Cato Networks
Cato Networks is a privately held Israeli cybersecurity company operating a single-vendor SASE platform that converges networking, security, and AI-driven threat prevention across 85+ global PoPs. It serves over 4,000 enterprise customers, including Fortune 500 firms, primarily through a channel-led motion (~70% partner-led).
- Company typePrivate
- Founded2015
- HeadquartersTel Aviv, Israel
- Headcount1,001–5,000
- GTM typeB2B
- OfferingSoftware
What Cato Networks does
Cato Networks is a privately held Israeli cybersecurity company founded by Shlomo Kramer (co-founder of Check Point Software and Imperva) that built and operates one of the few single-vendor SASE platforms in the market. The Cato SASE Platform converges networking (SD-WAN, global private backbone), security (FWaaS, SWG, IPS, malware prevention, DNS security, CASB, DLP, RBI, IoT/OT security), and access (Universal ZTNA including Cato Enterprise Browser) into one cloud-native service running on a single-pass engine, single data lake, and single policy enforcement layer across 85+ global Points of Presence. Cato Neural Edge embeds NVIDIA GPUs directly into those PoPs, and Cato AI Security (built on the September 2025 acquisition of Aim Security) governs enterprise AI usage and agentic AI actions. A modular adoption model launched in March 2026 allows customers to license AI Security, SD-WAN, SSE, or UZTNA independently.
Cato sells primarily to large distributed enterprises (Fortune 500 and Forbes Global 2000), serving more than 4,000 customers globally across aviation services, manufacturing, retail, consumer goods, and specialty chemicals (Swissport, Carlsberg, O-I Glass, Redners Markets, Fiskars, Komax, Element Solutions, Just Born). Revenue is recurring subscription-based, quote-priced per Scope of Use (bandwidth per site, mobile users, modules), with Cato Enterprise Browser bundled at no additional charge under the UZTNA license. Cato reports $350M+ ARR in 2025, representing 43% year-over-year growth and significantly outpacing the Gartner-projected 26% SASE market CAGR. The company's go-to-market is channel-led — approximately 70% of deals flow through partners versus a 30-35% benchmark at Palo Alto Networks and Zscaler — augmented by a managed SASE (MSASE) partner platform for MSSPs and MSPs, AWS Marketplace listings via Westcon-Comstor, and direct enterprise sales targeting Fortune 500 and Global 2000 accounts.
Cato has raised more than $1 billion in disclosed cumulative funding, including a $409M Series G in June 2025 at a $4.8B+ post-money valuation. The company holds ISO 27001, SOC 2, GDPR, and CCPA certifications, has initiated the FedRAMP High authorization process, and operates through wholly-owned subsidiaries across the U.S., Canada, the U.K., the Netherlands, France, Germany, the Czech Republic, Singapore, Japan, Australia, and the Philippines, with global headquarters in Tel Aviv. Strategic technology partners include NVIDIA, Microsoft, AWS, Cyera, OpenAI, Anthropic, Okta, Splunk, Wiz, SentinelOne, Sumo Logic, Rapid7, and Armis.
Cato Networks firmographics
Firmographics- Name
- Cato Networks
- Legal name
- Cato Networks Ltd.
- Website
- https://catonetworks.com
- Company type
- Private
- Founded year
- 2015
- Operating status
- Operating
- Headcount range
- 1,001–5,000 employees
- Short description
- Cato Networks is a privately held Israeli cybersecurity company operating a single-vendor SASE platform that converges networking, security, and AI-driven threat prevention across 85+ global PoPs. It serves over 4,000 enterprise customers, including Fortune 500 firms, primarily through a channel-led motion (~70% partner-led).
- Ownership category
- akta.pro rank
Cato Networks industry classification
Industry- Product category
- SASE (Secure Access Service Edge) Platform
- NAICS
- Computer Systems Design and Related Services (54151), Security Systems Services (except Locksmiths) (561621)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Programming Services (7371)
- akta.pro primary industry
- Secure Access Service Edge (SASE) & SSE (HDADABAB)
- akta.pro secondary industries
- Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG), Secure Access Service Edge (SASE) & Secure SD-WAN (HDAIAFAH), Managed SD‑WAN/SASE Connectivity (Enterprise WAN under Managed Connectivity) (HDAIAGAF)
Keywords
Where Cato Networks is headquartered
LocationHeadquarters
- HQ city
- Tel Aviv
- HQ country
- Israel
- HQ region
- Middle East
Offices12 records
Markets served
Cato Networks business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations, Supply Chain
Revenue model
- Cato SASE Platform Subscription: Recurring subscription revenue from Cato SASE Cloud Platform; ARR exceeded $350M in 2025, representing 43% YoY growth. Subscription-based delivery of networking, security, and access modules (AI Security, SD-WAN, SSE, UZTNA) as standalone or full-stack bundles.
- Managed SASE / MSASE Partner Platform: Managed services revenue generated through MSSP/MSP partners using the Cato MSASE platform; partners deliver managed SASE services such as Uniti Solutions, the first managed service provider in North America to deliver managed SASE powered by Cato.
- Channel / Marketplace Resale: Channel and marketplace-driven revenue through distributors (Westcon-Comstor), resellers, GSIs, and AWS Marketplace private listings, enabling partner-led deal flow accounting for ~70% of closed deals.
- Hardware Sales (Cato Sockets): Hardware revenue from Cato sockets delivered to customers/applications per the MSA Scope of Use; complementary to subscription service.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Quote-based subscription (Scope of Use per site bandwidth, mobile users, and modules) |
| Hybrid | Multi-year contract | Modular SASE modules (AI Security, SD-WAN, SSE, UZTNA) — standalone or full-stack |
Go-to-market motion5 records
Distribution channels7 records
Marketing channels10 records
Cato Networks product offering
Product offeringCore offering
Cato Networks develops and sells the Cato SASE Platform, a single-vendor cloud-native Secure Access Service Edge platform that converges networking, security, and access into one global service. The platform runs on the Cato SASE Cloud with 85+ Points of Presence and delivers SD-WAN, Security Service Edge (SSE), Universal ZTNA, and AI Security as standalone modules or a full-stack bundle. Customers purchase via subscription, with Cato Sockets as complementary hardware and Cato MSASE enabling managed SASE delivery through MSSP and MSP partners.
Differentiator
Problem solved
Functional benefit
Brands
- Cato SASE Platform: The company's flagship single-vendor Secure Access Service Edge platform, integrating networking, security and access functions into a unified cloud-native platform.
- Cato Cloud
- Cato CTRL
- Cato AI Security
- Cato Neural Edge
- Cato Enterprise Browser
- Cato MSASE
- Cato XOps
Products and services
- Cato SASE Platform The unified, cloud-native SASE platform that converges networking, security, and access into a single global service for enterprises. Built on the Cato SASE Cloud with a single-pass engine, single data lake, and single policy enforcement, it supports modular adoption of AI Security, SD-WAN, SSE, and Universal ZTNA capabilities. Targets Fortune 500 and Forbes Global 2000 enterprises with 1:1 demos and contact-sales CTAs.
- Cato AI Security for End Users Standalone modular AI Security capability that governs and protects employee use of third-party AI tools and homegrown AI applications, inspecting prompts, responses, and agent actions for sensitive data exposure and policy violations.
- Cato AI Security for Applications Runtime protection for internally built AI applications and AI agents, providing AI-native controls that inspect interactions including user intent, business context, and prompt meaning.
- Cato Agentic AI Security Security controls purpose-built for autonomous AI agents that learn, remember, and act across enterprise workflows, addressing risks like Hermes Agent, OpenClaw, and other agentic AI services.
- Cato SD-WAN (Software-Defined WAN)
Quantifiable outcome
- 235% ROI per Forrester TEI study; payback in under 6 months; NPV $13.3M
- +4 more outcomes
Companies that use Cato Networks
Customer profileNamed customers8 records
Segments5 records
Ideal customer profiles3 records
Cato Networks technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration14 records
AI capability11 records
Feature10 records
Cato Networks partnerships and signals
Strategic signalPartnerships
30 partnerships are on record, tiered flagship, core and minor.
- OpenAIflagshipCato Networks joined the OpenAI Daybreak Cyber Partner Program to integrate OpenAI's cyber capabilities into enterprise security workflows. Builds on prior OpenAI Trusted Access for Cyber (TAC) program membership. Co-developing standards for AI security safety and abuse prevention controls. Uses GPT-5.4-Cyber to improve CVE discovery, prioritization, and agentic CVE mitigation (45-minute time-to-protect).
- CyeraflagshipStrategic technology partnership integrating Cyera's Data Security Platform Management (DSPM) into Cato's XOps platform, generally available worldwide. Combines Cato's network telemetry with Cyera's data intelligence to enable data-aware detection and response, zero-trust enforcement based on data access paths, and unified investigation/remediation across network, endpoint, cloud, and data security.
- CSPi Technology SolutionscoreRecognized as Americas Regional Partner of the Year at the 2026 Cato Americas Partner Awards; delivers secure networking and SASE solutions across the region.
- ARG, AVANT Communications, AxtelcoreRecognized winners across multiple categories (Trusted Advisor of the Year, Regional Partner of the Year, etc.) at the 2026 Cato Networks Americas Partner Awards.
- Uniti SolutionsflagshipRecognized as Americas Service Provider of the Year at 2026 Cato Americas Partner Awards (second consecutive year). First managed service provider in North America to deliver a managed SASE service powered by the Cato SASE Platform.
- CoalfirecoreCompliance and security advisory partner collaborating with Cato on the FedRAMP High authorization process to expand into U.S. federal government market.
- ExpereoflagshipGlobal enterprise connectivity partnership combining Cato's SASE platform with Expereo's global connectivity underlay. Joint solution targets combined addressable market of $105B; provides reach across 190+ countries with direct on-ramps to Cato's global private backbone of 85+ PoPs, and real-time visibility through Expereo's expereoOne platform.
- AccentureflagshipRecognized as EMEA GSI of the Year at 2026 EMEA Partner Summit (Paris); global systems integrator helping enterprises deploy Cato SASE platform across EMEA.
- IF-Tech AGcoreRecognized as EMEA Technical Competency of the Year at 2026 EMEA Partner Summit (Paris); partner delivering Cato SASE technical services in EMEA region.
- IPknowledgeflagshipRecognized as EMEA Partner of the Year at 2026 EMEA Partner Summit (Paris); Cato's top regional partner across EMEA.
- NeoVADcoreRecognized as EMEA Distributor of the Year at 2026 EMEA Partner Summit (Paris); distributes Cato SASE through EMEA channel ecosystem.
- Orange CyberdefensecoreRecognized as EMEA MSP of the Year at 2026 EMEA Partner Summit (Paris); managed service provider delivering Cato-based managed SASE services across EMEA.
- Aim SecurityflagshipAim Security was acquired by Cato in late 2024/September 2025 for $350M, with technology integrated as the foundation of Cato AI Security. Aim provides AI Security for End Users, AI Security for Applications, and Agentic AI Security capabilities across the Cato platform.
- MicrosoftflagshipFeatured integration partner within the Cato Integration Hub and Technology Partner Program (100+ integrations across 20 categories). Enables enterprises to connect Cato with Microsoft security and identity ecosystem (Entra ID).
- Anthropic (Project Glasswing)flagshipCato Networks is one of the partners in Anthropic's Project Glasswing with Google, Nvidia, Palo Alto Networks, Broadcom, and Cisco, formed around Anthropic's Claude Mythos AI model for cybersecurity vulnerability discovery.
- Google (Project Glasswing)flagshipGoogle is a partner in Anthropic's Project Glasswing initiative alongside Cato Networks for cybersecurity vulnerability discovery.
- NVIDIAflagshipCato embeds NVIDIA GPUs across 85+ global Points of Presence as part of Cato Neural Edge for real-time AI-powered traffic inspection and threat detection.
- Westcon-ComstorflagshipDistribution partner under AWS Designated Seller of Record model. Westcon-Comstor added Cato to its AWS Marketplace programme covering Europe, Middle East and Africa. Programme has generated 100+ deals worth tens of millions of dollars since 2024. Channel partners purchase Cato software through private listings on AWS Marketplace.
- BWT Alpine Formula One TeamminorBrand partnership for marketing visibility, announced alongside Cato's $350M ARR milestone in 2025.
- TAG Heuer Porsche Formula E TeamminorBrand partnership promoted on Cato Networks website as co-marketing alliance.
- OktacoreFeatured integration partner in the Cato Integration Hub, supporting identity-aware security and zero-trust enforcement with Cato SASE Platform.
- AWS (Amazon Web Services)flagshipCloud marketplace and integration partner; Cato offers cloud datacenter integration with AWS, and is listed on AWS Marketplace via Westcon-Comstor.
- SplunkcoreFeatured integration partner in the Cato Integration Hub for security and observability telemetry.
- Sumo LogiccoreFeatured integration partner in the Cato Integration Hub for log analytics and SIEM use cases.
- SentinelcoreFeatured integration partner in the Cato Integration Hub for security operations and SIEM.
- Rapid7coreFeatured integration partner in the Cato Integration Hub for vulnerability management and security analytics.
- WizcoreFeatured integration partner in the Cato Integration Hub for cloud security posture management.
- ZoomcoreFeatured integration partner in the Cato Integration Hub for collaboration and CASB/inspected traffic use cases.
- ArmiscoreFeatured integration partner in the Cato Integration Hub for IoT/OT asset visibility and security.
- ExtraHop Networks (poaching source)minorNot a partnership — included only because Tristan Elder was hired from ExtraHop Networks as Cato's new Vice President of EMEA Channel in May 2026.
Scale indicators13 records
Recent moves10 records
Expansion highlights8 records
Cato Networks competitors and assessment
Company assessmentDirect peers
- Zscaler: Public cloud-native SSE/ZTNA leader and Cato's most direct single-vendor SASE competitor. Both target Fortune 500 distributed enterprises with cloud-delivered security, zero-trust access, and a global PoP footprint, competing for the same strategic platform consolidation budget.
- Cloudflare: Cloudflare One is a direct SASE competitor with a developer-led, global-edge-network approach. Targets similar enterprise consolidation use cases as Cato with Magic WAN, Magic Transit, Access, and CASB; positioned as a younger, lower-friction alternative to incumbents.
- Netskope: SSE/SASE pure-play focused on cloud-native data protection, CASB, and ZTNA. Competes directly with Cato in mid-market and enterprise segments and is frequently evaluated alongside Cato in Gartner MQ for SASE Platforms.
- Versa Networks: SD-WAN-native SASE platform competing directly with Cato in enterprise and service-provider segments. Both companies target MSSPs and large enterprises seeking converged networking and security, and frequently appear in the same Gartner MQ for SASE Platforms.
- Aryaka Networks: Managed SASE and SD-WAN provider targeting global enterprises and channel partners, with a hybrid global private backbone approach comparable to Cato's 85+ PoP architecture. Frequent Cato alternative in Gartner and GigaOm evaluations.
Broad incumbents
- Palo Alto Networks: Multi-product security incumbent whose Prisma SASE platform overlaps directly with Cato. Offers a much broader security portfolio (firewalls, Cortex, Prisma Cloud) and uses that breadth as leverage against pure-play SASE vendors like Cato.
- Cisco: Networking incumbent delivering SASE through Cisco Secure Access (combining ThousandEyes, Duo, Umbrella, and Meraki). Competes with Cato primarily through installed-base leverage and large enterprise agreements, even as it transitions from legacy hardware to a cloud-delivered model.
- Check Point Software Technologies: Long-standing firewall leader offering Harmony SASE and Quantum SD-WAN. Cato's CEO Shlomo Kramer co-founded Check Point, making this an especially direct incumbency competitor in enterprise firewall-to-SASE consolidation deals.
- Fortinet: Networking-security incumbent offering FortiSASE and Secure SD-WAN, with a strong foothold in mid-market and distributed enterprises. Competes with Cato on price-performance and integrated FortiGate-to-cloud SASE bundles.
- HPE Aruba Networking (Silver Peak): Networking incumbent offering SD-WAN and SASE through the EdgeConnect platform acquired from Silver Peak. Competes with Cato in large enterprise and branch-connectivity deals where HPE's broader networking portfolio is leveraged.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat7 records
Key highlights7 records
Customer concentration
Cato Networks social profiles
Digital presenceCato Networks compliance and trust
Trust signalCompliance6 records
Cato Networks financial estimates
Financial estimateRevenue estimate
Valuation estimate
Cato Networks leadership team
Management profileNumber of profiles
Profiles13 records
Cato Networks subsidiaries and ownership
Company hierarchySubsidiaries12 records
Cato Networks funding detail
Funding detailFunding overview
Funding rounds8 records
Investors13 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Cato Networks M&A and investment
M&A and investmentM&A1 record
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Cato Networks
What does Cato Networks do?
Cato Networks develops and sells the Cato SASE Platform, a single-vendor cloud-native Secure Access Service Edge platform that converges networking, security, and access into one global service. The platform runs on the Cato SASE Cloud with 85+ Points of Presence and delivers SD-WAN, Security Service Edge (SSE), Universal ZTNA, and AI Security as standalone modules or a full-stack bundle. Customers purchase via subscription, with Cato Sockets as complementary hardware and Cato MSASE enabling managed SASE delivery through MSSP and MSP partners.
Is Cato Networks a public or private company?
Cato Networks is a private company. It is classified as venture growth investor backed and is currently operating.
When was Cato Networks founded?
Cato Networks was founded in 2015. It employs 1,001 to 5,000 people.
Where is Cato Networks based?
Cato Networks is headquartered in Tel Aviv, Israel, in the Middle East region.
How does Cato Networks make money?
Four revenue lines are on record. Cato SASE Platform Subscription is the primary driver. The others are managed SASE / MSASE Partner Platform, channel / Marketplace Resale and hardware Sales (Cato Sockets).
Who are Cato Networks's main competitors?
Direct peers on record are Zscaler, Cloudflare, Netskope, Versa Networks and Aryaka Networks. Broad incumbents are Palo Alto Networks, Cisco, Check Point Software Technologies, Fortinet and HPE Aruba Networking (Silver Peak).
Does Cato Networks have an API?
Yes. Cato Networks offers a public Platform API enabling developers to automate and integrate with the Cato SASE Platform. The API supports scripts and tools that leverage Cato's public API for management and integration workflows. The Platform API is part of the Unified Management suite alongside the Cato Management Application (CMA). Developer documentation is at www.catonetworks.com/platform/cato-api.
What industry is Cato Networks in?
Cato Networks's product category is SASE (Secure Access Service Edge) Platform. Its primary akta.pro industry code is HDADABAB, Secure Access Service Edge (SASE) & SSE, with a secondary code of BPAEADAG, Network Security Managed Services (Firewall/IDS/IPS/SASE). Its NAICS code is 54151 and its SIC code is 7370.