{"slug": "gartner-sase-2026-rankings-netskope-leads-cato-networks-leaps-and-palo-alto", "title": "Gartner SASE 2026 rankings: Netskope leads, Cato Networks leaps, and Palo Alto Networks falls", "summary": "Netskope took the top spot in Gartner's 2026 Magic Quadrant for SASE Platforms, while Cato Networks rose to second place and Palo Alto Networks fell from first to third. Gartner praised Netskope's broad and deep capabilities and comprehensive points of presence infrastructure, while citing Palo Alto's expensive pricing and constrained on-premises security as reasons for its drop. Cato's rise was attributed to above-average customer experience and planned developments around suppressing agentic threats, aided by its acquisition of Aim Security.", "body_md": "Netskope took top position in Gartner’s latest rankings of secure access service edge (SASE) vendors, while Cato Networks moved up the charts to pip the likes of Palo Alto Networks and Zscaler.\n\nIn its latest Magic Quadrant for SASE Platforms report, Gartner lauded Netskope’s “broad and deep” capabilities covering networking and security across on-premises and cloud, as well as its comprehensive points of presence (PoP) infrastructure strategy. The firm moved up from its [position in last year’s “leaders” box](https://www.sdxcentral.com/news/fortinet-joins-palo-alto-cato-netskope-as-gartner-sase-leaders/) to lead on execution; Palo Alto Networks was downgraded in this regard to fall from top position to third place, giving Netskope the upper hand over Gartner's other three leaders.\n\nCato Networks now sits in second place, with its leveling up put down to above-average customer experience and planned developments around suppressing agentic threats [such as shadow AI](https://www.sdxcentral.com/analysis/keeping-shadow-ai-from-the-enterprise-end-zone/). That feature will be helped along by its recent acquisition of fellow [Israeli firm Aim Security](https://www.sdxcentral.com/news/cato-networks-acquires-aim-security-and-50m-in-funding/).\n\nWhether Cato will leapfrog Netskope next time around depends on its Gartner-perceived weaknesses: adopting a modular SASE adoption when it’s more known as a unified platform offering, and higher pricing than others in the market.\n\nGartner also said it gave both Cato and Netskope a comparatively low financial score, although how the powerhouse calculates such financial profiles was not disclosed, along with the exact scores themselves.\n\nRounding out the four Leaders with a sunnier financial profile was new entry Zscaler. Besides that health status, the vendor was also commended for feature enhancements to its networking capabilities, along with its PoP infrastructure.\n\n## Challengers to the SASE throne\n\nDigging deeper into the report reveals Netskope was recommended to stop “overly” focusing on securing AI at risk of overlooking core SASE buyer needs. According to Gartner, those buyers will likely expand to the small and midsize business (SMB) market thanks to its partner outreach with the Netskope Customer Workspace solution.\n\nThat SMB SASE focus was recently brought up via a managed SASE security offering from [AT&T Business](https://www.sdxcentral.com/news/att-deepens-palo-alto-networks-ties-with-souped-up-sase-and-security/), which sees Palo Alto Networks’ Prisma Access cloud security capabilities integrated into its [Dynamic Defense service](https://www.sdxcentral.com/news/att-picks-palo-alto-networks-for-cybersecurity-ride-upmarket/) for smaller firms. While it has ties with Cisco and Fortinet, AT&T opted for Palo Alto as its software of choice.\n\nAndy Foerstner, AT&T Business director for edge/cybersecurity products, told this title that SMBs, like larger enterprises, have \"pretty significant security concerns about the evolving threat landscape.\"\n\n\"They're interested in what additional capabilities could be brought to the table to help make them more secure,\" Foerstner said.\n\nWhile Palo Alto’s footprint in the SMB field wasn’t noted in Gartner's report, its reportedly expensive pricing was one reason for its drop this year, perhaps giving Netskope another win with firms both big and small.\n\nPalo Alto Networks also saw on-premises security for its Instant On-Network (ION) appliances’ intrusion prevention system and content filtering described as “more constrained and cloud-reliant” than those of other vendors.\n\nKeeping Palo Alto Networks in the leaders throng were enhancements around [post-quantum cryptography (PQC)](https://www.sdxcentral.com/analysis/hybrid-theory-reanimating-security-for-the-post-quantum-era/), securing AI agent-borne traffic flows, simplifying manageability with agentic SASE operations capabilities, sovereign controls, and reduced time from vulnerability discovery to exploitation via AI.\n\nFortinet was dropped out of the leaders box just one year after its debut in the division. The firm was due to delayed feature enhancements, below-average customer experience, and how its large installed base makes its firewall platforms a frequent target for attackers.\n\n“This has resulted in frequent patching and elevated customer concerns in production and when making buying decisions,” Gartner commented on Fortinet.\n\nFortinet now sits in the “challengers” box with Cisco and Versa Networks.\n\nThe former was gilded for its PoP infrastructure and sales execution, but knocked down for many of the same reasons as Fortinet was, alongside a management complexity in fully operating its SD-WAN and secure service edge (SSE) functionalities.\n\nVersa Networks was warned over the introduction of non-SASE-adjacent features, but received plaudits over its product capabilities and – at risk of repetition – its PoP estate.\n\nOn the PoP question, Zeus Kerravala, founder and principal analyst with ZK Research, recently told this title that while the number of PoPs can be critical, security professionals place more importance on quality and capabilities.\n\n“The features customers are looking for are low latency, high performance, consistency of service across PoPs and data residency. More can become less when vendors have any kind of inconsistency,\" Kerravala said. \"As an example, a vendor might leverage a hyperscaler to turn the PoP up quickly but did not do the due diligence to ensure network connectivity is where it needs to be for their volume.\"\n\n## Niche players and a solo visionary\n\nRounding out the latest Gartner SASE quadrant was the “niche players” category, as home to Hewlett Packard Enterprise (HPE) and a host of less-than-household names, including China’s Sangfor Technologies.\n\nHPE, which was estimated to have approximately 600 active SASE platform enterprise customers, was also tipped to integrate the [Juniper Networks SRX firewall](https://www.sdxcentral.com/analysis/comparing-hpe-and-juniper-networks-security-portfolios-who-does-it-better/) stack in its SASE platform; SSE into its EdgeConnect SD-WAN fabric; and Juniper Mist with HPE Networking Central for full-stack, agentic-based networking operations. Whether this reduces what Gartner labeled as HPE’s management complexity remains to be seen; it also won’t solve the issue of HPE’s comparatively low-PoP count, according to Gartner.\n\nCloudflare sat on its own in the “visionaries” box, with Gartner applauding the vendor for its AI and PQC security leanings, and concern over “a narrow view of sovereignty” due its focusing on encryption and decryption location.\n\nGartner also gave honorable mentions to “noteworthy providers” such as Ericsson[ with its Cradlepoint line](https://www.sdxcentral.com/news/cradlepoint-acquires-cloud-security-provider-to-integrate-5g-sase/), SonicWall, and Huawei.\n\nThe research giant predicts the overall SASE market will reach more than $18 billion in 2026, with a 2025 through 2030 compound annual growth rate (CAGR) of 23%.", "url": "https://wpnews.pro/news/gartner-sase-2026-rankings-netskope-leads-cato-networks-leaps-and-palo-alto", "canonical_source": "https://www.sdxcentral.com/news/gartner-sase-2026-rankings-netskope-leads-cato-networks-leaps-and-palo-alto-networks-falls/", "published_at": "2026-08-03 12:52:04+00:00", "updated_at": "2026-08-03 13:01:01.489331+00:00", "lang": "en", "topics": ["ai-safety", "ai-policy"], "entities": ["Netskope", "Gartner", "Cato Networks", "Palo Alto Networks", "Zscaler", "Aim Security", "AT&T Business", "Andy Foerstner"], "alternates": {"html": "https://wpnews.pro/news/gartner-sase-2026-rankings-netskope-leads-cato-networks-leaps-and-palo-alto", "markdown": "https://wpnews.pro/news/gartner-sase-2026-rankings-netskope-leads-cato-networks-leaps-and-palo-alto.md", "text": "https://wpnews.pro/news/gartner-sase-2026-rankings-netskope-leads-cato-networks-leaps-and-palo-alto.txt", "jsonld": "https://wpnews.pro/news/gartner-sase-2026-rankings-netskope-leads-cato-networks-leaps-and-palo-alto.jsonld"}}