Enterpricey

Cortex XSIAM

by Palo Alto Networks · SIEM

Compare SIEM prices

Plan or add-onPrice
Cortex XSIAMpriced by quote for the whole platformContact sales[2]
Endpoint protection for Cortex XSIAMAdd-on to all plans, per endpoint$70[5] per endpoint
Cloud host protection for Cortex XSIAMAdd-on to all plans, per host$195[5] per host
Threat Intelligence Management add-onAdd-on to all plans$20[5] unit not published
Attack Surface Management add-onAdd-on to all plans$25[5] unit not published
Identity Threat Detection and Response ModuleAdd-on to all plans$40[5] unit not published
XSIAM Dev tenantAdd-on to all plans, per tenant$20,000[5] per tenant

Also sold by the vendor, with no published price: XSIAM NG SIEM, XSIAM Enterprise, XSIAM Premium, XSIAM Base daily ingestion.

Priced only in another currency (see all prices): Enterprise Advanced SOC Data bundle.

The record

Checked today 23 Oct 2026

Prices last checked 23 Oct 2026.

First read
24 Sep 2026
Prices tracked
15
Changes seen
4
Sources
7 captured, hashed
Open the vendor's pricing page
Every row we hold (15)

One row per price seen: list, promotional and regional prices are separate rows, and channels that disagree sit side by side. Nothing is averaged or overwritten.

Cortex XSIAM

PriceWhereBillingTypeChannelSource
Contact salespriced by quote through Palo Alto Networks sales––Contact salesVendor's own sitesource [2]

Endpoint protection for Cortex XSIAM

PriceWhereBillingTypeChannelSource
$70 per endpointfor UK public-sector buyers; no volume discount; per endpoint, 30 days of data kept; term to confirm with the resellerGlobal · UK public sector–List pricePublic recordSOFTCAT PLC · G-Cloud 15source [5]
$70 per endpointfor UK public-sector buyers; 0.5% to 2.5% off orders over £500,000; per endpoint, 30 days of data kept; term to confirm with the resellerGlobal · UK public sector–List pricePublic recordCDW LIMITED · G-Cloud 15source [7]

Cloud host protection for Cortex XSIAM

PriceWhereBillingTypeChannelSource
$195 per hostfor UK public-sector buyers; no volume discount; per cloud host, 30 days of data kept; term to confirm with the resellerGlobal · UK public sector–List pricePublic recordSOFTCAT PLC · G-Cloud 15source [5]
$195 per hostfor UK public-sector buyers; 0.5% to 2.5% off orders over £500,000; per cloud host, 30 days of data kept; term to confirm with the resellerGlobal · UK public sector–List pricePublic recordCDW LIMITED · G-Cloud 15source [7]

Enterprise Advanced SOC Data bundle

PriceWhereBillingTypeChannelSource
$40 per user / yearfor UK public-sector buyers; no volume discount; per user per year, threat intel and attack surface management includedGlobal · UK public sectorbilled annuallyList pricePublic recordSOFTCAT PLC · G-Cloud 15source [5]
$40 per user / yearfor UK public-sector buyers; 0.5% to 2.5% off orders over £500,000; per user per year, threat intel and attack surface management includedGlobal · UK public sectorbilled annuallyList pricePublic recordCDW LIMITED · G-Cloud 15source [7]

Threat Intelligence Management add-on

PriceWhereBillingTypeChannelSource
$20, unit not publishedfor UK public-sector buyers; no volume discount; threat intel add-on; charging unit and term to confirm with the resellerGlobal · UK public sector–List pricePublic recordSOFTCAT PLC · G-Cloud 15source [5]
$20, unit not publishedfor UK public-sector buyers; 0.5% to 2.5% off orders over £500,000; threat intel add-on; charging unit and term to confirm with the resellerGlobal · UK public sector–List pricePublic recordCDW LIMITED · G-Cloud 15source [7]

Attack Surface Management add-on

PriceWhereBillingTypeChannelSource
$25, unit not publishedfor UK public-sector buyers; no volume discount; attack surface add-on; charging unit and term to confirm with the resellerGlobal · UK public sector–List pricePublic recordSOFTCAT PLC · G-Cloud 15source [5]
$25, unit not publishedfor UK public-sector buyers; 0.5% to 2.5% off orders over £500,000; attack surface add-on; charging unit and term to confirm with the resellerGlobal · UK public sector–List pricePublic recordCDW LIMITED · G-Cloud 15source [7]

Identity Threat Detection and Response Module

PriceWhereBillingTypeChannelSource
$40, unit not publishedfor UK public-sector buyers; no volume discount; identity threat add-on; charging unit and term to confirm with the resellerGlobal · UK public sector–List pricePublic recordSOFTCAT PLC · G-Cloud 15source [5]
$40, unit not publishedfor UK public-sector buyers; 0.5% to 2.5% off orders over £500,000; identity threat add-on; charging unit and term to confirm with the resellerGlobal · UK public sector–List pricePublic recordCDW LIMITED · G-Cloud 15source [7]

XSIAM Dev tenant

PriceWhereBillingTypeChannelSource
$20,000 per tenantfor UK public-sector buyers; no volume discount; one test tenant; term to confirm with the resellerGlobal · UK public sector–List pricePublic recordSOFTCAT PLC · G-Cloud 15source [5]
$20,000 per tenantfor UK public-sector buyers; 0.5% to 2.5% off orders over £500,000; one test tenant; term to confirm with the resellerGlobal · UK public sector–List pricePublic recordCDW LIMITED · G-Cloud 15source [7]

About

Cortex XSIAM is Palo Alto Networks' security operations platform, sold as a replacement for a traditional SIEM to run an AI-assisted SOC, with endpoint detection built in.[1][3] Palo Alto Networks publishes no price and quotes the platform through sales, with Unit 42 managed detection and response offered on top.[2][3] On the UK G-Cloud 15 framework, resellers Softcat and CDW list the NG SIEM, Enterprise and Premium editions at USD 60, 100 and 140 per employee, and a base edition at USD 400 per GB of daily ingestion.[5][7] The same lists price endpoint protection at USD 70 per endpoint, the Advanced SOC Data bundle at USD 40 per user per year and a development tenant at USD 20,000.[5][7]

Related products

Referenced by

Sources

Version 7, updated 15 Oct 2026 (8 days ago) JSON Report an error