# SASE platforms for enterprise buyers: what AI models recommend, November 2026

Gane Index, November 2026 Edition. Asked as "SASE platform" and as "secure access service edge solution", six framings each, to fourteen models with search on, on behalf of an enterprise B2B company. Page: https://www.gane.ai/index/it/network/sase-platforms/2026-11/enterprise

**Standing:** Palo Alto Networks Prisma SASE leads with 24% of first choices; verdict contested. 54 first choices across the direct, paraphrase, budget and scale prompts.

## First-choice share

| Rank | Product | Share | Negative rate | Labels |
|---|---|---|---|---|
| 1 | [Palo Alto Networks Prisma SASE](https://www.gane.ai/index/it/vendors/palo-alto-networks-prisma-sase/index.md) | 24% | 18% | 57 |
| 2 | [Zscaler Zero Trust Exchange](https://www.gane.ai/index/it/vendors/zscaler-zero-trust-exchange/index.md) | 15% | 21% | 68 |
| 3 | [Cato Networks](https://www.gane.ai/index/it/vendors/cato-networks/index.md) | 13% | 16% | 44 |
| 4 | [Cloudflare One](https://www.gane.ai/index/it/vendors/cloudflare-one/index.md) | 11% | 18% | 40 |
| 5 | [Fortinet FortiSASE](https://www.gane.ai/index/it/vendors/fortinet-fortisase/index.md) | 7% | 11% | 55 |
| 6 | [Netskope One](https://www.gane.ai/index/it/vendors/netskope-one/index.md) | 6% | 16% | 50 |
| 7 | [Cisco Secure Access](https://www.gane.ai/index/it/vendors/cisco-secure-access/index.md) | 6% | 15% | 41 |
| 15 | [Check Point Harmony SASE](https://www.gane.ai/index/it/vendors/check-point-harmony-sase/index.md) | 0% | 21% | 19 |
| 18 | [Versa SASE](https://www.gane.ai/index/it/vendors/versa-sase/index.md) | 0% | 31% | 16 |

Rank is by share of first choices among all 52 products named; products with the same share are tied, and the order among them carries no meaning. The table lists those with at least 10 labels.

## Each model's first choice on the direct prompt

- Claude Haiku 4.5: Palo Alto Networks Prisma SASE; alternatives Cato Networks, Check Point Harmony SASE, Zscaler Zero Trust Exchange
- GPT-5.4 mini: Zscaler Zero Trust Exchange; alternatives Cloudflare One, Palo Alto Networks Prisma SASE
- Gemini 3.5 Flash: Palo Alto Networks Prisma SASE; alternatives Cato Networks, Fortinet FortiSASE, Netskope One, Zscaler Zero Trust Exchange
- Perplexity Sonar: Palo Alto Networks Prisma Access; alternatives Cato SASE Cloud, Netskope One, Zscaler Zero Trust Exchange
- Grok 4.20: Palo Alto Networks Prisma SASE; alternatives Cato Networks Cato SASE Cloud, Netskope One
- Mistral Small: Cato Networks, Cloudflare One; alternatives Cisco Umbrella, Palo Alto Networks Prisma SASE, Zscaler Zero Trust Exchange
- DeepSeek V4 Flash: Cato Networks, Palo Alto Networks Prisma SASE; alternatives Cisco Secure Access, Fortinet FortiSASE, Netskope One, Zscaler Zero Trust Exchange
- Llama 4 Maverick: no first choice
- Qwen 3.7 Flash: Netskope One, Zscaler Zero Trust Exchange; alternatives Cisco Secure Edge Platform, Fortinet FortiSASE, Microsoft
- Kimi K2: Palo Alto Networks Prisma SASE; alternatives Cato Networks, Cisco Catalyst SD-WAN, Cisco Secure Access, Zscaler Zero Trust Exchange
- GLM 4.7 FlashX: Cisco Secure Access, Zscaler Zero Trust Exchange; alternatives Cato Networks, Fortinet FortiSASE, Netskope One, Palo Alto Networks Prisma SASE
- MiniMax M2.5: Cato SASE Cloud, Palo Alto Networks Prisma SASE; alternatives Cisco Secure Access, Fortinet FortiSASE, Zscaler Zero Trust Exchange
- GPT-6 Luna: Cato Networks, Palo Alto Networks Prisma SASE; alternatives Fortinet FortiSASE, Netskope One
- Muse Glimmer 30B: Netskope One, Palo Alto Networks Prisma SASE; alternatives Cato Networks, Cisco Secure Access, Cloudflare One, Fortinet FortiSASE

## Sources the answers cite

78 of 84 answers came back with a source list, from 14 of 14 models. Sites named in the most answers:

- fortinet.com: 39 answers, 70 citations
- sase.cloud: 37 answers, 63 citations
- cloudflare.com: 33 answers, 50 citations
- netify.co.uk: 28 answers, 41 citations
- viewpointanalysis.com: 23 answers, 23 citations
- crn.com: 19 answers, 25 citations
- paloaltonetworks.com: 17 answers, 25 citations
- zscaler.com: 15 answers, 18 citations

Pages named in the most answers:

- https://viewpointanalysis.com/post/sase-software-options-2026 (23 answers)
- https://cloudflare.com/static/f850b7510293300e336f35f66c75f8c7/EMA7181_SASE-RR.pdf (15 answers)
- https://sase.cloud/vendors (15 answers)
- https://iboss.com/resources/best-sase-platform-2026 (14 answers)
- https://crn.com/news/security/2024/palo-alto-networks-cato-netskope-top-gartner-s-sase-magic-quadrant-for-2024 (12 answers)
- https://netify.co.uk/insights/sase-cost-tco-global-enterprise (12 answers)
- https://netify.co.uk/insights/who-are-the-best-rated-sase-vendors (11 answers)
- https://thenetworkdna.com/2026/04/top-5-sase-solution-providers-with.html (11 answers)
- https://sase.cloud/ (10 answers)
- https://fortinet.com/resources/articles/steps-to-evaluate-sase-vendors (10 answers)

## Warned against

- Zscaler Zero Trust Exchange: 14 of 68 labels negative. "Avoid for Cost Predictability (at this scale) | Zscaler | Complex multi-SKU licensing, bandwidth overage fees" (DeepSeek V4 Flash, budget prompt)
- Palo Alto Networks Prisma SASE: 10 of 57 labels negative. "Avoid Multi-SKU Complexity: On multi-SKU legacy stacks like Fortinet, Palo Alto or Zscaler" (Claude Haiku 4.5, budget prompt)
- Cloudflare One: 7 of 40 labels negative. "API Limitations: Lacks API access to SaaS applications" (GLM 4.7 FlashX, negative prompt)
- Netskope One: 8 of 50 labels negative. "CASB and advanced DLP are premium-tier add-ons, plus bandwidth overage charges" (DeepSeek V4 Flash, budget prompt)

## Movement since October 2026

Floor: 11 points of share, measured on the calibration repeat.
Same leader: Palo Alto Networks Prisma SASE at 24%.

- Zscaler Zero Trust Exchange: 22% to 15%, −7. Inside the floor by 4 points · rank 2 of 52, unchanged.
- Cloudflare One: 18% to 11%, −7. Inside the floor by 4 points · rank 3 → 4 of 52.
- Fortinet FortiSASE: 0% to 7%, +7. Inside the floor by 4 points · rank 12 → 5 of 52.
- Cisco Secure Access: 0% to 6%, +6. Inside the floor by 5 points · rank 13 → 7 of 52.
- Cato SASE Cloud: 6% to 2%, −4. Inside the floor by 7 points · rank 5 → 10 of 52.
- Palo Alto Networks Prisma SASE: 26% to 24%, −2. Inside the floor by 9 points · rank 1 of 52, unchanged.
- Netskope One: 4% to 6%, +2. Inside the floor by 9 points · rank 6 of 52, unchanged.
- Cato Networks: 12% to 13%, +1. Inside the floor by 10 points · rank 4 → 3 of 52.
- Check Point Harmony SASE: 0% to 0%, ±0. Inside the floor by 11 points · rank 47 → 15 of 52.
- Versa SASE: 0% to 0%, ±0. Inside the floor by 11 points · rank 14 → 18 of 52.

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.