Predictika · Managed security service quotes

An AI sales agent's managed security quote, checked before it goes out

An AI sales agent prepares a monthly quote for managed security services: co-managed administration of firewalls and other network security devices, a 24/7 security operations service sized by endpoints and daily log volume, and a fusion center option, with a response level, a term and a discount. Before it goes out, the agent sends it to Predictika, which checks it against a declarative model of the Optiv service lines and returns a verdict, every reason and the monthly total it computed.

Scope: Optiv Technology Management (co-managed device administration), Agentic Security Operations and the Cyber Fusion Center, with response level, term and discount. See everything this validator covers

This validator models Optiv managed security quotes, not just the scenarios shown below.

  • Technology Management — co-managed administration of firewalls, load balancers, SSL VPNs, network IDS/IPS, IoT security management and network access control, with a standard or priority response level and a 12, 24 or 36 month term; IoT management and access control need a managed firewall, and priority response needs ten or more devices.
  • Agentic Security Operations and Cyber Fusion Center — the 24/7 operations service sized by endpoints (250 to 50,000) and log volume (up to 2,000 GB a day); the Cyber Fusion Center is quoted only together with it.
  • Discount, size and total — a hard limit on discounts above 20 percent of list, a sales manager's approval above 10 percent, a delivery review above 300 devices or for a custom service level, and the monthly total the quote states against the total computed.

Any Optiv managed security quote that touches these rules is in scope — not only the scenarios pictured here. Not covered: other Optiv services, one-time project work, taxes and non-USD pricing. The service names and device categories come from Optiv's public pages; all prices, quantity limits and approval thresholds are modeled from comparable services and are illustrative (see the note at the foot of the page).

The AI sales agentBuilds the managed security quote from the conversation and says it is ready.
Predictika validatorChecks every rule at once and returns the verdict, each finding, and the computed figures.

6 scenarios in 3 groups · each group runs from the agent’s first attempt to the outcome · click one to switch

What the agent proposes

The AI sales agent says

Illustrative agent statement. The validator receives the structured request below.

Proposing agent: AI sales agent (scripted)

Before sending, the agent must call Recorded run

Predictika validator


      
Waiting for the call.

Where rules-based CPQ gets it wrong

Click to expand

Our assessment of what a typical rules-based CPQ (product rules, price rules and validation rules, as in Salesforce CPQ) does with the same cases. It is a judgment about effort and reliability, not a claim that nothing can be built.

What the validator caughtTypical rules-based CPQPredictika
Limits that depend on the response levelOnly with care
Priority response is available only from ten devices, so a rule has to count devices across six categories and compare the total.
The device quantities and the response level are in one request and checked together on every call.
A service that needs another serviceOnly with care
The Cyber Fusion Center and IoT or access control each depend on another line, so a dependency rule has to sit beside every such line.
Every line is a field of one request, so each dependency is checked on every call.
Size ranges on a serviceOnly with care
Endpoint and log volume ranges need a minimum and a maximum rule, and both must be dropped when the service is not selected.
The ranges are checked against the selection on every call.
A stated total that must match the computed totalOnly with workarounds
The total is built from devices, adders, the operations service and the discount, so a separate rule is needed to recompute it and compare it with the stated figure.
The stated total is a field of the request and is compared with the computed monthly total on every call.
Every problem returned in one answerOnly with workarounds
Rules tend to fire as the quote is saved or a step is completed, so a rep often fixes one error and meets the next.
All findings come back together, whatever order the choices arrived in.

What this validator catches: findings from its test cases

Click to expand

Every rule is checked on every call, in any order the choices arrive; one problem never hides another. Blocking findings stop the quote; approval findings need a person to sign off; everything else is computed.

1Priority response is quoted for 10 or more managed devices; this quote has 9.
2The quote has no managed devices and no Agentic Security Operations service.
3IoT Security Management and Network Access Control are quoted with at least 1 managed firewall.
4A device, endpoint or log quantity is negative.
5Agentic Security Operations is quoted for 250 or more endpoints; this quote has 249.
650,001 endpoints is above the 50,000 endpoint limit of a standard Agentic Security Operations quote.
72,001 GB of logs a day is above the 2,000 GB a day limit of a standard quote.
8Endpoints or log volume are listed but Agentic Security Operations is not selected.
9The Cyber Fusion Center is quoted together with Agentic Security Operations; it is selected without it.
10The quote states a monthly total of 12,579 USD; the configuration gives 12,580 USD.
11The quote states a monthly total of 62,080 USD; the configuration gives 61,580 USD.
12A discount above 10 percent of list needs sales management approval.
13A discount of 2,517 USD is negative or above 20 percent of the 12,580 USD list total.
14A discount of -1 USD is negative or above 20 percent of the 12,580 USD list total.
15More than 300 managed devices need a delivery capacity review.
16A custom service level or response time needs service delivery approval.
17The quote states a monthly total of 1 USD; the configuration gives 12,580 USD.

Scenarios and results

Click to expand

The recorded result of the validator for each scenario on this page: the request the AI agent sent, the verdict, and every finding, in the order they appear above.

1. Response level, operations sizing and total: A quote for six firewalls and two load balancers on the priority response level with Agentic Security Operations for 200 endpoints

The agent's request. Please quote 6 managed firewalls, 2 load balancers on the priority response level and a 24-month term, with Agentic Security Operations for 200 endpoints and 120 GB of logs a day, for a monthly total of 31,800 USD. It is ready to send.

Verdict: Blocked.

  • Priority response needs 10 devices. Priority response is quoted for 10 or more managed devices; this quote has 8.
  • Too few endpoints for ASO. Agentic Security Operations is quoted for 250 or more endpoints; this quote has 200.
  • Stated total does not match. The quote states a monthly total of 31,800 USD; the configuration gives 28,740 USD.

2. Response level, operations sizing and total: The agent resubmits after fixing the errors

The agent's request. Please quote 8 managed firewalls, 2 load balancers on the priority response level and a 24-month term, with Agentic Security Operations for 300 endpoints and 120 GB of logs a day, for a monthly total of 31,800 USD. It is ready to send.

Verdict: Allowed.

  • Order summary. 10 managed device(s), list total 31,800 USD a month, quoted total 31,800 USD a month.

3. Dependencies between services: A quote for load balancers, IoT security management and network access control with the Cyber Fusion Center

The agent's request. Please quote 6 load balancers, 4 IoT devices under IoT security management, 2 network access control devices on the standard response level and a 24-month term, and the Cyber Fusion Center, for a monthly total of 34,440 USD. It is ready to send.

Verdict: Blocked.

  • Cyber Fusion Center needs ASO. The Cyber Fusion Center is quoted together with Agentic Security Operations; it is selected without it.
  • IoT and NAC need a firewall. IoT Security Management and Network Access Control are quoted with at least 1 managed firewall.

4. Dependencies between services: The agent resubmits after fixing the errors

The agent's request. Please quote 4 managed firewalls, 6 load balancers, 4 IoT devices under IoT security management, 2 network access control devices on the standard response level and a 24-month term, with Agentic Security Operations for 1,000 endpoints and 80 GB of logs a day, and the Cyber Fusion Center, for a monthly total of 67,920 USD. It is ready to send.

Verdict: Allowed.

  • Order summary. 16 managed device(s), list total 67,920 USD a month, quoted total 67,920 USD a month.

5. Log volume and discount: A quote with Agentic Security Operations for 5,000 endpoints, a heavy log volume and a large discount

The agent's request. Please quote 10 managed firewalls, 4 load balancers, 2 SSL VPNs, 3 network IDS/IPS devices on the standard response level and a 24-month term, with Agentic Security Operations for 5,000 endpoints and 2,500 GB of logs a day, with a discount of 61,145 USD a month, for a monthly total of 183,435 USD. It is ready to send.

Verdict: Blocked.

  • Log volume too high. 2,500 GB of logs a day is above the 2,000 GB a day limit of a standard quote.
  • Discount out of range. A discount of 61,145 USD is negative or above 20 percent of the 244,580 USD list total.
  • Discount above 10 percent. A discount above 10 percent of list needs sales management approval.

6. Log volume and discount: The agent resubmits after fixing the errors

The agent's request. Please quote 10 managed firewalls, 4 load balancers, 2 SSL VPNs, 3 network IDS/IPS devices on the standard response level and a 24-month term, with Agentic Security Operations for 5,000 endpoints and 1,800 GB of logs a day, with a discount of 16,881 USD a month, for a monthly total of 185,699 USD. It is ready to send.

Verdict: Allowed.

  • Order summary. 19 managed device(s), list total 202,580 USD a month, quoted total 185,699 USD a month.

Narration transcript

Click to expand

The text of the narrated walkthrough, step by step.

  1. Welcome to a demo of Predictika's Validator. An AI sales agent prepares a monthly quote for managed security services: co-managed administration of firewalls and other network security devices, a 24/7 security operations service sized by endpoints and daily log volume, a fusion center option. Before it goes out, the agent sends it to Predictika, which checks it against a declarative model of the Optiv service lines and returns a verdict, every reason and the monthly total it computed.
  2. I will start with the first request by the agent.
  3. The agent says. Please quote 6 managed firewalls, 2 load balancers on the priority response level and a 24-month term, with Agentic Security Operations for 200 endpoints and 120 GB of logs a day. It is ready to send. The rest of the request is on screen.
  4. Before it goes out, the agent calls the validator.
  5. Blocked, with three findings, all in one answer. Priority response is quoted for 10 or more managed devices; this quote has 8. Agentic Security Operations is quoted for 250 or more endpoints; this quote has 200. The quote states a monthly total of 31,800 USD; the configuration gives 28,740 USD.
  6. The validator returned three blocking findings in one answer. A check that reads one field at a time would pass most of this; it shows only when the choices in the quote are checked against each other and against the stated total.
  7. What this shows: for a stated total that must match the computed total, a rules-based CPQ can do this only with workarounds.
  8. Now the agent resubmits.
  9. The corrected request. It changes the managed firewalls to 8 and the endpoints to 300.
  10. It calls the validator again.
  11. This time the validator clears it.
  12. All three earlier findings are cleared.
  13. Three problems caught in one call, fixed in one pass, and a clean $31,800 quote. That is the value of Predictika's validator: catching mistakes before they reach the customer. Now you can try the other scenarios yourself.