Netskope is a SASE and CASB platform that secures web, SaaS and private app access for enterprises under one policy engine. Sold by quote only.
Netskope inspects the traffic between employees and the cloud, web and private applications they use, then applies one set of data and threat rules to all of it. The platform is called Netskope One and is built by Netskope, Inc., an independent Santa Clara company listed on the Nasdaq. Web gateway, cloud access broker, private access and firewall functions share a single management console. A security team writes a policy once and it follows the user across every route. Next Gen SWG and inline CASB control web and SaaS sessions in real time. CASB API scans data already stored in SaaS and IaaS repositories, and the Cloud Confidence Index scores each SaaS app for risk. Netskope One DLP classifies sensitive files, while instance awareness tells a corporate account apart from a personal one. Private Access gives zero trust access to internal apps, clientless browser access included, and the Cloud Firewall adds optional IPS. SD-WAN gateways, Device Intelligence, DEM, Behavior Analytics and the AI Command Center with AI Guardrails round out the platform. Netskope One is aimed at large enterprises that want CASB, web gateway, ZTNA, DLP and SD-WAN on one platform. Security teams retiring remote access VPNs and network teams bringing branch offices onto cloud-delivered security are its usual owners. Data protection teams use it to decide which generative AI tools staff may use and what they may paste into them. Each organization buys it by quote after a demo request, licensing the modules it needs on the shared platform. On managed laptops the Netskope One Client steers traffic into inline policy, where coaching notifications warn a user before sensitive data leaves. Administrators connect Microsoft 365 through CASB API to strip external users and public links from OneDrive and SharePoint files. Branch sites join through IPsec or GRE tunnels or SD-WAN gateways, and Device Intelligence classifies the IoT and OT devices found there. When an application feels slow, DEM shows the help desk where the session loses time, from the user's on-ramp to the app itself.
Pricing
-
Netskope One
Custom pricing
- Price on request, quoted after a demo request
- Modules licensed on one platform as SSE, Next Gen SWG, CASB, ZTNA, FWaaS, DLP and SD-WAN
- No-cost test drive of Netskope Private Access
- Private Access Publisher and the Incident Investigation Agent are no-charge AWS Marketplace add-ons that need a platform subscription
- IPS, DNS security and SOCKS5 proxy are optional Cloud Firewall features
Features
- Included: Shadow IT discovery from firewall and proxy logs
- Included: Cloud app risk catalog
- Not included: Sanction and block apps by policy
- Included: API-mode connectors to sanctioned apps
- Included: Inline forward proxy for real-time control
- Included: Reverse proxy for unmanaged devices
- Included: Cloud DLP for files in sanctioned SaaS
- Included: Activity-level controls per app instance
- Included: Malware scanning of cloud file storage
- Included: User and entity behavior analytics
- Included: Adaptive access based on device and risk
- Included: Sensitivity label enforcement
- Not included: Encryption or tokenization of data in SaaS
- Included: Remove external collaborators from shared files
- Included: IaaS storage and console coverage
- Included: Coaching pages and user justification prompts
- Not included: Standalone CASB licensing
Additional Features
- Netskope One Next Gen SWG
- Inline CASB for real-time SaaS control
- CASB API scanning of SaaS and IaaS data
- Cloud Confidence Index risk scores for SaaS apps
- Instance awareness for corporate and personal accounts
- Netskope One DLP data classifiers
- Real-time user coaching notifications
- Behavior Analytics for insider threats
Best for
- Large enterprises consolidating CASB, web gateway, ZTNA, DLP and SD-WAN on one platform
- Security teams replacing remote access VPNs with zero trust access
- Network teams moving branch offices onto cloud-delivered security
- Data protection teams governing staff use of generative AI tools
- Microsoft 365 tenants that need control over OneDrive and SharePoint sharing
- Organizations with IoT and OT devices on branch networks
- Buyers who accept a demo-first, quote-only purchase
Use cases
- Replacing a remote access VPN with ZTNA
- Separating corporate and personal instances of the same SaaS app
- Scanning SaaS and IaaS data stores for sensitive files
- Removing external users and public links from OneDrive and SharePoint files
- Blocking sensitive data uploads to generative AI tools
- Coaching users before a risky data transfer
- Inspecting web and SaaS traffic in a single pass
- Connecting branch sites through IPsec or GRE tunnels
- Discovering and classifying IoT and OT devices at branch sites
- Finding where a slow application session loses time
- Detecting insider threats and compromised accounts
- Giving contractors browser-only access to private apps
Screenshots & Videos
Explore Netskope in action
