Why your 2022 ProxySG negotiation playbook no longer survives 2026 review.

The Desk receives a particular kind of inbound from ProxySG accounts every quarter. The buyer renewed in 2021 or 2022, signed a multi year contract on terms they were comfortable with at the time, and is now opening a 2026 renewal with the same playbook. They want to know which moves still work. The short answer is that almost none of the moves still work as written, but the longer answer is more interesting. The 2022 playbook understated the buyer's leverage in 2026 in some places and overstated it in others. Both errors produce worse outcomes than a 2026 calibrated position would. This piece walks the four shifts that have made the old playbook unsafe and what the calibrated position actually looks like.

The argument is not that ProxySG buyers have lost ground since 2022. The argument is that the ground has changed shape, and that buyers who navigate the 2026 landscape with the 2022 map will arrive at the wrong destination. The seller knows the new shape. The buyers we see closing in the lower half of the band have re drawn the map. The buyers who close at or above the median have not.

Shift one. The product roadmap has changed posture

The 2022 ProxySG negotiation was conducted against a product roadmap that was still being positioned as a forward looking platform investment. The seller's account team would point to upcoming feature releases, to integration plans with adjacent Symantec products, and to a multi year platform direction that the buyer could anchor commit duration against. The 2026 roadmap is positioned differently. Public seller communications and account team conversations now describe ProxySG as a mature platform with maintenance and enhancement scope rather than as a forward investment vehicle. This is not necessarily bad for the product. It is materially different from a negotiation perspective.

The change in roadmap posture changes the buyer's commit math. In 2022, a longer commit could be justified by anchoring to a roadmap that promised value across the term. In 2026, a longer commit has to be justified by maintenance value and by escalator cap protection rather than by future feature value. Buyers running the 2022 playbook will offer commit duration in exchange for things the seller is no longer trading. Buyers running the 2026 calibrated position will offer commit duration in exchange for the things the seller is trading now, which is mostly escalator and entitlement protection.

Shift two. The competitive landscape has consolidated

The 2022 playbook could credibly cite a competitive landscape that included Zscaler at the cloud forward end, Netskope as a credible secure web gateway alternative, Palo Alto's URL filtering at the network layer, and several smaller niche players. By 2026, the practical competitive set has narrowed considerably. Zscaler dominates the cloud forward conversation. Netskope holds specific verticals. The smaller players have either been acquired or have ceased active competition on enterprise refresh deals. The narrowed competitive set means the buyer's alternative scenario has fewer credible candidates.

This sounds like it weakens the buyer's position. It does not, structurally. A narrower competitive set actually concentrates the buyer's leverage on the remaining credible alternative. A documented Zscaler migration scenario in 2026 is a more powerful lever than a documented choice between four candidates in 2022, because the seller's deal desk has to take the single credible alternative more seriously than it had to take any one of four less credible alternatives. The buyers we see using this concentration well are closing better than buyers who used the wider 2022 alternative set.

"A bank's 2022 playbook listed four competitive alternatives. None of them were credible in 2026. The bank rebuilt the alternative scenario around a single concentrated Zscaler migration plan with budget. The same lever, narrowed to one candidate, moved the deal further than the four candidate version had moved it in 2021."Symantec Practice Lead, The Desk

Shift three. The renewal anchor has moved

In 2022, the renewal anchor was usually the prior contract's pricing structure. Buyers negotiated against a known prior anchor, with a known prior discount structure, and movements from that anchor were measurable. By 2026, the seller has moved many ProxySG accounts off the prior contract structure during interim true ups or during product line consolidations. The 2026 renewal anchor is often a more recent and less favourable structure, and the buyer who reads from the 2022 playbook will negotiate against the wrong anchor and miss the actual reference point.

The new anchor matters because the percentage movement the buyer's procurement function reports internally is measured against the anchor. A buyer who negotiates ten percent off the 2026 anchor may have actually moved further from the 2022 anchor than they realise, or in the other direction, may have moved less. Both errors produce poor internal reporting and misallocated negotiation effort. The 2026 calibrated position reads the actual anchor before negotiating against it and reports movement against the historical anchor rather than the current one.

Shift four. The escalator and true up regime has tightened

The 2022 ProxySG contract usually had a single escalator and a relatively forgiving true up regime. The 2026 contract often has layered escalators stacked in the capacity provisions and a more aggressive true up regime that recognises capacity events the prior contract would not have recognised. A buyer who negotiates against the 2022 escalator and true up assumptions will sign a contract whose effective cost across the term is materially higher than the cover page implies. This is the same pattern we have documented for CA ESP and for Symantec Email Security. The pattern is portfolio wide, not product specific, and ProxySG is now inside it.

The defensive position for the buyer is to read the stack rather than the headline, to negotiate caps on the stacked escalator as a single effective number, and to negotiate the true up recognition mechanics rather than just the unit price. Buyers who do this in 2026 close at total cost numbers that look broadly comparable to the 2022 numbers. Buyers who do not, close at total cost numbers that are materially higher despite headline rates that look competitive.

What a 2026 calibrated position looks like

The 2026 calibrated ProxySG position has four properties. It treats commit duration as a trade for escalator and entitlement protection rather than as a trade for roadmap value. It concentrates the alternative scenario on a single credible candidate, usually Zscaler, with documented budget and timeline. It reads the actual renewal anchor and measures movement from the historical anchor rather than the current one. And it negotiates the stacked effective cost across the term rather than the headline unit price. Buyers who rebuild their playbook around these four properties produce concession bands that look like the 2022 bands when measured the right way. Buyers running the 2022 playbook produce bands that look worse and conceal the actual outcome behind misleading internal reporting.

What we have seen on live deals

A Fortune 200 insurer opened a ProxySG renewal in late 2025 with a procurement team that had built its playbook in 2022 and had not revisited it. The team came in with a four candidate competitive set, a focus on headline unit price, and a commit duration offer anchored to roadmap value. The seller's account team accepted the structure of the negotiation because the structure favoured them. The renewal closed at roughly nine percent off the opening quote, which the insurer's procurement function reported internally as a solid outcome. We ran the same draft against the 2026 calibrated position and identified that a similar renewal would have closed at roughly twenty six percent off opening, on the same commit duration, with materially better escalator protection.

A regional bank in EMEA renewed in early 2026 with a 2026 calibrated position. The bank concentrated its alternative scenario on a single Zscaler migration plan with budget and timeline. It treated commit duration as a trade for capped escalators rather than for roadmap value. It read the actual renewal anchor and measured against the 2021 historical anchor. The renewal closed at thirty one percent off opening quote, with a stacked effective cost that was within 4 percent of the bank's 2021 total cost despite five years of contractual escalator. The bank's procurement function reported the outcome accurately because the measurement matched the historical reference point.

The takeaway

• The 2022 ProxySG playbook was calibrated to a forward looking product roadmap, a wide competitive set, a known prior renewal anchor, and a forgiving escalator regime. None of those four conditions still hold in 2026. Running the old playbook into the new conditions produces measurably worse outcomes that are often misreported as successes because the internal measurement uses the wrong anchor.
• The 2026 calibrated position trades commit duration for escalator and entitlement protection, concentrates the alternative scenario on a single credible candidate, reads the actual renewal anchor and measures against the historical one, and negotiates the stacked effective cost rather than the headline unit price.
• The same renewal, negotiated with the 2022 playbook versus the 2026 calibrated position, typically closes 15 to 23 points apart on percentage off opening quote, with materially different escalator protection. The gap is not negotiation skill. It is which map the buyer is reading.