Cato Networks

Cato Networks is the purest expression of the SASE thesis: it converged SD-WAN, security service edge, zero-trust access, and threat prevention into a single cloud-native platform delivered from its own global private backbone — a genuinely single-vendor architecture that fragmented competitors assembling SASE from acquisitions cannot cleanly match. The pedigree is exceptional: co-founder Shlomo Kramer previously co-founded Check Point and Imperva, making him one of the most successful security entrepreneurs alive, and Cato pioneered the category Gartner later named. The value proposition lands directly on enterprise pain — replacing a stack of MPLS circuits, firewalls, VPNs, and point products with one subscription that is simpler to run and continuously updated — which drives strong net-revenue retention as customers consolidate more of their network-and-security spend onto the platform. Cato raised $359M in 2025 at a valuation above $4.8B, surpassed $200M in ARR, and is a repeatedly cited IPO candidate riding secular tailwinds: hybrid work, cloud migration, and zero-trust mandates all push enterprises toward exactly the converged model Cato was built for. As buyers tire of stitching SASE from Zscaler-plus-a-SD-WAN-vendor, the vendor that delivers it as one natively integrated cloud service has a structural simplicity advantage and a long runway.

Cato competes in one of the most heavily capitalized arenas in security against opponents with vastly deeper resources: Zscaler and Palo Alto Networks are public giants pouring billions into SASE/SSE, Netskope is a large well-funded rival, Fortinet leverages its firewall base, and Cloudflare pushes its own global network aggressively down-market and up. Cato's owned-backbone model is a double-edged differentiator — it is genuinely integrated, but it is also capital-intensive infrastructure that ties the company to ongoing points-of-presence buildout while asset-light rivals ride hyperscaler backbones. The single-vendor pitch cuts against a real enterprise instinct toward best-of-breed and multi-vendor resilience; large organizations often prefer Zscaler for security and a separate SD-WAN specialist rather than betting the entire network-and-security perimeter on one mid-cap. At $4.8B on ~$200M ARR, the valuation already prices a successful IPO and continued 30%+ growth, and the SASE market — while large — is maturing and consolidating as the mega-platforms bundle it into enterprise-wide deals that Cato cannot match on breadth or discount depth. The IPO it is perpetually "about to" file has not come, and a soft market for security listings leaves its backers waiting while the giants keep spending.