| Plan or add-on | Price |
|---|---|
| Cortex Xpansepriced by quote | Contact sales[1] |
| Third-party attack surface assessmentAdd-on to Expander, per assessment | $6,000[4] per assessment |
| Expander Link platform creditAdd-on to Expander, per credit | $10,000[4] per credit |
| Internet Landscape Intelligence user seatAdd-on to Internet Landscape Intelligence, per user | $30,000[4] per user |
Price on a public-sector list. Prices from public-sector lists; the vendor publishes no price of its own.
Also sold by the vendor, with no published price: Expander, Internet Landscape Intelligence.
Priced as a share of spend: Active Response module (20% of Expander list price (platform + AUM)), Attack Surface Testing module (30% of Expander list price (platform + AUM)).
Priced only in another currency (see all prices): Assets Under Management.
The record
Checked today 23 Oct 2026
Prices last checked 23 Oct 2026.
- First read
- 24 Sep 2026
- Prices tracked
- 13
- Changes seen
- 2
- Sources
- 6 captured, hashed
Every row we hold (13)
One row per price seen: list, promotional and regional prices are separate rows, and channels that disagree sit side by side. Nothing is averaged or overwritten.
Cortex Xpanse
| Price | Where | Billing | Type | Channel | Source |
|---|---|---|---|---|---|
| Contact sales | – | – | Contact sales | Vendor's own site | source [1] |
Assets Under Management
| Price | Where | Billing | Type | Channel | Source |
|---|---|---|---|---|---|
| $7 per asset / yearfor UK public-sector buyers; no volume discount | United Kingdom · UK public sector | billed annually | List price | Public recordSOFTCAT PLC · G-Cloud 15 | source [4] |
| $7 per asset / yearfor UK public-sector buyers; 0.5% to 2.5% off on orders over £500,000 | United Kingdom · UK public sector | billed annually | List price | Public recordCDW LIMITED · G-Cloud 15 | source [6] |
Active Response module
| Price | Where | Billing | Type | Channel | Source |
|---|---|---|---|---|---|
| 20% of Expander list price (platform + AUM) | United Kingdom · UK public sector | billed annually | List price | Public recordSOFTCAT PLC · G-Cloud 15 | source [4] |
| 20% of Expander list price (platform + AUM) | United Kingdom · UK public sector | billed annually | List price | Public recordCDW LIMITED · G-Cloud 15 | source [6] |
Attack Surface Testing module
| Price | Where | Billing | Type | Channel | Source |
|---|---|---|---|---|---|
| 30% of Expander list price (platform + AUM) | United Kingdom · UK public sector | billed annually | List price | Public recordSOFTCAT PLC · G-Cloud 15 | source [4] |
| 30% of Expander list price (platform + AUM) | United Kingdom · UK public sector | billed annually | List price | Public recordCDW LIMITED · G-Cloud 15 | source [6] |
Third-party attack surface assessment
| Price | Where | Billing | Type | Channel | Source |
|---|---|---|---|---|---|
| $6,000 per assessmentcovers 30 days of one third party's attack surface; no volume discount | United Kingdom · UK public sector | – | List price | Public recordSOFTCAT PLC · G-Cloud 15 | source [4] |
| $6,000 per assessmentcovers 30 days of one third party's attack surface; 0.5% to 2.5% off on orders over £500,000 | United Kingdom · UK public sector | – | List price | Public recordCDW LIMITED · G-Cloud 15 | source [6] |
Expander Link platform credit
| Price | Where | Billing | Type | Channel | Source |
|---|---|---|---|---|---|
| $10,000 per credit | United Kingdom · UK public sector | – | List price | Public recordSOFTCAT PLC · G-Cloud 15 | source [4] |
| $10,000 per credit | United Kingdom · UK public sector | – | List price | Public recordCDW LIMITED · G-Cloud 15 | source [6] |
Internet Landscape Intelligence user seat
| Price | Where | Billing | Type | Channel | Source |
|---|---|---|---|---|---|
| $30,000 per userper user seat, billing period unspecified; no volume discount | United Kingdom · UK public sector | – | List price | Public recordSOFTCAT PLC · G-Cloud 15 | source [4] |
| $30,000 per userper user seat, billing period unspecified; 0.5% to 2.5% off on orders over £500,000 | United Kingdom · UK public sector | – | List price | Public recordCDW LIMITED · G-Cloud 15 | source [6] |
About
Cortex Xpanse is Palo Alto Networks' attack surface management product: it finds an organisation's internet-facing assets and ranks which exposures to fix.[1] Palo Alto Networks publishes no price for it and sells it through its sales team.[1] On the UK G-Cloud 15 framework, resellers list the Expander platform at USD 60,000 a year plus USD 7 per monitored asset a year, and Internet Landscape Intelligence at USD 200,000 a year plus USD 30,000 per user seat.[4][6]
Related products
- Integrates with Cortex XSOAR verified[2] Xpanse alerts can be pulled into Cortex XSOAR
Referenced by
- Integrates with Cortex XSOAR verified sourced there turns exposed-asset findings into incidents
Sources
- Manage Attack Surface with Cortex Xpanse - Palo Alto Networks Vendor page.
- [1] Captured 24 Sep 2026.
- Cortex Xpanse | Marketplace Marketplace listing.
- [2] Captured 24 Sep 2026.
- Palo Alto Cortex Xpanse - Digital Marketplace Public-sector document.
- [3] Captured 26 Sep 2026.
- Softcat G-Cloud 15 pricing document (Palo Alto Networks price list) Public-sector document.
- [4] Captured 26 Sep 2026.
- CDW Palo Alto Cortex Xpanse - Digital Marketplace Public-sector document.
- [5] Captured 26 Sep 2026.
- CDW G-Cloud 15 pricing document (Palo Alto Networks price list) Public-sector document.
- [6] Captured 26 Sep 2026.