Broadcom Symantec Pricing 2026: What Enterprises Pay
Broadcom Symantec security pricing benchmarks 2026. What enterprises pay for Symantec Endpoint Security, DLP, and web gateway post-Broadcom acquisition. Real.
Key points
- The important context for buyers: Broadcom's first-renewal proposals after acquisition contained pricing increases that averaged 40 to 60% above the prior Symantec contract rate in many documented cases.
- Organizations that negotiated aggressively with competitive alternatives achieved renewals at 10 to 25% above prior rates.
- The spread between these outcomes, representing 30 to 40% of annual contract value, is the benchmark gap we see most consistently in Symantec renewal analysis.
Broadcom Symantec Pricing Model Explained
Understanding Broadcom Symantec pricing in 2026 requires understanding what Broadcom did when it acquired Symantec's enterprise security business in 2019. Broadcom's playbook for enterprise software acquisitions, applied to CA Technologies, then Symantec, then VMware, is consistent: consolidate to the largest enterprise customers, bundle products into platform subscriptions, migrate from perpetual to subscription licensing, and let smaller accounts churn while focusing on customers with $1M+ annual contracts.
For enterprise Symantec customers, the practical result has been a shift from purchasing individual products (Symantec Endpoint Protection, Symantec DLP, Symantec Web Security Service) to purchasing platform bundles under two main offerings: Symantec Enterprise Cloud (SEC), which combines endpoint, network, email, and web security into a cloud-delivered service, and Symantec Endpoint Security Complete (SES Complete), the comprehensive endpoint security bundle. Both are priced per-user per-year.
The important context for buyers: Broadcom's first-renewal proposals after acquisition contained pricing increases that averaged 40 to 60% above the prior Symantec contract rate in many documented cases. Organizations that negotiated aggressively with competitive alternatives achieved renewals at 10 to 25% above prior rates. Organizations that did not negotiate accepted the proposed increase. The spread between these outcomes, representing 30 to 40% of annual contract value, is the benchmark gap we see most consistently in Symantec renewal analysis.
For the full cybersecurity benchmark context, see the Enterprise Cybersecurity Pricing Guide 2026. For competitive alternatives, see CrowdStrike Falcon pricing.
What Enterprises Actually Pay for Broadcom Symantec
| Product | List $/User/Year | Achievable (10K+ Users) | Notes |
|---|---|---|---|
| SES Complete | $50 to $85 | $20 to $40 | Full endpoint bundle |
| Symantec DLP Suite | $25 to $70 | $12 to $30 | Endpoint + Network + Cloud |
| Web Security Service (WSS) | $20 to $40 | $10 to $20 | Cloud-delivered proxy/CASB |
| Symantec Enterprise Cloud (SEC) | $80 to $120 | $35 to $60 | Full platform bundle |
Broadcom Symantec Discount Benchmarks
The discount structure for Broadcom Symantec is fundamentally different from other enterprise security vendors. Rather than negotiating off a published list price, most Symantec renewal negotiations start from Broadcom's proposed renewal price, which is itself already an elevated number relative to the prior contract. The framing matters: do not let Broadcom anchor to their proposed renewal as the "standard" starting point.
The Migration Threat as Primary Lever. Broadcom's pricing behavior changes materially when they believe a customer will migrate. CrowdStrike Falcon, Microsoft Defender for Endpoint P2 (included in M365 E5), and SentinelOne are the most credible endpoint alternatives. Proofpoint Email Security and Zscaler are credible alternatives to Symantec Email Security and Web Security Service respectively. Running a formal POC (proof of concept) with one competitor and documenting the results before Symantec renewal negotiations begin is the single most effective tactic in our benchmark database.
Multi-Year Commitment Leverage. Broadcom wants multi-year commitments, they reduce churn risk and provide revenue visibility. A 3-year commitment offer from an enterprise, contingent on pricing at or near prior-contract rates, consistently achieves better outcomes than annual renewal negotiations. The willingness to commit 3 years in exchange for pricing stability is a genuine lever that Broadcom account teams are authorized to use.
Fiscal Year Timing. Broadcom's fiscal year ends October 31. Enterprise account teams have the most discount authority and the most urgency to close in the August to October window. Structuring your renewal timeline to conclude in Q3 Broadcom (August to October), combined with competitive alternatives, is the timing strategy that achieves the best outcomes in our benchmark data.
Symantec Products by Module, What Changes and What Doesn't
Symantec Endpoint Security Complete (SES)
The consolidated endpoint security platform replacing legacy SEP, ATP, EDR 4.x, and Harness threat intelligence. SES Complete is the modern successor to Symantec Endpoint Protection and includes adaptive ML-based protection, EDR, and device control. Broadcom continues to develop SES, it is not a sunset product. The pricing challenge is that organizations on legacy SEP perpetual licenses being migrated to SES subscription see effective cost increases even at negotiated rates due to the model change.
Symantec Data Loss Prevention (DLP)
Broadcom's strongest competitive moat in the Symantec portfolio. Symantec DLP remains a best-in-class solution for complex enterprise DLP requirements, financial services, healthcare, and regulated industries with sophisticated data classification needs. Alternatives (Microsoft Purview, Forcepoint) have improved but have not matched Symantec DLP for breadth and depth in complex environments. Broadcom knows this and prices accordingly. Migration cost analysis for DLP is typically higher than for endpoint security, giving Broadcom more pricing power here.
Symantec Web Security Service (WSS)
Cloud-delivered secure web gateway and CASB. WSS faces stronger competitive pressure than DLP, Zscaler Internet Access, Netskope, and Microsoft Defender for Cloud Apps are all credible alternatives. This competitive landscape gives buyers more leverage on WSS pricing than DLP pricing. Organizations that separate their WSS renewal from their DLP renewal (rather than bundling everything in one Broadcom negotiation) sometimes achieve better WSS pricing by introducing Zscaler as a credible alternative specifically for that workload.
Common Broadcom Symantec Contract Traps
- Automatic Renewal at Proposed Price. Broadcom Symantec contracts include automatic renewal provisions. Missing the renewal notice window, typically 90 days, can result in automatic renewal at Broadcom's proposed price, not the price you intended to negotiate. Put renewal dates in your procurement calendar with a 120-day lead notification.
- Bundle Coercion. Broadcom's preference is to sell the full Symantec Enterprise Cloud bundle rather than individual products. Organizations that only need DLP or only need endpoint security are pushed toward full-platform pricing. Negotiate the right to purchase products individually if that matches your actual usage, and use that option as leverage even if you ultimately buy the bundle.
- User Count Inflation. Broadcom's user count definitions can expand beyond active employees to include contractors, service accounts, and devices. Define "user" explicitly in your contract and negotiate for active-user-based licensing rather than headcount-based licensing.
- Support Tier Escalation. Broadcom has tiered support to Premium and Platinum tiers with significantly higher fees. Standard support has longer SLAs than prior Symantec support levels in some contract comparisons. Verify that your negotiated support tier matches your actual incident response requirements before signing.
Related reading
Pricing data and source text from the VendorBenchmark library. Co-sell reading is this site’s.