Secure Access Service Edge (SASE) Security

Akamai | Aruba Networks (HPE) | Barracuda Networks | Cato Networks | Check Point Software | Cisco | Citrix | Cloudflare | Forcepoint | Fortinet | Netskope | Palo Alto Networks | Symantec (Broadcom) | VMware | Zscaler

In response to this and other industry-wide trends, Software-Defined Wide Area Networks (SD-WAN) emerged as a new way to optimize connectivity. By leveraging software-based management instead of expensive hardware appliances, SD-WAN allowed enterprises to route traffic intelligently and connect users directly to the cloud and corporate applications. This change improved performance and reduced costs but lacked the advanced security controls enterprises needed. To close that gap, Secure Service Edge (SSE) technologies were developed, bundling four essential capabilities: Secure Web Gateway (SWG), Firewall-as-a-Service (FWaaS), Zero-Trust Network Access (ZTNA), and Cloud Access Security Broker (CASB). Together, SD-WAN and SSE form Secure Access Service Edge (SASE), a unified cloud-delivered framework that combines networking and security. At its core, SASE applies the principle of Zero Trust, where no connection is assumed safe, even from privileged users, with access granted on a least-privilege basis. This ensures that users, branch offices, and workloads receive only the permissions necessary for their roles and by enforcing this principle, organizations minimize potential damage if an attacker compromises a system. SASE also provides visibility into user behavior, network traffic, and data access across a single policy framework, simplifying what was once a patchwork of tools. To deliver this model effectively, SASE relies on a distributed edge where providers deploy global Points of Presence (PoPs) and peer with hyperscalers to bring enforcement closer to end users, reducing latency while maintaining strong security. This cloud-native design makes it particularly well suited for today’s distributed environments.

The security vendor ecosystem has moved quickly to capitalize on the opportunity. Cybersecurity companies have combined internal development with acquisitions to assemble SASE platforms, often bundling advanced features such as data loss prevention and threat intelligence into broader cloud portfolios. As workloads migrate steadily into SaaS and IaaS environments, the demand for integrated networking and security continues to accelerate. SASE growth is outpacing the broader information security market, which itself tops overall IT spending growth. In the past few years, many organizations have been actively pursuing SASE, though some remain short of the full vision. Legacy vendor footprints and fragmented ecosystems fall short of a unified policy fabric that secures connectivity and access across geographies.

In ETR’s Observatory report for Secure Access Service Edge (SASE) vendors, we focus on the data around enterprise-grade security software vendors. This survey ranges from leading vendors like Zscaler and Palo Alto Networks, which are leveraging their impressive presence to continue to scale growth, to newer challengers like Netskope and Cato Networks. It includes data on spending intentions, usage change, relative product strengths, product stickiness, ROI, vendor consolidation, and more.

Meanwhile, financial results reinforce a high growth trajectory for those winning on implementation. Zscaler reported $678 million in Q3 FY2025 revenue, representing 23% year-over-year growth, alongside its announced acquisition of Red Canary to bolster managed detection and response. Even more topically, Netskope filed to go public in an expected $6.5B offering, with more than $700M in annual recurring revenue (ARR), up 33% year-over-year. These signals point to continued enterprise demand, even as growth moderates from its pandemic-era surge.

This data again reinforces that SASE is recognized as critical architecture for securing distributed workforces. Adoption patterns vary, and many deployments remain partial, but the foundations are firming around Zero Trust, cloud-native delivery, and unified platforms. The market is shifting away from tactical point solutions toward long-term convergence strategies, supported by steady vendor investment and enterprise spending. Vendors that succeed continue to show evidence of landing early wins, aligning identity and networking, and layering data controls, before expanding toward full platform convergence and resilience.