Overview
Cato Client is the endpoint agent of the Cato SASE platform, extending enterprise-grade security to every device. I designed the client experience so that powerful protection — malware prevention, threat detection and policy enforcement — stays understandable and manageable for IT teams and end users alike.
Product
What is Cato Client?
- Endpoint protection for the enterprise, delivered from the cloud.
- Comprehensive malware prevention on every device.
Cato Client connects endpoints to the Cato SASE Cloud, delivering endpoint protection capabilities for the enterprise with comprehensive malware prevention.
- Endpoint protection
- Malware prevention
- SASE
- Enterprise security
The challenge
During my short time at Cato I worked on two projects: the first was creating a dark theme interface, and the second was adding new features to Cato Client — while also improving the design of the existing product.
The solution
A design exploration that modernized the Cato Client experience. Although the company chose not to ship it, the work defined a clear visual direction for the product.
Mobile app
Selected screens from the app
Disconnected — a neutral grey shield and a single power button make the next action obvious.
Connecting — the shield rim turns green while a progress ring traces the power icon.
Connected — a fully green shield and a live session timer confirm the device is protected.
Admin lock — when IT enforces always-on mode, a lock replaces the power button and explains why.
Connecting with alert — the shield turns amber and a notice flags that the VPN needs an update.
Connected with alert — still protected, but the warm amber screen keeps the pending update in view.
Searching — a red rim and progress ring show the client is still trying to reach a PoP server.
Connection error — a fully red screen and a clear reason, such as site permissions denied by the admin.
Statistics — traffic, IP addresses, PoP distance and connection type grouped into scannable cards.
Edit user — account, username and password in one simple form, with a quick way to clear credentials.
Settings — on-demand VPN, manual PoP, captive portal and office mode as simple toggles, plus log download.
Next case study
Belong.Life