Long-form notes from the engineers who actually run the conversions and carry the pager — on firewalls, microsegmentation, SASE economics, and the state of managed security. No vendor decks, no filler.
The MSSP market is full of ticket-routers wearing a security label. Here's what actually goes wrong with managed security providers, why it keeps happening, and what we do differently at Perimeter One.
"SASE is cheaper" and "SASE is a tax on small sites" are both true, depending on your site count, bandwidth, and headcount. We work the actual numbers so you can find your own crossover point.
Open source firewalls aren't one category — a branch office edge, a homelab, and a cloud-native east-west policy layer each want a different tool. Here's where each one actually fits.
Check Point invented the stateful firewall and still runs in some of the most risk-averse networks on earth. It's not the growth story it was in 1996 — but writing it off is a mistake we see buyers make often.
AI Runtime Security, Precision AI, and an AI-native firewall aren't the same product wearing three names — they solve three different problems. We break down what each one actually does and where the gaps still are.
Twenty years after inventing the App-ID model, Palo Alto still sets the pace for enterprise firewalls. We look at what PAN-OS actually gets right architecturally — and what it costs you to get it.
Most microsegmentation projects die in the mapping phase. Guardicore (now Akamai Guardicore) is the platform we keep coming back to for getting past that — here's the architecture that makes it work.
Tell us what you're running and where it hurts. We'll come back with a read on your segmentation posture and a realistic conversion path — timelines, risks, and all.