Broadcom moved Symantec enterprise security into the same playbook it used for CA and VMware. Bundles, account tiers, and steep renewals follow. Read how the licensing changed before you renew.
Broadcom runs Symantec enterprise security through bundles, account tiers, and concentrated renewals, so the structure of the deal sets the cost more than the per seat rate.
Broadcom acquired the Symantec enterprise security business in 2019 and moved it into the same account model it uses across its software group. The product is the same. The commercial posture is not.
Conclusions first. Expect bundling, account tiering, and concentrated renewals, the pattern Broadcom applied to CA and later VMware. Broadcom describes the security portfolio on its cybersecurity product pages.
Endpoint protection, data loss prevention, and web and email security are sold as suites rather than standalone SKUs. You buy the bundle, so modules you do not deploy still sit in the count.
The buyer side move is to price the modules you actually run and treat the rest as a discount lever. Broadcom positions the endpoint line on its endpoint security page.
Illustrative Symantec security bundle exposure
| Module | Common use | Buyer side risk |
|---|---|---|
| Endpoint protection | Widely deployed | Core, justify the seats |
| Data loss prevention | Selective | Often partly used |
| Web and email security | Variable | Frequent shelfware |
Reconcile seats licensed to seats deployed, module by module. The gap between the bundle count and real use is your negotiation target and usually larger than buyers expect.
Broadcom concentrates commercial attention on its largest accounts. Smaller security buyers often see less flexibility, longer response times, and first quotes well above their prior run rate.
That is a structural reality, not a failing of your team. Broadcom reports its account and segment strategy to investors through investor relations.
The standard advice is to accept the security bundle because separating modules is not worth the effort. We disagree. In the Broadcom Symantec renewals we benchmarked across 2024 and 2025, the bundle carried 15 to 30 percent of modules that buyers never deployed, and that waste compounded at every renewal uplift. The buyer side move is to reconcile licensed seats to deployed seats module by module, then push to price only what runs and use the rest as a discount lever or a drop. Paying for a security module you do not operate adds cost without adding protection.
Source: Redress Compliance advisory engagement file, 2024 to 2025.
Broadcom did not change what Symantec security does. It changed how it sells it. The cost now lives in the bundle and the renewal, where a buyer who only checks the per seat rate will never find it.
Prepare early and price an alternative. A credible endpoint or data protection option, even a partial one, is the single strongest lever in a Broadcom renewal.
Cap the uplift, bind any true up to your discount, and keep an exit. These clauses matter more than the headline rate because they govern the next three years.
Data loss prevention is the module buyers most often under use. Map real policy coverage against the licensed seats on the Symantec data loss prevention line before you renew it.
White Paper · Broadcom / VMware
Symantec Enterprise Licensing Guide
Read it free.
Broadcom acquired the Symantec enterprise security business in 2019 and folded it into its software group. The products continued, but the commercial model shifted to Broadcom's bundle and account tier approach.
Endpoint protection, data loss prevention, and web and email security are sold as suites rather than standalone SKUs. Because you buy the bundle, modules you do not deploy still sit in the count and inflate cost.
Broadcom captures value at renewal and concentrates flexibility on its largest accounts. Smaller buyers often see first quotes 20 to 40 percent above prior run rate, which is a structural posture rather than a one off.
Account tiers shape the commercial flexibility you can expect. Larger accounts receive more attention and movement, so understanding your tier and, where possible, consolidating spend improves your standing in the negotiation.
Not without reconciling use. The bundle often carries 15 to 30 percent of modules that are never deployed. Pricing only what you run and using the rest as a discount lever is the stronger buyer side position.
Negotiate a written uplift cap, target 0 to 5 percent, and bind any true up to your discount rather than list. An uncapped renewal lets Broadcom reclaim the value you negotiated at the first deal.
Yes. A credible endpoint or data protection alternative, even a partial migration, is the strongest single lever. Buyers who can show a costed option consistently hold better terms than those with none.
Before the renewal, while the bundle and term are open. Independent buyer side review of seat counts, module use, and clauses routinely finds avoidable cost that the renewal would otherwise lock in.
We map your real Symantec consumption, test the bundle and tier, and build the buyer side counter before the renewal spikes.
Used across more than five hundred enterprise engagements. Independent. Buyer side. Built for procurement leaders running the next renewal cycle.
