Predictika · Data security subscriptions

An AI sales agent's subscription quote, checked before it goes out

An AI sales agent prepares a data security subscription quote: the protection packages, the number of identities and the volume of data, add-on offerings such as MDDR or Interceptor, the term and a discount. Before it goes out, the agent sends it to Predictika, which checks it against a declarative model of how the packages and add-ons depend on each other and returns a verdict, every reason and the annual price it computed.

Scope: Varonis Data Security Platform subscription quotes: protection packages, add-on offerings, identities, data volume, term, discount and the annual price. See everything this validator covers

This validator models Varonis subscription quotes, not just the scenarios shown below.

  • Protection packages — Microsoft 365 & Entra ID, Windows & NAS, SaaS apps, Cloud infrastructure, Databases and Network; at least one is needed, and the SaaS and Databases packages are sized by the number of apps or databases.
  • Add-on offerings — MDDR, Varonis Concierge, Athena AI, Atlas AI security and Interceptor email security, several of which need a particular package to work with.
  • Sizing — a minimum number of identities, data volume for the data-store packages, and approval for very large deployments or many connected apps.
  • Term and discount — a term of one to five years with a discount allowance for each term; a discount slightly above the allowance needs a person, and one far above it is blocked.
  • Stated annual price — the annual price the quote states is compared with the price computed from the packages, the add-ons and the discount.

Any Varonis subscription quote that touches these rules is in scope — not only the scenarios pictured here. Not covered: data risk assessments, professional services and the perpetual or on-premises legacy modules. Package and offering names follow the public Varonis website. All prices, the minimum identities, the package dependencies, the sizing rules, the term allowances and the approval thresholds are modeled from comparable products, not published by Varonis; every price on this page is illustrative.

The AI sales agentBuilds the subscription quote from the conversation with the customer and says it is ready.
Predictika validatorChecks every rule at once and returns the verdict, each finding, and the computed figures.

6 scenarios in 3 groups · each group runs from the agent’s first attempt to the outcome · click one to switch

What the agent proposes

The AI sales agent says

Illustrative agent statement. The validator receives the structured request below.

Proposing agent: AI sales agent (scripted)

Before sending, the agent must call Recorded run

Predictika validator


      

        
        
        
      

      
Waiting for the call.

      
    

  

  
  

    
Where rules-based CPQ gets it wrong
Click to expand
    
Our assessment of what a typical rules-based CPQ (product rules, price rules and validation rules, as in Salesforce CPQ) does with the same cases. It is a judgment about effort and reliability, not a claim that nothing can be built.

    
What the validator caughtTypical rules-based CPQPredictika
Add-ons that need particular packagesOnly with care
MDDR, Atlas and Interceptor each work with only some packages, so every add-on is its own rule that reads the package lines.		The packages and add-ons are in one request and every dependency is checked together on every call.
Packages sized by apps, databases or terabytesOnly with workarounds
A package priced per app or per database needs a count check, and the data-store packages need a volume check, each as a separate rule.		The counts and the volume are fields of the request and are checked in the same pass.
A discount allowance that depends on the termOnly with care
The allowance changes with every term length and has a second, approvable band, so a rule must read the term and the discount together.		The term and the discount are compared with the allowance on every call.
An annual price reconciled with a stated oneOnly with workarounds
The annual price comes from several packages, per-unit sizing, add-ons and a discount, and a separate calculation is needed to compare it with the figure the quote states.		The price is computed inside the model and compared with the stated one on every call.
Every problem returned in one answerOnly with workarounds
Rules tend to fire as the quote is saved or a step is completed, so a person often fixes one error and meets the next.		All findings come back together, whatever order the choices arrived in.

  

  

    
What this validator catches: findings from its test cases
Click to expand
    
Every rule is checked on every call, in any order the choices arrive; one problem never hides another. Blocking findings stop the quote; approval findings need a person to sign off; everything else is computed.

    
1The quote has no protection package; at least one is needed.
2The quote covers 200 identities; the minimum is 250.
3The Windows & NAS and Cloud infrastructure packages are sized by data volume and the quote states 0 TB.
4The Network package needs the Microsoft 365 & Entra ID, Windows & NAS or Cloud infrastructure package to work with.
5The SaaS apps package is priced per connected app and the quote has 0 apps.
6The quote lists 3 SaaS apps but not the SaaS apps package.
7The quote connects 12 SaaS apps; more than 10 needs a person to confirm the sizing.
8The Databases package is priced per database and the quote has 0 databases.
9MDDR is an upgrade that needs the Microsoft 365 & Entra ID, Windows & NAS or Network package to monitor.
10Atlas AI security needs the Microsoft 365 & Entra ID or Cloud infrastructure package.
11Interceptor email security needs the Microsoft 365 & Entra ID package.
12Varonis Concierge is quoted for 600 identities, below 1,000; a person should confirm it is offered at that size.
13A discount of 11 percent is above the 8 percent allowed for this term; a person should approve it.
14A discount of 9 percent is more than 5 points above the 0 percent allowed for this term; it cannot be approved.
15A term of 6 years is outside the 1 to 5 year range.
16The quote states 55,000 dollars per year; the quoted packages and discount give 59,000 dollars.
172,500 TB of data is above 2,000 TB; a person should confirm the deployment sizing.

  

  

    
Scenarios and results
Click to expand
    
The recorded result of the validator for each scenario on this page: the request the AI agent sent, the verdict, and every finding, in the order they appear above.

    
1. Add-on without its package: Interceptor email security on a Windows & NAS package only

    
The agent's request. Please quote a Varonis subscription for 1,000 identities with the Windows & NAS package, 50 TB of data, plus Interceptor email security, for a term of 1 year. It is ready to send.

    
Verdict: Blocked.

    
    
      
  • Interceptor needs Microsoft 365. Interceptor email security needs the Microsoft 365 & Entra ID package.
    • 
    

    
2. Add-on without its package: The agent resubmits after fixing the errors

    
The agent's request. Please quote a Varonis subscription for 1,000 identities with the Microsoft 365 & Entra ID and Windows & NAS packages, 100 TB of data, plus Interceptor email security, for a term of 1 year. The quote states an annual price of 70,000 dollars. It is ready to send.

    
Verdict: Allowed.

    
    
      
  • Quote summary. 1,000 identities for 1 year(s), annual price 70,000 dollars after a 0 percent discount.
    • 
    

    
3. MDDR on a package it cannot monitor: MDDR with the SaaS apps package alone

    
The agent's request. Please quote a Varonis subscription for 1,000 identities with the SaaS apps package, 2 connected SaaS apps, plus MDDR, for a term of 1 year. It is ready to send.

    
Verdict: Blocked.

    
    
      
  • MDDR needs a monitored package. MDDR is an upgrade that needs the Microsoft 365 & Entra ID, Windows & NAS or Network package to monitor.
    • 
    

    
4. MDDR on a package it cannot monitor: The agent resubmits after fixing the errors

    
The agent's request. Please quote a Varonis subscription for 1,000 identities with the Microsoft 365 & Entra ID and Windows & NAS packages, 100 TB of data, plus MDDR, for a term of 1 year. The quote states an annual price of 65,000 dollars. It is ready to send.

    
Verdict: Allowed.

    
    
      
  • Quote summary. 1,000 identities for 1 year(s), annual price 65,000 dollars after a 0 percent discount.
    • 
    

    
5. Discount above the term allowance: A one-year term with a 9 percent discount

    
The agent's request. Please quote a Varonis subscription for 1,000 identities with the Microsoft 365 & Entra ID and Windows & NAS packages, 100 TB of data, for a term of 1 year with a 9 percent discount. It is ready to send.

    
Verdict: Blocked.

    
    
      
  • Discount above the approvable range. A discount of 9 percent is more than 5 points above the 0 percent allowed for this term; it cannot be approved.
    • 
    

    
6. Discount above the term allowance: The agent resubmits after fixing the errors

    
The agent's request. Please quote a Varonis subscription for 1,000 identities with the Microsoft 365 & Entra ID and Windows & NAS packages, 100 TB of data, for a term of 3 years with a 8 percent discount. The quote states an annual price of 54,280 dollars. It is ready to send.

    
Verdict: Allowed.

    
    
      
  • Quote summary. 1,000 identities for 3 year(s), annual price 54,280 dollars after a 8 percent discount.
    • 
    

  

  

    
Narration transcript
Click to expand
    
The text of the narrated walkthrough, step by step.

    
    
      
  1. Welcome to a demo of Predictika's Validator. An AI sales agent prepares a data security subscription quote: the protection packages, the number of identities and the volume of data, add-on offerings such as MDDR or Interceptor, and more. Before it goes out, the agent sends it to Predictika, which checks it against a declarative model of how the packages and add-ons depend on each other and returns a verdict, every reason and the annual price it computed.
    2. 
      
  2. I will start with the first request by the agent.
    3. 
      
  3. The agent says. Please quote a Varonis subscription for 1,000 identities with the Windows & NAS package, 50 TB of data, plus Interceptor email security, for a term of 1 year. It is ready to send.
    4. 
      
  4. Before it goes out, the agent calls the validator.
    5. 
      
  5. Blocked, with one finding, all in one answer. Interceptor email security needs the Microsoft 365 & Entra ID package.
    6. 
      
  6. The validator returned one blocking finding in one answer. A check that reads one field at a time would pass most of this; it shows only when the choices in the quote are checked against each other.
    7. 
      
  7. What this shows: for add-ons that need particular packages, a rules-based CPQ is error-prone for this.
    8. 
      
  8. Now the agent resubmits.
    9. 
      
  9. The corrected request. It changes the packages to Microsoft 365 & Entra ID, Windows & NAS and the data volume to 100 TB. It sets the annual price stated on the quote to 70,000 dollars.
    10. 
      
  10. It calls the validator again.
    11. 
      
  11. This time the validator clears it.
    12. 
      
  12. The earlier finding is cleared, and the validator's total, $70,000, matches the quote.
    13. 
      
  13. One problem caught in one call, fixed in one pass, and a clean quote. That is the value of Predictika's validator: catching mistakes before they reach the customer. Now you can try the other scenarios yourself.
    14.