Short answer: Palo Alto Networks does not publish a price list for Prisma Access. You buy units (one unit per mobile user, or one unit per Mbps for a branch), pick an edition, then add the modules you actually wanted, such as AI Access Security, CASB-X and Enterprise DLP. Every one of those add-ons runs inside the same cloud proxy, so the bill and the latency grow together. dope.security takes the opposite route: the secure web gateway runs on the device, Dopamine DLP ships in the same package, and there is no data center in the middle to pay for.

If you are pricing Prisma Access in 2026, start with the architecture, because the architecture explains the quote. Our plain-English guide to what Prisma Access is and how its cloud proxy works covers the mechanics. The short version: every user's web traffic is steered to a Palo Alto service node on GCP or AWS, inspected there, and sent on. Each capability you license is another thing that proxy does to your traffic.

This post explains how Prisma Access licensing is structured, where buyers get surprised, what Gartner said about the price in 2026, and how the total compares with an on-device SWG like dope.security's Fly-Direct SWG. For the wider market view, read our guide to what secure web gateways really cost in 2026.

How is Prisma Access licensed?

Prisma Access is sold on a unit model, and the unit changes depending on what you are protecting. Palo Alto's own licensing documentation defines it this way: for mobile users, one unit is one mobile user; for remote networks (branch offices) and Clean Pipe, one unit is 1 Mbps of bandwidth. If you buy a combination SKU, you must allocate equal quantities of Mobile User capacity and Remote Network capacity to each tenant during activation.

That dual-unit structure is the first place buyers lose the thread. A 1,200-person company with six offices is pricing 1,200 user units plus a bandwidth allocation per site, and the two pools do not convert into each other cleanly. Customers report that mapping user units, bandwidth units and any credit-based purchasing onto a real headcount and office footprint is hard to do without the account team.

Prisma Access 6.0 changed branch licensing again. Instead of aggregate bandwidth, remote networks can be licensed per site in predefined tiers, from Very Small (up to 25 Mbps) to Large (up to 1 Gbps). It is simpler for a single branch, but it also means a growing site jumps a tier rather than adding a few Mbps. Multitenant deployments carry their own minimums, and Palo Alto documents a 10 percent overage allowance on remote network bandwidth, so a 50 Mbps site is enforced at 55 Mbps.

What the editions include, and what they do not

On top of the units sits an edition. Palo Alto's documentation has historically listed Business, Business Premium and Enterprise, plus an Enterprise ZTNA SIG edition that is available for Mobile Users only. Newer Palo Alto material describes base editions aimed at specific use cases, with Prisma Access Browser and Privileged Remote Access also appearing as offerings, so the lineup has shifted since the older guides were written. Ask for the current edition matrix in writing before you compare quotes.

The pattern to watch is what sits outside the edition. The capabilities a mid-market security team buys an SSE for in 2026, namely data protection and AI governance, are the ones most likely to be separate line items:

None of that is unusual for a large vendor. It is simply why a Prisma Access quote is a tower rather than a number. To get the outcome most teams want in 2026 (allow the corporate AI tenant, block the personal account, stop sensitive files leaving) you are assembling three or four SKUs.

What Gartner said about the price in 2026

Palo Alto Networks is a Leader in the 2026 Gartner Magic Quadrant for Security Service Edge, and a Leader in the 2026 SASE Platforms Magic Quadrant. Those placements are documented and deserved. The pricing note is also documented: in the 2026 SASE Platforms MQ, published July 28, 2026, Palo Alto dropped from first to third on Ability to Execute, behind Netskope and Cato, and SDxCentral's August 3, 2026 coverage reports that Gartner cited expensive pricing among the reasons.

That matters because "expensive" from Gartner is not a complaint about list price. It is a comment on what customers end up paying for the stack they need. If you are evaluating Prisma Access against other cloud proxies, our comparison of Zscaler and Palo Alto Prisma Access in 2026 walks through where the two towers differ.

The line items that do not appear on the quote

A Prisma Access quote covers licenses. It does not cover the operational cost of running a proxy-in-the-cloud architecture, and that is where the real number hides.

Setup complexity. Setup is the most common complaint in customer reviews. Palo Alto has moved cloud-managed deployments to Strata Cloud Manager, and the Panorama to SCM migration is documented as one-way. That is a project with a budget line, not a checkbox.

Control plane incidents. Strata Cloud Manager was impaired for roughly 28 days starting March 31, 2026, according to Palo Alto's own status history. When a cloud SSE's management plane is degraded, you are still paying for every unit, you just cannot change policy on them.

The agent. Palo Alto has confirmed GlobalProtect issues on macOS including battery drain, 100 percent CPU and reconnect loops, and customers were still reporting GlobalProtect connection problems in September 2026. On August 12, 2026, Palo Alto published a bulletin covering 11 CVEs across GlobalProtect, the Prisma Access Agent (including local privilege escalation and anti-tamper bypass) and Prisma Browser. None were reported as exploited, and patching them is still an IT cycle you pay for in hours. Our look at GlobalProtect in 2026 covers the agent story in detail.

Explicit Proxy limits. Palo Alto documents hard limits for Prisma Access Explicit Proxy: no HTTP/2, ALPN is stripped, and decryption is mandatory. For teams that wanted a lighter forwarding method, those limits push traffic back toward the full agent.

Why the proxy architecture is what you are really paying for

Every Prisma Access unit pays for the same thing: a trip to a Palo Alto service node and back. Your laptop in Austin talks to a node, the node decrypts, inspects, re-encrypts and forwards, the response comes back through the node, and only then does your browser render. For users near a node that detour is measured in tens of milliseconds per request. For users far from one, or users behind restrictive national networks, it is measured in hundreds.

That detour is why the modules stack the way they do. DLP, CASB-X, AI Access Security and threat prevention are each another process the node runs on your traffic, and each consumes node capacity. The more you inspect, the more you pay, and the slower the round trip gets. Our comparison of Prisma Access with an endpoint-native SWG goes deeper on the architecture.

See the detour for yourself. Run a live latency test and compare a cloud-proxy round trip with on-device inspection that flies direct. Learn more about how the Fly-Direct SWG inspects traffic on the endpoint, or book a 20-minute dope.security demo to see it on your own network.

Takeaway: a cloud proxy bills you for the data center and then bills you again for every function it runs there. Remove the data center and both bills shrink.

Prisma Access vs dope.security: how the cost structure compares

This is a comparison of how each product is packaged and what that packaging costs you to run, not a claim about any specific quote. Prisma Access quotes vary by edition, term and negotiation. dope.security's packaging is on our pricing page.

Palo Alto Prisma Access

Prisma Access is priced per unit, where a unit is a mobile user or 1 Mbps of branch bandwidth, with an edition on top and modules such as Enterprise DLP, CASB-X and AI Access Security licensed separately. Inspection happens in Palo Alto's cloud, so each added module adds proxy processing to every request. Deployment runs through Strata Cloud Manager and the GlobalProtect or Prisma Access Agent, and customers report that setup is the hardest part. It is a Gartner Leader in both the 2026 SSE and SASE Magic Quadrants, and Gartner cited expensive pricing in the 2026 SASE report.

dope.security

dope.security is packaged as SWG, SWG + DLP, SWG + CASB, or the full SSE+ suite, and you can start with a free SWG trial via your Google or Microsoft login with no payment method on file. The secure web gateway, SSL inspection, URL filtering, Cloud App Controls and Dopamine DLP all run in one agent on the device, under 100 MB of RAM, on Mac and Windows. There is no service node to size, no bandwidth unit for branches, and no regional surcharge, because there is no region. Policy pushes to every endpoint in real time from a single console that was built from scratch rather than assembled through acquisitions.

Line by line

Questions to ask before you sign a Prisma Access renewal

Whether you stay or switch, these are the questions that turn a quote into a real number.

The bottom line on Prisma Access pricing

Prisma Access is a strong, well-rated cloud SSE sold on a unit-plus-edition-plus-module model, and the module tower exists because the architecture needs it: everything you want inspected has to be inspected in Palo Alto's cloud, and the cloud is what you are paying for. Gartner's 2026 note about expensive pricing is a description of that structure, not a knock on the engineering.

If the outcome you need is web security, data protection and AI governance for a few hundred to a few thousand laptops, you can buy the tower, or you can move the gateway onto the device and stop paying for the trip. dope.security puts the SWG, SSL inspection, Cloud Application Control and Dopamine DLP into one agent and one console, with no data center in the middle. Start a free trial with your corporate login, or book a demo and bring your Prisma Access quote. We will walk through it line by line.

Frequently Asked Questions

How much does Prisma Access cost per user?

Palo Alto Networks does not publish a per-user list price for Prisma Access. Pricing is quote-based and built from units (one per mobile user, or one per Mbps for a branch), an edition, and separately licensed modules such as Enterprise DLP and AI Access Security. Third-party price estimates vary widely and should be treated as unverified. dope.security publishes its packaging openly and offers a free SWG trial with no payment method required.

Is Prisma Access licensed per user or per bandwidth?

Both. Palo Alto's documentation defines one unit as one mobile user for mobile user deployments, and one unit as 1 Mbps of bandwidth for remote network and Clean Pipe deployments. Prisma Access 6.0 added site-based tiers for remote networks, from Very Small (up to 25 Mbps) to Large (up to 1 Gbps). dope.security licenses per user only, because inspection runs on the device and there is no branch bandwidth to meter.

Does Prisma Access include DLP?

Enterprise DLP is licensed as its own module rather than included in the base unit, and AI Access Security is documented as requiring AI Access-X or CASB-X plus Enterprise DLP stacked beneath it. dope.security's Dopamine DLP ships in the SWG + DLP package and classifies uploads and AI prompts on the endpoint with zero policy configuration, so there is no separate DLP tower to price.

Why did Gartner call Prisma Access expensive in 2026?

In the 2026 Gartner Magic Quadrant for SASE Platforms (July 28, 2026), Palo Alto fell from first to third on Ability to Execute behind Netskope and Cato, and SDxCentral's August 3, 2026 coverage reports that Gartner cited expensive pricing among the reasons. Palo Alto remained a Leader in both the 2026 SSE and SASE reports. The pricing comment reflects what the full module stack costs, not the engineering quality.

What hidden costs come with Prisma Access?

Beyond licenses, budget for the Panorama to Strata Cloud Manager migration (documented as one-way), professional services for setup (the most common review complaint), agent maintenance (Palo Alto has confirmed GlobalProtect macOS battery drain and CPU issues, and patched 11 CVEs across GlobalProtect, the Prisma Access Agent and Prisma Browser on August 12, 2026), and the user-time cost of routing every request through a cloud node. dope.security removes the node, so those costs do not exist in the same form.

Can an on-device SWG replace Prisma Access for a mid-size company?

For companies of roughly 250 to 5,000 employees whose requirement is web security, SSL inspection, SaaS tenant control, DLP and AI governance for laptops, yes. dope.security delivers those from a single agent under 100 MB of RAM with no backhaul, deploys through Intune or Jamf, and has scaled to more than 18,000 devices in weeks for a Fortune 100 customer. If you need branch firewalling or private app access over Mbps-licensed circuits, scope that separately.