Bundling gives Palo Alto pricing leverage

Palo Alto Networks wins cloud security deals by turning them into broader account negotiations, not product shootouts. In large enterprises it already owns the firewall budget, the security operations budget, or both, so Prisma Cloud and Cortex can be priced as add ons inside a bigger renewal. That matters because a CISO can cut vendor count in one purchase, while a startup like Upwind has to win on product behavior, especially cleaner runtime signals and easier deployment with engineering teams.1 2 3 4 5

• Palo Alto Networks has made this bundling motion explicit. Its platformization push ties Strata, Prisma Cloud, and Cortex into one architecture, and in 2025 it folded Prisma Cloud into Cortex Cloud to give cloud security buyers and SOC teams one shared console and workflow.1 2 3
• The leverage starts with distribution. Palo Alto Networks says it serves more than 70,000 customers, and its own materials show firewall, Prisma, and Cortex products sold together in large enterprise deployments. That installed base lets account teams trade margin on one module to protect a much larger multi product contract.4 5 6
• Upwind is attacking the weak spot in that model, which is operator trust. Its pitch is not just another dashboard. It puts a sensor inside live workloads so DevOps teams can see which process, container, or identity actually did something risky, which helps cut false positives that broad CNAPP bundles often create.7 8

This market is heading toward a split. The biggest enterprises will keep rewarding broad security suites that collapse spend into fewer vendors, while specialists that materially reduce alert noise and fit cleanly into engineering workflows can still break in from the bottom up. Upwind’s path is to become the product teams insist on before procurement tries to consolidate it away.1 2 7 8