VCF renewals ▲ 31.4% YoY· Symantec EDR true ups ▲ 18%· Carbon Black avg quote uplift +22%· Mainframe MIPS capacity squeezes ▲· Audit notices ▲ 47% QoQ· Our last 10 deals avg 41% off quote· VCF renewals ▲ 31.4% YoY· Symantec EDR true ups ▲ 18%· Carbon Black avg quote uplift +22%· Mainframe MIPS capacity squeezes ▲· Audit notices ▲ 47% QoQ· Our last 10 deals avg 41% off quote
Wednesday · 27 May · MMXXVIIssue II
Independent · Buyer SideLive
Broadcom Negotiations
VMware · Symantec · CA · Carbon Black · Mainframe · Brocade The buyer's report on Broadcom contract economics. Not affiliated with Broadcom.
Symantec · Benchmark

What mid market enterprises actually paid for Symantec DLP in 2025.

The seller's rate card for Symantec DLP at the mid market tier is one number. The signed contracts across 19 mid market deals last year are a different number, and the spread between them is wider than most buyers realise.

The Desk tracks a rolling benchmark of signed Symantec DLP contracts because the published rate card and the closing price almost never match, and because the question new buyers ask first is what other enterprises in their tier actually paid. The published rate is useful only as the anchor the seller opens at. The closing prices, normalised across 19 mid market signings in 2025, tell a different story. The spread within the band is wide. The position of any single buyer inside the band is determined by a small number of inputs that the buyer can actually read and influence.

Mid market here means enterprises between roughly $250M and $2B in annual revenue, with DLP deployments covering between 1,800 and 9,500 employees and between four and eleven monitored data locations. This is the segment where Symantec DLP shows up most often in our practice and where the pricing pattern is most legible because the deal sizes are small enough to be comparable but large enough to attract deal desk attention rather than running on rate card.

The band we observed

Across the 19 signings in 2025, the per monitored user per year fully bundled price ranged from $42 to $108. The median was $71. The cheapest closer sat near $42 with a $580K total annual contract value. The most expensive closer sat at $108 with a $1.4M total annual contract value. The most expensive closer was not the largest deal. Two of the largest deals in the sample closed in the lower half of the band. The largest deal in the sample closed at $58 per user per year, well below the median, on a multi year commit.

What separated cheapest from median, and median from most expensive, was not deal size. It was the same five inputs we see in every Symantec benchmark we run. Entitlement hygiene at the point of quote. Documented alternative scenario. Audit posture. Commit duration traded for escalator caps rather than for headline price. Disaggregated bundling posture. Buyers who arrived with four of the five sat in the lower third of the band. Buyers who arrived with none sat at or above the median.

"Two manufacturers in the same sub sector, of nearly identical employee count, signed Symantec DLP contracts six weeks apart at prices that differed by forty one percent per monitored user. Neither buyer had any way to know that until the benchmark surfaced it."Symantec Practice Lead, The Desk

What the seller does differently at this tier

One observation that matters for mid market buyers specifically. The seller's deal desk treats mid market accounts as discretionary in a way that it does not treat large enterprise accounts. Discretionary here means that the deal desk has wider concession latitude on mid market accounts because the individual deal value is lower and the approval workflow is shorter. This works both ways. A mid market buyer who arrives unprepared closes near the top of the band because the deal desk has discretion to hold the line. A mid market buyer who arrives prepared closes near the bottom of the band because the deal desk has discretion to grant. The width of the band reflects the discretion. Large enterprise accounts have narrower bands because the approval workflows constrain the discretion in both directions.

The practical consequence is that preparation matters more at the mid market tier than at the large enterprise tier, on a relative basis. A large enterprise buyer who is well prepared captures 8 to 14 percent against an averagely prepared peer. A mid market buyer who is well prepared captures 24 to 38 percent against an averagely prepared peer. The mid market is where preparation produces the largest spread.

The numbers

Mid market DLP signings tracked in 202519
Per user per year price band$42 to $108
Median per user per year$71
Lower third (bottom 6 signings)$42 to $58
Upper third (top 6 signings)$82 to $108
Median concession from a corrected entitlement read11% to 19%
Median concession from a credible alternative scenario14% to 26%

What we have seen on live deals

A mid market manufacturer in North America renewed Symantec DLP in mid 2025 with roughly 4,200 monitored users across six data locations. The seller opened at $94 per user per year, in the upper third of the band. The buyer's procurement team did not have a benchmark to read against and accepted the opening as roughly market. We brought the band to the table along with a corrected entitlement read that removed 380 users priced as monitored but actually outside the policy scope, and a documented alternative scenario built around a competing platform that the buyer's security team had been piloting. The renewal closed at $54 per user, in the lower third of the band, with a four year commit and capped escalators in years three and four.

A mid market financial services firm in EMEA renewed late in 2025 at the small end of the segment with 1,950 users and four locations. The seller opened at $89 per user. The firm had no alternative scenario in development but had a clean audit posture and a willingness to commit to five years. We negotiated a price built around the commit duration trade rather than around the alternative scenario, with escalators capped at 2.5 percent and disaggregated SKU pricing protected. The renewal closed at $48 per user, the second cheapest closer in our 2025 sample. The work was almost entirely in the structure rather than in the headline.

The takeaway

  • The 2025 mid market band for Symantec DLP ran from $42 to $108 per monitored user per year on a fully bundled basis, with a median around $71. The spread reflects the deal desk's discretion at this tier, which is wider than the discretion on large enterprise accounts.
  • Five inputs explain most of the variance. Entitlement hygiene. Documented alternative scenario. Audit posture. Commit duration traded for escalator caps. Disaggregated bundling. Mid market buyers who arrived with four of the five closed in the lower third of the band.
  • Preparation matters more at the mid market tier than at the large enterprise tier because the deal desk's concession latitude is wider. A well prepared mid market buyer typically captures 24 to 38 percent against an averagely prepared peer. The benchmark is the starting point. The position is built around the buyer's actual deployment.
Pricing a mid market DLP renewal and not sure where you sit in the band? Write to the Desk → Two analyst calls, no pitch.

Three related articles

Cross references. Service: Benchmarking. Practice: Symantec DLP and ProxySG. Calculator: Audit exposure estimator.
Correspondence Invited

Write before the quote becomes a position.

Two analyst calls. No pitch. We tell you what we would do, what the leverage actually is, and whether we are the right firm. If we are not, we will say so.
Who we work for. Buyer side only. No reseller relationship with Broadcom. No partnership of any kind. We do not earn anything from products sold or renewed. Only from outcomes delivered against the contract.