GenAI DLP

LIVE

Does your SASE vendor block sensitive data in AI tools?

Every vendor claims to protect against data leaking to ChatGPT, Copilot, and other GenAI tools. We tested 23 specific scenarios across 8 SASE vendors to find the truth.

23checks

8vendors

23checks

8vendors

Information sourced from publicly available documentation. Vendor capabilities change frequently. Always verify with the vendor before making purchasing decisions. Not affiliated with any vendor. See our terms & disclaimer. Vendors: to report inaccuracies, email info@sasecompare.com.

Cato

16/23

Check Point

16/23

Cisco

19/23

Cloudflare

17/23

Fortinet

16/23

Netskope

19/23

Palo Alto

19/23

Zscaler

20/23

YESSupported

PARTIALLimited

NONot supported

TBDResearch pending

Feature	Cato	Check Point	Cisco	Cloudflare	Fortinet	Netskope	Palo Alto	Zscaler
01 GenAI apps classified as a category?	YES	YES	YES	YES	YES	YES	YES	YES
02 DLP rule targeting GenAI category?	YES	YES	YES	YES	YES	YES	YES	YES
03 PII detection in browser paste?	YES	YES	YES	YES	PARTIAL	YES	YES	YES
04 Source code detection?	YES	YES	YES	YES	YES	YES	YES	YES
05 File upload detection?	YES	YES	YES	YES	YES	PARTIAL	YES	YES
06 Desktop app coverage?	PARTIAL	PARTIAL	PARTIAL	YES	PARTIAL	PARTIAL	PARTIAL	PARTIAL
07 Mobile coverage (iOS/Android)?	YES	PARTIAL	PARTIAL	YES	PARTIAL	PARTIAL	PARTIAL	PARTIAL
08 Covers multiple GenAI tools?	YES	YES	YES	YES	YES	YES	YES	YES
09 BYOD / unmanaged device?	PARTIAL	YES	PARTIAL	PARTIAL	YES	YES	YES	YES
10 Admin visibility (what/who)?	YES	YES	YES	YES	YES	YES	YES	YES
11 Real-time blocking?	YES	YES	YES	YES	YES	YES	YES	YES
12 Works with VPN/split tunnel?	PARTIAL	PARTIAL	YES	PARTIAL	YES	YES	PARTIAL	PARTIAL
13 Shadow AI discovery & reporting?	YES	YES	YES	YES	YES	YES	YES	YES
14 API key / secret detection in prompts?	PARTIAL	YES	YES	YES	PARTIAL	YES	YES	YES
15 GenAI app risk scoring?	YES	YES	YES	YES	YES	YES	YES	YES
16 Granular action control (block/warn/allow)?	YES	YES	YES	PARTIAL	YES	YES	YES	YES
17 AI response / output scanning?	YES	PARTIAL	YES	YES	PARTIAL	YES	YES	YES
18 WebSocket / HTTP/2 / streaming inspection?	PARTIAL	PARTIAL	TBD	PARTIAL	PARTIAL	PARTIAL	PARTIAL	YES
19 Custom data type / pattern creation?	YES	YES	YES	YES	YES	YES	YES	YES
20 Remote browser isolation for GenAI?	PARTIAL	PARTIAL	YES	YES	PARTIAL	YES	YES	YES
21 Compliance reporting (GDPR, HIPAA, etc.)?	PARTIAL	YES	YES	PARTIAL	YES	YES	YES	YES
22 User coaching / notification on block?	YES	YES	YES	PARTIAL	YES	YES	YES	YES
23 Exact data match (EDM) for GenAI?	YES	PARTIAL	YES	YES	YES	YES	YES	YES

GenAI apps classified as a category?

DLP rule targeting GenAI category?

PII detection in browser paste?

Source code detection?

File upload detection?

Desktop app coverage?

Mobile coverage (iOS/Android)?

Covers multiple GenAI tools?

BYOD / unmanaged device?

Admin visibility (what/who)?

Real-time blocking?

Works with VPN/split tunnel?

Shadow AI discovery & reporting?

API key / secret detection in prompts?

GenAI app risk scoring?

Granular action control (block/warn/allow)?

AI response / output scanning?

WebSocket / HTTP/2 / streaming inspection?

Custom data type / pattern creation?

Remote browser isolation for GenAI?

Compliance reporting (GDPR, HIPAA, etc.)?

User coaching / notification on block?

Exact data match (EDM) for GenAI?

Did we get something wrong?Let us know

Need this analysis tailored to your environment?

Get a custom report with deeper analysis, weighted scoring based on your priorities, and vendor recommendations specific to your deployment.

Request Custom Report

Frequently Asked Questions

Which SASE vendor is best for genai dlp?

Based on 23 checks across 8 vendors, Zscaler leads with 20 out of 23 capabilities fully supported (YES). Fortinet scored lowest with 16 YES answers. Results are based on publicly available documentation. Always verify with the vendor before purchasing.

Does DLP detect PII (credit card numbers, SSN, etc.) pasted into ChatGPT via the browser?

Cato Networks, Check Point, Cisco, Cloudflare, Netskope, Palo Alto Networks, Zscaler fully support this. Fortinet offers partial support. The most basic GenAI DLP test — if this fails, nothing else matters

Does DLP detect sensitive data in files uploaded (not just pasted) to GenAI tools?

Cato Networks, Check Point, Cisco, Cloudflare, Fortinet, Palo Alto Networks, Zscaler fully support this. Netskope offers partial support. Users drag-and-drop files containing sensitive data, not just paste text

Does DLP work on the ChatGPT/Copilot desktop application (not just browser)?

Cloudflare fully supports this. Cato Networks, Check Point, Cisco, Fortinet, Netskope, Palo Alto Networks, Zscaler offer partial support. Desktop apps often bypass browser-based security controls due to certificate pinning

Does DLP for GenAI work on mobile devices?

Cato Networks, Cloudflare fully support this. Check Point, Cisco, Fortinet, Netskope, Palo Alto Networks, Zscaler offer partial support. Same data leak risk on mobile — often overlooked in security evaluations

Does DLP for GenAI work on BYOD or unmanaged devices without an agent?

Check Point, Fortinet, Netskope, Palo Alto Networks, Zscaler fully support this. Cato Networks, Cisco, Cloudflare offer partial support. Contractors, partners, and personal devices often access GenAI tools without corporate agents

How is the GenAI DLP comparison tested?

We test 23 specific scenarios across Cato Networks, Check Point, Cisco, Cloudflare, Fortinet, Netskope, Palo Alto Networks, Zscaler. All answers are sourced from publicly available vendor documentation, knowledge base articles, and verified user reports. YES means confirmed working with documentation, PARTIAL means it works with significant limitations, NO means confirmed not supported.

Methodology

All answers are sourced from publicly available vendor documentation, knowledge base articles, press releases, and verified user reports. We do not rely on vendor marketing claims.

YES means the feature is confirmed working with documentation. PARTIAL means it works with significant caveats or limitations. NO means it is confirmed not supported. TBD means research is still in progress.

Click any cell in the matrix to see the detailed evidence and source link.

GenAI DLP

Need this analysis tailored to your environment?

Get notified when we publish new comparisons

Frequently Asked Questions

Methodology

Help me make this better