Prisma Cloud License Types

Learn about the Prisma™ Cloud licensing options for Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platform (CWPP).
Prisma Cloud is available as a one-, two-, or three-year subscription in the following three editions:
  • Prisma Cloud Business Edition
    —License includes configuration security posture management (CSPM), compliance reporting, automated remediation, custom policy creation, and a standard success plan. The Business edition is tailored for investigating resource misconfigurations and verifying adherence to compliance standards so that you can take steps to implement policies and regulations that enable you to secure your public cloud deployments and comply with security standards. The Business edition is powered entirely through the application programming interface (API) and delivered exclusively as a software-as-a-service (SaaS) model.
  • Prisma Cloud Compute Edition
    —License includes workload protection for hosts, containers, and serverless deployments in any cloud or on-premises environment. This is an agent-based approach to protect resources across the application lifecycle. Unlike the Prisma Cloud Business or Enterprise editions, this is a is a self-operated software solution that you download and run in your own environments—whether public, private, or hybrid clouds—including entirely air-gapped environments.
  • Prisma Cloud Enterprise Edition
    —License includes all features included in the Business edition and Compute edition licenses (including a standard success plan). The Enterprise edition—delivered as a SaaS model—combines API- and agent-based approaches to deliver comprehensive host, container, serverless, IaaS, PaaS, IAM, network, and storage security for cloud and on-premises environments. It protects you from the most sophisticated threats with advanced machine learning capabilities, network security monitoring, user entity behavior analysis (UEBA) for detecting location- and activity-based anomalies, and integration with host vulnerability management tools.
    You can optionally upgrade to a premium success plan that includes 24x7 access to customer success experts, custom workshops, implementation assistance, configuration and planning, online documentation, and best practices guides.
Prisma Cloud is licensed based on the average number of billable workloads monitored across cloud environments. Billable workloads are calculated as the average number of workloads monitored each quarter, based on hourly snapshots that roll into daily, weekly, and monthly averages to prevent overages based on short-term bursts. Licensing is sold in increments of 100 workloads and you estimate the number of workloads you need to monitor and protect when you choose your license edition. The following resource types are counted as workloads or licensable assets:
Workload Count
Workload Resource Type
Examples
1 Prisma Cloud Workload
Compute
AWS—EC2 Instance
Azure—Virtual Machine
GCP—Compute Engine
Alibaba—Elastic Compute Service (ECS)
Managed Database
AWS—RDS, Redshift
Azure—SQL server
GCP—Cloud SQL
Load Balancers
AWS—Elastic Load Balancer (ELB)
Azure—Load Balancer
Gateway
AWS—NAT Gateways
Host, Containers, Serverless
Every host (not running containers) where a Prisma Cloud Host Defender is deployed.
Every container-as-a-service environment, such as AWS Fargate, Azure Container Instance, and Pivotal Cloud Factory where the Prisma Cloud Container Defender - App Embedded is deployed.
Every 12 million annual function executions for serverless functions such as AWS Lambda, Azure Functions,and Google Cloud Functions where the Prisma Cloud Serverless Defender is deployed.
8 Prisma Cloud Workloads
Host Running Containers
Every host (running containers) where a Prisma Cloud Container Defender is deployed. For more details, see Licensing by Defender Types.
After you Connect Your Cloud Platform to Prisma Cloud or deploy Prisma Cloud Defenders, you can review the actual number of licensable assets that you’re securing with the service. The
Settings
Licensing
tab displays a resource count in a tabular format and a graphical view of the resource trend as a stacked bar chart. The default time range is three months but you can select a time range of your choice. You can also download and share the licensing information in a zip file that includes information on each cloud platform in CSV file format. The data is on hourly or daily licensed workloads on Prisma Cloud—for a time period of 3 days or less, you can download hourly usage data, and data on daily usage for a time period greater than 3 days.
licenseable-workloads.png

Recommended For You