Cato Networks and CrowdStrike Integrate Network and Endpoint Telemetry

Cato Networks and CrowdStrike announced a strategic technology partnership to integrate the Cato SASE Platform with the CrowdStrike Falcon platform, giving enterprise security teams unified visibility across network and endpoint activity. The integrations, now generally available through the CrowdStrike Marketplace, are designed to streamline investigations, improve threat detection fidelity, and accelerate incident response by correlating telemetry from both platforms.

The collaboration addresses a common challenge for security operations centers: analysts often investigate incidents using separate networking and endpoint security tools, resulting in fragmented visibility and longer response times. Under the partnership, Cato XOps integrates with CrowdStrike Falcon Discover to correlate endpoint detections with network telemetry, while Cato Asset Security combines endpoint context from Falcon Discover to improve managed asset visibility and security posture. In addition, the Cato SASE Platform streams network telemetry into Falcon Next-Gen SIEM, allowing analysts to conduct threat hunting and build detections using both network and endpoint signals within a common workflow.

The announcement also highlights the companies’ broader focus on AI-enabled security operations. Cato positions its SASE platform as a converged networking and security cloud, while CrowdStrike continues to expand the Falcon platform as an AI-driven cybersecurity ecosystem. The joint integrations are intended to reduce operational complexity for enterprise security teams while providing richer context for investigations and faster response to increasingly sophisticated attacks.

• Cato Networks and CrowdStrike announced a strategic technology partnership.
• The integration connects the Cato SASE Platform with the CrowdStrike Falcon platform.
• Network telemetry and endpoint telemetry are correlated to improve investigations.
• Cato XOps integrates with Falcon Discover for richer threat context.
• Cato Asset Security uses Falcon Discover endpoint information to improve asset visibility.
• Network telemetry streams into Falcon Next-Gen SIEM for threat hunting and detection engineering.
• The integrations are generally available worldwide through the CrowdStrike Marketplace.
• The collaboration targets security operations, asset visibility, and threat hunting use cases.

“Security outcomes, especially in the AI era, can only improve when fueled by rich and connected data,” said Karl Soderlund, Global Channel Chief at Cato Networks. “This partnership further enhances Cato’s ability to deliver complete visibility, full context, and agentic control to make security operations teams more effective in defending against the next wave of AI threats.”

🌐 Analysis

The partnership reflects a broader trend toward tighter interoperability between security platforms rather than standalone point products. Enterprises increasingly expect network, endpoint, identity, and cloud telemetry to feed a common security operations workflow, enabling AI-assisted detection and investigation across multiple data sources. Integrations between SASE platforms and endpoint detection and response (EDR) platforms have become an important competitive differentiator as organizations modernize security architectures.

For Cato Networks, the collaboration strengthens the ecosystem around its converged SASE platform by adding native integration with one of the industry’s most widely deployed endpoint security platforms. For CrowdStrike, the partnership expands the range of telemetry available to Falcon Next-Gen SIEM and XDR workflows, supporting its strategy of providing unified security operations across heterogeneous enterprise environments.