Skip to main content

Palomarr Insights for SASE in Q4 2025

The Secure Access Service Edge (SASE) market is experiencing rapid growth, driven by the dissolution of traditional network perimeters and the increasing adoption of cloud-native workloads and hybrid work models. SASE is not a single product but a converged architectural model integrating SD-WAN with cloud-delivered security functions. Key trends include the convergence of NetOps and SecOps, AI-assisted operations, and shadow AI governance.

Procurement teams should prioritize natively integrated platforms over bundled solutions and carefully consider deployment flexibility, TCO transparency, and global performance SLAs.

Learn more
65 companies analyzed | Last updated Dec 29, 2025
Download the report
Palomarr Insights / Q4 2025

SASE

Palomarr Orbit

Unlike static analyst charts, Palomarr Orbit plots 65 SASE companies by Capabilities and Innovation, then lets you shift the center of gravity based on your priorities with Palomarr Orbit Shift. The closer to your unique core, the better the fit.

Palomarr Orbit Shift

Orbit Shift
Contenders
Leaders
Emerging
Challengers
CAPABILITIES
INNOVATION

Introduction

This report provides an exhaustive evaluation of the SASE category, exploring its technological evolution, the critical problem landscape it addresses, and the strategic considerations for procurement teams navigating this high-stakes decision. The evolution of SASE is best understood as a transition from 'place-based' security to 'identity-based' security.

Market landscape

The global SASE market is experiencing significant growth, driven by the increasing frequency and cost of cybercrime and the limitations of legacy networks. Organizations are seeking unified platforms that manage the entire digital experience, with leaders moving beyond stitched-together offerings to natively integrated solutions managed from a single console.

Quadrant distribution

Companies are evaluated on two dimensions: Capabilities measure product depth and maturity, while Innovation reflects forward-thinking investments. The combined score shows overall market position.

65 Total suppliers analyzed
8.1 Average combined score
$17B Projected market size by 2030
$3B Global SASE market in 2024

Key trends

Competitive analysis

The SASE market is characterized by a mix of established networking and security vendors, as well as emerging players offering innovative solutions. Leaders in the space are distinguished by their ability to deliver a comprehensive set of natively integrated capabilities, including SD-WAN, ZTNA, CASB, DLP, and FWaaS.

How companies earn their ranking

Top-ranked SASE companies demonstrate superior capability by delivering a tightly integrated platform that seamlessly combines networking and security functions. They excel in providing robust security efficacy, global network coverage, and unified management. Innovation scores are driven by the adoption of AI-driven automation, advanced threat intelligence, and emerging technologies like secure enterprise browsers.

These vendors are proactive in addressing new security challenges and adapting their platforms to meet evolving customer needs. To improve their ranking, vendors should focus on enhancing their AI capabilities, expanding their global presence, and simplifying the management of their platforms. They should also prioritize integration with other security tools and demonstrate a commitment to ongoing innovation.

Building a strong partner ecosystem and providing comprehensive training and support are also essential for success in the competitive SASE market.

Learn more

Rankings

1
Best Overall Best Value
9.6 This score was generated by combining our proprietary Capabilities and Innovation scores Capabilities 9.7 Innovation 9.4
2
Best for Enterprise
9.6 This score was generated by combining our proprietary Capabilities and Innovation scores Capabilities 9.5 Innovation 9.6
3
9.4 This score was generated by combining our proprietary Capabilities and Innovation scores Capabilities 9.6 Innovation 9.2
4
9.6 This score was generated by combining our proprietary Capabilities and Innovation scores Capabilities 9.5 Innovation 9.7
5
Best for SMB Best for Mid-market
9.5 This score was generated by combining our proprietary Capabilities and Innovation scores Capabilities 9.6 Innovation 9.4
6
9.4 This score was generated by combining our proprietary Capabilities and Innovation scores Capabilities 9.3 Innovation 9.5
7
9.3 This score was generated by combining our proprietary Capabilities and Innovation scores Capabilities 9.4 Innovation 9.2
8
9.3 This score was generated by combining our proprietary Capabilities and Innovation scores Capabilities 9.2 Innovation 9.4
9
9.0 This score was generated by combining our proprietary Capabilities and Innovation scores Capabilities 9.0 Innovation 8.9
10
8.8 This score was generated by combining our proprietary Capabilities and Innovation scores Capabilities 8.6 Innovation 9.0

Competitive assessment

Our AI-generated analysis explains what makes each top-ranked company a strong fit for SASE, based on their specific capabilities, product features, and market positioning.

1
Best Overall Best Value
9.6 This score was generated by combining our proprietary Capabilities and Innovation scores Capabilities 9.7 Innovation 9.4

Cato Networks provides a unified SASE platform that integrates networking and security functions, catering particularly well to businesses transitioning from MPLS to SD-WAN. Their focus on identity-driven access policies and global access optimization helps enterprises secure their hybrid work environments without sacrificing performance. With moderate pricing and a solid reputation in the Gartner Magic Quadrant, Cato is a compelling choice for organizations seeking to enhance both security and connectivity.

  • Cloud-native security: Single platform for all security needs
  • SASE architecture: Integrates security with networking
  • Global SD-WAN: Fast & secure connections everywhere
CapabilitiesInnovationImplementationSupportPrice
2
Best for Enterprise
9.6 This score was generated by combining our proprietary Capabilities and Innovation scores Capabilities 9.5 Innovation 9.6

Palo Alto Networks stands out in the SASE landscape with its AI-driven security operations, delivering proactive threat response capabilities and cloud security integration. Their easy implementation process, paired with a strong focus on zero trust architecture, makes them an attractive option for medium to large enterprises looking to enhance security while simplifying network management. The company's ability to block billions of threats daily positions them as a leader in security innovation, ideal for organizations looking to leverage advanced cybersecurity capabilities.

  • AI-driven security operations
  • Comprehensive platform integration
  • Global threat intelligence capabilities
CapabilitiesInnovationImplementationSupportPrice
3
9.4 This score was generated by combining our proprietary Capabilities and Innovation scores Capabilities 9.6 Innovation 9.2

Aryaka delivers a unified SASE solution that emphasizes performance and simplicity, making it an excellent choice for enterprises grappling with hybrid cloud complexities. Their focus on integrated network security and cost-effective operations ensures organizations can achieve high performance without excessive complexity. With easy implementation and a lower price tier, Aryaka is well-positioned for enterprises seeking efficient and secure connectivity solutions.

  • Global private network
  • Improved cloud performance
  • Secure access for users
CapabilitiesInnovationImplementationSupportPrice
4
9.6 This score was generated by combining our proprietary Capabilities and Innovation scores Capabilities 9.5 Innovation 9.7

Open Systems provides a compelling Managed SASE platform that integrates SD-WAN and security services, making it ideal for organizations in complex environments. Their focus on operational excellence and 24/7 support ensures enterprises can maximize their network performance and security. With moderate pricing and a commitment to measurable service levels, Open Systems caters effectively to businesses aiming to streamline their IT operations while enhancing security.

  • Proactive 24x7 Monitoring and Support
  • Dedicated Level-3 Engineers for Service
  • Seamless Integration of Security Features
CapabilitiesInnovationImplementationSupportPrice
5
Best for SMB Best for Mid-market
9.5 This score was generated by combining our proprietary Capabilities and Innovation scores Capabilities 9.6 Innovation 9.4

LevelBlue (AT&T) offers an integrated SASE solution that combines SD-WAN with robust cybersecurity features, making it suitable for medium to large enterprises. Their proactive threat detection capabilities and unified visibility across distributed environments help organizations maintain a strong security posture. With moderate implementation difficulty and competitive pricing, LevelBlue is a solid choice for clients seeking comprehensive protection and connectivity solutions.

  • Industry-Leading Expertise: Unmatched cybersecurity professionals on your team
  • Comprehensive Protection: Coverage against evolving cyber threats
  • Cost-Effective Technology: Tailored solutions to fit budget constraints
CapabilitiesInnovationImplementationSupportPrice
6
9.4 This score was generated by combining our proprietary Capabilities and Innovation scores Capabilities 9.3 Innovation 9.5

Verizon's Managed Security Services offer comprehensive solutions for organizations needing robust cybersecurity measures integrated with their network infrastructure. Their threat detection capabilities and flexible monitoring options provide clients with the tools necessary to manage risks effectively. The moderate implementation difficulty, combined with a strong support infrastructure, makes Verizon a viable option for both small and large enterprises aiming to enhance their digital security posture.

  • Vendor-neutral approach for comprehensive device support
  • Advanced analytics for real-time security insights
  • Globally recognized expertise and incident response
CapabilitiesInnovationImplementationSupportPrice
7
9.3 This score was generated by combining our proprietary Capabilities and Innovation scores Capabilities 9.4 Innovation 9.2

Menlo Security specializes in transforming browser security through a cloud-based zero trust approach, making it a unique offering in the SASE space. Their comprehensive threat prevention mechanisms ensure safe browsing and application access, significantly reducing risks associated with legacy systems. With a premium pricing model and solid support, Menlo is suited for large enterprises requiring stringent security measures while maintaining user accessibility.

  • Cloud-delivered secure enterprise browser
  • HEAT Shield AI threat prevention
  • Zero Trust application access
CapabilitiesInnovationImplementationSupportPrice
8
9.3 This score was generated by combining our proprietary Capabilities and Innovation scores Capabilities 9.2 Innovation 9.4

Lumen's commitment to enhancing connectivity and security makes it a strong contender in the SASE market, particularly with their focus on AI and cloud solutions. Their proactive approach to cybersecurity, including advanced DDoS mitigation and threat intelligence, addresses the needs of diverse industries. With easy implementation and moderate pricing, Lumen is ideal for enterprises looking to modernize their IT infrastructure while ensuring robust security.

  • Cloud security
  • Network transformation
  • Data center connectivity
CapabilitiesInnovationImplementationSupportPrice
9
9.0 This score was generated by combining our proprietary Capabilities and Innovation scores Capabilities 9.0 Innovation 8.9

Akamai Technologies excels in providing a comprehensive approach to SASE with its robust suite of security features, including API Security and Zero Trust capabilities. Their integration of advanced threat intelligence with real-time monitoring allows enterprises to protect their applications and data effectively. The complexity of implementation is offset by their strong focus on large enterprises, ensuring they cater to the needs of Fortune 500 companies. With a premium pricing strategy, Akamai remains a top choice for organizations seeking reliable and high-performance security solutions.

  • Global network of 365,000 servers
  • Comprehensive API security solutions
  • Strong focus on cloud and edge computing
CapabilitiesInnovationImplementationSupportPrice
10
8.8 This score was generated by combining our proprietary Capabilities and Innovation scores Capabilities 8.6 Innovation 9.0

Windstream Enterprise provides a strong suite of SASE solutions tailored to address the complex cybersecurity needs of modern businesses. Their focus on unified communications and managed security services enhances collaboration while safeguarding data integrity. With a moderate implementation difficulty and a commitment to customer support, Windstream is well-positioned to assist organizations in overcoming the challenges of digital transformation.

  • High-speed, reliable network infrastructure
  • Scalable solutions for growing businesses
  • Dedicated customer support and personalized solutions
CapabilitiesInnovationImplementationSupportPrice

Recommendations

SMB buyers

Prioritize ease of deployment and management, focusing on solutions that offer a streamlined $er experience and require minimal IT expertise.

Mid-market buyers

Seek a balance between comprehensive features and cost-effectiveness, ensuring the solution aligns with your organization''s specific security and networking requirements.

Enterprise buyers

Focus on solutions with deep integration capabilities, robust security efficacy, and the ability to scale to meet the needs of a large, distributed workforce.

Scoring methodology

The Palomarr scoring methodology evaluates SASE vendors based on their capability and innovation across several key dimensions. Capability factors include global backbone reach, single-console orchestration, and best-in-class security efficacy. Innovation differentiators include AI-driven ADEM, enterprise browser integration, and shadow AI control.

Implementation considerations

SASE deployments typically occur over several years in a staged transformation. Key phases include baseline assessment, architecture design, proof of concept & policy modeling, phased deployment, and continuous optimization. Common pitfalls include identity misalignment, hands-off assumption, and SSL decryption bottlenecks.

Future outlook

The future of SASE is increasingly defined by the integration of Agentic AI and Autonomous Digital Experience Management (ADEM). Emerging capabilities like Secure Enterprise Browsers are also beginning to extend SASE controls to unmanaged devices, further narrowing the attack surface. The market is expected to continue its high-growth trajectory, driven by edge computing and 5G expansion.

About this study

This report analyzes the SASE market, evaluating suppliers based on their capability and innovation scores. The assessment considers factors such as global backbone reach, single-console orchestration, security efficacy, AI-driven ADEM, enterprise browser integration, and shadow AI control.

FAQs & disclaimers

Is SASE the same as a VPN?

No. A VPN provides a broad tunnel into the entire network based on a one-time login. SASE (specifically ZTNA) provides narrow access only to specific applications and continuously re-verifies the $er''s identity and device health throughout the session

Does SASE replace my existing on-premises firewalls?

Eventually, yes. Most organizations implement a "phased decommissioning" where the cloud-native SASE firewall handles remote and branch traffic first, and the data center firewall is phased out as apps migrate to the cloud

Can I build my own SASE by picking the best SD-WAN and the best SSE vendor?

This is called "Dual-Vendor SASE." While it allows you to pick "best-of-breed" tools, it significantly increases implementation complexity and often results in fragmented visibility and inconsistent policies across the two platforms

Disclaimer: The information provided in this report is for informational purposes only and should not be construed as professional advice. Palomarr makes no representations or warranties as to the accuracy or completeness of the information contained herein. Any reliance on the information provided is at your own risk.

Conclusion

The SASE market is undergoing a significant transformation, driven by the need for secure and reliable access to cloud applications and data from anywhere. Organizations should carefully evaluate their specific requirements and choose a SASE solution that aligns with their business goals and IT strategy. A successful SASE implementation requires cross-functional collaboration, a clear understanding of TCO, and a focus on continuous optimization.

Take the deep dive

Explore SASE history, benefits, and future trends.

Read the deep dive

Read the buyer's guide

Get expert advice on evaluating SASE solutions, including key capabilities and evaluation criteria.

Read the guide