SSE · CASB · Data Protection
Skyhigh Security SSE Review
Skyhigh Security is a San Jose, California-based cloud security company that emerged from the February 2022 separation of McAfee Enterprise into two distinct entities: Trellix (endpoint and XDR security) and Skyhigh Security (cloud and SSE security). Skyhigh Security's SSE platform — Skyhigh Security Service Edge — integrates Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), Zero Trust Network Access (ZTNA), Remote Browser Isolation (RBI), and advanced Data Loss Prevention (DLP) into a unified cloud-native console. Skyhigh Security was recognised as a Niche Player in the 2025 Gartner Magic Quadrant for Security Service Edge. The company operates with a particular focus on data-centric security and has strong presence in government, financial services, and healthcare sectors. Skyhigh Security continues to share DLP classifier technology with Trellix.
Quick Facts — Skyhigh Security
| Category | Detail |
|---|---|
| Full company name | Skyhigh Security, LLC |
| Headquarters | San Jose, California, USA |
| Founded | 2022 (spun out of McAfee Enterprise; SSE business) |
| Ownership | Symphony Technology Group (STG) private equity backed |
| Primary product | Skyhigh Security Service Edge (SWG + CASB + ZTNA + RBI + DLP) |
| Architecture | Cloud-native SSE; unified console; single policy engine across SWG, CASB, ZTNA, RBI; shared DLP classifiers with Trellix |
| SASE capability | Partial — SSE platform only; no native SD-WAN; can be combined with third-party SD-WAN for SASE |
| SD-WAN capability | None |
| Target market | Government, financial services, healthcare; regulated industries; data-centric enterprises |
| UK presence | UK and European enterprise customer base; government sector deployments |
| Gartner position | Niche Player — 2025 Gartner Magic Quadrant for Security Service Edge (SSE) |
What Netify Thinks
Skyhigh Security's market identity is built on data protection heritage — the Skyhigh CASB and DLP capabilities trace their lineage through McAfee's deep investment in enterprise cloud security. The company's data-centric approach, which applies consistent DLP controls across web, SaaS, and private application traffic, appeals particularly to regulated industries where data governance is the primary SASE evaluation criterion. Gartner's consistent caution about Skyhigh's market reach outside government and financial services is a genuine limitation for buyers outside those sectors.
Strengths
- Recognised in 2025 Gartner SSE Magic Quadrant: Skyhigh Security is one of nine vendors recognised in the 2025 Gartner Magic Quadrant for SSE, providing third-party validation of its SSE capabilities and market presence.
- Data-centric security heritage: Skyhigh Security maintains a clear, focused vision on data security — applying DLP controls consistently across SWG, CASB, and ZTNA from a unified console. This data-centric approach is a strength specifically for regulated industries with stringent data governance requirements.
- Shared DLP development with Trellix: Skyhigh Security leads the development of DLP classifier technology used by both Skyhigh and Trellix, providing a combined research investment and cross-product data security intelligence that benefits SSE customers.
- Inline emulation-based sandboxing: Skyhigh's integrated anti-malware solution includes inline emulation-based sandboxing for zero-day threat detection in real time — providing enhanced threat prevention without requiring traffic backhauling to a separate sandboxing service.
- Government and regulated sector depth: Skyhigh Security has particular strength and customer reference depth in US government, financial services, and healthcare — sectors with stringent compliance requirements where its data protection capabilities command premium positioning.
Weaknesses
- Niche Player in 2025 Gartner SSE MQ: Skyhigh Security declined from Visionary (2023) to Niche Player in the 2025 SSE MQ. Gartner noted that Skyhigh is largely focused on government and financial services with less appeal to clients outside these sectors, and that its competitive shortlist appearances are limited.
- No SD-WAN capability: Skyhigh Security is an SSE-only platform. Organisations seeking full SASE with integrated SD-WAN must source SD-WAN separately and integrate it with Skyhigh's SSE, increasing management complexity compared to single-vendor SASE platforms.
- McAfee Enterprise separation disruption: The 2022 separation of McAfee Enterprise into Trellix and Skyhigh Security disrupted channel relationships, sales teams, and customer continuity. While stabilisation has occurred, the market share impact from the split continues to be felt.
- Limited geographic reach outside North America: Previous Gartner analysis noted that Skyhigh provides excellent customer service in North America and Europe but this does not extend consistently to other geographies, which may limit appeal for truly global deployments.
Verdict: Skyhigh Security is best suited to US government agencies, financial services, and healthcare organisations that prioritise data-centric cloud security with deep DLP, CASB, and inline sandboxing capabilities — particularly those with existing McAfee Enterprise infrastructure. It is less suitable for organisations seeking single-vendor SASE with integrated SD-WAN or for buyers outside government and financial services sectors.
Pros & Cons
Pros
- Recognised in 2025 Gartner SSE Magic Quadrant
- Data-centric security heritage — consistent DLP across SWG, CASB, ZTNA from unified console
- Shared DLP development with Trellix — cross-product data security intelligence
- Inline emulation-based sandboxing for zero-day threat detection
- Strong government, financial services, and healthcare sector depth
- Flexible service delivery based on regional demand
Cons
- Niche Player in 2025 Gartner SSE MQ — declined from Visionary (2023)
- No SD-WAN capability — SSE only; requires separate SD-WAN for full SASE
- Limited appeal outside government and financial services sectors (Gartner analysis)
- McAfee Enterprise separation disruption still affecting market presence
- Gartner notes Skyhigh rarely appears on competitive shortlists outside core sectors
Frequently Asked Questions
What is Skyhigh Security?
Skyhigh Security is a cloud security company that emerged from the 2022 separation of McAfee Enterprise. Its SSE platform — Skyhigh Security Service Edge — integrates SWG, CASB, ZTNA, Remote Browser Isolation, and advanced DLP into a unified cloud-native console. Skyhigh shares DLP classifier development with its sister company Trellix. The company focuses primarily on data-centric cloud security and has particular strength in US government, financial services, and healthcare deployments. It was recognised as a Niche Player in the 2025 Gartner Magic Quadrant for Security Service Edge.
Is Skyhigh Security a SASE vendor?
Skyhigh Security delivers the SSE (Security Service Edge) component of SASE but does not provide SD-WAN. To implement a full SASE architecture with Skyhigh SSE, organisations must also deploy a separate SD-WAN solution from another vendor. For organisations seeking a single-vendor SASE platform with integrated SD-WAN and SSE, vendors like Cato Networks, Netskope One, Fortinet Unified SASE, or Palo Alto Prisma SASE provide more complete out-of-the-box SASE.
How does Skyhigh Security differ from Trellix?
Skyhigh Security and Trellix were created when Symphony Technology Group (STG) separated McAfee Enterprise in February 2022. Trellix focuses on endpoint detection and response (EDR/XDR) and security operations. Skyhigh Security focuses on cloud security and SSE — protecting access to web, SaaS, and private applications. The two companies continue to share DLP classifier technology, with Skyhigh leading the development of the shared DLP engine that both companies use.
Is Skyhigh Security suitable for UK government deployments?
Yes, with appropriate due diligence. Skyhigh Security has a track record in government deployments (primarily US government but with European coverage) and its data-centric SSE approach aligns with UK public sector data protection requirements. UK government organisations should verify FedRAMP authorisation status (if applicable), UK G-Cloud listing, and specific data residency options within the UK and EU. Skyhigh's strength in regulated sectors and DLP capabilities make it relevant for UK public sector cloud security requirements.
Include Skyhigh Security in your SASE RFP
Use the Netify RFP Builder to build a structured, vendor-neutral SASE RFP and receive competitive bids.
Build Your SASE RFP