Cato Networks

No entries match these filters. Clear filters

1. See the Real AI Experience with Cato DEM (2026-10-29) Oct 29, 2026 · issue 124

   Cato DEM adds AI Agent Experience Monitoring with a dedicated drill-down for AI latency and errors by model provider, domain, site, and access method.

   • Cato DEM now adds an AI Agent Experience Monitoring drill-down view where IT teams can analyze AI latency and errors broken down by model provider, domain, and site.
   • New integrationCato DEM now isolates AI model-provider traffic — including conversational interactions and coding-agent traffic from tools like Claude Code — from background application noise such as downloads, authentication, and telemetry, so latency and error metrics reflect the actual AI interaction.
   • Cato DEM now shows how users are accessing AI services — browser, terminal, script, or coding tool — so IT can distinguish, for example, a browser session to Claude from a developer using Claude Code.

   3 details in Everything

2. Why so many AI security programs start with the OWASP Top 10 (2026-10-28) Oct 28, 2026 · issue 124
   • New detection Prompt injection and jailbreak detection for AI agents and custom applications
   • New detection Sensitive data detection in AI prompts, responses, and file attachments
   • New detection MCP server and AI skill discovery for supply chain risk
   • New detection Manipulated context detection in live AI interactions
   • New detection Agent activity inventory and per-agent policy enforcement
   • New compliance framework OWASP Top 10 for LLM Applications (2026) and OWASP Top 10 for Agentic Applications (2026) coverage mapping
3. Cato AI Endpoint secures browser AI, desktop AI and coding agents on every endpoint (2026-10-27) Oct 27, 2026 · issue 123

   Cato AI Endpoint launches as a lightweight client to discover, monitor, and block AI apps, coding agents, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers on every endpoint.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Introduces Cato AI Endpoint, a lightweight client that secures browser AI, desktop AI apps, and local coding agents (Claude Code, Codex, Cursor) from a single dashboard, coexisting with existing EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device. and SSESSEServer-Sent Events, a browser API and HTTP-based protocol where a server pushes a stream of text events to a client over a single long-lived connection, giving tools a lightweight alternative to WebSockets for one-way real-time updates. stacks.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Discovers Shadow AI — unapproved AI applications, local agents, MCP servers, and skills installed on endpoints — giving security teams a governed inventory before writing policy.
   • Assigns a risk finding with a block, monitor, or allow recommendation to each skill, and badges verified remote MCP servers, enabling teams to prioritize and remediate the riskiest agents before they act.
   • Correlates endpoint and network AI events in a shared platform and data lake, surfacing the user, endpoint, and data behind each blocked tool or blocked prompt in one dashboard.

   4 details in Everything

4. Make Your SIEM Smarter with Cato (2026-10-21) Oct 21, 2026 · issue 116

   Cato adds a Custom HTTP Push Connector and XOps to stream SASESASEA network architecture model combining wide-area networking and network security functions into a single cloud-delivered service, letting cyber tools enforce consistent policy regardless of where users or workloads sit. telemetry into any SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents., storage, or analytics destination.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢ ⤢ ⤢
   • Adds the Custom HTTP Push Connector to stream selected Cato Events and Flows to any compatible HTTP destination, including AWS S3 and custom analytics platforms, with control over source, destination, filters, and context.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds a data dictionary within the connector to translate Cato telemetry field names into human-readable labels for easier SIEM mapping.
   • Adds Cato XOps to correlate raw events into consolidated, context-rich stories before forwarding to a SIEM, reducing ingestion volume (demonstrated at 37 million daily events compressed to 94 stories).
   • Extends native integrations to over 100 vendors including CrowdStrike, Microsoft, and OpenAI for enriching SIEM workflows with Cato SASE Platform telemetry.
   • Supports east-west WAN traffic visibility alongside north-south traffic within Cato XOps, surfacing lateral movementlateral movementMoving from an initially compromised system or identity to other resources in a network. Attackers often use stolen credentials or trusted connections to expand their access. signals across enterprise resources.
   • Adds the Custom HTTP Push Connector to stream selected Cato Events and Flows to any compatible HTTP destination, including AWS S3 and custom analytics platforms, with control over source, destination, filters, and context.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds a data dictionary within the connector to translate Cato telemetry field names into human-readable labels for easier SIEM mapping.
   • Adds Cato XOps to correlate raw events into consolidated, context-rich stories before forwarding to a SIEM, reducing ingestion volume (demonstrated at 37 million daily events compressed to 94 stories).
   • Supports east-west WAN traffic visibility alongside north-south traffic within Cato XOps, surfacing lateral movementlateral movementMoving from an initially compromised system or identity to other resources in a network. Attackers often use stolen credentials or trusted connections to expand their access. signals across enterprise resources.

   1 more in Everything

5. Stop Guessing. Find the Root Cause with Cato DEM. (2026-10-20) Oct 20, 2026 · issue 115

   Cato DEM gains Root Cause Analysis with Network Adapter Metrics and Client Traceroute to pinpoint digital-experience fault domains.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Adds Root Cause Analysis (RCA) to Cato DEM, correlating endpoint, network, application, and historical path evidence in a single investigation to identify the likely fault domain.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds Network Adapter Metrics to the RCA workflow, surfacing adapter type, BSSID, channel, noise, and signal strength to assess local Wi-Fi conditions contributing to poor experience.
   • Adds Client Traceroute to the RCA workflow, providing historical hop-by-hop path evidence from the client to capture latency, loss, and path behavior — especially useful for intermittent and remote-user issues.
   • Extends RCA scope beyond the individual user to correlate experience data across multiple users, revealing whether an issue is isolated or shared and its broader blast radius.
   • Supports RCA across Cato SASESASEA network architecture model combining wide-area networking and network security functions into a single cloud-delivered service, letting cyber tools enforce consistent policy regardless of where users or workloads sit. and supported third-party network environments, without requiring replacement of existing network infrastructure.
   • Adds Root Cause Analysis (RCA) to Cato DEM, correlating endpoint, network, application, and historical path evidence in a single investigation to identify the likely fault domain.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Extends RCA scope beyond the individual user to correlate experience data across multiple users, revealing whether an issue is isolated or shared and its broader blast radius.
   • Supports RCA across Cato SASESASEA network architecture model combining wide-area networking and network security functions into a single cloud-delivered service, letting cyber tools enforce consistent policy regardless of where users or workloads sit. and supported third-party network environments, without requiring replacement of existing network infrastructure.

   2 more in Everything

6. Securing what your Bedrock AgentCore agents actually do (2026-09-24) Sep 24, 2026 · issue 084

   Cato AI Security for Agents adds read-only discovery and inline inspection of Amazon Bedrock AgentCore agents across prompt, tool call, tool response, and output stages.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Adds read-only discovery of every agent running on Amazon Bedrock AgentCore, surfacing each agent's instructions, model, and connected tools without installing anything.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds inline inspection of agent-model exchanges at four observable stages — prompt, tool call, tool response, and output — to detect prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. and other unwanted activity before the model acts.
   • Extends Cato AI Security for Agents coverage to Amazon Bedrock (Agents Classic and AgentCore), Microsoft Foundry, Microsoft Copilot Studio, ChatGPT (GPTs and Agents), Amazon Quick, and developer-hosted agent endpoints.
   • Adds read-only discovery of every agent running on Amazon Bedrock AgentCore, surfacing each agent's instructions, model, and connected tools without installing anything.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds inline inspection of agent-model exchanges at four observable stages — prompt, tool call, tool response, and output — to detect prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. and other unwanted activity before the model acts.

   1 more in Everything

7. Cato Managed SASE for SMB: Flexible Capacity, Faster Onboarding (2026-09-01) Sep 1, 2026 · issue 061

   Cato launches SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. FlexPool and MSASE Business Center for MSPsMSPsA managed service provider, a company that operates IT services for customers. It may manage systems, networks, backups or other ongoing technology needs. to pool licenses and self-provision SMB customers.

   ⤢ ⤢

   ▶ ⤢
   • New Cato SMB FlexPool provides MSPs and service providers a partner-level pool of Cato licenses, enabling unlimited portability to allocate and reallocate capacity across eligible SMB customers without per-customer license purchases.
   • New Cato MSASE Business Center adds a consolidated Business Overview page showing business accounts, orders, license usage, invoices, and customer lifecycle activity across the partner portfolio.
   • Authorized partners can self-provision eligible services and activate new customer accounts directly in Cato MSASE Business Center without waiting for manual approval workflows.

   3 details in Everything

8. Inside Cato’s Latest AI Security Innovations for Claude (2026-08-13) Aug 13, 2026 · issue 054

   Cato AI Security adds Claude inference hook integration, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface./skill posture visibility, and scoped agent policy rollout via Cato Scout

   • Adds scout-debug command to verify hook registration inside supported agents, enabling in-workflow deployment troubleshooting.
   • Extends Cato AI Security coverage to Claude Chat, Claude Code, and Claude Cowork via Anthropic Inference Hooks — no endpoint agent or network inline access required.
   • Adds MCP and tool visibility so security teams can enumerate the MCP servers and tools available to agents and assess their combined risk surface.
   • Adds skill visibility and posture assessment across the environment, helping teams identify skills that require review before use in business workflows.
   • Enables full-lifecycle policy enforcement across user prompt, AI response, tool input, and tool output for agentic Claude interactions.

   +2 more show less

   • Supports scoped rollout by applying controls to specific users or groups, with Cato Scout client identity tying policies and audit records to the correct endpoint user or device.
   • Enables pre-emptive hook configuration — write hook policy before a supported agent is detected, so the first session on a new device is not outside enforcement.

   7 details in Everything

9. Defeating the Agentic Attacker: Agentic Threat Prevention in Action (2026-08-10) Aug 10, 2026 · issue 054

   Cato Networks introduces Agentic Threat Prevention, combining inline conditional enforcement and an agentic decision-making layer to stop multi-stage AI-driven attacks in real time.

   ⤢ ⤢
   └──▷ HOW TO FIND IT
   Review an active agentic attack finding — including evidence, controls activated, and mitigation status — as it unfolds in the Cato Management Application.
   📍In the Cato Management Application, navigate to Agentic Threat Prevention to view the attack timeline, supporting evidence, activated controls, and current mitigation status for the affected host.
   • New Agentic Threat Prevention capability surfaces findings, supporting evidence, activated controls, and mitigation status inside the Cato Management Application.
   • Inline conditional enforcement dynamically tags hosts based on recent activity and denies specific behaviors mapped to MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. tactics — for example, blocking executable downloads from cloud services on hosts that have contacted known C2 servers.
   • Agentic decision-making layer continuously aggregates telemetry, reasons about host patterns, and automatically applies prevention policies in real time without manual intervention — for example, denying lateral movementlateral movementMoving from an initially compromised system or identity to other resources in a network. Attackers often use stolen credentials or trusted connections to expand their access. vectors on hosts exhibiting both internal discovery and suspicious external communications.

   3 details in Everything

10. Bringing Claude Enterprise Activity into Cato AI Security (2026-07-21) Jul 21, 2026 · release notes

    Cato AI Security now integrates with Claude Compliance API for activity visibility and policy review

    └──▷ HOW TO FIND IT
    Configure the connector in Cato Management Application after creating a Compliance Access Key in Claude Enterprise
    📍In the Cato Management Application, open Integrations and configure the Compliance API connector.
    • Adds integration with Claude Enterprise's Compliance API to retrieve activity and conversation data
    • Enables monitoring of employee usage, collection of conversation logs, and detection of policy violations for Claude Enterprise
    • Provides audit-ready reporting with clear attribution to Claude and Anthropic as the data source

    3 details in Everything