Cato Secure Web Gateway

At a glance

• Editor score
  7.1 / 10
• Pricing
  Pricing on request
• Best for
  Cloud filtering with device-aware policies
• Founded
  2015 · Tel Aviv, Israel
• Facts checked
  22 Sep 2026

• Where it wins

  • Inspects encrypted traffic with TLS inspection and centralized controls.
  • Refines policies by user, location, and device posture.
  • Covers 80+ website categories with threat blocking and reporting.

• Where it doesn't

  • Cloud deployment may not suit teams requiring on-premises proxy infrastructure.
  • TLS inspection adds HTTPS decryption and re-encryption administration.
  • Its policy breadth may exceed the needs of basic URL filtering.

Our verdict on Cato Secure Web Gateway

Cato Secure Web Gateway is a cloud-delivered secure web gateway for enterprises managing internet access across users and locations. It inspects and controls internet traffic, including encrypted sessions, while applying centralized access and threat policies. Administrators can use website classification across 80-plus categories, block malicious, phishing, compromised, and parked domains, and restrict Safe Search and YouTube content. The service supports web, Windows, macOS, Linux, iOS, Android, and API access, making it suited to organizations with mixed desktop and mobile environments.

Its strongest fit is policy depth. Controls can be refined by user identity, location, and device posture rather than relying only on destination-based filtering. Device and user authentication controls add identity context, while customizable block and prompt pages can communicate policy decisions to users. TLS inspection enables HTTPS sessions to be decrypted, inspected, and re-encrypted when approved, which supports deeper traffic control but also creates an administrative responsibility around encrypted-session handling. Event logging, querying, and PDF reporting give administrators a way to review activity and policy outcomes.

Cato Secure Web Gateway is a good choice for enterprises that want cloud deployment, centralized governance, threat-domain blocking, and device-aware policies across desktop and mobile platforms. Pricing is handled through contact sales rather than a published self-serve plan structure. Teams seeking a lightweight URL-filtering proxy, an on-premises deployment, or a narrower operational scope may find its inspection and policy model more than they need. Choose it when identity, device posture, encrypted traffic inspection, and reporting are central requirements; consider an alternative when simple filtering is the primary goal.

Cato Secure Web Gateway pricing

Cato Secure Web Gateway fact sheet

Alternatives to Cato Secure Web Gateway

• 3proxyA broad-protocol, self-hosted proxy server for administrators who want granular traffic control.9.4
• SSquidFree open-source proxy software with caching, access controls, and cache peering.9.1
• Gg3proxyA Linux-only open-source proxy with inspection, filtering, chaining, and traffic controls.8.9

See all Cato Secure Web Gateway alternatives →

Also listed in

• Secure Web Gateway Software

Featured on iTechGuides

Cato Secure Web Gateway is listed in our Forward Proxy Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/cato-secure-web-gateway/"><img src="https://www.itechguides.com/best/badge/cato-secure-web-gateway.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. How we rank.

Last updated 7 Oct 2026 · How we research and update