Cato Networks

What Cato Networks does

Cato Networks is a privately held Israeli cybersecurity company founded by Shlomo Kramer (co-founder of Check Point Software and Imperva) that built and operates one of the few single-vendor SASE platforms in the market. The Cato SASE Platform converges networking (SD-WAN, global private backbone), security (FWaaS, SWG, IPS, malware prevention, DNS security, CASB, DLP, RBI, IoT/OT security), and access (Universal ZTNA including Cato Enterprise Browser) into one cloud-native service running on a single-pass engine, single data lake, and single policy enforcement layer across 85+ global Points of Presence. Cato Neural Edge embeds NVIDIA GPUs directly into those PoPs, and Cato AI Security (built on the September 2025 acquisition of Aim Security) governs enterprise AI usage and agentic AI actions. A modular adoption model launched in March 2026 allows customers to license AI Security, SD-WAN, SSE, or UZTNA independently.

Cato sells primarily to large distributed enterprises (Fortune 500 and Forbes Global 2000), serving more than 4,000 customers globally across aviation services, manufacturing, retail, consumer goods, and specialty chemicals (Swissport, Carlsberg, O-I Glass, Redners Markets, Fiskars, Komax, Element Solutions, Just Born). Revenue is recurring subscription-based, quote-priced per Scope of Use (bandwidth per site, mobile users, modules), with Cato Enterprise Browser bundled at no additional charge under the UZTNA license. Cato reports $350M+ ARR in 2025, representing 43% year-over-year growth and significantly outpacing the Gartner-projected 26% SASE market CAGR. The company's go-to-market is channel-led — approximately 70% of deals flow through partners versus a 30-35% benchmark at Palo Alto Networks and Zscaler — augmented by a managed SASE (MSASE) partner platform for MSSPs and MSPs, AWS Marketplace listings via Westcon-Comstor, and direct enterprise sales targeting Fortune 500 and Global 2000 accounts.

Cato has raised more than $1 billion in disclosed cumulative funding, including a $409M Series G in June 2025 at a $4.8B+ post-money valuation. The company holds ISO 27001, SOC 2, GDPR, and CCPA certifications, has initiated the FedRAMP High authorization process, and operates through wholly-owned subsidiaries across the U.S., Canada, the U.K., the Netherlands, France, Germany, the Czech Republic, Singapore, Japan, Australia, and the Philippines, with global headquarters in Tel Aviv. Strategic technology partners include NVIDIA, Microsoft, AWS, Cyera, OpenAI, Anthropic, Okta, Splunk, Wiz, SentinelOne, Sumo Logic, Rapid7, and Armis.

Name

Cato Networks

Legal name

Cato Networks Ltd.

Website

https://catonetworks.com

Company type

Private

Founded year

2015

Operating status

Operating

Headcount range

1,001–5,000 employees

Short description

Cato Networks is a privately held Israeli cybersecurity company operating a single-vendor SASE platform that converges networking, security, and AI-driven threat prevention across 85+ global PoPs. It serves over 4,000 enterprise customers, including Fortune 500 firms, primarily through a channel-led motion (~70% partner-led).

Ownership category

akta.pro rank

Product category

SASE (Secure Access Service Edge) Platform

NAICS

Computer Systems Design and Related Services (54151), Security Systems Services (except Locksmiths) (561621)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Programming Services (7371)

akta.pro primary industry

Secure Access Service Edge (SASE) & SSE (HDADABAB)

akta.pro secondary industries

Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG), Secure Access Service Edge (SASE) & Secure SD-WAN (HDAIAFAH), Managed SD‑WAN/SASE Connectivity (Enterprise WAN under Managed Connectivity) (HDAIAGAF)

Keywords

• SASE platform
• Network security
• Zero trust access
• AI security
• Managed security services

Headquarters

HQ city

Tel Aviv

HQ country

Israel

HQ region

Middle East

Offices12 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations, Supply Chain

Revenue model

1. Cato SASE Platform Subscription: Recurring subscription revenue from Cato SASE Cloud Platform; ARR exceeded $350M in 2025, representing 43% YoY growth. Subscription-based delivery of networking, security, and access modules (AI Security, SD-WAN, SSE, UZTNA) as standalone or full-stack bundles.
2. Managed SASE / MSASE Partner Platform: Managed services revenue generated through MSSP/MSP partners using the Cato MSASE platform; partners deliver managed SASE services such as Uniti Solutions, the first managed service provider in North America to deliver managed SASE powered by Cato.
3. Channel / Marketplace Resale: Channel and marketplace-driven revenue through distributors (Westcon-Comstor), resellers, GSIs, and AWS Marketplace private listings, enabling partner-led deal flow accounting for ~70% of closed deals.
4. Hardware Sales (Cato Sockets): Hardware revenue from Cato sockets delivered to customers/applications per the MSA Scope of Use; complementary to subscription service.

Pricing tiers

Go-to-market motion5 records

Distribution channels7 records

Marketing channels10 records

Core offering

Cato Networks develops and sells the Cato SASE Platform, a single-vendor cloud-native Secure Access Service Edge platform that converges networking, security, and access into one global service. The platform runs on the Cato SASE Cloud with 85+ Points of Presence and delivers SD-WAN, Security Service Edge (SSE), Universal ZTNA, and AI Security as standalone modules or a full-stack bundle. Customers purchase via subscription, with Cato Sockets as complementary hardware and Cato MSASE enabling managed SASE delivery through MSSP and MSP partners.

Differentiator

Problem solved

Functional benefit

Brands

• Cato SASE Platform: The company's flagship single-vendor Secure Access Service Edge platform, integrating networking, security and access functions into a unified cloud-native platform.
• Cato Cloud
• Cato CTRL
• Cato AI Security
• Cato Neural Edge
• Cato Enterprise Browser
• Cato MSASE
• Cato XOps

Products and services

• Cato SASE Platform The unified, cloud-native SASE platform that converges networking, security, and access into a single global service for enterprises. Built on the Cato SASE Cloud with a single-pass engine, single data lake, and single policy enforcement, it supports modular adoption of AI Security, SD-WAN, SSE, and Universal ZTNA capabilities. Targets Fortune 500 and Forbes Global 2000 enterprises with 1:1 demos and contact-sales CTAs.
• Cato AI Security for End Users Standalone modular AI Security capability that governs and protects employee use of third-party AI tools and homegrown AI applications, inspecting prompts, responses, and agent actions for sensitive data exposure and policy violations.
• Cato AI Security for Applications Runtime protection for internally built AI applications and AI agents, providing AI-native controls that inspect interactions including user intent, business context, and prompt meaning.
• Cato Agentic AI Security Security controls purpose-built for autonomous AI agents that learn, remember, and act across enterprise workflows, addressing risks like Hermes Agent, OpenClaw, and other agentic AI services.
• Cato SD-WAN (Software-Defined WAN)

Quantifiable outcome

• 235% ROI per Forrester TEI study; payback in under 6 months; NPV $13.3M
• +4 more outcomes

Named customers8 records

Segments5 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration14 records

AI capability11 records

Feature10 records

Partnerships

30 partnerships are on record, tiered flagship, core and minor.

• OpenAIflagshipStrategic or Co-development Partner · 22 June 2026Cato Networks joined the OpenAI Daybreak Cyber Partner Program to integrate OpenAI's cyber capabilities into enterprise security workflows. Builds on prior OpenAI Trusted Access for Cyber (TAC) program membership. Co-developing standards for AI security safety and abuse prevention controls. Uses GPT-5.4-Cyber to improve CVE discovery, prioritization, and agentic CVE mitigation (45-minute time-to-protect).
• CyeraflagshipTechnology or Integration · 25 May 2026Strategic technology partnership integrating Cyera's Data Security Platform Management (DSPM) into Cato's XOps platform, generally available worldwide. Combines Cato's network telemetry with Cyera's data intelligence to enable data-aware detection and response, zero-trust enforcement based on data access paths, and unified investigation/remediation across network, endpoint, cloud, and data security.
• CSPi Technology SolutionscoreChannel Partner/ Reseller/ Distributor · 9 April 2026Recognized as Americas Regional Partner of the Year at the 2026 Cato Americas Partner Awards; delivers secure networking and SASE solutions across the region.
• ARG, AVANT Communications, AxtelcoreChannel Partner/ Reseller/ Distributor · 8 April 2026Recognized winners across multiple categories (Trusted Advisor of the Year, Regional Partner of the Year, etc.) at the 2026 Cato Networks Americas Partner Awards.
• Uniti SolutionsflagshipChannel Partner/ Reseller/ Distributor · 7 April 2026Recognized as Americas Service Provider of the Year at 2026 Cato Americas Partner Awards (second consecutive year). First managed service provider in North America to deliver a managed SASE service powered by the Cato SASE Platform.
• CoalfirecoreImplementation/ SI/ Consulting Partner · 12 March 2026Compliance and security advisory partner collaborating with Cato on the FedRAMP High authorization process to expand into U.S. federal government market.
• ExpereoflagshipStrategic or Co-development Partner · 6 February 2026Global enterprise connectivity partnership combining Cato's SASE platform with Expereo's global connectivity underlay. Joint solution targets combined addressable market of $105B; provides reach across 190+ countries with direct on-ramps to Cato's global private backbone of 85+ PoPs, and real-time visibility through Expereo's expereoOne platform.
• AccentureflagshipImplementation/ SI/ Consulting Partner · 5 February 2026Recognized as EMEA GSI of the Year at 2026 EMEA Partner Summit (Paris); global systems integrator helping enterprises deploy Cato SASE platform across EMEA.
• IF-Tech AGcoreChannel Partner/ Reseller/ Distributor · 5 February 2026Recognized as EMEA Technical Competency of the Year at 2026 EMEA Partner Summit (Paris); partner delivering Cato SASE technical services in EMEA region.
• IPknowledgeflagshipChannel Partner/ Reseller/ Distributor · 5 February 2026Recognized as EMEA Partner of the Year at 2026 EMEA Partner Summit (Paris); Cato's top regional partner across EMEA.
• NeoVADcoreChannel Partner/ Reseller/ Distributor · 5 February 2026Recognized as EMEA Distributor of the Year at 2026 EMEA Partner Summit (Paris); distributes Cato SASE through EMEA channel ecosystem.
• Orange CyberdefensecoreChannel Partner/ Reseller/ Distributor · 5 February 2026Recognized as EMEA MSP of the Year at 2026 EMEA Partner Summit (Paris); managed service provider delivering Cato-based managed SASE services across EMEA.
• Aim SecurityflagshipStrategic or Co-development Partner · 1 September 2024Aim Security was acquired by Cato in late 2024/September 2025 for $350M, with technology integrated as the foundation of Cato AI Security. Aim provides AI Security for End Users, AI Security for Applications, and Agentic AI Security capabilities across the Cato platform.
• MicrosoftflagshipTechnology or IntegrationFeatured integration partner within the Cato Integration Hub and Technology Partner Program (100+ integrations across 20 categories). Enables enterprises to connect Cato with Microsoft security and identity ecosystem (Entra ID).
• Anthropic (Project Glasswing)flagshipStrategic or Co-development PartnerCato Networks is one of the partners in Anthropic's Project Glasswing with Google, Nvidia, Palo Alto Networks, Broadcom, and Cisco, formed around Anthropic's Claude Mythos AI model for cybersecurity vulnerability discovery.
• Google (Project Glasswing)flagshipStrategic or Co-development PartnerGoogle is a partner in Anthropic's Project Glasswing initiative alongside Cato Networks for cybersecurity vulnerability discovery.
• NVIDIAflagshipTechnology or IntegrationCato embeds NVIDIA GPUs across 85+ global Points of Presence as part of Cato Neural Edge for real-time AI-powered traffic inspection and threat detection.
• Westcon-ComstorflagshipChannel Partner/ Reseller/ DistributorDistribution partner under AWS Designated Seller of Record model. Westcon-Comstor added Cato to its AWS Marketplace programme covering Europe, Middle East and Africa. Programme has generated 100+ deals worth tens of millions of dollars since 2024. Channel partners purchase Cato software through private listings on AWS Marketplace.
• BWT Alpine Formula One TeamminorGTM or Marketing PartnerBrand partnership for marketing visibility, announced alongside Cato's $350M ARR milestone in 2025.
• TAG Heuer Porsche Formula E TeamminorGTM or Marketing PartnerBrand partnership promoted on Cato Networks website as co-marketing alliance.
• OktacoreTechnology or IntegrationFeatured integration partner in the Cato Integration Hub, supporting identity-aware security and zero-trust enforcement with Cato SASE Platform.
• AWS (Amazon Web Services)flagshipTechnology or IntegrationCloud marketplace and integration partner; Cato offers cloud datacenter integration with AWS, and is listed on AWS Marketplace via Westcon-Comstor.
• SplunkcoreTechnology or IntegrationFeatured integration partner in the Cato Integration Hub for security and observability telemetry.
• Sumo LogiccoreTechnology or IntegrationFeatured integration partner in the Cato Integration Hub for log analytics and SIEM use cases.
• SentinelcoreTechnology or IntegrationFeatured integration partner in the Cato Integration Hub for security operations and SIEM.
• Rapid7coreTechnology or IntegrationFeatured integration partner in the Cato Integration Hub for vulnerability management and security analytics.
• WizcoreTechnology or IntegrationFeatured integration partner in the Cato Integration Hub for cloud security posture management.
• ZoomcoreTechnology or IntegrationFeatured integration partner in the Cato Integration Hub for collaboration and CASB/inspected traffic use cases.
• ArmiscoreTechnology or IntegrationFeatured integration partner in the Cato Integration Hub for IoT/OT asset visibility and security.
• ExtraHop Networks (poaching source)minorOthersNot a partnership — included only because Tristan Elder was hired from ExtraHop Networks as Cato's new Vice President of EMEA Channel in May 2026.

Scale indicators13 records

Recent moves10 records

Expansion highlights8 records

Direct peers

• Zscaler: Public cloud-native SSE/ZTNA leader and Cato's most direct single-vendor SASE competitor. Both target Fortune 500 distributed enterprises with cloud-delivered security, zero-trust access, and a global PoP footprint, competing for the same strategic platform consolidation budget.
• Cloudflare: Cloudflare One is a direct SASE competitor with a developer-led, global-edge-network approach. Targets similar enterprise consolidation use cases as Cato with Magic WAN, Magic Transit, Access, and CASB; positioned as a younger, lower-friction alternative to incumbents.
• Netskope: SSE/SASE pure-play focused on cloud-native data protection, CASB, and ZTNA. Competes directly with Cato in mid-market and enterprise segments and is frequently evaluated alongside Cato in Gartner MQ for SASE Platforms.
• Versa Networks: SD-WAN-native SASE platform competing directly with Cato in enterprise and service-provider segments. Both companies target MSSPs and large enterprises seeking converged networking and security, and frequently appear in the same Gartner MQ for SASE Platforms.
• Aryaka Networks: Managed SASE and SD-WAN provider targeting global enterprises and channel partners, with a hybrid global private backbone approach comparable to Cato's 85+ PoP architecture. Frequent Cato alternative in Gartner and GigaOm evaluations.

Broad incumbents

• Palo Alto Networks: Multi-product security incumbent whose Prisma SASE platform overlaps directly with Cato. Offers a much broader security portfolio (firewalls, Cortex, Prisma Cloud) and uses that breadth as leverage against pure-play SASE vendors like Cato.
• Cisco: Networking incumbent delivering SASE through Cisco Secure Access (combining ThousandEyes, Duo, Umbrella, and Meraki). Competes with Cato primarily through installed-base leverage and large enterprise agreements, even as it transitions from legacy hardware to a cloud-delivered model.
• Check Point Software Technologies: Long-standing firewall leader offering Harmony SASE and Quantum SD-WAN. Cato's CEO Shlomo Kramer co-founded Check Point, making this an especially direct incumbency competitor in enterprise firewall-to-SASE consolidation deals.
• Fortinet: Networking-security incumbent offering FortiSASE and Secure SD-WAN, with a strong foothold in mid-market and distributed enterprises. Competes with Cato on price-performance and integrated FortiGate-to-cloud SASE bundles.
• HPE Aruba Networking (Silver Peak): Networking incumbent offering SD-WAN and SASE through the EdgeConnect platform acquired from Silver Peak. Competes with Cato in large enterprise and branch-connectivity deals where HPE's broader networking portfolio is leveraged.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat7 records

Key highlights7 records

Customer concentration

• Xx.com/catonetworks
• Facebookfacebook.com/CatoNetworks
• LinkedInlinkedin.com/company/cato-networks

Compliance6 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles13 records

Subsidiaries12 records

Funding overview

Funding rounds8 records

Investors13 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A1 record

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Cato Networks