CyberIndexBeta

Product

Cloud-delivered firewall in the Cato SASE Cloud Platform covering Internet, WAN and LAN traffic. It is available as a cloud instance. Among the capabilities recorded for it are application control, central management console, deep packet inspection and high availability. Its record also notes intrusion prevention (ips), sd-wan, ssl/tls inspection and stateful inspection. It is aimed at Enterprise buyers.

Current Version
Cloud · no version
Market
Enterprise
Licence
Paid
Price
Paid · price unknown
Record Created
2026-09-20
Last Updated
2026-10-10

Vendor

Cato Networks was founded in Israel in 2015 by Shlomo Kramer, who had co-founded Check Point two decades earlier and Imperva after that. Its argument is that the network and its security should be one service: instead of appliances at each site, traffic is carried over Cato's own global private network, inspected there and delivered onward. Cato Firewall as a Service, listed here, is the firewalling layer of that platform, applied to all traffic passing through the Cato Cloud, with secure web access, zero-trust network access, intrusion prevention and its managed detection service in the same subscription. It sells to distributed organisations replacing both MPLS links and branch firewalls at once. It is network infrastructure rather than an endpoint product, so the malware laboratories in this index do not measure it. Vendor page →

Country
Israel
Headquarters
Tel Aviv, Israel
Year Established
2015
Customers
4,800 organisations
Users
1.5M users
Revenue
$250.0M (2026)

Platforms

Cloudnative

Target Market

Enterprise primary

Capabilities

Stateful Inspectionkeynative
Intrusion Prevention (IPS)keynative
Intrusion Detection (IDS)Not known
SSL/TLS Inspectionkeynative
VPN Gatewaykeynative
SD-WANnative
Application Controlkeynative
High Availabilitynative
Deep Packet Inspectionnative
Central Management Consolenative

1 of 10 not yet known — not recorded, which is not the same as not supported.

Specifications

Firewall TypeCloud

4 other specifications for this category not yet known.

Pricing

PlanLicencePriced perBilledPrice
SummarySubscriptionnot statedno recurring chargeNot known

Versions

Not known

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Not known

Change History

This record was created 2026-09-20. Everything below is what has changed since.

  • 2026-10-07Capability addedCentral Management Console: built inevidence
  • 2026-10-07Capability addedDeep Packet Inspection: built inevidence
  • 2026-10-07Capability addedHigh Availability: built inevidence
  • 2026-10-07Capability addedApplication Control: built inevidence
  • 2026-10-07Capability addedSD-WAN: built inevidence
  • 2026-10-07Capability addedVPN Gateway: built inevidence
  • 2026-10-07Capability addedSSL/TLS Inspection: built inevidence
  • 2026-10-07Capability addedIntrusion Prevention (IPS): built inevidence
  • 2026-10-07Capability addedStateful Inspection: built inevidence
  • 2026-10-07Pricing plan addedPrice: subscriptionevidence
  • 2026-09-20Product createdNew product, listed in Network Firewallevidence
  • 2026-09-20Product updatedSold to: Enterpriseevidence
  • 2026-09-20Platform addedRuns on Cloudevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.