Predictika · Security software subscription quotes

An AI sales agent's vulnerability management quote, checked before it goes out

An AI sales agent prepares a subscription quote for a Qualys VMDR TruRisk package with add-ons, Cloud Agents, scanner appliances and a support level. Before it goes out, the agent sends it to Predictika, which checks it against a declarative model of the packages and add-ons and returns a verdict and every reason.

Scope: Qualys VMDR TruRisk, FixIT and ProtectIT packages with Patch Management, Endpoint Protection with EDR, Web Application Scanning, Policy Compliance, File Integrity Monitoring and TotalCloud add-ons. See everything this validator covers

This validator models Qualys VMDR TruRisk package quotes, not just the scenarios shown below.

  • Packages — VMDR TruRisk, VMDR TruRisk FixIT (VMDR with Patch Management) and VMDR TruRisk ProtectIT (VMDR with Patch Management and Endpoint Protection with EDR), so an add-on that a package already includes is flagged.
  • Coverage — assets reachable through Cloud Agents or scanned IP addresses, scanner appliances for scanned IPs, and add-on asset counts that cannot exceed the agents or assets they run on.
  • Terms, support and approvals — 1, 2 or 3 year terms, the technical account manager tier, the discount ceiling and approval band, and quotes above the largest standard size.

Any Qualys VMDR quote that touches these rules is in scope — not only the scenarios pictured here. The package names and what they include come from Qualys public documents. The limits, term options, support rules and discount thresholds are modeled from comparable products and are not published by Qualys. No prices are modeled: the validator checks the structure of the quote, not its amount.

The AI sales agentBuilds the subscription quote from the conversation and says it is ready.
Predictika validatorChecks every rule at once and returns the verdict, each finding, and the computed figures.

6 scenarios in 3 groups · each group runs from the agent’s first attempt to the outcome · click one to switch

What the agent proposes

The AI sales agent says

Illustrative agent statement. The validator receives the structured request below.

Proposing agent: AI sales agent (scripted)

Before sending, the agent must call Recorded run

Predictika validator


      

        
        
        
      

      
Waiting for the call.

      
    

  

  
  

    
Where rules-based CPQ gets it wrong
Click to expand
    
Our assessment of what a typical rules-based CPQ (product rules, price rules and validation rules, as in Salesforce CPQ) does with the same cases. It is a judgment about effort and reliability, not a claim that nothing can be built.

    
What the validator caughtTypical rules-based CPQPredictika
Add-ons that a package already includesOnly with care
Each add-on needs a rule that checks the package it is quoted on, and the rule list grows with every package.		The package and every add-on are in one request and checked together on every call.
Add-on assets that depend on Cloud AgentsOnly with care
Patching, EDR and file monitoring run on the agent, so each needs its own rule comparing its asset count with the agent count.		The asset and agent counts are in one request and compared on every call.
Scanned IP addresses that need a scanner applianceOnly with care
A separate rule has to relate the scanned IP count to the number of scanners and to total coverage.		Agents, scanned IPs and scanners are fields of one request and checked together.
A discount that is blocked above one level and needs approval above anotherOnly with workarounds
Approval routing usually sits in a separate workflow, so a quote can be saved before the discount is reviewed.		The discount is a field of the request and returns either a block or an approval on every call.
Every problem returned in one answerOnly with workarounds
Rules tend to fire as the quote is saved or a step is completed, so a rep often fixes one error and meets the next.		All findings come back together, whatever order the choices arrived in.

  

  

    
What this validator catches: findings from its test cases
Click to expand
    
Every rule is checked on every call, in any order the choices arrive; one problem never hides another. Blocking findings stop the quote; approval findings need a person to sign off; everything else is computed.

    
1The quote covers 100 assets; the smallest package size is 128 assets.
2Subscription terms are 1, 2 or 3 years; the quote has 5 years.
3Patch Management is already included in the FixIT and ProtectIT packages; remove the add-on.
41,000 assets are set up for patching but the quote has no Patch Management (use FixIT or add Patch Management).
51,000 assets are set up for patching but only 800 have a Cloud Agent; patches are deployed by the agent.
6Endpoint Protection with EDR is already included in the ProtectIT package; remove the add-on.
7300 endpoints are set up for EDR but the quote has no endpoint protection (use ProtectIT or add the EDR add-on).
81,200 endpoints are set up for EDR but only 1,000 have a Cloud Agent.
9The quote has 1,200 assets but only 900 are reachable through Cloud Agents or scanned IP addresses.
10300 IP addresses are to be scanned but the quote has no scanner appliance.
11Web Application Scanning is on the quote but it lists 0 web applications.
1212 web applications are listed without the Web Application Scanning add-on.
13Policy Compliance is on the quote but it covers 0 assets.
14200 assets are listed for Policy Compliance without the add-on.
15Policy Compliance covers 1,500 assets but the quote has only 1,200 assets.
16File Integrity Monitoring is on the quote but it covers 0 assets.
17100 assets are listed for File Integrity Monitoring without the add-on.
18File Integrity Monitoring covers 1,000 assets but only 900 have a Cloud Agent; monitoring runs on the agent.
19TotalCloud is on the quote but it lists 0 cloud accounts.
203 cloud accounts are listed without the TotalCloud add-on.
21Premium support with a technical account manager needs at least 1,000 assets; the quote has 600.
22A discount of 15 percent is above 10 percent and needs sales management approval.
23A discount of 25 percent is above 10 percent and needs sales management approval.
24A discount of 30 percent is above the 25 percent ceiling; it cannot be approved on this quote.
256,000 assets is above the largest standard package size of 5,120; a person should confirm an enterprise quote.
26The quote has 6,000 assets but only 5,000 are reachable through Cloud Agents or scanned IP addresses.
27A discount of 40 percent is above the 25 percent ceiling; it cannot be approved on this quote.

  

  

    
Scenarios and results
Click to expand
    
The recorded result of the validator for each scenario on this page: the request the AI agent sent, the verdict, and every finding, in the order they appear above.

    
1. Package contents, coverage and discount: A VMDR TruRisk quote for 1,200 assets with patching, web applications and a 30 percent discount

    
The agent's request. Please quote VMDR TruRisk for 1,200 assets on a 1-year term, with 900 Cloud Agents, patching on 1,000 assets, 12 web applications, a 30 percent discount. It is ready to send.

    
Verdict: Blocked.

    
    
      
  • Patch assets without Patch Management. 1,000 assets are set up for patching but the quote has no Patch Management (use FixIT or add Patch Management).
    • 
      
  • More patch assets than Cloud Agents. 1,000 assets are set up for patching but only 900 have a Cloud Agent; patches are deployed by the agent.
    • 
      
  • Assets not covered by agents or scans. The quote has 1,200 assets but only 900 are reachable through Cloud Agents or scanned IP addresses.
    • 
      
  • Web apps without the scanning add-on. 12 web applications are listed without the Web Application Scanning add-on.
    • 
      
  • Discount above sales authority. A discount of 30 percent is above the 25 percent ceiling; it cannot be approved on this quote.
    • 
    

    
2. Package contents, coverage and discount: The agent resubmits after fixing the errors

    
The agent's request. Please quote VMDR TruRisk FixIT for 1,200 assets on a 1-year term, with 900 Cloud Agents, 300 scanned IP addresses on 2 scanner appliances, patching on 800 assets, Web Application Scanning, 12 web applications, a 8 percent discount. It is ready to send.

    
Verdict: Allowed.

    
    
      
  • Quote summary. 1,200 assets, 1,200 reachable by Cloud Agent or scan, 1-year term.
    • 
    

    
3. Add-ons, agents and support: A ProtectIT quote with an EDR add-on, File Integrity Monitoring and a technical account manager

    
The agent's request. Please quote VMDR TruRisk ProtectIT for 800 assets on a 3-year term, with 800 Cloud Agents, patching on 1,000 assets, the Endpoint Protection with EDR add-on, EDR on 1,000 endpoints, File Integrity Monitoring on 900 assets, Premium with a technical account manager support. It is ready to send.

    
Verdict: Blocked.

    
    
      
  • Endpoint protection already in ProtectIT. Endpoint Protection with EDR is already included in the ProtectIT package; remove the add-on.
    • 
      
  • More patch assets than Cloud Agents. 1,000 assets are set up for patching but only 800 have a Cloud Agent; patches are deployed by the agent.
    • 
      
  • More EDR endpoints than Cloud Agents. 1,000 endpoints are set up for EDR but only 800 have a Cloud Agent.
    • 
      
  • More monitored assets than Cloud Agents. File Integrity Monitoring covers 900 assets but only 800 have a Cloud Agent; monitoring runs on the agent.
    • 
      
  • Technical account manager needs 1,000 assets. Premium support with a technical account manager needs at least 1,000 assets; the quote has 800.
    • 
    

    
4. Add-ons, agents and support: The agent resubmits after fixing the errors

    
The agent's request. Please quote VMDR TruRisk ProtectIT for 1,200 assets on a 3-year term, with 1,200 Cloud Agents, patching on 1,000 assets, EDR on 1,100 endpoints, File Integrity Monitoring on 300 assets, Premium with a technical account manager support. It is ready to send.

    
Verdict: Allowed.

    
    
      
  • Quote summary. 1,200 assets, 1,200 reachable by Cloud Agent or scan, 3-year term.
    • 
    

    
5. Size, cloud accounts and discount: A 6,000-asset quote with cloud accounts and a 15 percent discount

    
The agent's request. Please quote VMDR TruRisk FixIT for 6,000 assets on a 1-year term, with 6,000 Cloud Agents, patching on 5,000 assets, 3 cloud accounts, a 15 percent discount. It is ready to send.

    
Verdict: Blocked.

    
    
      
  • Cloud accounts without TotalCloud. 3 cloud accounts are listed without the TotalCloud add-on.
    • 
      
  • Above the largest standard size. 6,000 assets is above the largest standard package size of 5,120; a person should confirm an enterprise quote.
    • 
      
  • Discount needs approval. A discount of 15 percent is above 10 percent and needs sales management approval.
    • 
    

    
6. Size, cloud accounts and discount: The agent resubmits after fixing the errors

    
The agent's request. Please quote VMDR TruRisk FixIT for 5,000 assets on a 1-year term, with 5,000 Cloud Agents, patching on 4,500 assets, TotalCloud, 3 cloud accounts, a 9 percent discount. It is ready to send.

    
Verdict: Allowed.

    
    
      
  • Quote summary. 5,000 assets, 5,000 reachable by Cloud Agent or scan, 1-year term.
    • 
    

  

  

    
Narration transcript
Click to expand
    
The text of the narrated walkthrough, step by step.

    
    
      
  1. Welcome to a demo of Predictika's Validator. An AI sales agent prepares a subscription quote for a Qualys VMDR TruRisk package with add-ons, Cloud Agents, scanner appliances and a support level. Before it goes out, the agent sends it to Predictika, which checks it against a declarative model of the packages and add-ons and returns a verdict and every reason.
    2. 
      
  2. I will start with the first request by the agent.
    3. 
      
  3. The agent says. Please quote VMDR TruRisk for 1,200 assets on a 1-year term, with 900 Cloud Agents, patching on 1,000 assets, 12 web applications, a 30 percent discount. It is ready to send.
    4. 
      
  4. Before it goes out, the agent calls the validator.
    5. 
      
  5. Blocked, with five findings, all in one answer. 1,000 assets are set up for patching but the quote has no Patch Management (use FixIT or add Patch Management). 1,000 assets are set up for patching but only 900 have a Cloud Agent; patches are deployed by the agent. The quote has 1,200 assets but only 900 are reachable through Cloud Agents or scanned IP addresses. The other two are on screen.
    6. 
      
  6. The validator returned five blocking findings in one answer. A check that reads one field at a time would pass most of this; it shows only when the choices in the quote are checked against each other.
    7. 
      
  7. What this shows: for add-on assets that depend on Cloud Agents, a rules-based CPQ is error-prone for this.
    8. 
      
  8. Now the agent resubmits.
    9. 
      
  9. The corrected request. It changes the package to VMDR TruRisk FixIT and the assets set up for patching to 800. It sets the Scanned IPs to 300 and the scanner appliances to 2. Two more changes are on screen.
    10. 
      
  10. It calls the validator again.
    11. 
      
  11. This time the validator clears it.
    12. 
      
  12. All five earlier findings are cleared.
    13. 
      
  13. Five problems caught in one call, fixed in one pass, and a clean quote. That is the value of Predictika's validator: catching mistakes before they reach the customer. Now you can try the other scenarios yourself.
    14.