Predictika · Security service edge quotes
An AI sales agent prepares a quote for Netskope One security service edge: the Next Gen Secure Web Gateway in its editions, Cloud Firewall, Remote Browser Isolation, Private Access, Digital Experience Management, Data Loss Prevention, CASB, posture management, machine traffic, China and Cloud Exchange, licensed per user, seat, account or gigabyte. Before it goes out, the agent sends it to Predictika, which checks it against a declarative model of the products, license units, allowances and dependencies Netskope documents, and returns a verdict, every reason, a line-item quote and the figures it computed.
This validator models Netskope One SSE quotes as Netskope documents them on its product pages and in its Subscription Service Charges Document, not just the scenarios shown below.
Any Netskope One SSE quote that touches these products and rules is in scope — not only the scenarios pictured here. Not covered: SD-WAN and Borderless SD-WAN, Micro Branch, Netskope One AI Security, Proactive DEM stations, partner pricing, taxes and negotiated discounts. Netskope publishes no prices; the prices shown are Predictika estimates for the demonstration.
7 scenarios in 3 groups · each group runs from the agent’s first attempt to the outcome · click one to switch
Illustrative agent statement. The validator receives the structured request below.
Proposing agent: AI sales agent (scripted)
Before sending, the agent must call Recorded run
What this means
Our assessment of what a typical rules-based CPQ (product rules, price rules and validation rules, as in Salesforce CPQ) does with the same cases. It is a judgment about effort and reliability, not a claim that nothing can be built.
| What the validator caught | Typical rules-based CPQ | Predictika |
|---|---|---|
| License units that differ product by product | Only with care The gateway is licensed per user, CASB per seat (one user on one SaaS app), DSPM per data store, CSPM per account and machine traffic per gigabyte; a CPQ needs a unit of measure and a price rule for each. | Every quantity is a field of one request and each product is checked against its own unit together. |
| Allowances that grow with the quantity | Only with workarounds CASB includes 1 TB of retroscan plus 1 TB for every 100 seats, and each DSPM data store or CSPM account carries its own allowance; a validation rule has to restate the arithmetic for each. | The allowance is computed from the quantities in the same pass as the check. |
| Add-ons that depend on another product | Only with care Intrusion Prevention extends Cloud Firewall, Remote Browser Isolation extends the gateway, and Data Loss Prevention and Advanced Analytics need the gateway or CASB; each dependency is a product rule that must be kept in step. | The dependencies are checked together with the quantities on every call. |
| Facts about the customer environment | Only with workarounds Reverse proxy for unmanaged devices, the client for remote users, a CSPM API connector, a separate machine tunnel and the Cloud Exchange host size are not products, so a rules-based CPQ needs extra questions and rules to capture them. | The environment is part of the request and is checked with the products. |
| Regional licensing | Only with care Traffic to the China data centers needs China Elite or Premium licenses per user with a monthly gigabyte allowance, separate from the global gateway licenses. | China staff, China licenses and expected China traffic are compared in one pass. |
| Every problem returned in one answer | Only with workarounds Rules tend to fire as the quote is saved or a step is completed, so a rep often fixes one error and meets the next. | All findings come back together, whatever order the choices arrived in. |
Every rule is checked on every call, in any order the choices arrive; one problem never hides another. Blocking findings stop the quote; approval findings need a person to sign off; everything else is computed.
| 1 | The Next Gen SWG line has 0 users and an edition that does not go with it; a subscription needs an edition (Standard, Enterprise or Professional) and a user count above zero together. |
| 2 | The Next Gen SWG line has 1,000 users and an edition that does not go with it; a subscription needs an edition (Standard, Enterprise or Professional) and a user count above zero together. |
| 3 | The quote has no Netskope product with a quantity above zero. |
| 4 | A per-user product is quoted for more users than the company has (1,000 users); a User is one individual however many devices that person uses, so no product can cover more users than the workforce. |
| 5 | Intrusion Prevention is an optional feature of Cloud Firewall; it is quoted for 600 users but Cloud Firewall covers only 500. |
| 6 | Intrusion Prevention is an optional feature of Cloud Firewall; it is quoted for 100 users but Cloud Firewall covers only 0. |
| 7 | Remote Browser Isolation extends the Next Gen SWG; it is quoted for 1,100 users but the Next Gen SWG covers 1,000. |
| 8 | Remote Browser Isolation extends the Next Gen SWG; it is quoted for 100 users but the Next Gen SWG covers 0. |
| 9 | Data Loss Prevention enforces policy through the Next Gen SWG or CASB, and the quote has neither. |
| 10 | Advanced Analytics analyzes data derived from Netskope One SSE, and the quote has no Next Gen SWG or CASB to supply it. |
| 11 | The quote needs 8 TB of CASB retroscan a year, but 600 seats include only 1 TB plus 1 TB for every 100 seats, and 0 extra TB is purchased. |
| 12 | The quote needs 2 TB of CASB retroscan a year, but 50 seats include only 1 TB plus 1 TB for every 100 seats, and 0 extra TB is purchased. |
| 13 | The quote puts 120,001 objects under DSPM management across 3 data stores; each data store covers up to 40,000 objects. |
| 14 | The quote scans 6 TB of cloud data across 5 accounts; each account includes up to 1 TB of data scanning. |
| 15 | Cloud Security Posture Management assesses IaaS accounts through an API connector, and the quote deploys none. |
| 16 | Expected machine traffic of 21 GB a month is above the 20 GB units purchased but within 10 percent; usage above capacity is trued up quarterly, so a person should confirm. |
| 17 | Expected machine traffic of 22 GB a month is above the 20 GB units purchased but within 10 percent; usage above capacity is trued up quarterly, so a person should confirm. |
| 18 | Expected machine traffic is 23 GB a month against 20 GB units purchased; usage more than 10 percent above capacity must be bought up front. |
| 19 | Machine and guest Wi-Fi traffic must use a tunnel separate from user traffic, and the quote has none. |
| 20 | Expected machine traffic is 5 GB a month against 0 GB units purchased; usage more than 10 percent above capacity must be bought up front. |
| 21 | 100 people work in Mainland China but only 99 China licenses are quoted; traffic to the China data centers is licensed per user with China Elite or China Premium. |
| 22 | China licenses are quoted for 50 users without choosing China Elite or China Premium. |
| 23 | Expected China traffic of 501 GB a month is above the 5 GB a month per user that 100 China licenses include; the excess is trued up quarterly, so a person should confirm. |
| 24 | 50 users reach managed cloud apps from unmanaged devices off the network; only the reverse proxy covers that case, and the quote does not deploy it. |
The recorded result of the validator for each scenario on this page: the request the AI agent sent, the verdict, and every finding, in the order they appear above.
The agent's request. Please quote Netskope One for a company with 2,400 users, for a 2-year term, with Next Gen SWG Enterprise for 2,400 users, Cloud Firewall for 2,400 users, CASB API for 800 users across 3 SaaS apps (2,400 seats) and CSPM for 12 cloud accounts. It expects to need 40 TB of CASB retroscan a year. CSPM would scan 12 TB of cloud data. 150 people work in Mainland China, with about 900 GB of traffic a month. 200 users reach managed cloud apps from unmanaged devices. The quote states a total of $480,000.00 for 2 years. It is ready to send.
Verdict: Blocked.
The agent's request. Please quote Netskope One for a company with 2,400 users, for a 2-year term, with Next Gen SWG Enterprise for 2,400 users, Cloud Firewall for 2,400 users, CASB API for 800 users across 3 SaaS apps (2,400 seats), 15 extra TB of retroscan capacity, CSPM for 12 cloud accounts and China Elite for 150 users. It expects to need 40 TB of CASB retroscan a year. CSPM would scan 12 TB of cloud data through an API connector. 150 people work in Mainland China, with about 900 GB of traffic a month. 200 users reach managed cloud apps from unmanaged devices through the reverse proxy. The quote states a total of $544,800.00 for 2 years. It is ready to send.
Verdict: Needs approval.
The agent's request. Please quote Netskope One for a company with 2,400 users, for a 2-year term, with Next Gen SWG Enterprise for 2,400 users, Cloud Firewall for 2,400 users, CASB API for 800 users across 3 SaaS apps (2,400 seats), 15 extra TB of retroscan capacity, CSPM for 12 cloud accounts and China Elite for 190 users. It expects to need 40 TB of CASB retroscan a year. CSPM would scan 12 TB of cloud data through an API connector. 150 people work in Mainland China, with about 900 GB of traffic a month. 200 users reach managed cloud apps from unmanaged devices through the reverse proxy. The quote states a total of $552,480.00 for 2 years. It is ready to send.
Verdict: Allowed.
The agent's request. Please quote Netskope One for a company with 1,200 users, for a 3-year term, with Next Gen SWG Professional for 1,200 users, Remote Browser Isolation for 1,500 users, Private Access for 1,200 users, Digital Experience Management for 1,200 users and Data Loss Prevention for 1,200 users. 400 users work remotely, and traffic is steered with a forward proxy. The quote states a total of $629,100.00 for 3 years. It is ready to send.
Verdict: Blocked.
The agent's request. Please quote Netskope One for a company with 1,200 users, for a 3-year term, with Next Gen SWG Professional for 1,200 users, Remote Browser Isolation for 600 users, Private Access for 1,200 users, Digital Experience Management for 1,200 users and Data Loss Prevention for 1,200 users. 400 users work remotely, and traffic is steered with the Netskope One Client. The quote states a total of $588,600.00 for 3 years. It is ready to send.
Verdict: Allowed.
The agent's request. Please quote Netskope One for a company with 250 users, for a 1-year term, with Private Access for 250 users, Digital Experience Management for 250 users, Advanced Analytics for 250 users and Cloud Exchange on a host with 4 CPUs, 16 GB of memory and 80 GB of free storage. The quote states a total of $15,000.00 for 1 year. It is ready to send.
Verdict: Blocked.
The agent's request. Please quote Netskope One for a company with 250 users, for a 1-year term, with Next Gen SWG Standard for 250 users, Private Access for 250 users, Digital Experience Management for 250 users, Advanced Analytics for 250 users and Cloud Exchange on a host with 8 CPUs, 16 GB of memory and 80 GB of free storage. The quote states a total of $24,000.00 for 1 year. It is ready to send.
Verdict: Allowed.
The text of the narrated walkthrough, step by step.