SASE Codex — Dashboard

🏗 Component BenchmarkFramework & rubric — start here 📊 Master ScorecardAll vendors · all pillars · radar chart 🔬 Emerging VendorsAryaka · CrowdStrike · Island · Nile · Versa — scoring + analysis

Vendors Tracked

6 Big Six · 5 Emerging · 1 Legacy

Top-Scoring Big Six

—

Weighted avg across scored pillars

Documents Published

8 components · 12 working-docs · 1 spin-off

Known Limitations

Accepted 2026-07-22 · not actively pursued

2026-07-22

4 Known Limitations formally closed out (v2.10)

Fortinet/Versa BSI C5, Island's new claims, and VeloCloud's Gartner MQ standing accepted as standing limitations rather than active research tasks — see Known Limitations panel.

2026-07-22

Full 12-vendor accuracy review (v2.9)

All 12 vendor experts re-verified working-docs against current sources — 6 score changes applied, 2 unsourced claims removed. See Cato and Zscaler.

2026-07-22

Zscaler — SD-WAN scores corrected

Zero Trust Branch hardware (GA Nov 2024) had been wrongly described as nonexistent — a real factual error, not staleness.

2026-07-22

Cato Networks — scores.json resynced

Enterprise Browser and DLP EDM scores were out of sync with the working-doc's own findings — both corrected 3→4.

2026-07-11

Aryaka — full ZTNA + SSE scoring added

Following the Unified SASE 2.0 launch (native GA Universal ZTNA + Next-Gen DLP), all five pillars now scored except Sovereignty.

2026-07-10

Full 12-vendor review pass

VeloCloud's acquisition close date and Island's iOS/Android support claim were both corrected after being wrong for months.

2026-04-20

Fortinet promoted to Big Six

Tier changed from Emerging — now scored across all five pillars alongside the original five.

STANDING

Fortinet + Versa — BSI C5 / IRAP

Accepted as unresolvable via public research — attestation reports are typically gated behind vendor NDA portals. Would need direct vendor contact to confirm.

STANDING

Island — March 2026 platform relaunch

DEM, Island Private Access, and SaaS API claims found only in vendor-authored site copy. Held as a watch item; revisit only if independent corroboration surfaces.

STANDING

Island Desktop — DLP-parity depth

Island's own Endpoint Services and Data Services pages still give conflicting scope claims after two research passes — accepted as unresolved.

STANDING

VeloCloud — Gartner SV-SASE MQ standing

Accepted as permanently unresolvable — Gartner doesn't publish exclusion rationale, so no public source will ever confirm one way or the other.

Live scores unavailable — scores.json couldn't be loaded (this page needs to be served over http/https, not opened directly as a file). Vendor cards below still link out; scores just won't render.

Framework — Complete

Component Benchmark Overview

Rubric · criteria weightings · architectural framing

FRAMEWORK

Master Scorecard

All vendors · all pillars · radar chart · persona matrix

SYNTHESIS

Emerging Vendors Overview

Aryaka · CrowdStrike · Island · Nile · Versa Networks

OVERVIEW

Pillar Deep Dives — Complete

ZTNA — Remote Access

Device posture · identity · per-app segmentation · agentless

PILLAR

SSE — Security Service Edge

SWG · CASB · DLP · TLS · RBI · GenAI protection

PILLAR

SD-WAN — Branch Connectivity

Path steering · private backbones · CPE · app awareness

PILLAR

AIOps — AI-Driven Operations

UEBA · policy authoring · path optimization · RCA

PILLAR

Sovereignty — Data Residency

PoP isolation · certifications · BYOK · AI data governance

PILLAR

Comparisons

Palo Alto vs. Fortinet SD-WAN

Internal battlecard — not linked publicly

INTERNAL

Presentations

None published — customer-facing decks removed 2026-08-03.

Vendor Briefs · Explainers · Whitepaper Sections

None published yet — derived from working-docs on demand.

SASE Codex v2.10 Last updated: 2026-07-22 Big Six: 6 vendors · all 5 pillars Emerging: 5 vendors · pillar-scoped Legacy Incumbent: 1 vendor · comparison anchor Spin-offs: 1 published