What enterprises actually paid for Symantec Endpoint in 2025.

The Symantec Endpoint pricing band that buyers are reading on the seller deck is not the band the market is signing at. The band that buyers are hearing on the procurement grapevine is not the band the market is signing at either. The band the market is signing at sits somewhere in between, and it varies more by structure than by size. The numbers below are drawn from 24 signed Symantec Endpoint renewals across our 2025 sample, verified against the executed contracts, with the client identifiers removed. The piece is descriptive, not prescriptive. Buyers should read it as a reference point, not as a target.

The sample covers Symantec Endpoint Protection, Symantec Endpoint Security, and Symantec Endpoint Security Complete, across estates ranging from 4,200 endpoints to 142,000 endpoints. The terms range from one year true up paper to three year fixed term, with a long tail of multi year structures that include option years. We have normalised the unit pricing to a per endpoint per year basis on the closing contract, before tax, before professional services, and against the operating module set in active production at signature.

The headline band

The per endpoint per year price on closing contract across the 24 deal sample ranged from $14.20 to $58.40. The median was $27.10. The interquartile range was $21.40 to $36.80. The variance is structural rather than commercial. The bottom of the band is dominated by larger estates on bundle pricing with deeper concessions. The top of the band is dominated by smaller estates on standalone module pricing or with feature mixes that include EDR and DLP attach.

The narrower band that matters more, for buyers reading this against a current renewal, is the price per endpoint per year on the active operating module set, with the bundle attach effect normalised. That narrower band is $19.40 to $34.20, with a median of $24.60. This is the band the Desk uses as a reference when reading a Q1 or Q2 2026 renewal quote, because it strips out the configuration noise.

The size effect

Size matters less than buyers expect, and module composition matters more. The largest estate in the sample at 142,000 endpoints signed at $18.30 per endpoint per year. The next largest at 88,000 signed at $26.40, with the variance driven by a heavier DLP attach and a deeper EDR module set rather than by the seat count. A 12,500 endpoint estate with a comparable module mix to the 142,000 estate signed at $21.80, which is meaningfully closer to the large enterprise price than the seat curve would predict.

The structural read is that the bundle attach decision moves the unit price more than the seat count does. Buyers benchmarking their renewal against headline per seat prices reported by larger enterprises are usually reading the wrong reference point. The closer reference point is a same module same posture comparison, not a same size comparison.

"The fifty thousand seat estate signed at the same per endpoint price as the eight thousand seat estate. The difference between them was not size. It was that one had retired the legacy SEP entitlement and one had carried it forward."Endpoint Lead, The Desk

The module composition effect

The single largest driver of unit price variance in the sample is module composition. An estate running Symantec Endpoint Protection alone, without EDR and without DLP attach, sits at the bottom of the band. The 2025 median on this configuration was $16.80 per endpoint per year. An estate running Symantec Endpoint Security Complete with EDR active and DLP attach active sits near the top of the band, with the 2025 median on this configuration at $39.40 per endpoint per year.

The gap between the two configurations is roughly $22.60 per endpoint per year, or 134 percent on the lower base. On a 30,000 endpoint estate over a three year term that is $2.0M of difference, before any concession. The configuration choice is the largest single number the buyer controls in the Symantec Endpoint negotiation.

The regional effect

Regional variance in the 2025 sample was smaller than the size effect or the module effect, but not negligible. North American renewals signed at a median of $26.20 per endpoint per year. EMEA renewals signed at a median of $28.40, with the variance driven by a stronger ProxySG and Cloud SWG attach posture in EMEA. APAC renewals signed at a median of $25.80, with a wider band, particularly across financial services in Singapore and Hong Kong where the regulatory reporting posture pushed the support and maintenance line up.

What the benchmark is for and what it is not for

The benchmark above is a reference point. It is not a target. Buyers who anchor a renewal negotiation to the bottom of the headline band are usually pricing against a configuration that does not match their estate, and the seller side will produce that mismatch in the first counter. The buyer side use of the benchmark is to read the current quote against the normalised median for the buyer's actual module composition and region. The gap between the quote and the reference is the conversation, not the gap between the quote and the headline bottom.

The benchmark also degrades over time. The 2025 sample was signed in a market where the bundle posture was still partially open. The 2026 cycle, as we have noted elsewhere, is closing on a tighter bundle posture. The 2025 median is a reference point for current negotiations, but the 2026 closing prices will sit somewhere above the 2025 median for most configurations, before the buyer side motion. The Desk updates the benchmark quarterly. The numbers above are the 2025 anchor.

The term length effect

Term length is the second largest controllable input to the unit price after module composition. Single year true up renewals in the 2025 sample priced at a median of $30.40 per endpoint per year on a normalised configuration. Two year fixed term renewals priced at a median of $25.10. Three year fixed term renewals priced at a median of $22.80. The gap between the one year and the three year median was $7.60 per endpoint per year, or roughly 25 percent. On a 30,000 endpoint estate that is $228,000 of annual difference, or $2.05M over the life of the longer term contract.

The trade off the buyer is making in choosing the longer term is exposure to price protection rather than to re entry flexibility. The 2025 sample shows that buyers who took three year terms with a clear option year structure preserved most of the price advantage while keeping a 2027 re entry point. The Desk recommends the three year plus option structure on most configurations of this size. The structure shows up in roughly forty percent of the 2025 signed contracts in the sample.

How to read your current quote against the benchmark

The mechanical buyer side use of the benchmark is a three step read. First, normalise the current quote to a per endpoint per year basis on the closing contract, on the operating module set in production. Second, locate the matching configuration in the bands above, by region and by module composition. Third, identify the gap between the normalised quote and the matching median. The gap is the conversation. The closer the quote sits to the headline top of the band, the more material the entitlement read and the structural conversation are likely to recover.

The takeaway

• The 2025 Symantec Endpoint signed price band ran from $14.20 to $58.40 per endpoint per year, with a normalised median of $24.60. The variance is driven by module composition more than by seat count.
• The configuration choice between SEP alone and Symantec Endpoint Security Complete with EDR and DLP attach moves the unit price by 134 percent on the lower base. That choice is the largest single number the buyer controls in the renewal.
• The benchmark is a reference point for buyer side reading of the current quote, not a target to anchor a negotiation against. The closer comparison is same module same region, not same size.