No more typing reviews! Try our Samantha, our new voice AI agent.

Cato SASE Cloud Platform vs Corelight Open NDR comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cato SASE Cloud Platform
Ranking in Intrusion Detection and Prevention Software (IDPS)
15th
Average Rating
9.0
Reviews Sentiment
7.5
Number of Reviews
31
Ranking in other categories
WAN Optimization (4th), Cloud Access Security Brokers (CASB) (11th), Software Defined WAN (SD-WAN) Solutions (7th), WAN Edge (7th), ZTNA as a Service (9th), Secure Access Service Edge (SASE) (5th), Remote Browser Isolation (RBI) (3rd)
Corelight Open NDR
Ranking in Intrusion Detection and Prevention Software (IDPS)
19th
Average Rating
8.8
Reviews Sentiment
7.6
Number of Reviews
7
Ranking in other categories
Network Traffic Analysis (NTA) (4th), Network Detection and Response (NDR) (7th), AI-Powered Cybersecurity Platforms (12th)
 

Mindshare comparison

As of October 2026, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of Cato SASE Cloud Platform is 2.5%, down from 2.5% compared to the previous year. The mindshare of Corelight Open NDR is 1.3%, down from 2.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Intrusion Detection and Prevention Software (IDPS) Mindshare Distribution
ProductMindshare (%)
Cato SASE Cloud Platform2.5%
Corelight Open NDR1.3%
Other96.2%
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

reviewer2697738 - PeerSpot reviewer
Product & Services Integrator at a comms service provider with 10,001+ employees
Cloud security has unified global network design and has simplified threat visibility
I think all of the functionalities, such as the secure web gateway feature, are quite good. I also believe Cato SASE Cloud Platform is one of the only solutions that has not only a software firewall solution but also a physical software solution where you can change the company's firewalls and put in sockets from Cato SASE Cloud Platform, which I see as an advantage for them. The single-pass architecture has improved user experience with Cato SASE Cloud Platform as it provides security teams in companies a platform where they can easily obtain information if there are breaches or security issues. I assess the benefit of integrating WAN optimization as good. There is ease in making rules between WAN optimization, especially when it comes to global connections because of all their points of presence that are spread over the world. I think the real-time threat protection of Cato SASE Cloud Platform is also good. Their points of presence are quite efficient, and I do not see any delays in that area.
reviewer2834367 - PeerSpot reviewer
Growth And Strategy Lead at a computer software company with 51-200 employees
Network visibility has transformed how we detect nation state threats and protect critical industry
Before Corelight recently started pushing some of the agentic features, querying at times could be a little difficult, depending on your mastery of log scale. However, I think with a lot of the artificial intelligence that they are building in, it is getting a lot easier to query in the platform. I would definitely encourage them to continue down that path where anybody can hop into the platform and start running queries, whether it is a simple instruction like I want this, and an artificial intelligence process can actually build the query and do it. I think that would be super powerful. Cyber skill sets are in high demand, and there is a huge backlog in cyber talent. We cannot fill all the positions we need. The easier we can make these cyber systems for people to pick up and be effective on, I think is really key. Explainability of data is hyper important. In the past few artificial intelligence related updates we have gotten from Corelight, that has been one of the first questions our team has asked every time or that I have asked: show me what the model is doing, show me how it came to this analysis. Within Investigator platform, they are able to walk through and see exactly what data the artificial intelligence pulled from where and why it did what it did as far as making its suggestions. They have definitely built their system with artificial intelligence in mind up front, and having that openness as one of the key features of any of their artificial intelligence and machine learning processes in the platform is important. The issue with black boxes is obviously hallucinations from artificial intelligence and just not being able to trace to ground truth. When we are talking about these cyber incidents and being able to do forensics, you need to be able to pinpoint and tie everything together, and black boxes really obscure that and prevent you from doing so. Corelight has done a really good job of making sure that everything is explainable and everything is mapped when it comes to leveraging any of their artificial intelligence features.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is difficult to find types of companies I would not recommend Cato SASE Cloud Platform to, and I believe you can use Cato SASE Cloud Platform in most environments, although there could be some cases where organizations are really cost-sensitive."
"The product is very simple, and everything can be done very quickly."
"The product is efficient and easy to use."
"This solution has allowed us to have more points of presence around the world, improved bandwidth across different areas, and provided data leak prevention, CASB, a better dashboard, and the ability to drill down into security problems in a few clicks."
"Technical support was always helpful and responsive."
"The feature that I find to be the most valuable is the bandwidth aggregation."
"If you really want to have a solution that has an easy deployment and provides SD-WAN and firewall abilities, go with Cato Networks."
"Cato SASE Cloud Platform's self-healing model is the most valuable feature."
"It is easy to deploy and easy to handle."
"Corelight makes much easier the remediation of cyber attacks; instead of facing a chaotic amount of logs, Corelight provides correlated metrics that allow pivoting to find, in seconds, all the data related to an alert, detection, or asset."
"Our company has seen massive improvements in cybersecurity position for our clients."
"The most valuable feature is the embedded IDS from Suricata."
"Technical support seems to be good."
"It's easy to create additional dashboards specific to supporting specific tasks."
"Corelight is easy to use."
"It's an easy way for us to get visibility in a client's environment."
 

Cons

"The solution is not cheap."
"However, Cato's solution is modular. You don't have to buy the whole package; instead, you can start with some of the functionality and then expand it as you see fit, based on its value and as your other contracts expire."
"They can't do one-to-one NAT (Network Address Translation) in AP (their access point), and that is something that Palo Alto can do."
"The price could be better."
"For a packaged solution, needing external intervention or a system integrator to get other features not offered by Cato Networks could be an area for improvement. Cato Networks does what it's meant to do and is even overstretching capabilities when introducing new features. The product can only have very few features added on top of what its currently doing. Managed service providers can deliver the extra features you'd need. It's a set of managed services, and what Cato Networks does is very comprehensive. So, for the time being, when the actual incarnation of the SASE solution is deployed, Cato Networks is a very effective product. Naturally, technology will evolve, so everybody knows that in three, four, or five years, there will be a new kid on the block, a new game. Still, at the moment, Cato Networks only needs to improve a little regarding SASE delivery. The product is doing very well, but one feature the Cato Networks team is doing right is preparing for the future through deploying the SSE 360, so the security service is at that edge. It's an excellent strategy to prepare for the future. SSE 360 is what Cato Networks should invest in the most to keep prospering."
"Cato Networks security could be better."
"The platform lacks strong security features on the edge. All security features are on the cloud."
"The tool should improve its interface."
"Before Corelight recently started pushing some of the agentic features, querying at times could be a little difficult, depending on your mastery of log scale."
"The solution’s architecture is complex and difficult to understand. There are multiple machines and VMs."
"They can enhance the interface of the product. They can make it more interactive and also easier to use for feature access."
"In the next release, building a graphical user interface would be helpful."
"Machine learning could be a good improvement, but it's very costly."
"Corelight hasn’t added features in a long time."
"It's an expensive solution and the price could be reduced."
 

Pricing and Cost Advice

"I rate the price of Cato Networks a four out of five."
"Cato Networks seems more expensive than Cisco Meraki."
"The solution is reasonably priced since Cato Networks provides features like SASE and monitoring, which I am very happy with currently."
"The price of Cato Networks is in the middle range compared to other solutions. NetFoundry is a less expensive solution than Cato Networks."
"The pricing is on the higher side, almost an eight out of ten."
"The pricing of this solution depends on what you need. It is based on bandwidth."
"The platform is expensive."
"The price is not an issue for us, as it is priced more competitively than some other vendors."
"It's a yearly fee and depends on what you are looking for."
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
915,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
13%
Comms Service Provider
10%
Financial Services Firm
9%
Computer Software Company
8%
Financial Services Firm
12%
Government
9%
Real Estate/Law Firm
7%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise7
Large Enterprise11
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise2
Large Enterprise1
 

Questions from the Community

What is your primary use case for Cato Networks?
I can see that I am a consultant at a reseller and I am the architect of Cato SASE Cloud Platform designs. In the baseline, I usually recommend Cato SASE Cloud Platform for international companies ...
What advice do you have for others considering Cato Networks?
It is difficult to find types of companies I would not recommend Cato SASE Cloud Platform to, and I believe you can use Cato SASE Cloud Platform in most environments, although there could be some c...
What is your experience regarding pricing and costs for Cato Networks?
I do not find it particularly expensive, but for some companies, they may not have the budget to be at that level of security for their networks.
What is your experience regarding pricing and costs for Corelight?
I have a fortunate experience with pricing, setup costs, and licensing of Corelight Open NDR, as being a principal architect, I get to sit outside of that conversation and just choose the best prod...
What needs improvement with Corelight?
Corelight Open NDR does not need any improvements or additional features in the next releases. The product is excellent at what it does, and I believe what they have done with it, taking an open-so...
What is your primary use case for Corelight?
I have been using Corelight Open NDR solution for approximately three years. I leverage the Suricata engine heavily for alerting on indicators of compromise as my main use case for this solution.
 

Also Known As

Cato Networks
Corelight Open NDR
 

Overview

 

Sample Customers

Paysafe, AdRoll, Pet Lovers Centre, Arlington Orthopedics, Humphreys & Partners Architects
CarrefourEdnonGrand Canyon EducationSektorCERTTietoevryVolkswagen Financial Services
Find out what your peers are saying about Cato SASE Cloud Platform vs. Corelight Open NDR and other solutions. Updated: September 2026.
915,341 professionals have used our research since 2012.