Cato SASE Platform vs Cloudflare One
Cato SASE Platform
catonetworks.comCloudflare One
cloudflare.comSide by side
| Figure | Cato SASE Platform | Cloudflare One |
|---|---|---|
| Price from | $0.08/mo | $7/mo |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| iOS | Yes | Yes |
| Android | Yes | Yes |
| API | Yes | Yes |
| Plans published | 3 | 3 |
| Spec score · Network as a Service (NaaS) Platforms | 8.8 (#2) | 8.6 (#4) |
| Spec score · Zero Trust Architecture Software | 9.0 (#2) | 8.7 (#4) |
| Spec score · Secure Access Service Edge Software | 8.8 (#3) | 8.7 (#4) |
| Spec score · Connectivity Solutions | 8.9 (#6) | 8.8 (#7) |
| AI security | AI Security discovers and categorizes public AI usage, enforces intent-based policies and detects attacks such as prompt injection and jailbreaks against private AI. | The platform provides visibility and control over GenAI usage, discovers unsanctioned tools, secures MCP-server connections, and can analyze prompt intent to block sensitive data leakage. |
| Client platforms | The Cato Client is available for Windows, macOS, Linux, iOS, and Android, with support depending on operating-system and client versions. | The Cloudflare One Client has stable releases for Windows, macOS, Linux, iOS, Android, and ChromeOS. |
| Compliance | Cato’s Trust Center lists SOC 2 Type II, PCI, ISO 27001:2022, ISO 27701, GDPR, HIPAA, and other compliance badges. | Cloudflare's SOC 2 Type II report covers security, confidentiality, and availability controls and all Cloudflare plans are in scope. |
| Founded | 2015 | 2009 |
| Headquarters | Tel Aviv, Israel | San Francisco, CA |
| Management | The Cato Management Application provides centralized policy configuration, analytics, monitoring, troubleshooting and incident investigation. | The platform centralizes visibility and control through one unified dashboard, API, and Terraform provider. |
| Remote access | Users can access private applications through a ZTNA client, Enterprise Browser, or clientless portal. | Cloudflare One provides identity-first, quantum-safe access to internal applications with granular zero trust rules. |
| Support | Cato’s site directs customers to its support team and provides a support portal. | Free plans include community forums and Discord support, pay-as-you-go plans include chat and ticket support, and contract plans include phone, chat, and ticket support. |
Plans
Cato SASE Platform
- Basic$1 a year
- Cato SASE PlatformPriced on request
- SASE Cloud PlatformPriced on request
Cloudflare One
- Free PlanFree
- Pay-as-you-go$7 a month
- Contract PlanPrice not published
In their own words
Cato SASE Platform
Cato SASE Platform brings networking, security, and access into a cloud-native platform managed through a shared policy engine and console. Its network provides global connectivity, segmentation, and multi-cloud access over a cloud-native backbone. Security features use single-pass inspection and shared policy, and include firewall-as-a-service, secure web gateway, intrusion and malware prevention, DNS security, and remote browser isolation. Other listed capabilities include SD-WAN, CASB, DLP, XDR, endpoint protection, digital experience monitoring, and a platform API. Users can reach private applications through a ZTNA client, Enterprise Browser, or clientless portal; browser access can also reach hosted applications and RDP or SSH resources without installing the client. Cato lists 100 integrations across areas such as authentication, asset management, EDR, ITSM, SaaS security, and SIEM, though some require a separate license. The Cato Client supports Windows, macOS, Linux, iOS, and Android, subject to operating-system and client-version support. Pricing is available on request. The company was founded in 2015 and is based in Tel Aviv, Israel.
Cloudflare One
Cloudflare One is a SASE platform for connecting and protecting an organization's workforce, AI agents, and infrastructure. It brings together zero trust access, secure web gateway, CASB, network-as-a-service, firewall-as-a-service, remote browser isolation, DLP, email security, and digital experience monitoring. Internal application access uses identity-first controls and granular rules. DNS and HTTP filtering protects remote users and branch offices, while a private global backbone connects offices, clouds, and datacenters. AI controls provide visibility into generative AI usage, identify unsanctioned tools, secure MCP-server connections, and can assess prompt intent to block sensitive data leakage. Email protection addresses phishing, impersonation, malware, and business email compromise. Management is centralized through a dashboard, API, and Terraform provider. The free plan covers up to 50 users and up to 24 hours of standard log retention, with community forums and Discord support. Pay-as-you-go is $7/user/month, with no user limit and up to 30 days of standard log retention. Contract pricing is not listed.