Palo Alto Networks SASE · Cortex · Licensing

Palo Alto Networks Licensing Decoded: What Platformisation Costs Before You Consolidate

Updated April 2026 · 6 min read · Morten Andersen

Palo Alto Networks' platformisation strategy is compelling: consolidate your security stack onto Strata, Prisma, and Cortex, displace multiple point-product vendors, and simplify security operations. PANW will often offer a no-cost transition period to help you make the move. What enterprise buyers need to understand before accepting is how the three-platform commercial structure works at renewal, how consumption-based components scale, and why 32% savings on multi-year contracts is only the starting point of a more complex pricing conversation.

April 2026 By Morten Andersen Redress Compliance
~$81
Per endpoint per year for Cortex XDR Pro (standard rate)
32%
Savings achievable on 36-month contract commitments
80%+
PANW revenue from subscriptions and support in 2025
3
Platforms: Strata (Network), Prisma (Cloud), Cortex (SecOps)

The Platformisation Commercial Model — What It Means in Practice

Palo Alto Networks' platformisation strategy is more than a product positioning message. It is a commercial model designed to create deep account consolidation. The mechanics work as follows: PANW offers qualified customers a no-cost transition period for Cortex XDR while existing endpoint security contracts from legacy vendors are running out. Professional services support is bundled to assist with agent migration. The intent is to remove the switching cost that would otherwise prevent displacement of entrenched point products.

This strategy works extremely well for Palo Alto Networks: over 80% of company revenue now comes from subscriptions and recurring support contracts. It can also work well for enterprise buyers who genuinely benefit from consolidation. The commercial question is not whether platformisation has value — it often does — but whether the pricing terms on the post-transition committed subscription reflect enterprise scale, competitive benchmarks, and multi-year commitment appropriately.

The no-cost on-ramp creates commercial leverage that expires: The free trial period for Cortex XDR during legacy contract run-off is presented as a customer benefit. It is also a mechanism that compresses the time available for commercial negotiation. Once your legacy contract has expired and Cortex is operational, your negotiating position is materially weaker than it was before deployment began. The guide covers what to negotiate before accepting any free on-ramp offer.

The Three-Platform Pricing Structure

Strata — Network Security. Palo Alto's firewall and network security platform. Traditional enterprise pricing based on throughput capacity, subscription tier, and support level. The most established pricing model of the three and the most comparable to competitive alternatives. Prisma Access, the SASE component within Strata's scope, is Gartner-rated as a consistent leader and has benefited from permanent hybrid work adoption. SASE pricing is typically user-based plus bandwidth, making total cost modelling straightforward once seat counts and traffic volumes are known.

Prisma — Cloud Security. Cloud workload and application security covering infrastructure, container security, and cloud-native application protection. Pricing scales with the number of cloud workloads and assets under protection. For organisations with large, dynamic cloud environments — particularly multi-cloud or hybrid — the workload count can grow faster than anticipated, creating consumption overage risk if commitment levels are set based on current rather than projected cloud footprint.

Cortex — Security Operations. Cortex XDR for extended detection and response, Cortex XSIAM for AI-driven SOC operations, and Cortex Data Lake for centralised log storage and analytics. The $81 per endpoint per year rate for Cortex XDR Pro is a published starting point; actual enterprise rates vary significantly based on deployment size, commitment term, and the extent of the broader Strata and Prisma relationship. Cortex Data Lake adds a separate $11,000 per terabyte storage charge that requires independent modelling for log-intensive environments.

"The no-cost trial is a genuine commercial offer and a genuine risk. What PANW is doing is removing the friction that would force a rigorous competitive evaluation. Enterprise buyers who accept the on-ramp without first locking in committed pricing are negotiating from the wrong side of the table." — Morten Andersen, Security Licensing Advisor, Redress Compliance

What the Licensing Guide Covers

  • Full breakdown of Strata, Prisma, and Cortex pricing models with cost drivers identified
  • Cortex XDR Pro pricing: published rates, enterprise benchmarks, and volume discount thresholds
  • Cortex Data Lake storage pricing and log volume modelling for typical enterprise deployments
  • Prisma SASE cost modelling: per-user, bandwidth, and security feature tier analysis
  • No-cost on-ramp evaluation framework: what to negotiate before accepting any free trial offer
  • Multi-year commitment structure: how 32% savings translates across the three-platform portfolio
  • Competitive positioning: where CrowdStrike, Zscaler, and Microsoft provide commercial leverage
Free Download — Instant Access

Palo Alto Networks Licensing Guide

Independent analysis of PANW platformisation pricing — Strata, Prisma, and Cortex decoded with no Palo Alto Networks relationship or vendor bias.

Independent advice. No PANW relationship. Unsubscribe anytime.
What's Inside
  • Three-platform pricing breakdown
  • Cortex XDR enterprise rate benchmarks
  • Cortex Data Lake cost modelling guide
  • No-cost on-ramp negotiation checklist
  • Multi-year commitment savings analysis
  • Competitive leverage framework