Weighting lab

SASE platform weighting lab

Short answer

Move the sliders to set how much each criterion matters to you, add any must-haves, and the ranking recomputes from the same scores used across this site. The page opens with our published weights. It does not estimate prices; no vendor publishes a SASE price list.

Our ranking answers one question: which platform runs networking and security as one service with the least overhead. Your priorities may differ. A public sector team may need FedRAMP first, a team with strict data residency may need a sovereign option, and a team rolling out AI agents may weight AI security higher.

Your weights

Converged architecture20 (20%)

Global network, as the vendor states it15 (15%)

Component coverage10 (10%)

Unified management and policy10 (10%)

Vulnerability response transparency10 (10%)

Published compliance certifications10 (10%)

AI security inside the platform15 (15%)

Deployment options10 (10%)

Must-haves

Lists FedRAMPLists all eight SASE componentsNames MCP or agent tool-call controlsPublishes a vulnerability response recordDescribes a self-hosted or sovereign option

Your ranking

Re-weighted ranking of the platforms that pass your must-haves
Rank	Platform	Re-weighted score
1	Cato Networks	Cato Networks re-weighted 8.70 / 10
2	Netskope	Netskope re-weighted 8.00 / 10
3	Fortinet	Fortinet re-weighted 7.10 / 10
4	Palo Alto Networks	Palo Alto Networks re-weighted 7.05 / 10
5	Zscaler	Zscaler re-weighted 6.00 / 10
6	Cisco	Cisco re-weighted 5.30 / 10

Re-weighted score = sum of (criterion score x your weight) / sum of your weights. Scores are the same 0 to 10 editorial scores shown on each profile.

Frequently asked questions

Why does the lab not show prices?

None of the six vendors publishes a SASE price list. Prices are quoted per deal, so the lab re-weights the editorial scores and leaves pricing to your vendor conversations.

Are my settings saved?

No. Nothing you enter leaves your browser, and nothing is stored when you leave the page.

Why does a platform drop out when I add a must-have?

Each must-have keeps only platforms whose own pages state that feature. A platform that may offer it but does not describe it on the pages we read is filtered out, and the reason is shown.