail_ret_506"],"verified_date":"2026-09-15"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":["src_retail_ret_505"],"verified_date":"2026-09-15"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"proven","evidence_source_ids":["src_retail_ret_505","src_retail_ret_506"],"verified_date":"2026-09-15"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"proven","evidence_source_ids":["src_retail_ret_014","src_retail_ret_505"],"verified_date":"2026-09-15"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"partial","evidence_source_ids":["src_retail_ret_014"],"verified_date":"2026-09-15"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"partial","evidence_source_ids":["src_retail_ret_014"],"verified_date":"2026-09-15"},{"code":"managed_operations","label":"Managed operations","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"}],"sources":[{"id":"src_retail_ret_014","workbook_source_id":"RET-014","url":"https://www.forcepoint.com/blog/insights/securing-worlds-largest-retailers","title":"Why the World's Largest Retailers Work with Forcepoint","publisher":"forcepoint.com","publication_date":null,"checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"low","record_type":"Provider blog","requirement_codes":["threat_protection_and_secure_web_access","network_and_application_visibility","security_policy_consistency"],"named_customer":"Not named","segment":"Supermarket/grocery","named_product_or_service":"Forcepoint Next-Generation Firewall (NGFW) with Security Management Center","service_family":"Not applicable (NGFW/SSE, not SD-WAN)","estate":null,"countries_or_regions":"Australia","ot_or_production_environment":null,"measured_or_stated_outcome":"Remote, centralised network management via Security Management Center in place of in-person servicing of 1,500 brick-and-mortar locations","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Forcepoint's Next-Generation Firewall (NGFW) offers the retailer the ability to manage its network remotely using the Security Management Center (SMC).","reviewer_summary":"Forcepoint's blog describes an unnamed 'well-known national supermarket chain in Australia' (1,500 locations, 100,000+ employees) using Forcepoint NGFW with centralised remote management, plus references to other unnamed retailers using Web Security Cloud and a fast-food retailer using CASB/AMD/DLP.","limitation_and_notes":"No retailer named; SD-WAN/store-network capabilities are not addressed by this source at all."},{"id":"src_retail_ret_505","workbook_source_id":"RET-505","url":"https://www.forcepoint.com/customer-stories/kiabi","title":"Kiabi Expands Safely with Secure SD-WAN","publisher":"forcepoint.com","publication_date":null,"checked_date":"2026-09-15","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Named customer case study","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","third_party_and_supplier_access","store_and_branch_connectivity","security_policy_consistency"],"named_customer":"Kiabi","segment":"Fashion / discount apparel","named_product_or_service":"Forcepoint Secure SD-WAN","service_family":"SD-WAN","estate":null,"countries_or_regions":"Global (France HQ)","ot_or_production_environment":null,"measured_or_stated_outcome":"Improved network uptime and resilience; reduced telecom bills via load balancing; faster cloud app performance","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"\"Right now, we don't share all our customer data with our franchisees, but in the coming years we plan to extend our loyalty program to more of these franchise stores, which means we'll need to partner with them on security and compliance. We think Forcepoint SD-WAN has helped us to future proof that scenario on the network side of things.\" - Anthony Pierson, Kiabi","reviewer_summary":"Verified live 2026-09-15, strengthened with a named executive quote (Anthony Pierson) not in the original summary. Kiabi is real, named, at genuine scale (450+ stores). Closes Forcepoint's zero-evidence gap.","limitation_and_notes":"Added 2026-09-15. Franchise data-sharing is described as a future plan, not yet implemented - Third-party/supplier access graded Partial on that basis within an otherwise Proven-level source."},{"id":"src_retail_ret_506","workbook_source_id":"RET-506","url":"https://www.forcepoint.com/customer-stories/burger-king","title":"Burger King Scales SD-WAN for Hundreds of Restaurants","publisher":"forcepoint.com","publication_date":null,"checked_date":"2026-09-15","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Named customer case study","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","store_and_branch_connectivity"],"named_customer":"Burger King (Turkey)","segment":"Quick-service restaurant","named_product_or_service":"Forcepoint Next-Generation Firewall (NGFW) with SD-WAN","service_family":"SD-WAN","estate":null,"countries_or_regions":"Turkey","ot_or_production_environment":null,"measured_or_stated_outcome":"Immediate cost savings and reliable connectivity; zero-touch on-site installation with remote cloud-based policy configuration","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"\"Coming up on End of Life for its existing WAN appliances, Burger King chose to explore other options... Centralizing the IT management of over 1,000 network points with one NGFW SD-WAN policy.\" Forcepoint NGFW with SD-WAN \"came out ahead of all other vendors with a 91% rating.\"","reviewer_summary":"Verified live 2026-09-15. This is specifically Burger King's Turkey franchise operation (HQ listed as Turkey), not the global brand - a real, named restaurant chain operator.","limitation_and_notes":"Added 2026-09-15. Scoped to the Turkey franchise operator, not Burger King globally."}]},{"slug":"netskope","name":"Netskope","marketplace_url":"https://netify.co.uk/marketplace/netskope/","research_status":"complete","overall_confidence":"medium","fit_conclusion":"Sainsbury's is a strong, named, UK-relevant reference with a direct CISO quote; UNITED ARROWS adds a second named international reference. However, Netskope is an SSE/security vendor, not an SD-WAN provider, so store-network capabilities (connectivity, POS, Wi-Fi) are not addressed by its own evidence.","gaps_and_unknowns":"Store and branch connectivity, payment/PCI segmentation, POS resilience, multi-site deployment and edge/IoT/camera connectivity are Not applicable/Not found because Netskope's own retail evidence is entirely SSE-focused (data protection, cloud/web access, visibility) rather than SD-WAN/network-focused.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-10","source_count":2,"accepted_source_count":2,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"proven","evidence_source_ids":["src_retail_ret_024"],"verified_date":"2026-09-10"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"proven","evidence_source_ids":["src_retail_ret_023"],"verified_date":"2026-09-10"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"proven","evidence_source_ids":["src_retail_ret_023","src_retail_ret_024"],"verified_date":"2026-09-10"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"proven","evidence_source_ids":["src_retail_ret_023"],"verified_date":"2026-09-10"},{"code":"managed_operations","label":"Managed operations","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"}],"sources":[{"id":"src_retail_ret_023","workbook_source_id":"RET-023","url":"https://netskope.com/blog/netskope-customer-implementation-sainsburys","title":"Netskope customer implementation: Sainsbury's","publisher":"netskope.com","publication_date":null,"checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Provider blog (customer interview)","requirement_codes":["threat_protection_and_secure_web_access","network_and_application_visibility","security_policy_consistency"],"named_customer":"Sainsbury's","segment":"Grocery/supermarket","named_product_or_service":"Netskope (SSE/CASB/SWG)","service_family":"SSE","estate":null,"countries_or_regions":"United Kingdom","ot_or_production_environment":null,"measured_or_stated_outcome":"Line-of-sight across use cases with more data points/telemetry than previously available; GDPR fine exposure (up to 4% of revenue) cited as compliance driver","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"We are now operating across a range of use cases with a line-of-sight that we didn't have before, with access to more data points and telemetry than we have ever had.","reviewer_summary":"Sainsbury's, a major UK retailer (£28.5bn in retail sales), uses Netskope across its 2,000-strong tech security team for visibility and data-protection compliance (GDPR). Quote from Mun Valiji, Sainsbury's CISO.","limitation_and_notes":"SSE/data-protection evidence only; does not address SD-WAN, store connectivity, POS or Wi-Fi capabilities."},{"id":"src_retail_ret_024","workbook_source_id":"RET-024","url":"https://www.netskope.com/fr/press-releases/netskope-helps-united-arrows-ltd-to-secure-its-digital-transformation-journey","title":"Netskope Helps UNITED ARROWS LTD. to Secure Its Digital Transformation Journey","publisher":"netskope.com","publication_date":"2024-09-03","checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"medium","record_type":"Provider press release","requirement_codes":["threat_protection_and_secure_web_access","saas_and_cloud_application_access"],"named_customer":"UNITED ARROWS LTD.","segment":"Fashion/apparel","named_product_or_service":"Netskope One (Security Service Edge)","service_family":"SSE","estate":null,"countries_or_regions":"Japan","ot_or_production_environment":null,"measured_or_stated_outcome":"Not quantified in the reviewed source (implementation confirmed, no metrics given)","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"UNITED ARROWS LTD., a leading Japanese fashion retailer, has successfully implemented Netskope One for integrated Security Service Edge (SSE) capabilities, underpinning its cloud transformation strategy","reviewer_summary":"UNITED ARROWS LTD., a leading Japanese fashion retailer, implemented Netskope One SSE to underpin its cloud transformation and digital initiatives.","limitation_and_notes":"No quantified outcome given; SSE-only evidence, does not address SD-WAN/store-network capabilities."}]},{"slug":"orangebusiness","name":"Orange Business","marketplace_url":"https://netify.co.uk/marketplace/orangebusiness/","research_status":"complete","overall_confidence":"high","fit_conclusion":"Majid Al Futtaim Retail (Carrefour franchisee, 250+ stores across 15 countries) is a strong, named, quantified reference corroborated by four independent trade sources. Norauto adds a second named French retail reference with explicit POS/SaaS detail.","gaps_and_unknowns":"Payment/PCI DSS segmentation, guest Wi-Fi separation, third-party/supplier access and edge/IoT/camera connectivity are unevidenced. Neither case study states site-level security-policy or threat-protection detail.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-10","source_count":2,"accepted_source_count":2,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"proven","evidence_source_ids":["src_retail_ret_025","src_retail_ret_026"],"verified_date":"2026-09-10"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"partial","evidence_source_ids":["src_retail_ret_026"],"verified_date":"2026-09-10"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"proven","evidence_source_ids":["src_retail_ret_025","src_retail_ret_026"],"verified_date":"2026-09-10"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"proven","evidence_source_ids":["src_retail_ret_025"],"verified_date":"2026-09-10"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"partial","evidence_source_ids":["src_retail_ret_026"],"verified_date":"2026-09-10"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"managed_operations","label":"Managed operations","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"}],"sources":[{"id":"src_retail_ret_025","workbook_source_id":"RET-025","url":"https://www.tradearabia.com/news/RET_348576.html","title":"Majid Al Futtaim picks Orange solutions for retail unit","publisher":"tradearabia.com","publication_date":"2018-12-11","checked_date":"2026-09-10","source_ownership":"independent","decision":"accepted","reviewer_confidence":"high","record_type":"Provider press release","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","saas_and_cloud_application_access","store_and_branch_connectivity"],"named_customer":"Majid Al Futtaim Retail (Carrefour franchisee)","segment":"Grocery/hypermarket","named_product_or_service":"Flexible SD-WAN by Orange Business","service_family":"SD-WAN","estate":null,"countries_or_regions":"Middle East, Africa (38-market franchise footprint)","ot_or_production_environment":null,"measured_or_stated_outcome":"Connected cloud applications across the WAN; supported omnichannel strategy and gradual e-commerce rollout; first Orange Middle East SD-WAN customer","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Flexible SD-WAN by Orange is a key enabler of our omnichannel customer experience.","reviewer_summary":"Majid Al Futtaim Retail, which holds the exclusive Carrefour franchise across 38 Middle East/Africa/Asia markets, deployed Flexible SD-WAN from Orange Business across 250+ Carrefour stores and end-users in 15 countries, to connect cloud applications (including its SAP e-commerce platform) and support its omnichannel strategy. Quote from Marco Urios, SVP Omnichannel Solutions, Majid Al Futtaim Retail. Corroborated by convergedigest.com, tradearabia.com and imagesretailme.com.","limitation_and_notes":"Payment/PCI segmentation and security-policy detail are not addressed in this release. Note: the original Orange Business press-office URL returns HTTP 403 to automated requests (likely bot protection); swapped to this independently-hosted trade-press copy of the same release, confirmed live, on 2026-09-10."},{"id":"src_retail_ret_026","workbook_source_id":"RET-026","url":"https://www.lemondeinformatique.fr/actualites/lireamp-norauto-adopte-le-sd-wan-d-orange-business-services-88340.html","title":"Norauto adopte le SD-WAN d'Orange Business Services","publisher":"lemondeinformatique.fr","publication_date":null,"checked_date":"2026-09-10","source_ownership":"independent","decision":"accepted","reviewer_confidence":"medium","record_type":"Third-party trade press","requirement_codes":["saas_and_cloud_application_access","store_and_branch_connectivity","internet_and_4g_5g_failover","pos_and_payment_resilience"],"named_customer":"Norauto","segment":"Automotive maintenance/retail","named_product_or_service":"Orange Business SD-WAN","service_family":"SD-WAN","estate":null,"countries_or_regions":"France","ot_or_production_environment":null,"measured_or_stated_outcome":"Local internet breakout per store; IP telephony; SaaS payment solution; in-store screens showing live vehicle-maintenance progress; improved resilience and security","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"fournir à ses boutiques une évasion locale Internet, mais aussi de renforcer sa résilience, ses performances d'accès aux infrastructures hébergées ainsi que son niveau de sécurité","reviewer_summary":"Norauto, a French automotive maintenance and retail chain, adopted Orange Business SD-WAN for local internet breakout at stores, resilience, a SaaS-based payment/checkout solution and IP telephony, alongside in-store screens showing live maintenance status.","limitation_and_notes":"Site count not stated; independent trade-press summary rather than Orange's own case study page."}]},{"slug":"vodafone","name":"Vodafone Business","marketplace_url":"https://netify.co.uk/marketplace/vodafone/","research_status":"complete","overall_confidence":"medium","fit_conclusion":"Vodafone's own retail industry page names Coin (Italian department-store chain); independent press names Kotsovolos (Greek electronics retailer) and Vinod Patel Group (Fiji-based retail/distribution/manufacturing conglomerate) with a named executive quote.","gaps_and_unknowns":"None of the three named cases gives a specific site count or quantified outcome figure. Payment/PCI DSS segmentation, POS resilience, guest Wi-Fi separation and edge/IoT/camera connectivity are unevidenced.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-10","source_count":2,"accepted_source_count":2,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"proven","evidence_source_ids":["src_retail_ret_038","src_retail_ret_039"],"verified_date":"2026-09-10"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"proven","evidence_source_ids":["src_retail_ret_038"],"verified_date":"2026-09-10"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"proven","evidence_source_ids":["src_retail_ret_039"],"verified_date":"2026-09-10"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"partial","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"managed_operations","label":"Managed operations","state":"partial","evidence_source_ids":["src_retail_ret_039"],"verified_date":"2026-09-10"}],"sources":[{"id":"src_retail_ret_038","workbook_source_id":"RET-038","url":"https://www.vodafone.com/business/industry/retail","title":"Vodafone Business in Retail (industry page)","publisher":"vodafone.com","publication_date":null,"checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"medium","record_type":"Provider industry page","requirement_codes":["saas_and_cloud_application_access","store_and_branch_connectivity"],"named_customer":"Coin","segment":"Department store","named_product_or_service":"Vodafone Business SD-WAN and Analytics","service_family":"SD-WAN","estate":null,"countries_or_regions":"Italy","ot_or_production_environment":null,"measured_or_stated_outcome":"Not quantified in the reviewed source","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Vodafone Business SD-WAN and Analytics helped Coin connect stores across digital and physical channels and tailor their offers to customer needs.","reviewer_summary":"Coin, a named Italian department-store chain, uses Vodafone Business SD-WAN and Analytics to connect stores across digital and physical channels and tailor customer offers.","limitation_and_notes":"No site count or quantified outcome given; single-sentence reference on Vodafone's own retail industry page."},{"id":"src_retail_ret_039","workbook_source_id":"RET-039","url":"https://vodafone.com.fj/business/news/more-businesses-move-to-cloud","title":"Vodafone Fiji: more businesses move to cloud (news release)","publisher":"vodafone.com.fj","publication_date":"2021-06-11","checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"medium","record_type":"Third-party trade press","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","store_and_branch_connectivity","managed_operations"],"named_customer":"Vinod Patel Group","segment":"Multi-sector (retail, distribution, manufacturing)","named_product_or_service":"Vodafone SD-WAN/Wi-Fi solution","service_family":"SD-WAN","estate":null,"countries_or_regions":"Fiji and wider Pacific","ot_or_production_environment":null,"measured_or_stated_outcome":"Equipped to better respond to customers/employees; infrastructure deployable quickly at any site and managed centrally; improved service levels, reduced downtime, reduced administration cost/complexity","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Vodafone's SD-WAN/Wi-Fi solution has equipped us to better respond to our customers and employees, as we transition our tech service to the cloud.","reviewer_summary":"Vinod Patel Group, a named conglomerate operating retail, distribution and manufacturing businesses across the Pacific, uses Vodafone's SD-WAN/Wi-Fi solution for quick, centrally-managed multi-site deployment. Quote from Jekin Patel, GM Digital Transformation & Strategy, Vinod Patel Group.","limitation_and_notes":"No site count or quantified figure given; Vinod Patel Group spans multiple sectors, not retail alone."}]},{"slug":"ntt-data","name":"NTT DATA","marketplace_url":"https://netify.co.uk/marketplace/ntt-data/","research_status":"complete","overall_confidence":"low","fit_conclusion":"Now supported by one strong named-retailer case study: Pick n Pay, a major South African grocery chain (1,200+ stores), using Fortinet Secure SD-WAN managed by NTT DATA with added satellite resilience for loadshedding. Direct named customer quote and independently corroborated business context. No evidence for the other 11 capability columns.","gaps_and_unknowns":"Every retail capability is unevidenced for NTT DATA as a retail SD-WAN/SASE provider.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-15","source_count":1,"accepted_source_count":1,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"proven","evidence_source_ids":["evidence:ntt-data:20"],"verified_date":"2026-09-15"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"proven","evidence_source_ids":["evidence:ntt-data:20"],"verified_date":"2026-09-15"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"proven","evidence_source_ids":["evidence:ntt-data:20"],"verified_date":"2026-09-15"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"managed_operations","label":"Managed operations","state":"proven","evidence_source_ids":["evidence:ntt-data:20"],"verified_date":"2026-09-15"}],"sources":[{"id":"evidence:ntt-data:20","workbook_source_id":"RET-504","url":"https://services.global.ntt/en-us/about-us/case-studies/pick-n-pay","title":"NTT DATA (services.global.ntt) - case study: Managed SD-WAN delivers seamless store connectivity and turnover boost for Pick n Pay (named platform: Fortinet Secure SD-WAN; quantified outcome: 1% turnover increase within first six months)","publisher":"","publication_date":null,"checked_date":"2026-09-15","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Named customer case study","requirement_codes":["store_and_branch_connectivity","internet_and_4g_5g_failover","pos_and_payment_resilience","managed_operations"],"named_customer":"Pick n Pay","segment":"Supermarkets / grocery","named_product_or_service":"Fortinet Secure SD-WAN, managed by NTT DATA (plus satellite connectivity for loadshedding resilience)","service_family":"SD-WAN","estate":null,"countries_or_regions":"South Africa","ot_or_production_environment":null,"measured_or_stated_outcome":"\"In the past six months we've already added 1% to our turnover\" - trading and payments continue via satellite connectivity even when terrestrial connections go down during loadshedding","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"\"We've been working with NTT DATA to get the network where it needs to be. That work has now borne fruit. The network has stabilized, we have insight into how it works and that's supremely good news for us. In the past six months we've already added 1% to our turnover.\" \"Introducing satellite as an internet connection into PnP's SD-WAN solution allows trading and payments to continue even when terrestrial connections go down.\"","reviewer_summary":"Verified live 2026-09-15 (cross-platform lead, independently confirmed). Pick n Pay is a real, major, named South African grocery retailer (1,200+ stores group-wide). The loadshedding context is independently corroborated by real news coverage (BusinessTech, reporting Pick n Pay spends R60m/month on generators during loadshedding) - this is a genuine, well-documented business problem the case study addresses credibly. Closes NTT DATA's entire zero-evidence gap.","limitation_and_notes":"Added 2026-09-15. Underlying SD-WAN technology is Fortinet Secure SD-WAN, managed by NTT DATA - a managed-service case, not NTT DATA's own proprietary platform. No named regulation. No PCI DSS detail despite payment continuity being central to the case."}]},{"slug":"sonicwall-cse","name":"SonicWall Cloud Secure Edge","marketplace_url":"https://netify.co.uk/marketplace/sonicwall-cse/","research_status":"complete","overall_confidence":"medium","fit_conclusion":"Monte Carlo Fashions and Preturi Pentru Tine are two named, real retail customers (TechValidate-verified survey responses and a dedicated write-up), plus a detailed product brief showing explicit VLAN-based POS/camera/Wi-Fi segmentation for retail.","gaps_and_unknowns":"None of the named case studies is SonicWall's flagship Cloud Secure Edge SASE product specifically - they describe NGFW/TZ-series SD-WAN functionality. POS/payment resilience, guest Wi-Fi, seasonal scaling and edge/IoT/camera connectivity have no named-retailer evidence. Note: an automated local verification run scored both SonicWall sources at only 0.39 similarity; re-fetched directly and confirmed both pages are live with the recorded quotes intact - likely the same bot/JS-protection false negative seen on the Cato source, not a real content problem.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-10","source_count":2,"accepted_source_count":2,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"proven","evidence_source_ids":["src_retail_ret_030","src_retail_ret_031"],"verified_date":"2026-09-10"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"partial","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"partial","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"partial","evidence_source_ids":["src_retail_ret_030"],"verified_date":"2026-09-10"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"proven","evidence_source_ids":["src_retail_ret_030","src_retail_ret_031"],"verified_date":"2026-09-10"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"managed_operations","label":"Managed operations","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"}],"sources":[{"id":"src_retail_ret_030","workbook_source_id":"RET-030","url":"https://www.sonicwall.com/resources/case-studies/monte-carlo-fashions-upscales-performance-and-protection-with-sonicwall/","title":"Monte Carlo Fashions Ltd. Upscales Performance and Protection with SonicWall","publisher":"sonicwall.com","publication_date":null,"checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"medium","record_type":"Provider case study","requirement_codes":["store_and_branch_connectivity","internet_and_4g_5g_failover","security_policy_consistency"],"named_customer":"Monte Carlo Fashions Ltd.","segment":"Fashion/apparel manufacturing and retail","named_product_or_service":"SonicWall NSA/TZ NGFW with SD-WAN functionality, GMS centralised management","service_family":"SD-WAN (NGFW-based)","estate":null,"countries_or_regions":"India","ot_or_production_environment":null,"measured_or_stated_outcome":"Improved application uptime, security and inter-location connectivity; bandwidth management, ISP failover and load balancing for multiple ISPs; centralised management/reporting","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Monte Carlo's use of SD-WAN functionality has improved application uptime, security and connectivity between locations.","reviewer_summary":"Monte Carlo Fashions Ltd., a large named Indian fashion garmenting and retail company, deployed SonicWall NSA/TZ NGFW appliances with SD-WAN functionality and GMS centralised management to reduce MPLS dependency, improve uptime and centralise security policy and reporting across its distributed locations.","limitation_and_notes":"This is SonicWall's NGFW/SD-WAN line, not confirmed as the Cloud Secure Edge SASE product specifically; PCI/POS detail not stated."},{"id":"src_retail_ret_031","workbook_source_id":"RET-031","url":"https://www.sonicwall.com/resources/case-studies/retail-preturi-pentru-tine/","title":"SonicWall Network Security Case Study: Retail - Preturi Pentru Tine (PPT)","publisher":"sonicwall.com","publication_date":"2019-05-01","checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"medium","record_type":"Provider case study (TechValidate survey)","requirement_codes":["store_and_branch_connectivity","security_policy_consistency"],"named_customer":"Preturi Pentru Tine (PPT)","segment":"Fashion/apparel retail","named_product_or_service":"SonicWall TZ-series firewalls (Network Security)","service_family":"Not applicable (NGFW/VPN, not SASE)","estate":null,"countries_or_regions":"Romania","ot_or_production_environment":null,"measured_or_stated_outcome":"High uptime and stability interconnecting sites; replaced a prior Cisco deployment","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"We use our TZ firewalls to interconnect different sites to the central one. SonicWall delivers high uptime and good stability.","reviewer_summary":"Preturi Pentru Tine (PPT), a named clothing store chain in Romania, uses SonicWall TZ firewalls to interconnect its distributed sites with high uptime, after previously using Cisco. Quote from Radu Murariu, Network Administrator, PPT.","limitation_and_notes":"This is core NGFW/VPN evidence, not the SASE/Cloud Secure Edge product line; no SD-WAN, POS or PCI detail given."}]},{"slug":"cloudflare-one","name":"Cloudflare One","marketplace_url":"https://netify.co.uk/marketplace/cloudflare-one/","research_status":"complete","overall_confidence":"low","fit_conclusion":"Cloudflare has strong named retail case studies (PacSun, Kathmandu, C&A) but these evidence its CDN, WAF and bot-management products, not Cloudflare One/Magic WAN specifically - so they support web/threat-protection capability only, not SD-WAN or in-store network capability. RET-010 (PacSun) re-verified live 2026-09-11 and upgraded from Needs review to Accepted, with a named, attributed CISO quote and quantified results (27% faster, 99% of harmful bot traffic stopped) - Threat protection and secure web access moved from Partial to Proven on that basis.","gaps_and_unknowns":"No case study found ties a named retailer to Cloudflare One (Magic WAN/SASE) for store or branch network connectivity; all named retail evidence found is for e-commerce security (bot mitigation, DDoS), which the evidence rules say cannot be treated as SD-WAN/SASE proof without an explicit product connection.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-15","source_count":2,"accepted_source_count":2,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"proven","evidence_source_ids":["src_retail_ret_511"],"verified_date":"2026-09-15"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"proven","evidence_source_ids":["src_retail_ret_511"],"verified_date":"2026-09-15"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"proven","evidence_source_ids":["src_retail_ret_010"],"verified_date":"2026-09-15"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"managed_operations","label":"Managed operations","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"}],"sources":[{"id":"src_retail_ret_010","workbook_source_id":"RET-010","url":"https://cfl.re/reasons-retail-orgs-choose-cloudflare","title":"Reasons retail orgs choose Cloudflare (case-study index)","publisher":"cfl.re","publication_date":null,"checked_date":"2026-09-11","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Provider case-study index","requirement_codes":["threat_protection_and_secure_web_access"],"named_customer":"PacSun","segment":"Apparel (e-commerce)","named_product_or_service":"Cloudflare Web Application Firewall (WAF), Secure DNS, DDoS protection, Bot Management (not Cloudflare One/Magic WAN)","service_family":"Not applicable (CDN/WAF/bot management, not SD-WAN/SASE)","estate":null,"countries_or_regions":"United States","ot_or_production_environment":null,"measured_or_stated_outcome":"27% faster site performance overnight from improved cache rates; 99% of harmful bot traffic stopped at the network edge; averted millions of dollars in lost revenue from bot-related outages during sales events","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"\"Switching to Cloudflare, our system was 27% faster overnight... cache rates jumped immediately.\" - Scott Forrest, Pacsun CISO. Key results: 27% performance increase; 99% of harmful bot traffic stopped at the network edge.","reviewer_summary":"Cloudflare's own case study, re-verified live 2026-09-11 at cloudflare.com/case-studies/pacsun with a named, attributed CISO quote and quantified results. Confirms Cloudflare's WAF/Bot Management/DDoS stack for PacSun's e-commerce site - genuine threat-protection evidence, but explicitly not Cloudflare One SD-WAN/SASE for store network connectivity.","limitation_and_notes":"Per evidence rule 4, this evidences Cloudflare bot-management/WAF products, not Cloudflare One SD-WAN/SASE for store connectivity - correctly scoped to Threat protection and secure web access only."},{"id":"src_retail_ret_511","workbook_source_id":"RET-511","url":"https://www.cloudflare.com/coffee-shop-networking","title":"Implement coffee shop networking with Cloudflare","publisher":"cloudflare.com","publication_date":null,"checked_date":"2026-09-15","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Named customer case study","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","store_and_branch_connectivity"],"named_customer":"Ocado Group","segment":"Online grocery","named_product_or_service":"Cloudflare One (WAN, coffee shop networking)","service_family":"SASE","estate":null,"countries_or_regions":"UK (Ocado HQ)","ot_or_production_environment":null,"measured_or_stated_outcome":"Standardised, simplified deployment - \"drop a device anywhere in the world and have it just work\"","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"\"As we scale up with more sites, configuring new networks can be as expensive as it is complex. Our vision is to get to a point where we can drop a device anywhere in the world and have it just work. Cloudflare is how we achieve that level of standardization and simplicity.\" - Chief Technology Officer, Ocado","reviewer_summary":"Verified live 2026-09-15. Found while verifying a separate lead (DTLR) - Ocado Group is a real, major, named UK online grocery retailer with a named CTO-level quote on Cloudflare's own current live retail page.","limitation_and_notes":"Added 2026-09-15. CTO named by title only, not by name. No site count, PCI, or IoT detail stated."}]},{"slug":"barracuda-secureedge","name":"Barracuda SecureEdge","marketplace_url":"https://netify.co.uk/marketplace/barracuda-secureedge/","research_status":"complete","overall_confidence":"low","fit_conclusion":"Now supported by one real named-retailer case study: Hubo, a major Belgian DIY chain (150+ stores, 75 franchise), using Barracuda CloudGen Firewall SD-WAN with a named IT executive quote. Evidences multi-site zero-touch deployment, temporary-store connectivity, and network visibility. No evidence for PCI/payment segmentation, guest Wi-Fi separation, or edge/IoT/camera connectivity.","gaps_and_unknowns":"Every retail capability is unevidenced. This may need direct outreach to Barracuda's UK channel team rather than further open-web searching. [2026-09-15] Hubo case study found and verified (RET-501), closing the zero-evidence gap. Remaining gaps: PCI/payment segmentation, guest Wi-Fi separation, edge/IoT/camera connectivity, remote worker access, and any named regulation.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-15","source_count":1,"accepted_source_count":1,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"proven","evidence_source_ids":["src_retail_ret_501"],"verified_date":"2026-09-15"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"proven","evidence_source_ids":["src_retail_ret_501"],"verified_date":"2026-09-15"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"proven","evidence_source_ids":["src_retail_ret_501"],"verified_date":"2026-09-15"},{"code":"managed_operations","label":"Managed operations","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"}],"sources":[{"id":"src_retail_ret_501","workbook_source_id":"RET-501","url":"https://assets.barracuda.com/assets/docs/dms/Barracuda_CloudGen_Firewall_CS_Hubo_UK.pdf","title":"Pioneering DIY retailer future proofs SD-WAN security","publisher":"assets.barracuda.com","publication_date":"2019-01-01","checked_date":"2026-09-15","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"high","record_type":"Named customer case study","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","seasonal_and_temporary_site_scaling","network_and_application_visibility"],"named_customer":"Hubo","segment":"DIY / home improvement (high-street chain with franchise estate)","named_product_or_service":"Barracuda CloudGen Firewall (SD-WAN, local internet breakout)","service_family":"SD-WAN","estate":null,"countries_or_regions":"Belgium","ot_or_production_environment":null,"measured_or_stated_outcome":"Store setup takes minutes via automated deployment; single global ruleset migrated across all locations; exceeded 99.9%-class availability expectation implicitly via \"everything is still working seamlessly\"","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"\"We can connect our shops and temporary stores at the flick of a switch.\" - Jan Van Regenmortel, Senior Systems Administrator, Hubo. \"Managing everything with a single ruleset saves us time and resource... When we need to change an application, we just change one rule which is applied to all locations.\"","reviewer_summary":"Verified live 2026-09-15 by direct PDF fetch (cross-platform lead, independently confirmed). Hubo is a real, major, named Belgian DIY retail chain (150+ stores) with a named IT executive quote. Explicitly mentions temporary stores and single-ruleset multi-site deployment.","limitation_and_notes":"Added 2026-09-15. Does not explicitly detail supplier/EDI network access controls or PCI/payment segmentation - franchise connectivity and zero-touch/temporary-site evidence only."}]},{"slug":"versa-networks","name":"Versa Networks","marketplace_url":"https://netify.co.uk/marketplace/versa-networks/","research_status":"complete","overall_confidence":"low","fit_conclusion":"Versa's own 'Fortune 500 Retail' case-study video gives unusually detailed technical description (redundant appliances per store, guest Wi-Fi segmentation, AWS direct connectivity, dual-ISP local breakout) but the retailer is anonymised throughout, capping confidence.","gaps_and_unknowns":"No named retailer for Versa Networks in retail. 'Global Retailing Company' and 'Large Food Retailer' listings exist on Versa's case-study index but were not opened for detail. Payment/PCI segmentation, POS resilience and multi-site zero-touch provisioning are unevidenced by name. Re-searched 2026-09-15 with segment-specific terms - same result, only anonymised cases found ('Global Retailer', 'Fortune 500 retail enterprise', 'Large Food Retailer'). Genuine, twice-confirmed zero.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-15","source_count":1,"accepted_source_count":1,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"partial","evidence_source_ids":["src_retail_ret_036"],"verified_date":"2026-09-15"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"partial","evidence_source_ids":["src_retail_ret_036"],"verified_date":"2026-09-15"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"partial","evidence_source_ids":["src_retail_ret_036"],"verified_date":"2026-09-15"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"partial","evidence_source_ids":["src_retail_ret_036"],"verified_date":"2026-09-15"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"partial","evidence_source_ids":["src_retail_ret_036"],"verified_date":"2026-09-15"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"managed_operations","label":"Managed operations","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"}],"sources":[{"id":"src_retail_ret_036","workbook_source_id":"RET-036","url":"https://academy.versa-networks.com/aiovg_videos/versa-case-study-versa-fortune-500-retail-secure-sd-wan-transformation","title":"Versa Case Study: Versa Fortune 500 Retail Secure SD-WAN Transformation","publisher":"academy.versa-networks.com","publication_date":null,"checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"low","record_type":"Provider case-study video/transcript","requirement_codes":["guest_and_corporate_wi_fi_separation","saas_and_cloud_application_access","store_and_branch_connectivity","internet_and_4g_5g_failover","security_policy_consistency"],"named_customer":"Not named","segment":"General/apparel retail","named_product_or_service":"Versa Secure SD-WAN (redundant Dell VEP 1445 appliances)","service_family":"SD-WAN","estate":null,"countries_or_regions":"United States","ot_or_production_environment":null,"measured_or_stated_outcome":"Redundant SD-WAN appliances in every store; dual-ISP local internet breakout replacing MPLS; store network segmented from corporate/guest Wi-Fi; direct AWS connectivity replacing centralised hairpin routing","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"We're using Versa to segment between store network and corporate network.","reviewer_summary":"An unnamed 'high-end name brand retailer' in the US, a five-year Versa customer, runs redundant Versa SD-WAN appliances in every store, segments store/corporate/guest Wi-Fi, and connects directly to AWS with dual-ISP local internet breakout replacing legacy MPLS and centralised traffic hairpinning.","limitation_and_notes":"Retailer is never named in the video/transcript despite the level of technical detail; cannot be independently corroborated."}]},{"slug":"lumen","name":"Lumen","marketplace_url":"https://netify.co.uk/marketplace/lumen/","research_status":"complete","overall_confidence":"low","fit_conclusion":"Lumen's co-branded case study with Cradlepoint describes a detailed, real retail 5G-failover deployment, but the retailer is unnamed and Lumen lists retail only generically as a served vertical elsewhere.","gaps_and_unknowns":"No named retailer found for Lumen. Payment/PCI segmentation, guest Wi-Fi separation and multi-site zero-touch provisioning are unevidenced.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-10","source_count":1,"accepted_source_count":1,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"partial","evidence_source_ids":["src_retail_ret_022"],"verified_date":"2026-09-10"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"partial","evidence_source_ids":["src_retail_ret_022"],"verified_date":"2026-09-10"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"partial","evidence_source_ids":["src_retail_ret_022"],"verified_date":"2026-09-10"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"managed_operations","label":"Managed operations","state":"partial","evidence_source_ids":["src_retail_ret_022"],"verified_date":"2026-09-10"}],"sources":[{"id":"src_retail_ret_022","workbook_source_id":"RET-022","url":"https://assets.lumen.com/is/content/Lumen/lumen-cradlepoint-use-case-backup-failover","title":"Lumen and Cradlepoint deliver 5G backup networking solution for retail transformation","publisher":"assets.lumen.com","publication_date":null,"checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"low","record_type":"Provider case study (co-branded with Cradlepoint)","requirement_codes":["store_and_branch_connectivity","internet_and_4g_5g_failover","pos_and_payment_resilience","managed_operations"],"named_customer":"Not named","segment":"Grocery/supermarket","named_product_or_service":"Lumen Equipment Solutions with Cradlepoint 5G Adapter (W1850-5G)","service_family":"Not applicable (Wireless WAN failover)","estate":null,"countries_or_regions":"United States (southeast)","ot_or_production_environment":null,"measured_or_stated_outcome":"Failover connectivity in stores if primary link fails; advanced analytics available to store managers; centralised remote out-of-band management","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Lumen's introduction of Cradlepoint's 5G connectivity solution allows this national grocer to future proof its IT infrastructure while providing real-time analytics to each store manager and remote out-of-band management to support hundreds of stores from a centralized location.","reviewer_summary":"An unnamed national US grocery retailer (southeast US, multiple locations) uses Lumen Equipment Solutions with a Cradlepoint 5G Adapter for backup WAN connectivity, real-time store-manager analytics and centralised remote out-of-band management.","limitation_and_notes":"Retailer not named; document is co-branded with Cradlepoint so cannot be attributed solely to a Lumen-native SD-WAN/SASE product."}]},{"slug":"att","name":"AT&T Business","marketplace_url":"https://netify.co.uk/marketplace/att/","research_status":"complete","overall_confidence":"low","fit_conclusion":"AT&T Business has a genuinely strong, quantified retail SD-WAN/wireless-WAN deployment (6,000+ sites onboarded in five months), but the retailer is unnamed, so this is credible evidence of scale rather than a fully provable named reference.","gaps_and_unknowns":"The retailer behind the 6,000-site deployment is never named in AT&T's own case study. The 'major auto parts retailer' reference is thinner still (video only, no metrics). No evidence found for PCI/payment segmentation, guest Wi-Fi, edge/IoT or managed operations specifically for retail. Re-searched 2026-09-15 with segment-specific terms (supermarket, fuel, fashion, warehouse) - same result, only anonymised cases found ('global apparel brand', 'large retail enterprise chain'). Genuine, twice-confirmed zero.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-15","source_count":1,"accepted_source_count":1,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"partial","evidence_source_ids":["src_financial_services_fin_123"],"verified_date":"2026-09-15"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"partial","evidence_source_ids":["src_financial_services_fin_123"],"verified_date":"2026-09-15"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"partial","evidence_source_ids":["src_financial_services_fin_123"],"verified_date":"2026-09-15"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"managed_operations","label":"Managed operations","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"}],"sources":[{"id":"src_financial_services_fin_123","workbook_source_id":"RET-003","url":"https://www.business.att.com/content/dam/attbusiness/briefs/next-generation-networking-use-case.pdf","title":"Next-generation networking use case (retail SD-WAN deployment)","publisher":"business.att.com","publication_date":"2022-06-22","checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"low","record_type":"Provider case study","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","store_and_branch_connectivity","internet_and_4g_5g_failover"],"named_customer":"Not named","segment":"General retail (multi-site chain)","named_product_or_service":"AT&T Business SD-WAN with AT&T 4G LTE (wireless-only WAN)","service_family":"SD-WAN","estate":null,"countries_or_regions":"United States","ot_or_production_environment":null,"measured_or_stated_outcome":"6,000+ sites onboarded in five months (avg. 400 sites/week); lower failure rates than wired rollout; reduced cost (no physical lines to lay)","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"This solution brought 6000+ sites online within a five-month period (average of 400 sites per week)","reviewer_summary":"AT&T's own case study describes a large, unnamed US retail chain bringing 6,000+ sites onto wireless-only (4G LTE) WAN transport into AT&T's Common Backbone, in five months, with fewer failures and lower cost than a wired rollout.","limitation_and_notes":"Retailer identity is withheld throughout; figures come solely from AT&T's own brief so cannot be independently corroborated."}]},{"slug":"comcastbusiness","name":"Comcast Business","marketplace_url":"https://netify.co.uk/marketplace/comcastbusiness/","research_status":"complete","overall_confidence":"low","fit_conclusion":"Comcast's own press release describes a detailed, quantified retail SD-WAN deployment (payment security and uptime explicitly the driver) but the retailer is unnamed, capping confidence.","gaps_and_unknowns":"The 'family-owned New England hardware store' is not named. No named retailer found for Comcast Business at all. Payment/PCI segmentation, guest Wi-Fi and edge/IoT connectivity are unevidenced.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-10","source_count":1,"accepted_source_count":1,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"partial","evidence_source_ids":["src_retail_ret_011"],"verified_date":"2026-09-10"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"partial","evidence_source_ids":["src_retail_ret_011"],"verified_date":"2026-09-10"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"partial","evidence_source_ids":["src_retail_ret_011"],"verified_date":"2026-09-10"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"managed_operations","label":"Managed operations","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"}],"sources":[{"id":"src_retail_ret_011","workbook_source_id":"RET-011","url":"https://business.comcast.com/about-us/press-releases/2020/family-owned-new-england-hardware-store-builds-a-solid-foundation-with-comcast-business","title":"Family-Owned New England Hardware Store Builds a Solid Foundation with Comcast Business SD-WAN Solution","publisher":"business.comcast.com","publication_date":"2020-02-21","checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"low","record_type":"Provider press release","requirement_codes":["store_and_branch_connectivity","internet_and_4g_5g_failover","pos_and_payment_resilience"],"named_customer":"Not named","segment":"Hardware and home improvement","named_product_or_service":"Comcast Business SD-WAN (ActiveCore SDN platform) with 4G LTE backup","service_family":"SD-WAN","estate":null,"countries_or_regions":"United States (Boston area)","ot_or_production_environment":null,"measured_or_stated_outcome":"Retired legacy T1 backup entirely; layered SD-WAN over existing fibre/broadband with 4G LTE as new backup; retained existing voice solution","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"to enhance network availability and customer payment security for its retail locations","reviewer_summary":"A Boston-based, family-owned hardware and home-centre chain (unnamed) adopted Comcast Business SD-WAN with 4G LTE backup specifically to improve network availability and payment security across its retail locations, retiring its legacy T1 backup line.","limitation_and_notes":"Retailer is not named in Comcast's own release, so cannot be independently corroborated; site count not given."}]},{"slug":"bt","name":"BT","marketplace_url":"https://netify.co.uk/marketplace/bt/","research_status":"complete","overall_confidence":"low","fit_conclusion":"BT publishes a dedicated retail-estate page covering managed SD-WAN, real-time surveillance and Wi-Fi, which is credible sector positioning, but no named retail customer or quantified deployment was found to support it.","gaps_and_unknowns":"No named UK or international retailer found using BT's SD-WAN/SASE for retail. Payment/PCI segmentation, POS resilience and seasonal scaling are entirely unevidenced.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-10","source_count":1,"accepted_source_count":1,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"partial","evidence_source_ids":["src_retail_ret_004"],"verified_date":"2026-09-10"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"partial","evidence_source_ids":["src_retail_ret_004"],"verified_date":"2026-09-10"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"managed_operations","label":"Managed operations","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"}],"sources":[{"id":"src_retail_ret_004","workbook_source_id":"RET-004","url":"https://business.bt.com/insights/bt-connecting-your-retail-estate-and-ecosystem","title":"BT: Connecting your retail estate and ecosystem","publisher":"business.bt.com","publication_date":null,"checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"low","record_type":"Provider industry page","requirement_codes":["edge_iot_and_camera_connectivity","store_and_branch_connectivity"],"named_customer":"Not named","segment":"General retail","named_product_or_service":"BT managed SD-WAN with dashboard","service_family":"SD-WAN","estate":null,"countries_or_regions":"United Kingdom","ot_or_production_environment":null,"measured_or_stated_outcome":"Not stated (industry page, no case metrics)","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"We're at the forefront of empowering retailers with cutting-edge solutions, offering a comprehensive suite of digital services, including our managed SD-WAN and dashboard solutions, real-time surveillance, and fast, reliable Wi-Fi","reviewer_summary":"BT's own retail-sector page describes managed SD-WAN with a monitoring dashboard, real-time surveillance (camera) and Wi-Fi for retailers, partnered with Cisco, VMware and Nokia; no named customer or outcome given.","limitation_and_notes":"No named retailer or measured outcome; page is generic sector positioning, not a case study."}]},{"slug":"checkpoint","name":"Check Point","marketplace_url":"https://netify.co.uk/marketplace/checkpoint/","research_status":"complete","overall_confidence":"low","fit_conclusion":"Check Point publishes generic retail-sector SASE content covering self-checkout, kiosks, POS and IoT attack-surface risk, but no named retail customer or deployment was found.","gaps_and_unknowns":"No named retailer evidence at all. The 'Five Reasons' blog series confirms retail is a served vertical for Quantum SD-WAN but gives no customer, site count or outcome. Re-searched 2026-09-15 with segment-specific terms - same result, only generic product/reseller marketplace content found. Genuine, twice-confirmed zero.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-15","source_count":1,"accepted_source_count":1,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"partial","evidence_source_ids":["src_retail_ret_007"],"verified_date":"2026-09-15"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"partial","evidence_source_ids":["src_retail_ret_007"],"verified_date":"2026-09-15"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"managed_operations","label":"Managed operations","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"}],"sources":[{"id":"src_retail_ret_007","workbook_source_id":"RET-007","url":"https://blog.checkpoint.com/?p=247214","title":"Five Reasons Retail Chains Can't Ignore SASE","publisher":"blog.checkpoint.com","publication_date":null,"checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"low","record_type":"Provider blog","requirement_codes":["threat_protection_and_secure_web_access","security_policy_consistency"],"named_customer":"Not named","segment":"General retail","named_product_or_service":"Check Point SASE / Quantum SD-WAN","service_family":"SASE, SD-WAN","estate":null,"countries_or_regions":"Not stated","ot_or_production_environment":null,"measured_or_stated_outcome":"Not stated (no case metrics; generic vertical positioning)","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"SASE protects this expanding attack surface by monitoring traffic, blocking malicious files, and preventing unauthorized access","reviewer_summary":"Check Point's own blog frames SASE as protecting the retail attack surface (POS, kiosks, IoT sensors, remote staff) but names no customer or quantified deployment.","limitation_and_notes":"No named customer anywhere in Check Point's retail-facing content found; cannot move capabilities past Partial on this basis."}]},{"slug":"hpe-aruba-edgeconnect","name":"HPE Aruba EdgeConnect","marketplace_url":"https://netify.co.uk/marketplace/hpe-aruba-edgeconnect/","research_status":"complete","overall_confidence":"low","fit_conclusion":"HPE Aruba EdgeConnect has detailed retail-oriented product marketing (VLAN segmentation for POS, guest Wi-Fi, Aruba Central for hundreds of locations) but no named retail customer was found after two searches. RET-019 re-verified live 2026-09-11 and upgraded from Needs review to Accepted - the page is genuine and current, but still names no customer, so Store and branch connectivity correctly stays Partial rather than Proven.","gaps_and_unknowns":"No named retailer found for EdgeConnect SD-WAN or SASE in a retail context. All retail capabilities beyond generic product positioning remain unevidenced. Re-searched 2026-09-15 with segment-specific terms - same result, only generic product pages and one unrelated 'Power Solutions Manufacturer' case found. Genuine, twice-confirmed zero.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-15","source_count":1,"accepted_source_count":1,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"partial","evidence_source_ids":["src_retail_ret_019"],"verified_date":"2026-09-15"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"},{"code":"managed_operations","label":"Managed operations","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-15"}],"sources":[{"id":"src_retail_ret_019","workbook_source_id":"RET-019","url":"https://securewirelessworks.com/retail.asp","title":"Retail Solution Overview (securewirelessworks.com / Aruba retail page)","publisher":"securewirelessworks.com","publication_date":null,"checked_date":"2026-09-11","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"low","record_type":"Provider solution page","requirement_codes":["store_and_branch_connectivity"],"named_customer":"Not named","segment":"General retail","named_product_or_service":"HPE Aruba Networking EdgeConnect SD-WAN with Aruba Central","service_family":"SD-WAN, SASE (via HPE Aruba SSE)","estate":null,"countries_or_regions":"Not stated","ot_or_production_environment":null,"measured_or_stated_outcome":"Not stated (no named case, no metrics)","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Manage hundreds of locations with one solution. Discover how Aruba Central can help you improve operations, deliver services faster, and enhance shopping","reviewer_summary":"Re-verified live 2026-09-11 - page content unchanged: a partner-hosted Aruba retail solutions page positioning EdgeConnect SD-WAN and Aruba Central for managing hundreds of retail locations. Confirmed genuine and current, but still no named customer or outcome, so this remains supporting evidence only, not deployment proof, per evidence rule 3.","limitation_and_notes":"Generic partner/reseller marketing page, not a named customer case study - Accepted as a genuine, live, current source, but graded Partial (not Proven) on the capability it supports, per evidence rule 3."}]},{"slug":"virgin-media-o2","name":"Virgin Media O2 Business","marketplace_url":"https://netify.co.uk/marketplace/virgin-media-o2/","research_status":"complete","overall_confidence":"low","fit_conclusion":"Virgin Media O2 Business has a documented retail-sector go-to-market strategy (per an Analysys Mason analyst report) and offers managed SD-WAN via Versa Networks/Cisco Meraki/Fortinet/VeloCloud, but no named retail customer or case study was found. RET-037 re-verified live 2026-09-11 (abstract wording confirmed word-for-word) and upgraded from Needs review to Accepted - the full report stays behind a paywall, so Store and branch connectivity correctly stays Partial rather than Proven.","gaps_and_unknowns":"No named retailer evidence at all for Virgin Media O2 Business. Every capability beyond generic SD-WAN product positioning is unevidenced.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-10","source_count":1,"accepted_source_count":1,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"partial","evidence_source_ids":["src_retail_ret_037"],"verified_date":"2026-09-10"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"managed_operations","label":"Managed operations","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"}],"sources":[{"id":"src_retail_ret_037","workbook_source_id":"RET-037","url":"https://analysysmason.com/research/content/company-profiles/vmo2-retail-proposition-ren01","title":"Virgin Media O2 Business: enterprise proposition for the retail sector","publisher":"analysysmason.com","publication_date":"2024-10-21","checked_date":"2026-09-11","source_ownership":"independent","decision":"accepted","reviewer_confidence":"low","record_type":"Independent analyst report","requirement_codes":["store_and_branch_connectivity"],"named_customer":"Not named","segment":"General retail","named_product_or_service":"Virgin Media O2 Business managed SD-WAN (Versa Networks default; also Cisco Meraki, Fortinet, VeloCloud)","service_family":"SD-WAN","estate":null,"countries_or_regions":"United Kingdom","ot_or_production_environment":null,"measured_or_stated_outcome":"Not stated (report is paywalled; only the abstract/summary was reviewed)","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Virgin Media O2 serves business customers in the UK. It is developing a range of vertical market propositions to strengthen its go-to-market strategy for fixed network services.","reviewer_summary":"Re-verified live 2026-09-11 - the public abstract wording is unchanged and confirmed word-for-word against the live page. The full report (and any named case detail) remains behind an Analysys Mason paywall, so this stays supporting evidence of a retail go-to-market strategy, not proof of a named deployment.","limitation_and_notes":"Only the publicly visible abstract has been read; the full USD549 report sits behind a paywall. Accepted as a genuine, live, independent source, but graded Partial (not Proven) since no named customer or capability detail is accessible."}]},{"slug":"aryaka","name":"Aryaka","marketplace_url":"https://netify.co.uk/marketplace/aryaka/","research_status":"complete","overall_confidence":"low","fit_conclusion":"The one piece of Aryaka retail evidence found (an unnamed 200+ site US retail win) is no longer live - the case page now returns a 404 - so it has been rejected rather than counted. Only generic retail marketing copy remains, which does not name a customer or a capability.","gaps_and_unknowns":"No verifiable retail evidence currently exists for Aryaka. The 200+ site US retail case that supported Store/branch connectivity and Multi-site deployment has gone offline since it was first checked (confirmed 404 on re-verification) and has been downgraded from Accepted to Rejected. Every retail capability is therefore Not found pending a fresh source. Supporting source IDs cleared on 2026-09-11 - RET-001 (Rejected) and RET-002 (Needs review) were listed for documentation but don't back any Proven or Partial capability, which was tripping the QA check on an otherwise honestly-researched Not-found result.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-10","source_count":2,"accepted_source_count":1,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"managed_operations","label":"Managed operations","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"}],"sources":[{"id":"src_retail_ret_002","workbook_source_id":"RET-002","url":"https://aryaka.com/?p=41110","title":"Aryaka Enables the Future of the Retail Customer Experience","publisher":"aryaka.com","publication_date":null,"checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"accepted","reviewer_confidence":"low","record_type":"Provider marketing","requirement_codes":["store_and_branch_connectivity"],"named_customer":"Not named","segment":"General retail","named_product_or_service":"Aryaka managed SD-WAN and SASE","service_family":"SD-WAN, SASE","estate":null,"countries_or_regions":"Not stated","ot_or_production_environment":null,"measured_or_stated_outcome":"Not stated (whitepaper is promotional, no named customer)","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Aryaka's managed SD-WAN and SASE enables retailers to confidently deploy a next-generation experience","reviewer_summary":"Generic retail whitepaper positioning Aryaka's managed SD-WAN and SASE for front-of-store and back-end retail use cases; no named customer or quantified outcome.","limitation_and_notes":null},{"id":"src_retail_ret_001","workbook_source_id":"RET-001","url":"https://aryaka.com/?p=37898","title":"Aryaka Demonstrates Again that Large-Scale, U.S.-only Retail Projects can be Realized at Low Cost, Even Against Telcos and Other Competitors","publisher":"aryaka.com","publication_date":null,"checked_date":"2026-09-10","source_ownership":"provider_authored","decision":"rejected","reviewer_confidence":"low","record_type":"Provider case study","requirement_codes":["multi_site_deployment_and_zero_touch_provisioning","store_and_branch_connectivity"],"named_customer":"Not named","segment":"General merchandise","named_product_or_service":"Aryaka SD-WAN (ANAP) + AppAssure","service_family":"SD-WAN","estate":null,"countries_or_regions":"United States","ot_or_production_environment":null,"measured_or_stated_outcome":"Won the account against telco incumbents; URL-based security rules enabled via AppAssure on the ANAP","industrial_standard_or_regulation":null,"regulatory_regime":null,"exact_supporting_wording":"Can win large scale, price-sensitive retail accounts (200+ sites)","reviewer_summary":"Aryaka's own case page previously stated it won a 200+ site, single-country (USA) retail SD-WAN deal against telco competition. Re-verification on 2026-09-10 found the page now returns a 404 (Page Not Found) - Aryaka appears to have removed or restructured this content.","limitation_and_notes":"Page confirmed dead (404) on automated re-verification; the claim can no longer be checked against a live source and should not be counted as evidence unless a new URL for the same case is found."}]},{"slug":"colt","name":"Colt Technology Services","marketplace_url":"https://netify.co.uk/marketplace/colt/","research_status":"complete","overall_confidence":"low","fit_conclusion":"No named retail customer was found for Colt Technology Services; only generic WAN/SD-WAN industry-award content (Gartner Peer Insights, Forrester Wave) was located.","gaps_and_unknowns":"Every retail capability is unevidenced. Colt's SD-WAN awards and Versa partnership are real but sector-agnostic.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-10","source_count":0,"accepted_source_count":0,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"managed_operations","label":"Managed operations","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"}],"sources":[]},{"slug":"expereo","name":"Expereo","marketplace_url":"https://netify.co.uk/marketplace/expereo/","research_status":"complete","overall_confidence":"low","fit_conclusion":"No named retail customer or case study was found for Expereo; only general SD-WAN market growth and M&A news (e.g. Breeze Networks acquisition) was located.","gaps_and_unknowns":"Every retail capability is unevidenced for Expereo specifically.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-10","source_count":0,"accepted_source_count":0,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"managed_operations","label":"Managed operations","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"}],"sources":[]},{"slug":"opensystems","name":"Open Systems","marketplace_url":"https://netify.co.uk/marketplace/opensystems/","research_status":"complete","overall_confidence":"low","fit_conclusion":"No named retail customer was found for Open Systems; only channel-partnership and M&A news (Swiss Post acquisition, Allnet DACH partnership) and analyst recognition were located.","gaps_and_unknowns":"Every retail capability is unevidenced for Open Systems.","reviewed_by":"Harry Yelland","reviewed_date":"2026-09-10","source_count":0,"accepted_source_count":0,"requirements":[{"code":"store_and_branch_connectivity","label":"Store and branch connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"payment_and_pci_dss_segmentation","label":"Payment and PCI DSS segmentation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"guest_and_corporate_wi_fi_separation","label":"Guest and corporate Wi-Fi separation","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"pos_and_payment_resilience","label":"POS and payment resilience","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"saas_and_cloud_application_access","label":"SaaS and cloud application access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"third_party_and_supplier_access","label":"Third-party and supplier access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"remote_worker_and_support_access","label":"Remote worker and support access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"multi_site_deployment_and_zero_touch_provisioning","label":"Multi-site deployment and zero-touch provisioning","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"internet_and_4g_5g_failover","label":"Internet and 4G/5G failover","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"seasonal_and_temporary_site_scaling","label":"Seasonal and temporary-site scaling","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"edge_iot_and_camera_connectivity","label":"Edge, IoT and camera connectivity","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"security_policy_consistency","label":"Security policy consistency","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"threat_protection_and_secure_web_access","label":"Threat protection and secure web access","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"network_and_application_visibility","label":"Network and application visibility","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"},{"code":"managed_operations","label":"Managed operations","state":"not_found","evidence_source_ids":[],"verified_date":"2026-09-10"}],"sources":[]}]},"live_evidence_source":"https://netify.co.uk/sase/best/sd-wan-sase-providers-for-retail/data.json","live_evidence":{"page":"https://netify.co.uk/sase/best/sd-wan-sase-providers-for-retail","title":"Best SD-WAN and SASE providers for Retail and e-commerce","description":"Use this public provider evidence to investigate retail and e-commerce requirements. The current matching catalogue does not confirm retail/e-commerce suitability. Ask for evidence covering your store operations and online services before treating any provider as a match. Typical drivers in this sector include rapid store rollout, PCI DSS segmentation, cellular backup and centralised management across estates (that can run into hundreds or thousands of sites).","publisher":"Netify Group Limited","last_reviewed":"2026-07-29","criteria":{"sector":"retail_ecommerce","shortlist_size":10},"interactive_equivalent":"https://netify.co.uk/sase/shortlist/?n=10&s=retail_ecommerce","ordered_by":"evidence_coverage_pct desc, provider name asc, slug asc","introduction":"Use this public provider evidence to investigate retail and e-commerce requirements. The current matching catalogue does not confirm retail/e-commerce suitability. Ask for evidence covering your store operations and online services before treating any provider as a match. Typical drivers in this sector include rapid store rollout, PCI DSS segmentation, cellular backup and centralised management across estates (that can run into hundreds or thousands of sites).","result":{"contract_version":"public-provider-evidence/4.0.0","requires_publication":false,"ordered_by":"evidence_coverage_pct desc, provider name asc, slug asc","input":{"service_model":"any","required_features":[],"preferred_features":[],"required_regions":[],"preferred_regions":[],"required_clouds":[],"ai_requirements":[],"disaster_recovery_required":false,"max_deployment_speed":"any","weight_preset":"balanced","shortlist_size":10,"uk_provider_only":false,"sector":"retail_ecommerce","organisation_size":"any","intent":"none"},"criteria_summary":"Sector: Retail and e-commerce. Scoring profile: balanced.","shortlist":[{"slug":"cato-networks","name":"Cato Networks","website":"https://www.catonetworks.com","category":"Cloud-native SASE / SD-WAN platform","product_focus":"Cato SASE Cloud, Cato Socket, private backbone","cost_model":"Quote-based subscription; typically site/user/bandwidth/security bundle based.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (Israel and US). Delivers in the UK from London and Manchester PoPs; contract direct or through UK partners including Netify routes.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"partial","f06_last_mile_circuit_management":"partner_integrated","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"yes","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"partner_integrated","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"yes","f40_managed_service_assurance":"yes"},"deployment_speed":"hours","regions":{"uk_ireland":"yes","europe":"yes","north_america":"yes","asia_pacific":"yes","middle_east_africa":"yes","latin_america":"yes","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"partial","alibaba_cloud":"partial"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"partial","note":"Real-time ML threat prevention, autonomous policy recommendations and built-in DEM."},"resilience":{"disaster_recovery":"yes","note":"Self-healing backbone; sockets fail over between PoPs automatically with no customer action."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"partial","education":"yes","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"partial"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"yes","small_business":"not_confirmed"},"pricing_units":["per_site","per_user","per_bandwidth","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"yes","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"partial","chromeos":"partial","agentless":"yes"},"pop_count":100,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/cato-networks/","shortlist_summary":"Cato Networks is frequently scored by us at Netify as being one of the easiest platforms to actually use, and they’re often considered a more integrated offering than most of the competition, which is primarily down to building their SASE solution from the ground up rather than bolting security onto an existing networking product, or the other way round.","key_differentiators":["Single converged platform with no policy or log fragmentation across SD-WAN and security functions.","100+ PoP global private backbone reduces internet variability and provides predictable performance for SaaS-heavy traffic.","Strong story for organisations consolidating multiple point solutions onto one operational platform."],"best_fit_for":["Mid-market and enterprise buyers consolidating SD-WAN and SASE on one platform from a single vendor.","Global organisations with SaaS-heavy traffic patterns that benefit from a private backbone.","Teams without dedicated security operations capacity who want a managed SASE experience."],"watch_outs":["Less suited to best-of-breed buyers wanting Zscaler or Netskope as the SSE layer.","Customer does not own the underlay; circuits sourced separately, so multi-supplier coordination remains.","Less mature than incumbents for very large multinational deployments with heavy legacy MPLS estates."],"evidence_coverage_pct":0.925,"last_verified":"2026-09-01","evidence_source_count":40,"independent_evidence_source_count":0,"position":1,"research_metrics":{"supported":32,"partial":3,"partner_delivered":2,"managed_service_dependent":0,"not_primary":0,"unconfirmed":3,"total":40,"reviewed":37,"completeness_percent":93,"completeness":0.925},"proven_evidence_count":32,"gaps":[]},{"slug":"cisco","name":"Cisco","website":"https://www.cisco.com/site/us/en/solutions/networking/sdwan/index.html","category":"SD-WAN / SASE technology vendor","product_focus":"Catalyst SD-WAN, Meraki MX, Cisco Secure Access","cost_model":"Quote-based subscription/licence + appliance/support; Meraki public SKUs via partners, enterprise pricing varies by platform and term.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US). Extensive UK channel; Catalyst and Meraki widely delivered as UK managed services.","capabilities":{"f01_fully_managed_service":"not_primary","f02_diy_self_managed_model":"yes","f03_co_managed_service":"partial","f04_multi_tenant_msp_white_label_support":"yes","f05_professional_services_and_migration_support":"partial","f06_last_mile_circuit_management":"partner_integrated","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_primary","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"partial","f22_regional_breakout_and_data_residency":"yes","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"partial","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"yes","f40_managed_service_assurance":"not_primary"},"deployment_speed":"weeks","regions":{"uk_ireland":"yes","europe":"yes","north_america":"yes","asia_pacific":"yes","middle_east_africa":"yes","latin_america":"yes","china_mainland":"partial"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"partial","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"yes","note":"AI Assistant across Catalyst and Meraki dashboards; predictive path analytics; Talos-backed security AI."},"resilience":{"disaster_recovery":"yes","note":"Multi-region controllers, HA edge pairs and SSE redundancy via Cisco Secure Access."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"yes","small_business":"partial"},"pricing_units":["per_site","per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"partial","google_workspace":"partial"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"partial","android":"partial","linux":"partial","chromeos":"not_confirmed","agentless":"partial"},"pop_count":null,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/cisco/","shortlist_summary":"Cisco’s own materials describe SASE explicitly as ‘a journey - you can start with SD-WAN or SSE and converge over time’, which is a different pitch to Cato’s, Zscaler’s, Netskope’s or Palo Alto’s single-platform-from-day-one story. In practise, ‘Cisco SASE’ means choosing between Cisco Secure Access (cloud-delivered SSE, evolved from Cisco Umbrella), Cisco Catalyst SD-WAN (the enterprise-grade fabric, formerly Viptela) or Meraki SD-WAN (the simpler, cloud-first option), and Cisco Secure Connect (a turnkey bundle of Secure Access plus Meraki SD-WAN specifically).","key_differentiators":["Broadest platform portfolio in the category, covering Catalyst SD-WAN for enterprise WAN, Meraki MX for cloud-managed branch, and Cisco Secure Access for converged SASE delivery.","Cloud OnRamp provides automated optimisation paths for Microsoft 365, Salesforce, and major cloud providers, with native integration into the Cisco security stack.","Large global partner and integrator ecosystem reduces delivery risk for buyers wanting managed or co-managed delivery."],"best_fit_for":["Enterprises already standardised on Cisco networking who want platform consistency from LAN through WAN to security.","Multinational organisations needing strong vendor presence across regions and a deep partner channel.","Buyers prioritising single-vendor risk consolidation across networking and security."],"watch_outs":["Two distinct SD-WAN product lines (Catalyst and Meraki) means buyers should confirm which fits the target deployment profile and the longer-term roadmap.","Managed delivery is partner-led rather than first-party, so service quality varies meaningfully by integrator.","Private global backbone is not part of the platform; cloud transport relies on internet and partner gateways."],"evidence_coverage_pct":0.9,"last_verified":"2026-09-01","evidence_source_count":49,"independent_evidence_source_count":0,"position":2,"research_metrics":{"supported":28,"partial":4,"partner_delivered":1,"managed_service_dependent":0,"not_primary":3,"unconfirmed":4,"total":40,"reviewed":36,"completeness_percent":90,"completeness":0.9},"proven_evidence_count":28,"gaps":[]},{"slug":"netskope","name":"Netskope","website":"https://www.netskope.com","category":"SSE / SASE platform","product_focus":"Netskope One, Borderless WAN/Infiot heritage","cost_model":"Quote-based subscription; modules commonly priced by users, sites, traffic and security functions.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US). UK NewEdge presence; delivered direct or via UK security MSPs.","capabilities":{"f01_fully_managed_service":"managed_service_dependent","f02_diy_self_managed_model":"yes","f03_co_managed_service":"managed_service_dependent","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"partner_integrated","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"partial","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"partial","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"partial","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"yes","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"yes","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"yes","f40_managed_service_assurance":"partial"},"deployment_speed":"days","regions":{"uk_ireland":"yes","europe":"yes","north_america":"yes","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"partial","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"partial","ai_security_analytics":"yes","ai_assistant":"partial","note":"SkopeAI for data and threat protection; UEBA analytics across users and apps."},"resilience":{"disaster_recovery":"yes","note":"NewEdge private cloud runs full compute in every region; localised failover."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"yes","hospitality_leisure":"partial"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"yes","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"partial","chromeos":"partial","agentless":"yes"},"pop_count":120,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/netskope/","shortlist_summary":"Netskope sits in an interesting middle ground between a pure security-first platform and a fully networked one: unlike the likes of Zscaler, it has invested in its own converged mesh network (NewEdge) and a purpose-built SD-WAN (Borderless SD-WAN, built on the 2022 Infiot acquisition), so the ‘security company bolting on networking’ story is a few years further along than Zscaler’s; unlike Cato, that network is built on peering and interconnects across 67 regions rather than an owned private backbone.","key_differentiators":["Strong CASB heritage; widely recognised as a leading SSE vendor for SaaS-heavy environments.","Borderless WAN (from the Infiot acquisition) extends Netskope into single-vendor SASE for buyers wanting both layers from one platform.","Detailed SaaS application visibility and policy controls."],"best_fit_for":["Enterprises with deep SaaS adoption where CASB and DLP are top procurement priorities.","Buyers comparing single-vendor SASE platforms after starting with SSE.","Organisations selecting Netskope SSE alongside a separate SD-WAN platform via partner integration."],"watch_outs":["Native SD-WAN (Borderless WAN) is newer than dedicated SD-WAN platforms; validate path selection and QoS depth in RFP.","Managed delivery is partner-led; first-party managed service is limited.","Premium pricing with modular structure; full SASE bundle costs can scale meaningfully with users and traffic."],"evidence_coverage_pct":0.9,"last_verified":"2026-09-01","evidence_source_count":45,"independent_evidence_source_count":0,"position":3,"research_metrics":{"supported":27,"partial":6,"partner_delivered":1,"managed_service_dependent":2,"not_primary":0,"unconfirmed":4,"total":40,"reviewed":36,"completeness_percent":90,"completeness":0.9},"proven_evidence_count":27,"gaps":[]},{"slug":"palo-alto-networks","name":"Palo Alto Networks Prisma SASE","website":"https://www.paloaltonetworks.com/sase","category":"SD-WAN / SASE technology vendor","product_focus":"Prisma SD-WAN, Prisma Access, ADEM","cost_model":"Quote-based subscriptions; appliance/ION and Prisma Access/SASE licensing typically priced by users, bandwidth, locations and term.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US). UK Prisma Access presence; delivered direct or via UK partners and carriers.","capabilities":{"f01_fully_managed_service":"managed_service_dependent","f02_diy_self_managed_model":"yes","f03_co_managed_service":"managed_service_dependent","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"partner_integrated","f06_last_mile_circuit_management":"partner_integrated","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"yes","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"partner_integrated","f22_regional_breakout_and_data_residency":"yes","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"yes","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"weeks","regions":{"uk_ireland":"partner_integrated","europe":"yes","north_america":"yes","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"partial"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"yes","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"yes","note":"Precision AI, AIOps for SASE and Strata Copilot."},"resilience":{"disaster_recovery":"yes","note":"Prisma Access multi-region redundancy; ION edge devices deploy in HA pairs."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"partial","professional_services":"yes","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"partial"},"pricing_units":["per_user","per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"yes","google_workspace":"partial"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"partial","android":"partial","linux":"partial","chromeos":"not_confirmed","agentless":"partial"},"pop_count":100,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/palo-alto-prisma-sase/","shortlist_summary":"Palo Alto Networks isn’t just selling SASE, it’s selling one door into a much larger security estate (NGFWs, Prisma Cloud, Cortex XDR/XSIAM, identity security) that most large enterprises already have some footprint in. That shows up directly in its differentiators: it’s one of the few vendors recognised as a Leader in all three of Gartner’s Single-Vendor SASE, SSE and SD-WAN Magic Quadrants simultaneously, and its ‘platformisation’ commercial strategy rewards multi-product commitment with steep discounts.","key_differentiators":["Prisma SASE converges SD-WAN, cloud-delivered security, and digital experience management (ADEM) under a single platform identity.","Strong threat intelligence and security capability inheritance from the wider Palo Alto Networks portfolio.","Often selected by buyers consolidating from multiple security vendors onto a single SASE platform."],"best_fit_for":["Enterprises with mature security operations that want SASE built around a leading security platform rather than a security layer on top of an SD-WAN platform.","Buyers consolidating CASB, SWG, ZTNA and FWaaS onto one vendor for unified policy.","Organisations with global SaaS-heavy traffic patterns that benefit from Prisma Access PoP coverage."],"watch_outs":["Premium pricing relative to firewall-led SD-WAN vendors; commercial model requires careful scoping by users, bandwidth, locations and term.","Managed delivery is via partners (Orange Business, NTT, others); first-party managed service is not the primary model.","Private global backbone is not vendor-owned; cloud transport uses internet and Prisma Access PoPs."],"evidence_coverage_pct":0.9,"last_verified":"2026-09-01","evidence_source_count":41,"independent_evidence_source_count":0,"position":4,"research_metrics":{"supported":29,"partial":2,"partner_delivered":3,"managed_service_dependent":2,"not_primary":0,"unconfirmed":4,"total":40,"reviewed":36,"completeness_percent":90,"completeness":0.9},"proven_evidence_count":29,"gaps":[]},{"slug":"hpe-aruba","name":"HPE Aruba EdgeConnect","website":"https://www.hpe.com/us/en/aruba-edgeconnect-sd-wan.html","category":"SD-WAN / SSE / branch technology vendor","product_focus":"EdgeConnect SD-WAN, Aruba SSE","cost_model":"Quote-based subscription/appliance/support; MSP-managed options available through partners/providers.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US). EdgeConnect delivered in the UK via HPE partners and MSPs.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"partner_integrated","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"yes","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"partial","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"yes","f40_managed_service_assurance":"partial"},"deployment_speed":"days","regions":{"uk_ireland":"not_confirmed","europe":"partial","north_america":"yes","asia_pacific":"partial","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"partial","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"partial","ai_assistant":"yes","note":"Mist AI and Marvis virtual assistant (HPE Juniper); Aruba Central AIOps with EdgeConnect."},"resilience":{"disaster_recovery":"yes","note":"EdgeConnect HA, tunnel bonding and orchestrated failover."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"not_confirmed","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"partial"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"partial","ping":"partial","google_workspace":"partial"},"device_posture":"partial","agent_platforms":{"windows":"yes","macos":"yes","ios":"partial","android":"partial","linux":"partial","chromeos":"not_confirmed","agentless":"partial"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/hpe-aruba-edgeconnect/","shortlist_summary":"HPE Aruba Networking’s SASE platform is a product of acquisition and integration rather than a single, from-scratch build. The SD-WAN engine, EdgeConnect, was built by Silver Peak Systems (founded 2004, first SD-WAN product shipped 2015) and joined HPE’s Aruba business in a $925 million acquisition completed September 2020.","key_differentiators":["EdgeConnect SD-WAN (acquired with Silver Peak) is positioned as the foundation for single-vendor SASE alongside Aruba SSE.","Strong heritage in WAN optimisation and packet-level performance engineering.","Tight integration with the broader Aruba campus and branch portfolio (LAN, Wi-Fi, NAC) for buyers consolidating end-to-end networking."],"best_fit_for":["Enterprises already running Aruba LAN/Wi-Fi who want WAN and SASE under the same operational tooling.","Buyers prioritising application performance and WAN optimisation in addition to standard SD-WAN routing.","Distributed organisations with branch-heavy footprints where Aruba campus presence is already established."],"watch_outs":["Aruba SSE is newer than the SSE leaders (Zscaler, Netskope); buyers wanting best-of-breed SASE should evaluate the SSE capability set carefully.","Managed delivery is partner-led rather than from HPE directly.","Private global backbone is not vendor-owned; SASE transport uses public cloud gateways."],"evidence_coverage_pct":0.75,"last_verified":"2026-09-01","evidence_source_count":37,"independent_evidence_source_count":0,"position":5,"research_metrics":{"supported":26,"partial":3,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":10,"total":40,"reviewed":30,"completeness_percent":75,"completeness":0.75},"proven_evidence_count":26,"gaps":[]},{"slug":"versa-networks","name":"Versa Networks","website":"https://versa-networks.com","category":"SD-WAN / SASE technology vendor","product_focus":"Versa Secure SD-WAN, Versa SASE, VOS","cost_model":"Quote-based subscription; MSP/carrier pricing depends on tenant scale, bandwidth, security package and delivery model.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US). Delivered in the UK through carrier and MSP partners building managed services on Versa.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"yes","f05_professional_services_and_migration_support":"not_confirmed","f06_last_mile_circuit_management":"partner_integrated","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"partial","f22_regional_breakout_and_data_residency":"yes","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"yes","f40_managed_service_assurance":"partial"},"deployment_speed":"weeks","regions":{"uk_ireland":"not_confirmed","europe":"yes","north_america":"yes","asia_pacific":"yes","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"partial","alibaba_cloud":"partial"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"partial","note":"VersaAI with AIOps and GenAI firewall protections."},"resilience":{"disaster_recovery":"yes","note":"Multi-tenant HA head-ends and regional Versa Cloud Gateways."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"partial","manufacturing":"partial","energy_utilities":"partial","government_public_sector":"partial","education":"partial","transport_logistics":"partial","professional_services":"partial","hospitality_leisure":"partial"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"partial","ping":"partial","google_workspace":"partial"},"device_posture":"partial","agent_platforms":{"windows":"yes","macos":"yes","ios":"partial","android":"partial","linux":"partial","chromeos":"not_confirmed","agentless":"partial"},"pop_count":90,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/versa-networks/","shortlist_summary":"Versa Networks built its SASE platform around a single-vendor, single-operating-system architecture from an early starting point - the company was founded in 2012, before the SASE category itself existed, on the thesis that legacy hardware and static WAN architectures were holding enterprises back from the cloud. That heritage shows up directly in VersaONE’s design: one operating system (VOS), one console, one policy engine and one data lake, with a single-pass parallel-processing architecture built to avoid the latency penalty of chaining separate security functions together.","key_differentiators":["Multi-tenancy from the ground up, making Versa a common choice for service providers and carriers building managed SD-WAN and SASE platforms.","Versa Operating System (VOS) provides a converged networking and security software stack across cloud and on-premises delivery.","Often the underlying platform when buyers select a managed SD-WAN service from a carrier or MSP."],"best_fit_for":["Service providers, carriers and MSPs building white-label managed SD-WAN or SASE services.","Enterprises consuming Versa indirectly through a managed provider (e.g. Verizon, Orange).","Buyers who want platform flexibility across cloud-delivered, on-premises and hybrid delivery models."],"watch_outs":["Less well-known to enterprise buyers as a direct purchase; most enterprise consumption is via service providers.","Buyers should confirm exactly which managed provider is delivering the platform and what the operational RACI looks like.","Brand recognition trails Cisco, Palo Alto and Fortinet in enterprise procurement processes."],"evidence_coverage_pct":0.75,"last_verified":"2026-09-01","evidence_source_count":29,"independent_evidence_source_count":0,"position":6,"research_metrics":{"supported":25,"partial":4,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":10,"total":40,"reviewed":30,"completeness_percent":75,"completeness":0.75},"proven_evidence_count":25,"gaps":[]},{"slug":"fortinet","name":"Fortinet FortiSASE","website":"https://www.fortinet.com/products/sd-wan","category":"Secure SD-WAN / SASE technology vendor","product_focus":"FortiGate Secure SD-WAN, FortiManager, FortiSASE","cost_model":"Quote-based appliances/subscriptions/support; public reseller pricing exists for hardware but enterprise managed/SASE bundles require quote.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US). Strong UK channel and FortiSASE PoPs; widely delivered as a UK managed service by BT, Vodafone and UK MSPs.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"partner_integrated","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"partial","f22_regional_breakout_and_data_residency":"yes","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"yes","f40_managed_service_assurance":"partner_integrated"},"deployment_speed":"days","regions":{"uk_ireland":"yes","europe":"yes","north_america":"yes","asia_pacific":"yes","middle_east_africa":"yes","latin_america":"yes","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"yes","alibaba_cloud":"partial"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"yes","ai_assistant":"yes","note":"FortiAI assistant, FortiAIOps and FortiGuard AI-powered security services."},"resilience":{"disaster_recovery":"yes","note":"HA clustering, multi-hub designs and FortiSASE regional PoPs."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"not_confirmed","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"yes","small_business":"yes"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"partial","ping":"partial","google_workspace":"partial"},"device_posture":"partial","agent_platforms":{"windows":"yes","macos":"yes","ios":"partial","android":"partial","linux":"partial","chromeos":"not_confirmed","agentless":"partial"},"pop_count":170,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/fortinet-fortisase/","shortlist_summary":"FortiSASE runs the same FortiOS operating system, and the same single-pass inspection engine, that has powered Fortinet’s physical FortiGate firewalls for over two decades. That’s a meaningfully different starting point from building a SASE platform natively for the cloud from scratch - the practical result is that FortiGate customers get a consistent policy and inspection model whether traffic is inspected on-premises or in a FortiSASE cloud point of presence, and Fortinet’s own commercial materials lean hard into a ‘Security Fabric’ discount for exactly these existing customers.","key_differentiators":["Native convergence of networking and security on a single operating system (FortiOS) across FortiGate edge, FortiManager and FortiSASE.","Strong story for buyers who want secure SD-WAN and SASE delivered from one vendor platform rather than assembled from partner integrations.","Wide appliance range covering everything from small branch to large data centre, with public hardware pricing visible through resellers."],"best_fit_for":["Security-first buyers who want SD-WAN and SASE under a single policy and log domain.","Mid-market and enterprise organisations that already run FortiGate firewalls and want to extend into SD-WAN and cloud-delivered security.","Buyers comparing single-vendor SASE platforms (alongside Cato, Palo Alto, Cisco) for converged operations."],"watch_outs":["Like Cisco, managed delivery is via partners rather than Fortinet directly; underlay and field operations are not owned by the vendor.","Buyers wanting a private global backbone will need to validate FortiSASE PoP coverage against their geographic footprint.","Best-of-breed buyers may prefer integrating FortiGate SD-WAN with a separate SSE platform (Zscaler, Netskope) rather than adopting full FortiSASE."],"evidence_coverage_pct":0.7,"last_verified":"2026-09-01","evidence_source_count":35,"independent_evidence_source_count":0,"position":7,"research_metrics":{"supported":24,"partial":2,"partner_delivered":2,"managed_service_dependent":0,"not_primary":0,"unconfirmed":12,"total":40,"reviewed":28,"completeness_percent":70,"completeness":0.7},"proven_evidence_count":24,"gaps":[]},{"slug":"zscaler","name":"Zscaler","website":"https://www.zscaler.com","category":"SSE / SASE platform","product_focus":"ZIA, ZPA, ZDX, Zero Trust SASE","cost_model":"Quote-based subscription; typically per-user/workload/location modules; SD-WAN integrations may add partner/vendor cost.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US). UK PoPs in the Zero Trust Exchange; delivered direct or via UK partners and carriers.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"partial","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"partner_integrated","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"partial","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"partial","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"partial","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"yes","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"not_primary","f22_regional_breakout_and_data_residency":"yes","f23_multi_cloud_transit_fabric":"yes","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"yes","f40_managed_service_assurance":"partial"},"deployment_speed":"days","regions":{"uk_ireland":"partial","europe":"yes","north_america":"yes","asia_pacific":"yes","middle_east_africa":"partial","latin_america":"not_confirmed","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"partial","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"partial","ai_security_analytics":"yes","ai_assistant":"yes","note":"AI-powered phishing and C2 detection; ZDX Copilot for digital experience."},"resilience":{"disaster_recovery":"yes","note":"160+ PoP cloud with service continuity features across regions."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"not_confirmed","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"yes","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"partial","chromeos":"partial","agentless":"yes"},"pop_count":160,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/zscaler/","shortlist_summary":"Zscaler is the vendor that effectively created the SSE category, and it’s still the one most competitors get measured against when it comes to sheer scale and security depth - the Zero Trust Exchange runs across 150+ data centres, processes over 400 billion transactions a day, and holds FedRAMP High authorisation for ZIA and ZPA (other SASE-class vendors also hold FedRAMP High or equivalent for their own components). If you’re a security-first buyer looking to retire VPN concentrators and stitch SWG, CASB, DLP and ZTNA together under one console, Zscaler is one of the most proven single-vendor routes to get there.","key_differentiators":["Category leader in SSE with ZIA, ZPA and ZDX; widely adopted as the security layer in best-of-breed SASE architectures.","Strong ecosystem of SD-WAN partners (Cisco, others) for buyers wanting Zscaler security with a separate SD-WAN platform.","Mature Zero Trust platform with substantial enterprise deployment history."],"best_fit_for":["Enterprises selecting best-of-breed SSE alongside a separate SD-WAN platform.","Security-driven SASE strategies where the SSE layer is the primary architectural decision.","Buyers consolidating multiple security point solutions onto a single SSE vendor."],"watch_outs":["Historically SSE-led; native SD-WAN capability is less mature than dedicated SD-WAN platforms (validate path selection, QoS and packet loss in RFP).","Premium pricing; typically per-user/workload/location with security modules adding cost.","Buyers needing one vendor for both SD-WAN and security may prefer a converged platform (Cato, FortiSASE, Prisma)."],"evidence_coverage_pct":0.7,"last_verified":"2026-09-01","evidence_source_count":59,"independent_evidence_source_count":0,"position":8,"research_metrics":{"supported":19,"partial":7,"partner_delivered":1,"managed_service_dependent":0,"not_primary":1,"unconfirmed":12,"total":40,"reviewed":28,"completeness_percent":70,"completeness":0.7},"proven_evidence_count":19,"gaps":[]},{"slug":"check-point","name":"Check Point","website":"https://www.checkpoint.com/harmony/sase","category":"SASE / security vendor","product_focus":"Check Point Harmony SASE / Check Point SASE","cost_model":"Quote-based subscription; Microsoft marketplace listing exists but enterprise deployments normally require quote.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (Israel/US). Harmony SASE UK presence; delivered via UK security partners.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"partner_integrated","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"partial","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"partial","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"partial","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"yes","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"partial","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"yes","f40_managed_service_assurance":"partial"},"deployment_speed":"days","regions":{"uk_ireland":"partial","europe":"yes","north_america":"yes","asia_pacific":"yes","middle_east_africa":"partial","latin_america":"partial","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"partial","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"partial","ai_security_analytics":"yes","ai_assistant":"partial","note":"ThreatCloud AI shared threat intelligence; Infinity AI Copilot for security operations."},"resilience":{"disaster_recovery":"partial","note":"Cloud-delivered Harmony SASE with regional redundancy; on-prem HA via Quantum clusters."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"partial","professional_services":"partial","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"partial","small_business":"yes"},"pricing_units":["per_user","per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"partial","ping":"partial","google_workspace":"partial"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"partial","android":"partial","linux":"partial","chromeos":"not_confirmed","agentless":"partial"},"pop_count":80,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/checkpoint/","shortlist_summary":"Check Point’s SASE platform has been through two names in under three years. The underlying technology began life as Perimeter 81, an independent Israeli SSE/ZTNA vendor founded in 2018 that had grown to more than 3,000 customers and a Forrester Zero Trust Wave recognition before Check Point Software Technologies - the much larger, long-established Israeli cybersecurity vendor behind Check Point Firewall-1, founded in 1993 - acquired it for approximately $490 million in a deal announced September 2023.","key_differentiators":["Harmony SASE combines Check Point security heritage with cloud-delivered SASE and optimised SD-WAN performance.","Strong story for organisations already running Check Point firewalls who want to extend into SASE.","Available via Microsoft Azure marketplace for buyers wanting consolidated cloud procurement."],"best_fit_for":["Existing Check Point customers extending firewall investment into SD-WAN and SASE.","Mid-market enterprises consolidating security and SD-WAN under one vendor.","Buyers prioritising security maturity over network-platform maturity."],"watch_outs":["Native SD-WAN capabilities (path selection, QoS, packet loss remediation) have limited public evidence relative to SD-WAN-led vendors.","Smaller SD-WAN deployment footprint than category leaders; validate scale references.","Managed delivery is partner-led."],"evidence_coverage_pct":0.65,"last_verified":"2026-09-01","evidence_source_count":28,"independent_evidence_source_count":0,"position":9,"research_metrics":{"supported":18,"partial":7,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":14,"total":40,"reviewed":26,"completeness_percent":65,"completeness":0.65},"proven_evidence_count":18,"gaps":[]},{"slug":"forcepoint","name":"Forcepoint","website":"https://www.forcepoint.com/product/secure-sd-wan","category":"Security / secure SD-WAN vendor","product_focus":"Forcepoint FlexEdge Secure SD-WAN","cost_model":"Quote-based appliances/software/subscriptions; managed SD-WAN positioned but pricing public transparency limited.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US). UK delivery via security partners; government and defence heritage suits UK public sector.","capabilities":{"f01_fully_managed_service":"not_primary","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"partial","f06_last_mile_circuit_management":"partner_integrated","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"partial","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"yes","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"partial","f27_integrated_next_generation_firewall":"yes","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"partial","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"partial","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"days","regions":{"uk_ireland":"partner_integrated","europe":"partner_integrated","north_america":"partner_integrated","asia_pacific":"partner_integrated","middle_east_africa":"partner_integrated","latin_america":"partner_integrated","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"partial","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"partial","ai_security_analytics":"yes","ai_assistant":"partial","note":"AI Mesh for data security; risk-adaptive protection scores user behaviour in real time."},"resilience":{"disaster_recovery":"partial","note":"Cloud SSE with regional redundancy; Secure SD-WAN appliances deploy in HA pairs."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"partial","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"partial","small_business":"not_confirmed"},"pricing_units":["per_user","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"partial","ping":"partial","google_workspace":"partial"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"partial","android":"partial","linux":"partial","chromeos":"not_confirmed","agentless":"partial"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/forcepoint/","shortlist_summary":"Forcepoint’s identity traces back to Websense, founded in 1994, and its whole platform is built around a data-first philosophy rather than a network- or device-first one - the pitch is that policy should follow the data itself, not the network path or the device it happens to be on. That heritage shows up as real, credible analyst recognition specifically for data loss prevention: Frost & Sullivan’s Global DLP Company of the Year for two consecutive years, an IDC MarketScape Leader placement for worldwide DLP in 2025, and a Forrester Wave Strong Performer placement for data security platforms in Q1 2025.","key_differentiators":["FlexEdge Secure SD-WAN combines secure SD-WAN with strong DLP and data security heritage from the wider Forcepoint portfolio.","MultiLink resilience and zero-touch deployment with cloud central management.","Strong story for buyers prioritising data security and DLP as a procurement criterion."],"best_fit_for":["Enterprises with strong data protection and DLP requirements (regulated industries, government).","Organisations wanting secure SD-WAN where data security is the primary decision driver.","Buyers consolidating DLP with SD-WAN under one vendor."],"watch_outs":["Smaller SD-WAN market presence than the leading platforms.","Full SASE platform completeness has partial public evidence; SSE module depth should be confirmed.","Managed delivery is partner-led; co-managed and white-label support require partner validation."],"evidence_coverage_pct":0.65,"last_verified":"2026-09-01","evidence_source_count":44,"independent_evidence_source_count":0,"position":10,"research_metrics":{"supported":16,"partial":8,"partner_delivered":1,"managed_service_dependent":0,"not_primary":1,"unconfirmed":14,"total":40,"reviewed":26,"completeness_percent":65,"completeness":0.65},"proven_evidence_count":16,"gaps":[]},{"slug":"arista-velocloud","name":"VeloCloud","website":"https://www.arista.com","category":"SD-WAN technology vendor","product_focus":"VeloCloud SD-WAN portfolio now under Arista","cost_model":"Quote-based edge subscriptions/appliances/support; managed services commonly delivered by carriers/MSPs.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US). VeloCloud delivered in the UK through carriers including BT and Vodafone.","capabilities":{"f01_fully_managed_service":"partner_integrated","f02_diy_self_managed_model":"yes","f03_co_managed_service":"partner_integrated","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"partner_integrated","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"yes","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"partner_integrated","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"partner_integrated","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"partner_integrated","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"partner_integrated","f32_casb_capability":"partner_integrated","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"partner_integrated","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"yes","f40_managed_service_assurance":"managed_service_dependent"},"deployment_speed":"days","regions":{"uk_ireland":"partial","europe":"yes","north_america":"yes","asia_pacific":"yes","middle_east_africa":"partial","latin_america":"not_confirmed","china_mainland":"partial"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"partial","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"partial","ai_assistant":"partial","note":"DMPO path analytics with Arista AVA AIOps; assistant capability maturing post acquisition."},"resilience":{"disaster_recovery":"yes","note":"700+ gateways across 200+ PoPs give multi-gateway failover; HA edge pairs supported."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"partial","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"partial","ping":"partial","google_workspace":"partial"},"device_posture":"partial","agent_platforms":{"windows":"yes","macos":"yes","ios":"partial","android":"partial","linux":"partial","chromeos":"not_confirmed","agentless":"partial"},"pop_count":150,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/velocloud/","shortlist_summary":"VeloCloud was founded in 2012 as a cloud-delivered SD-WAN pioneer, acquired by VMware in 2017 for approximately $336 million, then came under Broadcom’s ownership when Broadcom completed its roughly $69 billion acquisition of VMware in 2023. Under Broadcom, the product was paired with Symantec’s security stack (Broadcom separately owns Symantec’s enterprise security business) into a single-vendor offering called ‘VMware VeloCloud SASE, secured by Symantec’, announced February 2024.","key_differentiators":["VeloCloud was an early SD-WAN platform with strong cloud-delivered gateway architecture; now under Arista following the 2025 acquisition.","Multi-tenant design has made VeloCloud common in carrier and MSP managed services.","Application-aware routing and dynamic path selection are mature capabilities with substantial deployment history."],"best_fit_for":["Enterprises consuming VeloCloud through a managed service provider (Vodafone UK, others).","Service providers running multi-tenant SD-WAN at scale.","Buyers comfortable with a platform in transition under new ownership."],"watch_outs":["Platform is mid-transition from VMware/Broadcom to Arista; product roadmap, naming and integration story will evolve.","Security and SASE capabilities are largely partner-integrated rather than native.","Direct enterprise sales motion is less established than legacy vendors; most consumption is via managed providers."],"evidence_coverage_pct":0.65,"last_verified":"2026-09-01","evidence_source_count":24,"independent_evidence_source_count":0,"position":11,"research_metrics":{"supported":15,"partial":1,"partner_delivered":9,"managed_service_dependent":1,"not_primary":0,"unconfirmed":14,"total":40,"reviewed":26,"completeness_percent":65,"completeness":0.65},"proven_evidence_count":15,"gaps":[]},{"slug":"aryaka","name":"Aryaka","website":"https://www.aryaka.com","category":"Managed SD-WAN / SASE provider","product_focus":"Aryaka Unified SASE, SmartCONNECT, private core","cost_model":"Quote-based managed service; pricing normally depends on sites, bandwidth, regions, security stack and optimisation.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US). UK PoP on the private core; managed-service delivery into the UK.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"partial","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"partner_integrated","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"yes","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"yes","f33_data_loss_prevention":"yes","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"yes","f40_managed_service_assurance":"partial"},"deployment_speed":"days","regions":{"uk_ireland":"yes","europe":"yes","north_america":"yes","asia_pacific":"yes","middle_east_africa":"yes","latin_america":"yes","china_mainland":"partner_integrated"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"partial","alibaba_cloud":"partial"},"ai_capability":{"ai_driven_operations":"partial","ai_security_analytics":"partial","ai_assistant":"partial","note":"AI Observe anomaly detection on the private core; AI Perform for application optimisation."},"resilience":{"disaster_recovery":"yes","note":"Owned Layer 2 core with 40+ PoPs and managed middle mile; built-in link and PoP failover."},"sectors":{"healthcare":"partial","financial_services":"yes","retail_ecommerce":"partial","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"yes","small_business":"partial"},"pricing_units":["per_site","per_bandwidth","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"yes","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"partial","chromeos":"partial","agentless":"yes"},"pop_count":40,"sla_availability_pct":99.999,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/aryaka/","shortlist_summary":"Aryaka is one of the older, more established names in this category - founded 2009, more than 15 years before ‘SASE’ existed as an analyst-defined term, originally as a WAN optimisation and application-acceleration company before evolving into what it now calls ‘Unified SASE as a Service’. That specific phrase matters: Aryaka positions itself, and is described by independent commentary, as the first company to deliver SASE as a fully managed service rather than a self-managed software platform, built around a distinctive single-pass architecture (OnePASS) running over an owned, global private core network spanning more than 40 points of presence across six continents.","key_differentiators":["Unified SASE delivered as a managed service from end to end, including the private global core network and WAN optimisation.","Strong story for global organisations needing predictable performance between regions without internet variability.","Embedded WAN optimisation differentiates from pure cloud-delivered SASE platforms."],"best_fit_for":["Global enterprises wanting SASE delivered as a fully managed service rather than as DIY platform plus tools.","Buyers who need consistent inter-regional performance for chatty applications.","Organisations preferring a vendor that owns the platform and the managed service rather than coordinating multiple parties."],"watch_outs":["Smaller PoP footprint and partner ecosystem than the hyperscale SASE vendors; coverage must match your geographic profile.","DIY/self-managed model has limited evidence; this is a managed-service-first proposition.","CASB and DLP capabilities have partial public evidence; depth should be confirmed in RFP."],"evidence_coverage_pct":0.6,"last_verified":"2026-09-01","evidence_source_count":26,"independent_evidence_source_count":0,"position":12,"research_metrics":{"supported":20,"partial":3,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":16,"total":40,"reviewed":24,"completeness_percent":60,"completeness":0.6},"proven_evidence_count":20,"gaps":[]},{"slug":"cloudflare-one","name":"Cloudflare One","website":"https://www.cloudflare.com/sase","category":"SASE / Zero Trust / network services","product_focus":"Cloudflare WAN / Magic WAN / Zero Trust","cost_model":"Quote-based enterprise pricing; some Zero Trust user tiers public, Magic WAN enterprise requires quote.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US). Multiple UK edge locations; self-serve or via UK partners.","capabilities":{"f01_fully_managed_service":"not_primary","f02_diy_self_managed_model":"yes","f03_co_managed_service":"partial","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"partner_integrated","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"partial","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"partial","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"yes","f16_mpls_coexistence_and_migration":"partial","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"partial","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"yes","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"yes","f40_managed_service_assurance":"partial"},"deployment_speed":"hours","regions":{"uk_ireland":"yes","europe":"yes","north_america":"yes","asia_pacific":"yes","middle_east_africa":"yes","latin_america":"yes","china_mainland":"partner_integrated"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"partial","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"partial","ai_security_analytics":"partial","ai_assistant":"yes","note":"AI assistant and security analytics across the global edge; Workers AI platform adjacency."},"resilience":{"disaster_recovery":"yes","note":"Anycast edge across 300+ cities removes single PoP dependency; automatic re-routing."},"sectors":{"healthcare":"partial","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"partial","transport_logistics":"yes","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"yes","small_business":"yes"},"pricing_units":["per_user","bundle","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"yes","ping":"yes","google_workspace":"yes"},"device_posture":"yes","agent_platforms":{"windows":"yes","macos":"yes","ios":"yes","android":"yes","linux":"partial","chromeos":"partial","agentless":"yes"},"pop_count":300,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/cloudflare-one/","shortlist_summary":"Rather than building a security platform and adding network reach, or building a network and adding security, Cloudflare started as one of the internet’s largest content-delivery and DDoS-mitigation networks (founded 2009, public since 2019 on NYSE: NET) and extended that same global infrastructure - every product running in every data centre, not routed to a handful of regional security hubs - into a full SASE platform.","key_differentiators":["Cloudflare global edge network provides one of the largest PoP footprints in the category for SASE traffic.","Strong Zero Trust and SWG capability inheritance from the wider Cloudflare security platform.","Magic WAN Connector provides simplified branch connectivity into the Cloudflare One platform."],"best_fit_for":["Buyers already using Cloudflare for DDoS protection, CDN or Zero Trust who want to extend into WAN.","Organisations prioritising global PoP coverage and edge performance for SaaS access.","Mid-market buyers attracted to Cloudflare One pricing transparency for Zero Trust user tiers."],"watch_outs":["SD-WAN capabilities (path selection, QoS, packet loss remediation) have limited public evidence compared to SD-WAN-first vendors.","Less mature for very large branch estates with complex underlay requirements.","Managed and co-managed service models are partner-led; this is primarily a self-service platform."],"evidence_coverage_pct":0.575,"last_verified":"2026-09-01","evidence_source_count":47,"independent_evidence_source_count":0,"position":13,"research_metrics":{"supported":14,"partial":7,"partner_delivered":1,"managed_service_dependent":0,"not_primary":1,"unconfirmed":17,"total":40,"reviewed":23,"completeness_percent":58,"completeness":0.575},"proven_evidence_count":14,"gaps":[]},{"slug":"ntt","name":"NTT DATA","website":"https://www.nttglobal.net/services/sd-wan","category":"Global managed network provider","product_focus":"Managed SD-WAN, Managed SASE, Palo Alto/Zscaler partnerships","cost_model":"Quote-based managed service; global design/delivery/support, SD-WAN vendor and security stack determine cost.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"uk_entity","uk_basis":"UK contracting entity (NTT DATA UK) of a Japanese parent, with UK delivery and operations.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"partial","f03_co_managed_service":"partial","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"yes","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"yes","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"yes","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"yes","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"partial","f40_managed_service_assurance":"yes"},"deployment_speed":"months","regions":{"uk_ireland":"yes","europe":"yes","north_america":"yes","asia_pacific":"yes","middle_east_africa":"yes","latin_america":"partial","china_mainland":"yes"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"partial","alibaba_cloud":"partial"},"ai_capability":{"ai_driven_operations":"partial","ai_security_analytics":"partial","ai_assistant":"managed_service_dependent","note":"Predictive analytics within the Managed Network Services platform."},"resilience":{"disaster_recovery":"yes","note":"Global Tier 1 IP backbone with multi-vendor managed redundancy."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"partial","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"managed_service_dependent","okta":"managed_service_dependent","ping":"managed_service_dependent","google_workspace":"managed_service_dependent"},"device_posture":"managed_service_dependent","agent_platforms":{"windows":"managed_service_dependent","macos":"managed_service_dependent","ios":"managed_service_dependent","android":"managed_service_dependent","linux":"managed_service_dependent","chromeos":"managed_service_dependent","agentless":"managed_service_dependent"},"pop_count":75,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"managed_service_dependent","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/ntt-data/","shortlist_summary":"NTT DATA is a massive, globally-established IT services and network provider, founded in Japan in 1988 as a spinoff of Nippon Telegraph and Telephone (NTT), and now operating in more than 70 countries with approximately 190,000 employees. A significant, current corporate event is worth understanding first: on 8 May 2025, NTT, Inc. 75% acceptance, and following shareholder approval on 29 August 2025, NTT DATA Group was formally delisted from the Tokyo Stock Exchange on 26 September 2025, becoming a wholly-owned subsidiary of NTT, Inc.","key_differentiators":["24x7 managed SD-WAN delivery via global operations centres with strong portal visibility.","Managed SASE partnership with Palo Alto Networks (Prisma SASE) for buyers wanting that platform under managed service.","Strong global delivery footprint including APAC, EMEA and Americas."],"best_fit_for":["Multinational enterprises wanting truly global managed delivery with consistent operations across regions.","Buyers wanting Prisma SASE consumed as a fully managed service.","Organisations prioritising managed service maturity and global SOC/NOC depth."],"watch_outs":["Platform fit depends on which vendor is being proposed (Palo Alto, Zscaler, others); evaluate platform independently.","Commercial complexity is meaningful at global scale; ensure scope and RACI are explicit.","DIY/self-managed model is not the primary positioning."],"evidence_coverage_pct":0.575,"last_verified":"2026-09-01","evidence_source_count":22,"independent_evidence_source_count":0,"position":14,"research_metrics":{"supported":20,"partial":3,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":17,"total":40,"reviewed":23,"completeness_percent":58,"completeness":0.575},"proven_evidence_count":20,"gaps":[]},{"slug":"att-business","name":"AT&T Business","website":"https://www.business.att.com/products/sd-wan.html","category":"Global carrier managed SD-WAN / SASE provider","product_focus":"Managed SD-WAN portfolio, AT&T SASE with partners/Fortinet","cost_model":"Quote-based managed service; access circuits, security, platform and managed service wrapped into term contract.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"global_managed","uk_basis":"No UK HQ (US). UK sites served through AT&T's global managed network and partners, not UK-native infrastructure.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"partial","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"yes","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"yes","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"partial","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"partial","f40_managed_service_assurance":"partial"},"deployment_speed":"months","regions":{"uk_ireland":"yes","europe":"yes","north_america":"yes","asia_pacific":"yes","middle_east_africa":"yes","latin_america":"yes","china_mainland":"partial"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"managed_service_dependent","ai_security_analytics":"managed_service_dependent","ai_assistant":"managed_service_dependent","note":"AI capability depends on the underlying vendor platform chosen (Cisco, Fortinet, VeloCloud)."},"resilience":{"disaster_recovery":"managed_service_dependent","note":"Resilience designed per contract; dual-vendor and wireless backup options via managed service."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"not_confirmed","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"yes","small_business":"yes"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"managed_service_dependent","okta":"managed_service_dependent","ping":"managed_service_dependent","google_workspace":"managed_service_dependent"},"device_posture":"managed_service_dependent","agent_platforms":{"windows":"managed_service_dependent","macos":"managed_service_dependent","ios":"managed_service_dependent","android":"managed_service_dependent","linux":"managed_service_dependent","chromeos":"managed_service_dependent","agentless":"managed_service_dependent"},"pop_count":1600,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"managed_service_dependent","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/att/","shortlist_summary":"AT&T is one of the largest telecommunications companies in the United States, reporting trailing-twelve-month revenue of approximately $120.7 billion as of Q1 2026, with fixed-line enterprise services (including the SD-WAN and SASE proposition covered in this profile) accounting for roughly 14% of total revenue. AT&T’s SASE strategy is built on two named, current, dated technology partnerships.","key_differentiators":["Major US carrier-led managed SD-WAN portfolio with multi-vendor platform options (including Fortinet for AT&T SASE).","Strong North American underlay ownership with global delivery via international partnerships.","AT&T SASE unifies SD-WAN with network security as a converged managed service."],"best_fit_for":["US-headquartered enterprises wanting integrated carrier-led SD-WAN and SASE.","Buyers wanting Fortinet SASE delivered as a managed service rather than DIY.","Organisations prioritising carrier-grade SLAs and managed service maturity."],"watch_outs":["Underlying platform varies by service tier; buyers should confirm which platform supports the proposed scope.","International delivery depth depends on partnerships outside North America.","Commercial structure typically bundles access, security and platform; line-item costing requires explicit RFP."],"evidence_coverage_pct":0.55,"last_verified":"2026-09-01","evidence_source_count":18,"independent_evidence_source_count":1,"position":15,"research_metrics":{"supported":16,"partial":6,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":18,"total":40,"reviewed":22,"completeness_percent":55,"completeness":0.55},"proven_evidence_count":16,"gaps":[]},{"slug":"colt-technology-services","name":"Colt Technology Services","website":"https://www.colt.net/products/networking/sd-wan","category":"Enterprise managed SD-WAN / connectivity provider","product_focus":"Colt SD WAN & SASE, managed/co-managed","cost_model":"Quote-based managed service; access, SD-WAN/SASE design, data sovereignty and service options drive pricing.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_hq","uk_basis":"UK headquartered (London). UK contracting entity with owned UK metro fibre and UK support.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"partial","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"yes","f05_professional_services_and_migration_support":"partial","f06_last_mile_circuit_management":"yes","f07_lifecycle_management":"not_confirmed","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"partial","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"yes","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"partial","f40_managed_service_assurance":"partial"},"deployment_speed":"months","regions":{"uk_ireland":"yes","europe":"yes","north_america":"yes","asia_pacific":"yes","middle_east_africa":"partial","latin_america":"partial","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"partial","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"managed_service_dependent","ai_security_analytics":"managed_service_dependent","ai_assistant":"managed_service_dependent","note":"Depends on vendor platform (Versa, VeloCloud); Colt On Demand portal adds analytics."},"resilience":{"disaster_recovery":"yes","note":"Owned Colt IQ Network fibre with diverse routing and on-demand failover."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"partial","energy_utilities":"not_confirmed","government_public_sector":"partial","education":"yes","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"partial"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"yes","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"managed_service_dependent","okta":"managed_service_dependent","ping":"managed_service_dependent","google_workspace":"managed_service_dependent"},"device_posture":"managed_service_dependent","agent_platforms":{"windows":"managed_service_dependent","macos":"managed_service_dependent","ios":"managed_service_dependent","android":"managed_service_dependent","linux":"managed_service_dependent","chromeos":"managed_service_dependent","agentless":"managed_service_dependent"},"pop_count":null,"sla_availability_pct":99.9,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"yes","named_tam":"yes"},"logging":{"siem_export":"managed_service_dependent","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/colt/","shortlist_summary":"Colt Technology Services is a long-established, European-anchored network operator, founded in 1992 as City of London Telecommunications and headquartered in London. Since 2015 Colt has been privately owned by Fidelity International (Eight Roads’ current specific role to be reconfirmed), and its network footprint expanded materially through a significant acquisition of Lumen Technologies’ Europe, Middle East and Africa business for $1.8 billion, completed November 2022, reinforcing Colt’s own confirmed network scale of more than 30 countries, more than 50 metropolitan area networks, and more than 32,000 on-net buildings, all delivered over its own named Colt IQ Network platform.","key_differentiators":["SD-WAN and SASE with strong European data sovereignty positioning.","Managed and co-managed delivery options with management portal access.","Enterprise-grade connectivity heritage with substantial European network ownership."],"best_fit_for":["European enterprises prioritising data residency, sovereignty and regulatory alignment.","Buyers wanting genuine co-managed delivery rather than pure managed or pure DIY.","Organisations consolidating European connectivity with SD-WAN under one provider."],"watch_outs":["Global delivery depth outside Europe is less prominent than the largest global carriers.","CASB and DLP have partial public evidence; SSE platform partner choice should be confirmed.","Underlying SD-WAN platform should be explicitly confirmed in RFP."],"evidence_coverage_pct":0.55,"last_verified":"2026-09-01","evidence_source_count":14,"independent_evidence_source_count":1,"position":16,"research_metrics":{"supported":17,"partial":5,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":18,"total":40,"reviewed":22,"completeness_percent":55,"completeness":0.55},"proven_evidence_count":17,"gaps":[]},{"slug":"comcast-business","name":"Comcast Business","website":"https://business.comcast.com","category":"Managed SD-WAN / SASE provider","product_focus":"Comcast Business SASE, Masergy AIOps heritage","cost_model":"Quote-based managed/co-managed service; access, SD-WAN, SASE and SOC/AIOps elements drive cost.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"No UK HQ (US). UK delivery via the Masergy global platform and partners.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"partial","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"partial","f06_last_mile_circuit_management":"yes","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"partial","f22_regional_breakout_and_data_residency":"yes","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"partial","f40_managed_service_assurance":"partial"},"deployment_speed":"weeks","regions":{"uk_ireland":"partial","europe":"partial","north_america":"yes","asia_pacific":"partial","middle_east_africa":"partial","latin_america":"partial","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"partial","ai_security_analytics":"partial","ai_assistant":"not_confirmed","note":"Masergy AIOps digital twin for managed customers; predictive fault analytics."},"resilience":{"disaster_recovery":"yes","note":"4G LTE backup widely bundled; Masergy global core adds route diversity."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"yes","small_business":"yes"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"managed_service_dependent","okta":"managed_service_dependent","ping":"managed_service_dependent","google_workspace":"managed_service_dependent"},"device_posture":"managed_service_dependent","agent_platforms":{"windows":"managed_service_dependent","macos":"managed_service_dependent","ios":"managed_service_dependent","android":"managed_service_dependent","linux":"managed_service_dependent","chromeos":"managed_service_dependent","agentless":"managed_service_dependent"},"pop_count":null,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"managed_service_dependent","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/comcastbusiness/","shortlist_summary":"Comcast Business’s managed SD-WAN and SASE proposition traces its specialist technical foundation to Masergy, a managed SD-WAN and SASE vendor founded in 2000 in Plano, Texas, which Comcast Business acquired in 2021 to, in the words of Comcast Business’s then-President Bill Stemper, ‘instantly and dramatically amplify our growth in the global enterprise market’.","key_differentiators":["SASE combining SD-WAN and security available fully managed or co-managed, drawing on Masergy AIOps heritage.","Recognised as a leading managed SD-WAN provider by industry analysts.","Strong North American underlay ownership with international delivery via partners."],"best_fit_for":["North American enterprises wanting managed or co-managed SD-WAN and SASE from a single carrier.","Buyers attracted to the AIOps capabilities inherited from the Masergy acquisition.","Organisations prioritising co-managed delivery with shared operational control."],"watch_outs":["International delivery depth depends on partnerships outside North America.","Underlying platform choice should be confirmed; service depth varies by selected platform.","Commercial model bundles access, SD-WAN, SASE and SOC elements; explicit line-item costing required."],"evidence_coverage_pct":0.55,"last_verified":"2026-09-01","evidence_source_count":12,"independent_evidence_source_count":1,"position":17,"research_metrics":{"supported":15,"partial":7,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":18,"total":40,"reviewed":22,"completeness_percent":55,"completeness":0.55},"proven_evidence_count":15,"gaps":[]},{"slug":"gtt","name":"GTT","website":"https://www.gtt.net/services/secure-networking/managed-sd-wan","category":"Global managed SD-WAN provider","product_focus":"Managed SD-WAN, SASE/SSE, Envision, Tier 1 backbone","cost_model":"Quote-based managed service; GTT public page answers cost only as consultative/requirement-based.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"uk_entity","uk_basis":"UK contracting entity with UK operations on a Tier 1 backbone; UK and EMEA delivery is established.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"partial","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"partial","f06_last_mile_circuit_management":"yes","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"partial","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"yes","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"partial","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"partner_integrated","f35_soc_siem_soar_integration":"partner_integrated","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"partial","f40_managed_service_assurance":"yes"},"deployment_speed":"months","regions":{"uk_ireland":"yes","europe":"yes","north_america":"yes","asia_pacific":"yes","middle_east_africa":"yes","latin_america":"yes","china_mainland":"partial"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"managed_service_dependent","ai_security_analytics":"managed_service_dependent","ai_assistant":"managed_service_dependent","note":"EtherVision portal analytics; platform AI depends on the chosen vendor mix."},"resilience":{"disaster_recovery":"yes","note":"Tier 1 backbone spanning 450+ PoPs with diverse routing."},"sectors":{"healthcare":"partial","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"not_confirmed","government_public_sector":"yes","education":"not_confirmed","transport_logistics":"yes","professional_services":"partial","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"partial","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"managed_service_dependent","okta":"managed_service_dependent","ping":"managed_service_dependent","google_workspace":"managed_service_dependent"},"device_posture":"managed_service_dependent","agent_platforms":{"windows":"managed_service_dependent","macos":"managed_service_dependent","ios":"managed_service_dependent","android":"managed_service_dependent","linux":"managed_service_dependent","chromeos":"managed_service_dependent","agentless":"managed_service_dependent"},"pop_count":400,"sla_availability_pct":99.99,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"managed_service_dependent","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/gtt/","shortlist_summary":"GTT Communications is a specialist, purely networking-and-security-focused global provider rather than a diversified telecom conglomerate with mobile, broadband, and media businesses attached. Founded in 1998, listed on the NYSE in 2013, renamed GTT Communications in January 2014, and now headquartered in Arlington, Virginia, GTT operates a global Tier 1 IP backbone spanning more than 600 points of presence and connecting more than 3,500 cities.","key_differentiators":["Tier 1 global backbone provides strong international transit capability alongside managed SD-WAN.","Vendor-agnostic SD-WAN delivery (multiple platform options) with the Envision management platform.","Recognised as a leader for SASE and managed SD-WAN by industry analysts."],"best_fit_for":["Multinational enterprises needing strong international backbone alongside managed SD-WAN.","Buyers wanting platform flexibility within a managed service.","Organisations consolidating global transit, SD-WAN and SASE under one provider."],"watch_outs":["SASE depth depends heavily on the chosen platform partner; native SSE capabilities are not primary positioning.","Security stack is largely partner-integrated.","Commercial model is consultative; ensure cost lines for managed changes, security and SLAs are explicit."],"evidence_coverage_pct":0.55,"last_verified":"2026-09-01","evidence_source_count":17,"independent_evidence_source_count":0,"position":18,"research_metrics":{"supported":14,"partial":6,"partner_delivered":2,"managed_service_dependent":0,"not_primary":0,"unconfirmed":18,"total":40,"reviewed":22,"completeness_percent":55,"completeness":0.55},"proven_evidence_count":14,"gaps":[]},{"slug":"juniper-networks","name":"Juniper Networks","website":"https://www.juniper.net","category":"AI-driven WAN / SD-branch technology vendor","product_focus":"Juniper SD-WAN, Mist WAN Assurance, SRX","cost_model":"Quote-based hardware/subscription/support; managed delivery via partners/providers.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US, now HPE). UK channel and delivery via partners and MSPs.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"partner_integrated","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"yes","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"yes","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"partial","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"partial","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"partial","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"yes","f39_apis_and_automation":"yes","f40_managed_service_assurance":"not_confirmed"},"deployment_speed":"days","regions":{"uk_ireland":"partial","europe":"yes","north_america":"yes","asia_pacific":"yes","middle_east_africa":"partial","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"partial","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"yes","ai_security_analytics":"partial","ai_assistant":"yes","note":"Mist AI and the Marvis conversational assistant; AI-native WAN assurance."},"resilience":{"disaster_recovery":"yes","note":"Session Smart Routing fails over per session with no tunnel re-establishment; HA clustering."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"partial","ping":"partial","google_workspace":"partial"},"device_posture":"partial","agent_platforms":{"windows":"yes","macos":"yes","ios":"partial","android":"partial","linux":"partial","chromeos":"not_confirmed","agentless":"partial"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/juniper/","shortlist_summary":"Juniper Networks offer Mist AI with WAN Assurance, delivering AI-driven monitoring and troubleshooting at the WAN edge at a depth that few competitors match. Typically shortlisted by organisations where AIOps and network assurance quality are weighted evaluation criteria rather than SD-WAN feature breadth, and worth examining more closely than the overall score might suggest if AI-driven operations is a primary requirement.","key_differentiators":["Mist AI delivers WAN Assurance, providing AI-driven monitoring and troubleshooting at the WAN edge that few competitors match.","Strong story for buyers who want the WAN integrated with Mist-powered Wi-Fi and access network management.","Juniper SRX security platform integration provides native firewall capability for buyers standardised on Juniper."],"best_fit_for":["Enterprises already running Mist for Wi-Fi or access who want unified AI-driven operations across WAN and LAN.","Buyers prioritising observability and AI-assisted incident triage as a primary purchase criterion.","Organisations with strong network engineering capability who can take advantage of WAN Assurance telemetry."],"watch_outs":["SASE story is less mature than the SASE-led vendors; SSE capabilities have limited public evidence relative to category leaders.","Managed delivery is via partners; first-party managed service is not the primary model.","Cloud on-ramp and private backbone capabilities are less prominent than dedicated SASE platforms."],"evidence_coverage_pct":0.55,"last_verified":"2026-09-01","evidence_source_count":28,"independent_evidence_source_count":0,"position":19,"research_metrics":{"supported":14,"partial":7,"partner_delivered":1,"managed_service_dependent":0,"not_primary":0,"unconfirmed":18,"total":40,"reviewed":22,"completeness_percent":55,"completeness":0.55},"proven_evidence_count":14,"gaps":[]},{"slug":"lumen","name":"Lumen","website":"https://www.lumen.com/en-us/services/sd-wan.html","category":"Managed SD-WAN / NaaS provider","product_focus":"Managed or co-managed SD-WAN","cost_model":"Quote-based; Lumen states fully managed or co-managed SD-WAN, with access/network services priced by requirement.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"global_managed","uk_basis":"No UK HQ (US); UK delivery is largely via partners following the EMEA divestment to Colt.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"partial","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"yes","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"partner_integrated","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"partner_integrated","f29_sse_ecosystem_integration":"partner_integrated","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"partner_integrated","f35_soc_siem_soar_integration":"partner_integrated","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"partial","f40_managed_service_assurance":"partial"},"deployment_speed":"months","regions":{"uk_ireland":"partial","europe":"partial","north_america":"yes","asia_pacific":"not_confirmed","middle_east_africa":"partial","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"managed_service_dependent","ai_security_analytics":"managed_service_dependent","ai_assistant":"managed_service_dependent","note":"Depends on platform (VeloCloud, Versa); Lumen portal analytics for managed customers."},"resilience":{"disaster_recovery":"yes","note":"Extensive owned fibre and PoP diversity across North America."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"yes","transport_logistics":"partial","professional_services":"yes","hospitality_leisure":"partial"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"yes","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"managed_service_dependent","okta":"managed_service_dependent","ping":"managed_service_dependent","google_workspace":"managed_service_dependent"},"device_posture":"managed_service_dependent","agent_platforms":{"windows":"managed_service_dependent","macos":"managed_service_dependent","ios":"managed_service_dependent","android":"managed_service_dependent","linux":"managed_service_dependent","chromeos":"managed_service_dependent","agentless":"managed_service_dependent"},"pop_count":50,"sla_availability_pct":99.99,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"managed_service_dependent","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/lumen/","shortlist_summary":"Lumen Technologies has just completed a corporate transformation - on 21 May 2025, Lumen announced the sale of its Mass Markets fiber-to-the-home business - including its Quantum Fiber consumer brand, serving more than 1 million subscribers across 11 states - to AT&T for $5.75 billion in cash, a transaction that closed on 2 February 2026. Lumen’s own CEO, Kate Johnson, described the deal directly as marking the company’s transformation into ‘a Pure Play Enterprise-Focused Technology Infrastructure Company’, retaining its national, regional, state, and metro fiber backbone specifically to support that enterprise focus while divesting the consumer-facing business entirely.","key_differentiators":["Fully managed or co-managed SD-WAN with strong NaaS positioning and integrated network services.","Substantial underlay ownership in North America with global reach.","Co-managed model provides operational flexibility for customers wanting selective control."],"best_fit_for":["North American enterprises wanting integrated managed SD-WAN, access and broader network services from one provider.","Buyers attracted to the NaaS consumption model.","Organisations wanting genuine co-managed delivery rather than pure managed or pure DIY."],"watch_outs":["SASE and security capabilities are largely partner-integrated rather than native; the SSE platform choice needs explicit evaluation.","International delivery depth is less prominent than the dedicated global carriers.","Underlying SD-WAN platform should be confirmed; platform choice affects feature set."],"evidence_coverage_pct":0.55,"last_verified":"2026-09-01","evidence_source_count":18,"independent_evidence_source_count":1,"position":20,"research_metrics":{"supported":14,"partial":3,"partner_delivered":5,"managed_service_dependent":0,"not_primary":0,"unconfirmed":18,"total":40,"reviewed":22,"completeness_percent":55,"completeness":0.55},"proven_evidence_count":14,"gaps":[]},{"slug":"bt-business","name":"BT","website":"https://business.bt.com/networks-digital-services/sd-wan","category":"Global/UK managed SD-WAN / SASE provider","product_focus":"Managed SD-WAN using Cisco, VMware/Broadcom, Fortinet, Palo Alto, Meraki","cost_model":"Quote-based managed service; includes access, CPE, vendor stack and service tier options.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_hq","uk_basis":"UK headquartered (BT Group). UK contract holder with owned UK access, UK NOC and SOC, and named UK support.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"partial","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"yes","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"partial","f22_regional_breakout_and_data_residency":"yes","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"partial","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"partial","f40_managed_service_assurance":"yes"},"deployment_speed":"weeks","regions":{"uk_ireland":"yes","europe":"yes","north_america":"yes","asia_pacific":"yes","middle_east_africa":"partial","latin_america":"partner_integrated","china_mainland":"partial"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"partial","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"managed_service_dependent","ai_security_analytics":"managed_service_dependent","ai_assistant":"managed_service_dependent","note":"Depends on platform (Meraki, Versa, Fortinet); BT adds managed analytics and reporting."},"resilience":{"disaster_recovery":"yes","note":"Dual-hub designs, diverse UK last mile and 24x7 UK NOC under a single managed contract."},"sectors":{"healthcare":"partial","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"not_confirmed","transport_logistics":"yes","professional_services":"partial","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"partial","small_business":"partial"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"managed_service_dependent","okta":"managed_service_dependent","ping":"managed_service_dependent","google_workspace":"managed_service_dependent"},"device_posture":"managed_service_dependent","agent_platforms":{"windows":"managed_service_dependent","macos":"managed_service_dependent","ios":"managed_service_dependent","android":"managed_service_dependent","linux":"managed_service_dependent","chromeos":"managed_service_dependent","agentless":"managed_service_dependent"},"pop_count":140,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"yes","named_tam":"yes"},"logging":{"siem_export":"managed_service_dependent","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/bt/","shortlist_summary":"BT is not a single-platform SASE company, but the UK’s largest telecommunications operator and managed service provider, delivering SASE as one service line within a vastly larger, publicly-listed (LSE: BT.A) group.","key_differentiators":["UK market leader for managed SD-WAN with deep access circuit ownership and field engineering capability.","Multi-vendor platform support (Cisco, VMware/Broadcom, Fortinet, Palo Alto, Meraki) gives buyers platform choice within one managed service.","Strong global SD-WAN and SASE delivery via BT Global for multinational requirements."],"best_fit_for":["UK enterprises wanting a single supplier for SD-WAN platform, access circuits, security and field operations.","Multinational organisations with a UK headquarters needing global delivery via BT Global.","Buyers prioritising underlay accountability and field engineering depth alongside SD-WAN delivery."],"watch_outs":["Platform choice and packaging vary; buyers should confirm which vendor platform is being proposed and why.","DIY/self-managed model is not BT's primary positioning.","Co-managed model and customer control boundaries should be confirmed via RACI and portal demo."],"evidence_coverage_pct":0.525,"last_verified":"2026-09-01","evidence_source_count":17,"independent_evidence_source_count":1,"position":21,"research_metrics":{"supported":17,"partial":4,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":19,"total":40,"reviewed":21,"completeness_percent":53,"completeness":0.525},"proven_evidence_count":17,"gaps":[]},{"slug":"cradlepoint-ericsson","name":"Ericsson Cradlepoint","website":"https://cradlepoint.com","category":"Wireless WAN / SD-WAN adjacent vendor","product_focus":"Ericsson NetCloud SD-WAN, NetCloud SASE","cost_model":"Quote-based NetCloud subscriptions + routers/adapters; public hardware pricing may exist through resellers.","public_pricing_visibility":"quote_based","value_tier":"value","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US, Ericsson-owned). UK delivery via mobile operators and partners.","capabilities":{"f01_fully_managed_service":"not_primary","f02_diy_self_managed_model":"yes","f03_co_managed_service":"not_confirmed","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"partner_integrated","f06_last_mile_circuit_management":"partner_integrated","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"yes","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"partial","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"partial","f35_soc_siem_soar_integration":"partial","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"partial","f40_managed_service_assurance":"partial"},"deployment_speed":"days","regions":{"uk_ireland":"yes","europe":"yes","north_america":"yes","asia_pacific":"yes","middle_east_africa":"partial","latin_america":"partial","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"partial","azure":"partial","gcp":"not_confirmed","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"partial","ai_security_analytics":"partial","ai_assistant":"partial","note":"NetCloud AIOps with anomaly detection and the NetCloud AI assistant."},"resilience":{"disaster_recovery":"yes","note":"Wireless WAN failover is the core use case; dual-SIM and dual-modem designs."},"sectors":{"healthcare":"yes","financial_services":"not_confirmed","retail_ecommerce":"yes","manufacturing":"partial","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"partial","hospitality_leisure":"partner_integrated"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"yes","small_business":"partial"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"partial","ping":"partial","google_workspace":"partial"},"device_posture":"partial","agent_platforms":{"windows":"yes","macos":"yes","ios":"partial","android":"partial","linux":"partial","chromeos":"not_confirmed","agentless":"partial"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/ericsson-cradlepoint/","shortlist_summary":"1 billion. That makes this platform’s identity distinctive within this product category: it sits inside one of the world’s largest telecommunications equipment manufacturers rather than a standalone security company or a private-equity-backed challenger, and its architecture reflects that heritage directly - NetCloud SASE is built cellular-first, with confirmed, specific capabilities like traffic steering based on cellular attributes and 5G standalone network slicing for guaranteed bandwidth that have no real equivalent among fixed-line-oriented competitors.","key_differentiators":["Wireless-first branch architecture from Ericsson with deep 5G expertise; NetCloud provides cellular-centric SD-WAN management.","Strong story for organisations adopting 5G as a primary access medium rather than as a backup.","Network slicing and private 5G integration roadmap is more credible than competitors lacking cellular heritage."],"best_fit_for":["Distributed enterprises with strong cellular/5G access strategy (retail, logistics, transport, public sector).","Buyers consolidating wireless WAN with traditional fixed-line SD-WAN under one operational tool.","Organisations interested in private 5G integration with branch SD-WAN."],"watch_outs":["SASE story is partner-integrated rather than native; SSE capabilities require validation in RFP.","Cloud on-ramp and multi-cloud transit fabric have limited public evidence relative to dedicated SASE platforms.","Best for cellular-led architectures; less strong as a primary fit for fixed-circuit-heavy estates."],"evidence_coverage_pct":0.525,"last_verified":"2026-09-01","evidence_source_count":21,"independent_evidence_source_count":0,"position":22,"research_metrics":{"supported":12,"partial":6,"partner_delivered":2,"managed_service_dependent":0,"not_primary":1,"unconfirmed":19,"total":40,"reviewed":21,"completeness_percent":53,"completeness":0.525},"proven_evidence_count":12,"gaps":[]},{"slug":"orange-business","name":"Orange Business","website":"https://www.orange-business.com","category":"Global managed SD-WAN / SASE provider","product_focus":"Multi-vendor managed SD-WAN/SASE, Orange Cyberdefense","cost_model":"Quote-based managed service; costs driven by access circuits, countries, vendor platform, security services and SLAs.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"uk_entity","uk_basis":"UK contracting entity (Orange Business UK) of a French parent, with UK delivery.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"partial","f03_co_managed_service":"partial","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"yes","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"yes","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"partial","f40_managed_service_assurance":"yes"},"deployment_speed":"months","regions":{"uk_ireland":"partial","europe":"yes","north_america":"yes","asia_pacific":"yes","middle_east_africa":"yes","latin_america":"yes","china_mainland":"partial"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"managed_service_dependent","ai_security_analytics":"managed_service_dependent","ai_assistant":"managed_service_dependent","note":"Depends on platform (Cisco, VeloCloud, Fortinet, Palo Alto managed offers)."},"resilience":{"disaster_recovery":"yes","note":"Global hybrid underlay of MPLS and internet with diverse PoPs."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"partial","education":"partial","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"partial"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"partial","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"managed_service_dependent","okta":"managed_service_dependent","ping":"managed_service_dependent","google_workspace":"managed_service_dependent"},"device_posture":"managed_service_dependent","agent_platforms":{"windows":"managed_service_dependent","macos":"managed_service_dependent","ios":"managed_service_dependent","android":"managed_service_dependent","linux":"managed_service_dependent","chromeos":"managed_service_dependent","agentless":"managed_service_dependent"},"pop_count":400,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"managed_service_dependent","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/orangebusiness/","shortlist_summary":"Orange Business is the enterprise services arm of Orange S.A., one of the largest telecommunications groups in Europe, headquartered in France and listed on Euronext Paris. Orange Business itself traces its lineage to Equant and Global One before being formally established on 1 June 2006, and was renamed from Orange Business Services to Orange Business on 16 February 2023; Frédéric Schepens serves as CEO (appointed July 2024), leading approximately 30,000 employees.","key_differentiators":["Global managed network leadership with strong service assurance, NOC depth and field operations.","Multi-vendor managed SD-WAN and SASE delivery (including Palo Alto Networks managed SASE via Orange Cyberdefense).","Strong UK and EMEA presence with established enterprise managed service track record."],"best_fit_for":["Multinational enterprises wanting a single global managed provider for SD-WAN, SASE and access.","Buyers prioritising service ownership, RCA quality and change governance over best-of-breed platform selection.","Organisations needing access circuit sourcing alongside SD-WAN platform delivery."],"watch_outs":["Platform choice depends on which Orange-supported vendor is selected; underlying platform fit and roadmap should be evaluated independently.","Commercial model is bespoke; rate cards and change costs need careful scoping.","DIY/self-managed model is not the primary positioning."],"evidence_coverage_pct":0.525,"last_verified":"2026-09-01","evidence_source_count":21,"independent_evidence_source_count":1,"position":23,"research_metrics":{"supported":17,"partial":4,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":19,"total":40,"reviewed":21,"completeness_percent":53,"completeness":0.525},"proven_evidence_count":17,"gaps":[]},{"slug":"sonicwall","name":"SonicWall Cloud Secure Edge","website":"https://www.sonicwall.com","category":"SMB / mid-market firewall-led SD-WAN vendor","product_focus":"TZ/NSa firewalls, SonicOS SD-WAN","cost_model":"Public hardware/security bundle pricing often available via resellers; managed options partner-dependent.","public_pricing_visibility":"quote_based","value_tier":"budget","uk_delivery":"uk_pops_partner","uk_basis":"No UK HQ (US). Strong UK SMB and mid-market channel and distribution.","capabilities":{"f01_fully_managed_service":"partial","f02_diy_self_managed_model":"yes","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"partial","f05_professional_services_and_migration_support":"partner_integrated","f06_last_mile_circuit_management":"partner_integrated","f07_lifecycle_management":"yes","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"yes","f21_private_global_backbone":"not_confirmed","f22_regional_breakout_and_data_residency":"partial","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"partial","f29_sse_ecosystem_integration":"partial","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"partial","f40_managed_service_assurance":"partial"},"deployment_speed":"days","regions":{"uk_ireland":"yes","europe":"yes","north_america":"yes","asia_pacific":"yes","middle_east_africa":"partial","latin_america":"yes","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"partial","azure":"partial","gcp":"not_confirmed","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"partial","ai_security_analytics":"partial","ai_assistant":"not_confirmed","note":"Capture ATP cloud sandboxing uses ML-based detection."},"resilience":{"disaster_recovery":"partial","note":"HA appliance pairs; cloud security depth depends on partner SSE."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"yes","transport_logistics":"not_confirmed","professional_services":"yes","hospitality_leisure":"yes"},"organisation_fit":{"large_global_enterprise":"partial","mid_market":"yes","small_business":"yes"},"pricing_units":["per_site","custom_quote"],"identity_providers":{"entra_id":"yes","okta":"partial","ping":"partial","google_workspace":"partial"},"device_posture":"partial","agent_platforms":{"windows":"yes","macos":"yes","ios":"partial","android":"partial","linux":"partial","chromeos":"not_confirmed","agentless":"partial"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"partial"},"logging":{"siem_export":"yes","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/sonicwall-cse/","shortlist_summary":"SonicWall is one of the oldest names in network security still operating under its own brand - founded 1991 as Sonic Systems, later renamed SonicWall, and shaped by an eventful corporate history: an IPO in 1999, a return to private ownership, acquisition by Dell in 2012, and a $2 billion-plus divestiture from Dell in November 2016 that spun the company out as an independent business jointly owned by private equity firms Francisco Partners and Elliott Management, who remain its owners today.","key_differentiators":["SD-WAN delivered via existing TZ, NSa and SM firewall appliances; familiar deployment for organisations standardised on SonicWall.","Strong SMB and mid-market positioning with reseller channel and public hardware pricing.","Integrated firewall and SD-WAN avoids separate appliances for smaller branches."],"best_fit_for":["SMB and mid-market organisations already running SonicWall firewalls.","Distributed branch estates where firewall-led SD-WAN is operationally simpler than a separate SD-WAN platform.","Buyers prioritising public pricing visibility and reseller channel options."],"watch_outs":["SASE and SSE capabilities have partial public evidence; depth should be confirmed in RFP.","Less suited to large enterprise multinational deployments requiring private backbone or PoP architectures.","Public cloud gateway and multi-cloud transit fabric capabilities are less prominent than cloud-native SASE vendors."],"evidence_coverage_pct":0.525,"last_verified":"2026-09-01","evidence_source_count":24,"independent_evidence_source_count":0,"position":24,"research_metrics":{"supported":12,"partial":7,"partner_delivered":2,"managed_service_dependent":0,"not_primary":0,"unconfirmed":19,"total":40,"reviewed":21,"completeness_percent":53,"completeness":0.525},"proven_evidence_count":12,"gaps":[]},{"slug":"verizon-business","name":"Verizon Business","website":"https://www.verizon.com/business/resources/lp/secure-access-service-edge","category":"Global carrier managed SD-WAN / SASE provider","product_focus":"Managed SD-WAN/SASE, multi-vendor including Versa","cost_model":"Quote-based managed service; typically platform, access, security bundle, sites/users/bandwidth/term.","public_pricing_visibility":"quote_based","value_tier":"premium","uk_delivery":"uk_entity","uk_basis":"UK contracting entity (Verizon Business has UK operations), though US headquartered, with real UK and European delivery.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"partial","f03_co_managed_service":"partial","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"yes","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"yes","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"yes","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"yes","f35_soc_siem_soar_integration":"yes","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"partial","f40_managed_service_assurance":"yes"},"deployment_speed":"months","regions":{"uk_ireland":"yes","europe":"yes","north_america":"yes","asia_pacific":"yes","middle_east_africa":"partial","latin_america":"yes","china_mainland":"partial"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"managed_service_dependent","ai_security_analytics":"partial","ai_assistant":"not_confirmed","note":"Network Detection and Response analytics; platform AI depends on the chosen vendor."},"resilience":{"disaster_recovery":"yes","note":"Private IP global MPLS plus managed dual-vendor designs."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"partial","government_public_sector":"yes","education":"yes","transport_logistics":"partial","professional_services":"partial","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"yes","small_business":"partial"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"managed_service_dependent","okta":"managed_service_dependent","ping":"managed_service_dependent","google_workspace":"managed_service_dependent"},"device_posture":"managed_service_dependent","agent_platforms":{"windows":"managed_service_dependent","macos":"managed_service_dependent","ios":"managed_service_dependent","android":"managed_service_dependent","linux":"managed_service_dependent","chromeos":"managed_service_dependent","agentless":"managed_service_dependent"},"pop_count":null,"sla_availability_pct":100,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"partial","named_tam":"yes"},"logging":{"siem_export":"managed_service_dependent","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/verizon/","shortlist_summary":"6 billion in revenue in 2023 (2025 consensus estimates are approximately $134-135 billion) and serving nearly all of the Fortune 500 - and its managed SD-WAN and SASE proposition sits within Verizon Business, itself organised into three named customer groups (Enterprise and Public Sector, Business Markets and Other, and Wholesale).","key_differentiators":["Global carrier-led managed SASE and SD-WAN with strong North American presence and international delivery.","Versa Networks partnership provides multi-tenant SD-WAN platform with security, routing and analytics under managed service.","Established reputation as a SASE managed services leader in industry analyst rankings."],"best_fit_for":["North American and multinational enterprises wanting carrier-led managed SD-WAN and SASE.","Buyers comfortable with Versa as the underlying platform via managed delivery.","Organisations prioritising service maturity and global delivery capability."],"watch_outs":["Platform is largely Versa-based; buyers wanting platform optionality should evaluate alternatives.","Commercial model is bespoke; cost transparency and change governance require careful contracting.","DIY/self-managed model is not the primary positioning."],"evidence_coverage_pct":0.525,"last_verified":"2026-09-01","evidence_source_count":20,"independent_evidence_source_count":0,"position":25,"research_metrics":{"supported":17,"partial":4,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":19,"total":40,"reviewed":21,"completeness_percent":53,"completeness":0.525},"proven_evidence_count":17,"gaps":[]},{"slug":"vodafone-business","name":"Vodafone Business","website":"https://vb2b.vodafone.com/business/products/fixed-connectivity/sd-wan","category":"Global managed SD-WAN provider","product_focus":"Vodafone Business SD-WAN / Secure Connected Enterprise","cost_model":"Quote-based managed service; carrier access, SD-WAN platform, security services and country coverage determine costs.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"uk_hq","uk_basis":"UK headquartered (Vodafone, Newbury). UK contracting entity with UK support desks and fixed-mobile UK assets.","capabilities":{"f01_fully_managed_service":"yes","f02_diy_self_managed_model":"partial","f03_co_managed_service":"yes","f04_multi_tenant_msp_white_label_support":"not_confirmed","f05_professional_services_and_migration_support":"yes","f06_last_mile_circuit_management":"yes","f07_lifecycle_management":"partial","f08_flexible_commercial_model":"yes","f09_encrypted_overlay_fabric":"yes","f10_dynamic_path_selection":"not_confirmed","f11_active_active_link_utilisation":"yes","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f16_mpls_coexistence_and_migration":"yes","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f20_private_pops_dedicated_pops":"not_confirmed","f21_private_global_backbone":"yes","f22_regional_breakout_and_data_residency":"yes","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f26_sla_backed_service_fabric":"yes","f27_integrated_next_generation_firewall":"not_confirmed","f28_full_sase_platform":"yes","f29_sse_ecosystem_integration":"partner_integrated","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f34_remote_user_access":"partner_integrated","f35_soc_siem_soar_integration":"partner_integrated","f36_centralised_orchestration":"yes","f37_customer_portal_and_rbac":"yes","f38_observability_and_digital_experience_monitoring":"not_confirmed","f39_apis_and_automation":"partial","f40_managed_service_assurance":"yes"},"deployment_speed":"months","regions":{"uk_ireland":"yes","europe":"yes","north_america":"partner_integrated","asia_pacific":"yes","middle_east_africa":"yes","latin_america":"partner_integrated","china_mainland":"partial"},"supported_clouds":{"aws":"yes","azure":"yes","gcp":"yes","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"managed_service_dependent","ai_security_analytics":"managed_service_dependent","ai_assistant":"managed_service_dependent","note":"Depends on platform (VeloCloud, Cisco); Vodafone analytics portal for managed customers."},"resilience":{"disaster_recovery":"yes","note":"Fixed-mobile convergence with 5G backup for rapid site continuity."},"sectors":{"healthcare":"yes","financial_services":"yes","retail_ecommerce":"yes","manufacturing":"yes","energy_utilities":"yes","government_public_sector":"yes","education":"yes","transport_logistics":"yes","professional_services":"yes","hospitality_leisure":"partial"},"organisation_fit":{"large_global_enterprise":"yes","mid_market":"yes","small_business":"not_confirmed"},"pricing_units":["per_site","bundle","custom_quote"],"identity_providers":{"entra_id":"managed_service_dependent","okta":"managed_service_dependent","ping":"managed_service_dependent","google_workspace":"managed_service_dependent"},"device_posture":"managed_service_dependent","agent_platforms":{"windows":"managed_service_dependent","macos":"managed_service_dependent","ios":"managed_service_dependent","android":"managed_service_dependent","linux":"managed_service_dependent","chromeos":"managed_service_dependent","agentless":"managed_service_dependent"},"pop_count":212,"sla_availability_pct":99.99,"support_model":{"follow_the_sun_24x7":"yes","uk_support_desk":"yes","named_tam":"yes"},"logging":{"siem_export":"managed_service_dependent","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/vodafone/","shortlist_summary":"Vodafone Group is a vast, multinational telecommunications operator - for the financial year ended 31 March 2024, Vodafone Group reported total revenue of €36.7 billion, with Vodafone Business specifically operating across all of Vodafone’s markets, addressing a claimed €160 billion addressable market, serving 5 million customers, managing 198 million IoT connections (FY24 figure), and contributing 24% of Group service revenue. Against that scale, the managed SD-WAN and SASE proposition examined in this profile is one product line within a much larger enterprise business.","key_differentiators":["Strong UK and European market presence with NaaS positioning and integrated mobile/fixed access.","VeloCloud-based managed SD-WAN in the UK with broader Vodafone international footprint.","Tight integration with Vodafone mobile services for buyers prioritising cellular and 5G access."],"best_fit_for":["UK and European enterprises wanting carrier-led SD-WAN with strong mobile and 5G integration.","Buyers consolidating fixed and mobile access alongside SD-WAN platform delivery.","Organisations attracted to the NaaS consumption model."],"watch_outs":["Underlying platform varies by region (VeloCloud in UK, others elsewhere); ensure consistency for multinational deployment.","Security and SASE capabilities are largely partner-integrated.","Commercial structure bundles access, mobile and platform; line-item costing requires explicit RFP."],"evidence_coverage_pct":0.525,"last_verified":"2026-09-01","evidence_source_count":17,"independent_evidence_source_count":0,"position":26,"research_metrics":{"supported":15,"partial":3,"partner_delivered":3,"managed_service_dependent":0,"not_primary":0,"unconfirmed":19,"total":40,"reviewed":21,"completeness_percent":53,"completeness":0.525},"proven_evidence_count":15,"gaps":[]},{"slug":"barracuda-secureedge","name":"Barracuda SecureEdge","website":"https://netify.co.uk/marketplace/barracuda-secureedge/","category":"technology vendor","product_focus":"Barracuda SecureEdge, Barracuda SecureEdge Access, BarracudaONE, Secure Edge Manager","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"Confirm UK delivery scope through RFP.","capabilities":{"f10_dynamic_path_selection":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f30_zero_trust_network_access":"yes","f31_secure_web_gateway":"yes","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"not_confirmed","azure":"not_confirmed","gcp":"not_confirmed","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Use the governed profile for current evidence."},"resilience":{"disaster_recovery":"not_confirmed","note":"Use the governed profile for current evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"not_confirmed","okta":"not_confirmed","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"not_confirmed","uk_support_desk":"not_confirmed","named_tam":"not_confirmed"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/barracuda-secureedge/","shortlist_summary":"SecureEdge combines SD-WAN and cloud security, with an MSP option for multi-tenant management.","key_differentiators":["SecureEdge combines SD-WAN and cloud security, with an MSP option for multi-tenant management."],"best_fit_for":["Buyers and service providers comparing SecureEdge deployment and management options."],"watch_outs":[],"evidence_coverage_pct":0.05,"last_verified":"2026-09-01","evidence_source_count":23,"independent_evidence_source_count":0,"summary_source":"https://barracuda.com/products/network-protection/secureedge/msp","position":27,"research_metrics":{"supported":2,"partial":0,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":38,"total":40,"reviewed":2,"completeness_percent":5,"completeness":0.05},"proven_evidence_count":2,"gaps":[]},{"slug":"expereo","name":"Expereo","website":"https://netify.co.uk/marketplace/expereo/","category":"managed service provider / carrier network provider","product_focus":"Expereo Enhanced Internet, Expereo Managed SD-WAN, Expereo SD-WAN/SASE with Cato Networks, Starlink (via Expereo, authorised reseller)","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"Confirm UK delivery scope through RFP.","capabilities":{"f10_dynamic_path_selection":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f38_observability_and_digital_experience_monitoring":"yes"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"not_confirmed","azure":"not_confirmed","gcp":"not_confirmed","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Use the governed profile for current evidence."},"resilience":{"disaster_recovery":"not_confirmed","note":"Use the governed profile for current evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"not_confirmed","okta":"not_confirmed","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"not_confirmed","uk_support_desk":"not_confirmed","named_tam":"not_confirmed"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/expereo/","shortlist_summary":"Managed SD-WAN and internet connectivity, with Cato Networks as a named partner for managed SASE.","key_differentiators":["Managed SD-WAN and internet connectivity, with Cato Networks as a named partner for managed SASE."],"best_fit_for":["Buyers comparing managed internet connectivity alongside SD-WAN and partner-delivered SASE."],"watch_outs":[],"evidence_coverage_pct":0.025,"last_verified":"2026-09-01","evidence_source_count":18,"independent_evidence_source_count":0,"summary_source":"https://catonetworks.com/news/expereo-selects-cato-networks-for-delivering-managed-sase-services-worldwide/","position":28,"research_metrics":{"supported":1,"partial":0,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":39,"total":40,"reviewed":1,"completeness_percent":3,"completeness":0.025},"proven_evidence_count":1,"gaps":[]},{"slug":"opensystems","name":"Open Systems","website":"https://netify.co.uk/marketplace/opensystems/","category":"technology vendor / managed service provider","product_focus":"MDR+ (Managed Detection and Response), Managed SD-WAN / Secure SD-WAN, Managed, Universal SSE, Mission Control","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"Confirm UK delivery scope through RFP.","capabilities":{"f10_dynamic_path_selection":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"not_confirmed","azure":"not_confirmed","gcp":"not_confirmed","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Use the governed profile for current evidence."},"resilience":{"disaster_recovery":"not_confirmed","note":"Use the governed profile for current evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"not_confirmed","okta":"not_confirmed","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"not_confirmed","uk_support_desk":"not_confirmed","named_tam":"not_confirmed"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/opensystems/","shortlist_summary":"Managed SD-WAN and SASE supported by Open Systems' Mission Control service team.","key_differentiators":["Managed SD-WAN and SASE supported by Open Systems' Mission Control service team."],"best_fit_for":["Buyers comparing a managed operating model for SD-WAN and SASE."],"watch_outs":[],"evidence_coverage_pct":0,"last_verified":"2026-09-01","evidence_source_count":21,"independent_evidence_source_count":0,"summary_source":"https://open-systems.com/company/","position":29,"research_metrics":{"supported":0,"partial":0,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":40,"total":40,"reviewed":0,"completeness_percent":0,"completeness":0},"proven_evidence_count":0,"gaps":[]},{"slug":"virgin-media-o2","name":"Virgin Media O2 Business","website":"https://netify.co.uk/marketplace/virgin-media-o2/","category":"managed service provider / carrier network provider","product_focus":"8x8 Voice for Teams, Cloud Infrastructure as a Service / Platform as a Service, Managed Detection and Response, Success Agreement","cost_model":"Confirm commercial model through RFP.","public_pricing_visibility":"quote_based","value_tier":"mid","uk_delivery":"global_managed","uk_basis":"Confirm UK delivery scope through RFP.","capabilities":{"f10_dynamic_path_selection":"not_confirmed","f12_application_aware_routing":"not_confirmed","f13_qos_and_traffic_shaping":"not_confirmed","f14_packet_loss_remediation":"not_confirmed","f15_local_internet_breakout":"not_confirmed","f17_cellular_and_5g_support":"not_confirmed","f18_cloud_on_ramp":"not_confirmed","f19_public_cloud_gateways":"not_confirmed","f23_multi_cloud_transit_fabric":"not_confirmed","f24_flexible_edge_form_factors":"not_confirmed","f25_high_availability_design":"not_confirmed","f27_integrated_next_generation_firewall":"not_confirmed","f30_zero_trust_network_access":"not_confirmed","f31_secure_web_gateway":"not_confirmed","f32_casb_capability":"not_confirmed","f33_data_loss_prevention":"not_confirmed","f38_observability_and_digital_experience_monitoring":"not_confirmed"},"deployment_speed":"not_confirmed","regions":{"uk_ireland":"not_confirmed","europe":"not_confirmed","north_america":"not_confirmed","asia_pacific":"not_confirmed","middle_east_africa":"not_confirmed","latin_america":"not_confirmed","china_mainland":"not_confirmed"},"supported_clouds":{"aws":"not_confirmed","azure":"not_confirmed","gcp":"not_confirmed","oracle_cloud":"not_confirmed","alibaba_cloud":"not_confirmed"},"ai_capability":{"ai_driven_operations":"not_confirmed","ai_security_analytics":"not_confirmed","ai_assistant":"not_confirmed","note":"Use the governed profile for current evidence."},"resilience":{"disaster_recovery":"not_confirmed","note":"Use the governed profile for current evidence."},"sectors":{"healthcare":"not_confirmed","financial_services":"not_confirmed","retail_ecommerce":"not_confirmed","manufacturing":"not_confirmed","energy_utilities":"not_confirmed","government_public_sector":"not_confirmed","education":"not_confirmed","transport_logistics":"not_confirmed","professional_services":"not_confirmed","hospitality_leisure":"not_confirmed"},"organisation_fit":{"large_global_enterprise":"not_confirmed","mid_market":"not_confirmed","small_business":"not_confirmed"},"pricing_units":["custom_quote"],"identity_providers":{"entra_id":"not_confirmed","okta":"not_confirmed","ping":"not_confirmed","google_workspace":"not_confirmed"},"device_posture":"not_confirmed","agent_platforms":{"windows":"not_confirmed","macos":"not_confirmed","ios":"not_confirmed","android":"not_confirmed","linux":"not_confirmed","chromeos":"not_confirmed","agentless":"not_confirmed"},"pop_count":null,"sla_availability_pct":null,"support_model":{"follow_the_sun_24x7":"not_confirmed","uk_support_desk":"not_confirmed","named_tam":"not_confirmed"},"logging":{"siem_export":"not_confirmed","log_retention_days":null},"marketplace_url":"https://netify.co.uk/marketplace/virgin-media-o2/","shortlist_summary":"Managed connectivity and SD-WAN with Zscaler-based SASE; confirm the current contracting entity and scope.","key_differentiators":["Managed connectivity and SD-WAN with Zscaler-based SASE; confirm the current contracting entity and scope."],"best_fit_for":["Buyers comparing managed connectivity and partner-delivered cloud security."],"watch_outs":[],"evidence_coverage_pct":0,"last_verified":"2026-09-01","evidence_source_count":20,"independent_evidence_source_count":1,"summary_source":"https://virginmediabusiness.co.uk/connectivity/sdwan/","position":30,"research_metrics":{"supported":0,"partial":0,"partner_delivered":0,"managed_service_dependent":0,"not_primary":0,"unconfirmed":40,"total":40,"reviewed":0,"completeness_percent":0,"completeness":0},"proven_evidence_count":0,"gaps":[]}],"methodology_note":"All researched providers are ordered by evidence coverage, highest first, then name. Coverage is the proportion of capability fields carrying an evidence grade; it is not fit, quality or a recommendation. Commission does not affect this order. Research and evidence matching are open."},"faqs":[{"q":"Does inclusion confirm suitability for my project?","a":"No. This directory presents published provider evidence. Confirm product, sector, region and service scope against your own requirements. Missing evidence remains unconfirmed."},{"q":"How is the public directory ordered?","a":"Most proven capability items first, then the most recent verification date, then provider name; slug breaks identical names and missing dates come last. Only yes capability grades count. This is evidence order, not a personalised recommendation."},{"q":"What does Netify do?","a":"Netify reviews your requirement, agrees a sourcing plan, approaches the providers you approve and coordinates written responses. A full RFP is optional."}],"citation":"Cite as: Netify provider evidence, Best SD-WAN and SASE providers for Retail and e-commerce, https://netify.co.uk/sase/best/sd-wan-sase-providers-for-retail","continuation":{"version":"continuations v2026.2","family":"sector","source":"sector:retail_ecommerce","sentence":"We are a retailer needing a PCI DSS compliant network.","action":{"label":"Turn this into a live project","url":"https://netify.co.uk/sase-sd-wan-rfp-builder/?q=We+are+a+retailer+needing+a+PCI+DSS+compliant+network.&utm_source=ai_assistant&utm_medium=twin"},"opens":"Your procurement on Netify","pins":[],"mcp_tools":["workspace_ingest","score_vendor_fit","build_sase_shortlist"]}},"ordered_by":"evidence_coverage_pct desc, provider name asc, slug asc","interactive_surfaces":[{"id":"retail-shortlist-tool","kind":"filter-ui","url":"https://netify.co.uk/sd-wan-sase-for-retail/#shortlist-tool","backing_tool":"build_sase_shortlist","endpoint":"https://netify.co.uk/sase/api/openapi/build_sase_shortlist","fixed_arguments":{"sector":"retail_ecommerce"}}],"shortlist":"https://netify.co.uk/sase/shortlist/?s=retail_ecommerce","rfp_builder":"https://netify.co.uk/sase-sd-wan-rfp-builder/?sector=retail_ecommerce","citation":"Cite as: Netify, \"SD-WAN and SASE Network Security for Retail\", https://netify.co.uk/sd-wan-sase-for-retail/"}