How to read vendor AI security claims

A sentence such as 'blocks prompt injection and jailbreaks' tells you the vendor sells that capability. It does not tell you how well it works on your traffic. That is why this site records descriptions as Stated or Partly stated, and never as a score.

App catalogue sizes, attack-scenario counts, uptime SLAs and network sizes are the vendor's own numbers. They are often counted on different bases. Palo Alto Networks states 4000+ GenAI applications; Zscaler states 2,900+ apps on one page and thousands of AI apps on another. Cato states 100+ PoPs, Fortinet 200+ PoPs and Netskope 120+ data centers in 80+ regions. These are not comparable: a PoP, a data center and a region mean different things, and a catalogue count depends on what each vendor counts as an app.

Source: Palo Alto Networks: AI Access Security · Read 7 Oct 2026

Phrases that call a product the largest in the world or the most complete in its industry are marketing claims. We quote them only inside a vendor statement box with the source, and never repeat them in our own voice.

Several vendors here state a placement in the 2026 Gartner Magic Quadrant for SASE Platforms on their own pages, and Fortinet states it was placed as a Challenger. The counts vendors use differ and can differ between a vendor's own pages: Palo Alto Networks' Prisma SASE page and its Prisma Access page use different numbers. An analyst placement concerns the SASE platform as a whole, not the AI security features specifically.

Shortlist on descriptions that match your needs, ask for evidence on the ones that matter most, and test them in a pilot with your own data.

Descriptions become a status on one of thirteen checks, with the sentence and the source shown next to it. Self-reported figures appear in the Other facts table with the words 'as the vendor states' and are never used to order vendors. Superlatives appear only in the In the vendor's words box. Analyst placements appear as a fact labelled with the vendor's name, quoted from the vendor's own page and dated where the page gives a date. Nothing on a vendor page counts against another vendor: where one vendor is silent, we write Not in our sources and leave it there.