AI Governance & Security Vendor Wiki

4 min read

Cato Networks

Researched 2026-06-28. Primary category: network-security-sase. Cato is the acquirer of aim-security (not itself acquired — the seed stub mislabeled this).

One-liner — A cloud-native SASE platform (network + security in one cloud service) that bought AI-security pure-play aim-security in 2025 to fold an AI firewall, shadow-AI control, and AI-SPM into its SASE Cloud.

What it does

Cato delivers SASE (Secure Access Service Edge): SD-WAN, ZTNA, secure web gateway, CASB, FWaaS, threat prevention, and data protection as a single cloud-native service, converging enterprise networking and security. Its global private backbone inspects all traffic inline, which is the natural place to enforce AI controls. With the aim-security acquisition, Cato adds: securing employee use of public AI apps (shadow AI / ai-access-governance), an “AI Firewall” protecting private AI apps and agents (ai-runtime-security), and AI Security Posture Management (ai-spm).

Where it sits in the stack

Primary network-security-sase (Foundation layer — the TLS-inspecting man-in-the-middle that everything else rides on) with a secondary ai-spm tag from the Aim acquisition. As the inline SASE chokepoint it can screen untrusted input, block sensitive-data leakage (DLP/CASB), and control outbound flows to AI services. Sits at the green↔red boundary for the whole enterprise.

Deployment & architecture

SaaS, delivered through Cato PoPs on a global private backbone; agents/clients and site connectors route traffic inline through the Cato SASE Cloud (inline proxy model). Aim’s AI security is being integrated natively into that platform rather than sold as a bolt-on. Standard integrations: IdP/SSO, SIEM, endpoint.

Positioning & differentiators

Cato’s differentiator is a single-vendor, single-platform SASE built ground-up (vs stitched-together acquisitions), founded by Shlomo Kramer (co-founder of Check Point and Imperva). The Aim deal — Cato’s first-ever acquisition — is its move to make AI security a native SASE capability rather than a separate product. Competes with the other SASE/SSE incumbents folding in AI security: zscaler, netskope, palo-alto-networks, cloudflare, cisco, forcepoint.

Ownership, funding & M&A

Private / VC-backed. Founded 2015 by Shlomo Kramer and Gur Shatz; HQ Tel Aviv, Israel. In 2025 it extended its Series G with an additional $50M from Acrew Capital (round total $409M) and reported surpassing $300M ARR. Acquired aim-security — announced 2025-09-03; deal value not officially disclosed, press reports ~$350M. Verified against Cato’s own press release and corroborating press. The seed framed Cato as “acquired,” which is wrong — Cato is the buyer. Confidence: high.

CTO / hedge-fund lens

Day-1 if you’re adopting SASE as your network-security backbone; the AI-security additions are a reason to consolidate AI controls onto the same platform rather than buy a separate AI firewall. For a hedge fund already on a different SASE/SSE vendor, Cato’s AI features are a competitive comparison point, not a standalone buy. Indirect SR 11-7 relevance (control/monitoring point, not a model-risk system). Fits mid-market to enterprise that wants one vendor for network + AI traffic security.

Competitors / alternatives

zscaler, netskope, palo-alto-networks, cloudflare, cisco, forcepoint.

Open questions / to verify

  • Official Aim deal value (only press estimates ~$350M; not disclosed by Cato).
  • Whether the Aim brand/standalone product persists or is fully absorbed.
  • Precise cumulative funding total (Series G round = $409M; lifetime raised higher).

Sources

History

  • [2026-06-28] Stub created from seed registry.
  • [2026-06-28] Researched; corrected ownership from “acquired” to independent (Cato is the acquirer). Confirmed Cato acquired aim-security (announced 2025-09-03, ~$350M reported, Cato’s first acquisition). Filled founding (2015), Tel Aviv HQ, Series G ($409M), $300M ARR. Confidence high.

Graph View

Backlinks