SASE (say "sassy") is one of those analyst-coined categories that sounds like pure jargon until you see the problem it solves. When work moved off the corporate network — to homes, cafes, and clouds — the old model of routing everything back through a headquarters firewall stopped making sense. SASE is the response: deliver both the network connection and the security controls from the cloud edge, close to wherever the user actually is.
Granted patents make the model concrete. Level 3 Communications holds US12519797B2, "Secure access service edge (SASE)" (issued January 6, 2026; CPC H04L 63/102 — access control), and US12425405B2, "Secure access service edge (SASE) scriptlets for providing SASE-based network services" (issued September 23, 2025). Read them at US12519797B2 and US12425405B2.
The way this actually works is convergence at the edge. Instead of separate boxes for connectivity (SD-WAN) and security (secure web gateway, firewall, zero-trust access), SASE runs them as one cloud-delivered service. Policy attaches to identity and context, so the same controls apply whether the user is in the office or on hotel Wi-Fi. The "scriptlets" grant is the interesting one for the business: it describes programmable units that let SASE-based services be composed and customized — the platform's extensibility, claimed as IP.
One analogy, then gone: the old model was a castle with one guarded gate, and everyone had to travel back to the castle to be checked. SASE is more like giving every traveler a checkpoint that follows them — the inspection happens wherever they are, not where the building is.
Why this is a markets story: SASE is fundamentally a consolidation bet. It bundles what used to be five or six separate purchases into one subscription, and that bundling is exactly the strategic logic public security vendors keep describing — sell the platform, not the point product. The category's whole premise is that buyers want fewer vendors and one policy model. A carrier like Level 3 filing in this space signals that connectivity providers see the converged edge as their turf too, not just the security pure-plays'.
The grounded takeaway: SASE = network + security, delivered from the cloud edge, policy following the user. When a vendor pitches it, ask which functions are actually converged and how policy follows identity. The patents name the model — converged access control and programmable edge services — and that naming is more precise than the four-letter acronym suggests.