SSE Products' Security Effectiveness Ranges from 2.95% to 100%, CyberRatings.org Finds

CyberRatings.org conducted a Security Service Edge (SSE) evaluation, testing 15 products from various vendors. The results showed a wide range of performance, with security effectiveness ranging from 2.95% to 100%. Only four products, Fortinet, Palo Alto Networks, Versa Networks, and Zscaler, earned a "Recommended" rating, while others were rated "Caution" due to critical failures. The tests covered various criteria, including malware, exploits, evasions, false positives, and TLS/SSL, highlighting the importance of independent testing for cybersecurity products.

CyberRatings.org, a non-profit organization dedicated to independent cybersecurity product testing, recently released its Security Service Edge (SSE) evaluation results. The evaluation tested 15 products from various vendors, revealing a significant disparity in product performance.

The security effectiveness of the tested products ranged from 2.95% to 100%. Only four products—Fortinet, Palo Alto Networks, Versa Networks, and Zscaler—earned a "Recommended" rating. These products demonstrated robust performance across multiple criteria, including malware, exploits, evasions, false positives, and TLS/SSL. Other products, such as those from Cisco, Cloudflare, and Skyhigh, were rated "Caution" due to critical failures in critical tests [1].

The evaluation covered a range of security criteria, including malware (6,184 samples), exploits (205), evasions (1,154), false positives (1,514), and TLS/SSL (representing ~97% of real-world HTTPS traffic). These tests highlighted the importance of independent, ongoing third-party validation to ensure consistent protection and compliance [1].

The results underscore the complexity and opacity of SSE technology, which is stacked atop ever-changing cloud environments. Independent testing is essential to diagnose performance issues, fine-tune policy enforcement, and ensure real security outcomes. CyberRatings.org urges organizations to adopt periodic or ongoing third-party testing to maintain consistent protection.

The comparative report and in-depth test reports for each product tested are available on the CyberRatings.org website [1]. The evaluation methodology and additional resources are also available on their website.

References:
[1] https://www.prnewswire.com/news-releases/cyberratingsorg-test-results-reveal-critical-failures-in-sse-302506312.html