Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Cato CASB review

#5 of 25 in Cloud Access Security Broker Software

A hybrid CASB for inline enforcement, API controls, DLP, and SaaS risk visibility.

9.0/10Editor score
Visit Cato
Cato CASB9.0 Visit Cato

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Cato CASB provides cloud and SaaS application visibility and control for organizations that need integrated CASB and SASE capabilities. It identifies sanctioned and unsanctioned applications, assesses application risk, and applies policies based on users, applications, actions, and context. The product supports web and API access, with hybrid deployment, inline controls, API controls, DLP controls, shadow IT discovery, and threat detection.

Its standout capability is the combination of real-time inline enforcement and API-based SaaS monitoring. Inline inspection can enforce policies during cloud application traffic, while API controls provide out-of-band visibility into SaaS activity, including activity involving unmanaged devices. Administrators can also apply tenant restrictions, monitor application activity, and manage policies centrally through the Cato Management Application. Integrations include Microsoft 365, Google Drive and Workspace, Salesforce, Slack, GitHub, Box, Dropbox, ChatGPT, ServiceNow, Workday, Zendesk, Egnyte, Confluence, Jira, and Atlassian Jira and Confluence.

Cato describes licensing through bandwidth and ZTNA-user quantities, with pricing handled through contact with Cato or a representative. That approach suits organizations evaluating CASB alongside broader access and policy requirements, but it gives buyers less immediate pricing visibility than a published plan structure. Cato CASB is a strong fit for teams that need cloud application discovery, Shadow IT and Shadow AI identification, granular controls, DLP, and both inline and API enforcement in one product. Organizations seeking a narrowly scoped SaaS monitoring tool or publicly listed CASB pricing may prefer an alternative with a simpler purchasing model.

Cato CASB pros and cons

  • Where it wins
    • Combines inline inspection with API-based SaaS activity controls
    • Identifies Shadow IT, Shadow AI, application risk, and compliance context
    • Supports granular policies across users, apps, actions, and context
  • Where it doesn't
    • CASB pricing requires contacting Cato or a representative
    • Hybrid deployment spans both inline and API control models
    • Focused on cloud and SaaS application visibility and control

Cato CASB fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update