Cato Networks launched a threat prevention engine that watches enterprise network behavior before acting, betting that the future of security lies in predicting attacks rather than reacting to them.

The Dynamic Prevention offering has been added to Cato's secure access service edge (SASE) platform to provide continual evaluation of potential threats. Once potentially malicious behavior is detected, the tool automatically enforces restrictions to stop the threat without adding operational overhead.

“Enterprises are already struggling to stop advanced threats that unfold quietly over time, and with the explosion of AI and autonomous agents, the threat landscape is accelerating exponentially,” Lior Cohen, VP of product management, security, and management at Cato Networks, said. “Cato Dynamic Prevention changes the game by continuously understanding behavior in context, predicting the threat actor's next move, and enforcing protection automatically that would only impact true positive threats.”

Upon unveiling the protective prevention tool, which is generally available to customers worldwide via its flagship SASE platform, the vendor cited Gartner figures that suggest some 61% of enterprises lack full-time threat hunting experts and instead rely on reactive staff, leaving teams underfunded, misaligned, and vulnerable.

The Tel Aviv-based firm touts its Dynamic Prevention tool as a means to help those enterprises, providing behavior-based threat prevention capable of automatically stopping threats that evade point-in-time inspection.

The vendor even goes so far as to claim it correlates months of security and networking activity in order to identify potential threats, rather than just monitoring incoming inputs.

Among its early users was aviation services company Swissport. Giles Ashton-Roberts, that firm’s chief information security officer (CISO), said Cato’s Dynamic Prevention tool was “emblematic of why unifying all security and networking signals into a single platform matters.”

“Only with that level of visibility and context can security teams respond fast enough to stop threats before they disrupt critical operations,” Ashton-Roberts added.