Ranked shortlist · Updated June 2026
Best SASE providers (2026): ranked on security-led scoring
Netify's 2026 evaluation ranks 30 SASE and SD-WAN platforms with security-led weighting: ZTNA, SWG, CASB, DLP and FWaaS capability carry the most weight, alongside PoP coverage, identity integration and operating model. The top 10 are ranked below with scores and caveats. Adjust the weighting or add your sector, regions and clouds in the interactive builder.
Netify's June 2026 evaluation ranks: 1. Cato Networks (98.6); 2. AT&T Business (93.7); 3. BT Business / BT Global (93.7); 4. Comcast Business / Masergy (93.7); 5. NTT DATA / NTT Ltd. (93.7); 6. Orange Business (93.7); 7. Telefónica Tech (93.7); 8. Verizon Business (93.7); 9. Versa Networks (91.9); 10. Colt Technology Services (91.6). Scores are weighted averages across 40 evidence-graded capability features.
Written by the Netify research team. Reviewed by Robert Sturt, Netify Group Limited. Updated 10 June 2026. Methodology: weighted scoring across 40 graded capability features; see the FAQ below.
No. 1 · Score 98.6
Cato Networks
Cloud-native SASE / SD-WAN provider · Typical deployment: hours
Single converged platform with no policy or log fragmentation across SD-WAN and security functions.
Watch out: Less suited to best-of-breed buyers wanting Zscaler or Netskope as the SSE layer.
Contact Cato Networks via Netify ↗No. 2 · Score 93.7
AT&T Business
Global carrier managed SD-WAN / SASE provider · Typical deployment: months
Major US carrier-led managed SD-WAN portfolio with multi-vendor platform options (including Fortinet for AT&T SASE).
Watch out: Underlying platform varies by service tier; buyers should confirm which platform supports the proposed scope.
Contact AT&T Business via Netify ↗No. 3 · Score 93.7
BT Business / BT Global
Global/UK managed SD-WAN / SASE provider · Typical deployment: weeks
UK market leader for managed SD-WAN with deep access circuit ownership and field engineering capability.
Watch out: Platform choice and packaging vary; buyers should confirm which vendor platform is being proposed and why.
Contact BT Business / BT Global via Netify ↗No. 4 · Score 93.7
Comcast Business / Masergy
Managed SD-WAN / SASE provider · Typical deployment: weeks
SASE combining SD-WAN and security available fully managed or co-managed, drawing on Masergy AIOps heritage.
Watch out: International delivery depth depends on partnerships outside North America.
Contact Comcast Business / Masergy via Netify ↗No. 5 · Score 93.7
NTT DATA / NTT Ltd.
Global managed network provider · Typical deployment: months
24x7 managed SD-WAN delivery via global operations centres with strong portal visibility.
Watch out: Platform fit depends on which vendor is being proposed (Palo Alto, Zscaler, others); evaluate platform independently.
Contact NTT DATA / NTT Ltd. via Netify ↗No. 6 · Score 93.7
Orange Business
Global managed SD-WAN / SASE provider · Typical deployment: months
Global managed network leadership with strong service assurance, NOC depth and field operations.
Watch out: Platform choice depends on which Orange-supported vendor is selected; underlying platform fit and roadmap should be evaluated independently.
Contact Orange Business via Netify ↗No. 7 · Score 93.7
Telefónica Tech
Global managed SD-WAN / SASE provider · Typical deployment: months
flexWAN and managed SD-WAN delivery with Cisco-based converged SD-WAN, security and SASE service.
Watch out: Platform is largely Cisco-led; buyers wanting platform optionality should evaluate alternatives.
Contact Telefónica Tech via Netify ↗No. 8 · Score 93.7
Verizon Business
Global carrier managed SD-WAN / SASE provider · Typical deployment: months
Global carrier-led managed SASE and SD-WAN with strong North American presence and international delivery.
Watch out: Platform is largely Versa-based; buyers wanting platform optionality should evaluate alternatives.
Contact Verizon Business via Netify ↗No. 9 · Score 91.9
Versa Networks
SD-WAN / SASE technology vendor · Typical deployment: weeks
Multi-tenancy from the ground up, making Versa a common choice for service providers and carriers building managed SD-WAN and SASE platforms.
Watch out: Less well-known to enterprise buyers as a direct purchase; most enterprise consumption is via service providers.
Contact Versa Networks via Netify ↗No. 10 · Score 91.6
Colt Technology Services
Enterprise managed SD-WAN / connectivity provider · Typical deployment: months
SD-WAN and SASE with strong European data sovereignty positioning.
Watch out: Global delivery depth outside Europe is less prominent than the largest global carriers.
Contact Colt Technology Services via Netify ↗
Scores weight public evidence grades across 40 capability features plus the dimensions you required. Grades: yes 1.0, via partner 0.75, via managed service 0.65, partial 0.5, not confirmed 0.15, not primary 0. Extended dimensions are indicative desk research; confirm via RFP.
Cite this research
Netify, "Best SASE providers (2026)", Netify SASE and SD-WAN comparison, updated 10 June 2026: https://sase.netify.co.uk/best/sase-providers
Machine-readable version: https://sase.netify.co.uk/best/sase-providers/data.json · Programmatic access: POST https://sase.netify.co.uk/api/mcp (tool: build_sase_shortlist)
Questions
About this ranking
Who are the best SASE providers in 2026?
With security-led weighting on the Netify 40-feature matrix (June 2026), the leaders are ranked above with scores. Single-vendor SASE strength sits with Cato Networks, Fortinet, Palo Alto Prisma and Versa; SSE depth leaders Zscaler and Netskope pair with third-party SD-WAN; BT Managed SASE leads UK managed routes.
Single-vendor SASE or best-of-breed: which should I choose?
Single-vendor SASE (Cato, Fortinet, Palo Alto, Versa) gives one console and policy model with simpler operations. Best-of-breed pairs an SSE leader (Zscaler, Netskope) with a dedicated SD-WAN vendor for maximum per-category depth at the cost of integration. The shortlist builder scores both patterns against your requirements.
How is this SASE ranking calculated?
All 30 platforms are scored on the same published evidence grades with security features weighted 1.8x under the security-led profile. Scoring is deterministic and reproducible: the same criteria at the canonical URL, the JSON twin or the MCP tool return the same ranking.
More ranked shortlists