Skip to content
Z Zendikt
C
Zero Trust Network Access (ZTNA) · Rank #6 of 10

Cato Networks review and pricing

SASE-pure single-vendor cloud-native architecture.

By Cato Networks Ltd. · Founded 2015 · Tel Aviv, Israel · private

Cato Networks is the SASE-pure single-cloud-vendor architecture leader, founded 2015 by Shlomo Kramer (Check Point and Imperva co-founder). The product is built ground-up as a single multi-tenant cloud (Cato SASE Cloud) covering SD-WAN, ZTNA, FWaaS, SWG, CASB, DLP, and RBI in a single converged service. The company reported ~$200M ARR with $2B IPO speculation across 2024-2025 and is growing rapidly. Best fit for organizations wanting a single-vendor SD-WAN + ZTNA + security stack without integrating multiple point products. Trade-offs: feature depth in individual pillars is sometimes thinner than best-of-breed (DLP vs Netskope, ZTNA vs Zscaler), customer support quality reports vary by region, and pricing is opaque enterprise-only quotes.

Visit Cato Networks Vendor pricing Compare to Netskope
Best for

Mid-market to enterprise (500-25,000 employees) wanting single-vendor SD-WAN + ZTNA + security stack without integrating multiple point products.

Worst for

Federal buyers (no FedRAMP), best-of-breed buyers wanting deepest CASB / DLP (Netskope better), or organizations already heavily invested in incumbent SD-WAN.

Vendor Trust Score

Is Cato Networks a trustworthy vendor?

7.7/10
Mixed
Pricing transparency
Published rates; no hidden fees
5.5
Contract fairness
Reasonable terms; no auto-renew traps
7.5
Incident response
How they handle outages and breaches
8.0
Post-acquisition behavior
Customer treatment after M&A or PE
8.0
Executive stability
Leadership churn over 24 months
9.0
Roadmap honesty
Public commitments held
8.0
Trust signal log
  • 2023-06
    Series G $238M raised at $3B+ valuation; growth narrative strong
  • 2024-08
    $2B IPO speculation reported; ARR ~$200M disclosed
  • 2025-03
    Product expansion: XDR detection layer added to SASE Cloud
  • 2025-11
    IPO timing rumored 2026; pre-IPO buyer caution noted
Vendor Trust is scored independently of product quality. A great product from an unfair vendor still earns a low trust score.
Review Intelligence

What 320 reviews actually say

Synthesized from G2, Capterra, Reddit, Trustpilot. Patterns >15% prevalence shown.

Last synthesized
2026-04-29

Praise patterns

  • SASE-pure single-vendor converged architecture
    87% →
  • Single policy plane across SD-WAN + security
    71% →
  • Founder pedigree (Kramer) builds trust
    51% →

Complaint patterns

  • Feature depth thinner than best-of-breed in pillars
    41% →
  • Pricing opaque, enterprise-only quotes
    38% →
  • Support quality varies by region
    31% →
Sentiment trend (6 months)
83/100 +1 pts
12
01
02
03
04
05
Patterns are extracted from review corpus and human-verified. We surface trends, not anecdotes.
Verified Pricing

What buyers actually pay

124 anonymized deal disclosures · last updated 2026-05-01

Contribute your deal price
Company size Median annual
500-2,500 employees $96,000
2,500-10,000 employees $360,000
10,000+ employees $1,200,000
Verified pricing is crowdsourced from buyers under anonymity guarantees. Vendor-listed prices are validated against actual deals quarterly.
Compliance & Security

Auto-verified certifications

Verified 2026-05-01
SOC 2 Type II
ISO 27001
HIPAA
GDPR
CCPA
PCI DSS
FedRAMP

Editorial: Strengths

  • SASE-pure single-vendor architecture (Cato SASE Cloud)
  • Single multi-tenant cloud across SD-WAN + security
  • Founder pedigree (Shlomo Kramer, Check Point / Imperva)
  • ~$200M ARR; growing rapidly; $2B IPO speculation
  • Cato Sockets for SD-WAN edge
  • Unified policy across SD-WAN + ZTNA + security

Editorial: Weaknesses

  • Feature depth thinner than best-of-breed in individual pillars
  • Customer support quality varies by region
  • Pricing opaque, enterprise-only quotes
  • No FedRAMP authorization
  • Single-vendor lock-in risk for risk-averse buyers

Key features & integrations

  • +Cato SASE Cloud (converged platform)
  • +SD-WAN via Cato Sockets
  • +ZTNA (clientless and clientful)
  • +FWaaS
  • +SWG and CASB
  • +DLP
  • +RBI
  • +XDR threat detection
200+ integrations
Microsoft Entra IDOktaCrowdStrikeSplunkMicrosoft SentinelServiceNow
Geography supported
Global; 80+ PoPs; strongest in EU, UK, US, APAC
Best fit
500-25,000 employees · Mid-market to enterprise wanting single-vendor SASE
Editorial deep-dive

Read our full ranking of Zero Trust Network Access (ZTNA)

Cato Networks ranks #6 in our editorial review of 10 zero trust network access (ztna) platforms. The deep-dive covers methodology, comparison tables, decision matrix, migration scoring, and FAQs.

Read the full ranking

Closest alternatives in Zero Trust Network Access (ZTNA)

#5
Netskope
Comprehensive SSE / SASE platform with deep CASB heritage.
★ 4.4 opaque
#7
Perimeter 81 (Check Point Harmony SASE)
Mid-market ZTNA absorbed into Check Point; rebranded Harmony SASE.
★ 4.4 partial
#4
Twingate
Modern remote access designed as a clean VPN replacement.
★ 4.7 public
Help the next buyer

Contribute your verified deal price

Pricing in B2B software is opaque because vendors want it that way. Verified buyer prices fix that, anonymously. Share what you actually paid for Cato Networks; we’ll add it to the verified pricing dataset on this page (with company size band only, no identifying details).

Submit anonymously