‍

How Palo Alto Networks Rebuilt Its Partner GTM Around Platform Outcomes — and What It Means for Co-Sell

Palo Alto Networks had a partner program problem that many large technology vendors eventually face: the program that built the business was no longer the program that would grow it.

For years, the NextWave Partner Program operated on a familiar playbook — tiered benefits gated by revenue volume, MDF pools funded by deal registration activity, and a partner base motivated primarily to close transactions rather than build platform depth. The model worked when the cybersecurity market rewarded best-of-breed point products. 

But the market shifted. Enterprise security buyers began consolidating security stacks, expecting platform coherence across network, cloud, and SOC rather than portfolios of individual products. Palo Alto Networks’ own platformization strategy — anchored on Cortex, Prisma Cloud, and SASE — was winning in the market, but the partner program wasn’t pulling in the same direction. Partners were incentivized to move products; the market was demanding platform architects.

The gap between what the program rewarded and what the market required had become a strategic liability. 

What was the solution?

The NextWave revamp, announced February 5, 2026, restructured the program around three principles: Predictability, Repeatability, and Profitability. In practice, this meant replacing volume-based tier advancement with a proficiency-based model — requiring partners to build certified technical and sales capability, demonstrate sustained customer engagement, and advance platform adoption.

Several structural changes operationalized the new approach:

The Partner Development Fund (PDF) replaced traditional MDF arrangements, directly reinvesting earned partner rebates into demand generation, training, and solution development. This gave partners a financial mechanism to build platform practices rather than just sell point products.

The Managed Security Service Provider (MSSP) track introduced predictable, tiered pricing that finally made it economically feasible to build high-margin managed security services on the Palo Alto Networks platform. The NextWave Managed Services Program gives MSSPs the pricing predictability needed to model sustainable unit economics.

Cortex AgentiX launched in October 2025, added a new high-visibility integration surface — a next-generation agentic AI platform built on Cortex XSOAR with more than 1,000 prebuilt integrations. Technology partners who list on the Cortex XSOAR Marketplace now have direct access to SOC and security operations buyers actively evaluating AI-driven automation.

According to the official press release:

"The NextWave Partner Program serves as a catalyst for deeper strategic collaboration and trust between Palo Alto Networks and Orange Cyberdefense. By increasing transparency, especially around team incentives, we are able to align our efforts more closely, foster co-innovation, and tailor Palo Alto Networks' solutions to better safeguard our joint customers against evolving cyber threats." — Hugues Foulon, CEO, Orange Cyberdefense

The results: What Ecosystem-Intelligent partners stand to gain

The full commercial impact of the NextWave revamp will take several quarters to fully materialize — the program launched in February 2026. But the structural changes create measurable incentives that point toward clear outcomes.

For partners who invest in specialization: higher tier access unlocks incrementally better margin, Partner Development Fund dollars for demand gen, and Authorized Support Center (ASC) and Authorized Professional Services (APS) capacity — giving them a platform services practice that is genuinely differentiated from commoditized resale.

For partners using Ecosystem Intelligence — particularly those running account mapping via Crossbeam — the revamp creates a direct connection between overlap data and program advancement. The “sustained customer engagement” that NextWave now rewards is most efficiently built in joint accounts where your platform and Palo Alto Networks’ platform are co-deployed.

As documented across multiple ecosystem case studies on ELG Insider, partners who instrument their co-sell motions with data — identifying which accounts to prioritize, which Palo Alto Networks reps to engage, and which platform consolidation plays are most likely to close — consistently outperform those who run co-sell as an opportunistic, relationship-driven activity. The NextWave revamp makes that instrumentation more valuable. The question is which partners will build it first.

What are some key lessons for Partner teams? 

The NextWave revamp is a case study in what happens when a major platform vendor finally aligns its incentive structure to its product strategy. The lessons aren't unique to Palo Alto Networks — they apply to any partner ecosystem undergoing the same shift from volume to value. 

Here's what the pattern teaches:

Lesson 1: Program incentives always lag market reality: Palo Alto Networks had been talking about platformization for years before the program structure caught up. Partners who had already invested in platform depth, specialization, and MSSP economics were ahead of the curve when the new incentives kicked in. Watch where the vendor is betting its product strategy — that’s where the partner program incentives will eventually follow.

Lesson 2: Ecosystem data is the unlock for co-sell at scale: The NextWave program rewards “sustained customer engagement” — but engagement has to start somewhere. Partners who map their accounts against Palo Alto Networks’ installed base can identify the highest-priority co-sell targets before a PAN field rep ever picks up the phone. Account mapping is the first step; the co-sell motion follows from it.

Lesson 3: Managed services are the highest-margin path forward: The MSSP track’s predictable, tiered pricing isn’t just an operational convenience — it’s a signal that Palo Alto Networks sees managed services as the highest-leverage channel for long-term platform adoption. Partners who build managed practices now will have a structural advantage as the market shifts further toward outcome-based security delivery.

The partners who win in the Palo Alto Networks ecosystem in 2026 will be the ones who move first — mapping accounts, building certified practices, and co-selling with data rather than gut instinct. 

Sign up for Crossbeam for free to connect your CRM to your partner ecosystem, surface the accounts where your platform and your partners' platforms already co-exist, and build the co-sell motion that the NextWave program is designed to reward.

Frequently asked questions

Does Palo Alto Networks leverage Ecosystem Intelligence?

A: Yes. Palo Alto Networks leverages Ecosystem Intelligence — using partner data to identify shared customers, overlap opportunities, and co-sell targets, and turning those insights into revenue-generating motions across their partner ecosystem.

How long does it take to see co-sell results in the Palo Alto Networks ecosystem?

A: Co-sell timelines vary by integration depth and account targeting. Partners who start with data-driven account mapping — identifying existing joint accounts before outbound co-sell conversations — tend to see first pipeline contribution within one to two quarters. Partners who build formal MSSP or specialization tracks typically see measurable margin improvement over two to four quarters.

What do I need in place before activating co-sell with Palo Alto Networks partners?

A: Three things: a clear integration story (ideally a Cortex marketplace listing), at least one specialization in progress, and an account mapping run via tools like Crossbeam to identify joint customers. With those in place, you can lead with data rather than a cold introduction when engaging PAN field reps.

‍