Cato SASE Platform · Modular Licensing

Build Your Custom SASE Quote

Select the modules your organisation needs, configure user counts, and get an instant monthly cost — with full ROI analysis benchmarked against real-world incident data.

"We Are SASE & We Offer Only The Best!!"
⬇ No Minimums ⬆ Monthly PGK Billing ◎ No Hardware 🔒 Zero Trust 📡 SD-WAN 🛡 Cloud Security 🇵🇬 PNG Deployment

Base Product Licenses

Core connectivity and security — your SASE foundation.

Internet Security
Protects all Internet & SaaS traffic with Next-Gen Firewall, URL filtering, IPS, and DNS protection. Includes 1 Mbps bandwidth/user.
K90.50/ user / month
Users
App Connector (ZTNA)
Zero-trust access to private apps in data centres or clouds — without exposing your network. Replaces legacy VPN. 1 Mbps/user included.
K105.50/ user / month
Users
WAN / SD-WAN
Connects sites securely with intelligent traffic steering, QoS, SLA guarantees, and high-availability failover. Up to 100 Mbps.
K75.50/ Mbps / month
Mbps
Remote User
Secure remote access via Cato Client or browser for users outside site locations. Covers connectivity to WAN or App Connector resources.
K60.50/ user / month
Users

Premium Security Licenses

Extend protection on top of base products. AI Security modules are standalone.

Advanced Threat Prevention
Stops advanced malware and zero-day exploits. Includes Remote Browser Isolation (RBI) and Sandbox. Enhances Internet Security.
K45.50/ user / month
Requires Internet Security
Users
Remote Browser Isolation
Browsing sessions execute in a secure remote environment — malicious content never reaches the endpoint.
K30.20/ user / month
Requires Internet Security
Users
Sandbox
Analyses unknown files in an isolated environment to detect zero-day malware before it reaches your users.
K30.20/ user / month
Requires Internet Security
Users
App & Data Security
Cloud Access Security Broker (CASB) + Data Loss Prevention (DLP). Prevents unauthorised data sharing across SaaS apps.
K45.20/ user / month
Includes CASB + DLP
Users
CASB
Visibility and control over SaaS app usage and shadow IT. Enforces access policies across cloud services.
K26.50/ user / month
Requires Internet Security
Users
DLP — Data Loss Prevention
Detects and blocks sensitive data leaks across Internet and SaaS applications in real time.
K26.50/ user / month
Requires Internet Security
Users
Assets Security
Device visibility and control. Enables device discovery, policy enforcement, and micro-segmentation. Up to 1,500 devices per block.
K16,000/ device block
Up to 1,500 devices / block
Blocks
WAN Threat Prevention
Threat inspection for all WAN traffic between sites. Includes LAN IPS for Sockets. Protects east-west traffic from ransomware propagation.
K30.20/ Mbps / month
Add-on to WAN
Mbps
EPP — Endpoint Protection
Direct endpoint security with malware prevention and centralised management. Works alongside the Cato Cloud.
K30.20/ user / month
Users
AI Security — End Users
Governs and monitors user interactions with public AI services (ChatGPT, Copilot, Gemini). Discovery, policy enforcement, and DLP for AI.
K75.50/ user / month
Standalone · No base required
Users
AI Security — Applications
Runtime protection and governance for custom AI applications. Integrates via APIs and AI Gateway. Standalone per organisation user.
K113.00/ user / month
Standalone · Per org user
Users

Insights Licenses

Full visibility, monitoring, and analytics across your entire SASE deployment.

Digital Experience Monitoring
Real-time monitoring of user and application performance across the Cato Cloud. Troubleshooting dashboards and SLA visibility.
K38.00/ user / month
Users
XOps / XDR + AIOps
Extended Detection & Response plus AI for IT Operations. Correlates events across the network and automates incident response.
K20.50/ user / month
Users
Data Lake
Historical event storage for compliance and forensics. 2.5M events/hour, 3-month retention per package. Account-level licensing.
K6,000/ package / month
Per package · Account level
Packages

ROI Risk Analysis

Real-world incident benchmarks converted to PGK. Adjust to your organisation's risk profile.

Risk Cost Inputs
📊 IBM Cost of a Data Breach 2025 · Verizon DBIR 2025 · Sophos State of Ransomware 2025
Global avg breach cost: USD $4.44M (≈K19.1M PGK). 88% of SMB breaches involved ransomware (Verizon 2025). Ransomware in 44% of all breaches, up from 32% in 2024. Defaults conservatively scaled for PNG SMBs at ~10% of global averages. USD 1 = K4.30.
Data Breach / Ransomware Recovery IBM 2025
IBM 2025 global avg K19.1M · PNG conservative 10% = K1.9M
K
Contract Loss / Revenue Impact Verizon DBIR
Verizon 2025: 60% of SMBs close within 6 months · avg 21 days downtime
K
Regulatory & Legal Penalty PNG NDPGP 2024
PNG National Data Protection & Governance Policy — active enforcement since 2024
K
Operational Disruption / Downtime IBM 2025
IBM 2025: up to K537K/hr · avg 21 days downtime · 65% still recovering post-breach
K
Annual Incident Probability (Verizon 2025: 88% of SMB breaches involve ransomware) 55%
5% — Low↑ 55% SMB Avg95% — Near-Certain
ROI Summary
Monthly
K0
Annual
K0
Risk Exposure
K0
ROI Value
0%
SASE Cost
K0
Breach / Ransom
K0
Contract Loss
K0
Regulatory
K0
Ops Disruption
K0
💡 Select modules to see your ROI
Add modules above and confirm your risk inputs to generate a personalised ROI analysis based on real-world breach data.
Quick-Start Scenarios
🤖 AI Security Only
Standalone AI Security for 30 users — fastest entry point
🏢 SMB Essentials
Internet Security + AI Security + Remote Users (30 users)
🏦 Finance / Banking
IS + AI + DLP + CASB + EPP + XOps (50 users)
🏛️ Enterprise / Govt
Full stack: IS + WAN + ATP + AI + DEM + XOps (100 users)
🚛 Transport & Logistics
IS + WAN + AI + DLP + Remote Users (40 users)
⛏️ Mining & Resources
IS + WAN + ATP + AI + Assets Security (80 users)
You are offline — running from cache