US/UK SASE Adoption Accelerates, But Execution Gaps Are Holding Enterprises Back

New Open Systems survey shows 8 in 10 US/UK organizations stuck in the Zero Trust “middle state.”

Zurich, Switzerland, 27 January 2026 - **A new survey of 505 IT and security leaders across the United States and the United Kingdom reveals a growing disconnect between ambition and reality: while enterprises are rapidly advancing Zero Trust and SASE strategies, most remain unable to fully operationalize them at scale.

Hybrid environments are now the default - visibility is not**

The 2026 SASE & Zero Trust Survey, conducted by Open Systems in collaboration with Cybersecurity Insiders, shows that hybrid environments have become the default operating model. Organizations are securing remote workers, SaaS applications, datacenters, multi-cloud workloads, branch locations and third-party access simultaneously. Yet 67-68% of respondents cite lack of end-to-end visibility as their biggest operational challenge, closely followed by inconsistent user experience, performance issues and growing ticket volumes.

Zero Trust is progressing - but most remain stuck in the middle

Zero Trust adoption is clearly underway. Only 13-14% of organizations still rely solely on traditional WAN and VPN architectures, and most have introduced ZTNA and application-level access controls. However, progress stalls beyond early phases: just 8-9% report a fully integrated Zero Trust architecture, leaving the vast majority operating in a prolonged “middle state”.

Execution capacity, not strategy, is the real constraint

The primary obstacle is not strategy or intent, but execution. Nearly half of respondents report significant difficulty operating VPN and ZTNA in parallel, resulting in duplicated policies, fragmented tooling and increased operational overhead. Skills shortages and integration challenges further limit teams’ ability to run modern architectures consistently - reinforcing that execution capacity, not architecture, is now the primary constraint.

“Enterprises are no longer debating whether Zero Trust and SASE are the right direction - that decision has been made,” said Stefan Keller, Chief Product Officer at Open Systems. “What’s slowing progress is the ability to execute day to day. Hybrid complexity, legacy infrastructure and limited internal capacity are colliding at the same time.”

To address this execution gap, organizations are rethinking how SASE is delivered. 78% of US and 85% of UK respondents say they prefer a co-managed or fully managed SASE operating model, combining internal oversight with dedicated 24×7 operational expertise. Expectations around automation are similarly pragmatic: organizations prioritize AI for monitoring, anomaly detection, incident response and ticket automation, focused on reducing operational noise rather than experimentation.

“SASE is no longer a product deployment, it’s an operating model,” added Stefan Keller. “Customers want visibility-first platforms, shared responsibility and partners who can operate alongside them as environments grow more complex.”

The findings point to a clear conclusion: enterprises are ready for Zero Trust, ready for SASE - and now need operating models that match the realities of hybrid, cloud-first environments.

More information
Download the full report: 2026 SASE & Zero Trust Survey - US & UK Findings

About OpenSystems:

Open Systems is an AI-first SASE platform company delivering secure access and networking to help enterprises connect users, applications and infrastructure across complex hybrid and multi-cloud environments. Its proprietary platform combines SSE capabilities, including ZTNA, SWG, CASB and FWaaS, with SD-WAN, end-to-end connectivity, unified policy management, and advanced analytics in a single architecture.

While many cybersecurity providers focus primarily on advancing technology capabilities, Open Systems combines its AI-first SASE platform with an execution model designed for real-world operability, ensuring services are not only deployed, but continuously run, adapted and improved through a combination of AI-enabled operations and NOC-based expertise (Mission Control), built on decades of operational experience, helping organizations reduce complexity, increase visibility and strengthen security outcomes at global scale.

Founded in Switzerland in 1990, Open Systems generates more than USD 100 million in annual revenue and supports global enterprise customers operating in more than 180 countries. Since 2024, the company has been part of Swiss Post, combining Swiss trust and stability with global reach. As a European alternative to US- and Israel-based cybersecurity providers, Open Systems is guided by strong principles around sovereignty requirements, regulatory alignment, transparency and shared responsibility - taking clear ownership for security, performance and operational outcomes, helping organizations maintain control in an increasingly complex digital landscape.