The Situation
The renewal notice for your EDR, email security or firewall subscriptions arrives. The quote is up 12%. The account manager says the price is only good until the end of the month. You have two weeks, no alternative quotes and a budget that was set last spring.
That's the most common way security renewals go, and it's the most expensive. The fix isn't a clever negotiating line. It's starting earlier.
Day 90: Find Out What You Actually Use
Before you talk to anyone, get the facts.
- License count vs. real usage. Compare licensed seats or devices with active ones. Departed employees, retired devices and test environments often account for real money.
- Modules you pay for but haven't turned on. Bundles often include features that never got deployed.
- Overlap. Do you pay for capabilities you already get elsewhere? Microsoft 365 E5, for example, includes endpoint, email and identity protection that may overlap with standalone tools.
- Your notice date. Find the auto-renewal clause. Many contracts renew automatically unless you give written notice 30, 60 or 90 days before the end date.
Output: a one-page summary of what you have, what you use and what it costs.
Day 75: Decide What You Want
Settle your position internally before the vendor shapes it for you.
- Is this vendor working well? Would you switch for the right price or product?
- What's your target: same price, fewer seats, more features for the same spend, or a longer term at a lower rate?
- Who signs off, and what's the budget ceiling?
Get your security lead, your finance contact and whoever signs the contract to agree.
Day 60: Check the Market
You don't need to run a full RFP for every renewal. You do need a credible alternative.
- Get at least one competitive quote for a comparable scope.
- Look up what peers pay. Independent advisors and peer groups can help benchmark pricing.
- If you'd seriously consider switching, request a short trial or proof of concept now, not after the deadline.
The vendor doesn't need to believe you'll leave. It needs to believe you could.
Day 45: Open the Conversation
Now contact your account manager, and lead with the facts:
- "Here's our actual usage. We'd like to right-size to this number."
- "We're evaluating alternatives as part of our normal process."
- "We're open to a longer term if the pricing reflects it."
Know their calendar. Sales teams get the most flexibility at the end of their quarter and fiscal year, which often isn't December. Microsoft's fiscal year ends June 30. CrowdStrike and SentinelOne end theirs on January 31. Palo Alto Networks ends July 31. Ask your account manager when their quarter closes; most will tell you.
Day 30: Work Through the Terms
Price is only part of it. These terms often matter as much:
| Term | What to ask for |
|---|---|
| Renewal cap | A limit on increases at the next renewal, such as 3–5% |
| Multi-year pricing | A lower rate for a longer term, ideally paid annually, not up front |
| Flex-down rights | The ability to reduce seats if headcount drops |
| True-up timing | Annual true-ups at the contracted rate, not list price |
| Auto-renewal | A shorter notice period, or written reminders before renewal |
| Bundled services | Training, premium support or onboarding hours at no added cost |
On multi-year deals: a three-year term can save real money, but it locks you in during a period when security products change quickly. If you go multi-year, ask for annual payments and a way out if the product changes materially or the vendor is acquired.
Day 15: Get It in Writing
Ask for the final proposal with every agreed term written in. Verbal promises from an account manager don't carry over if that person moves on. Read the order form against the master agreement, since the order form often overrides it.
Day 0: Sign, and Set the Next Reminder
Once it's signed, put the next notice date and a 90-day reminder in the calendar of whoever will own the next renewal. Most of the leverage in this process comes from not being in a hurry. Make sure the next renewal doesn't start in a hurry either.
What to Do Next
List your security renewals for the next 12 months with their end dates and notice periods. Anything renewing in the next 90 days should start at Day 90 this week.
Buying or renewing soon? Stackcurve advisors help IT leaders compare vendors, benchmark pricing and negotiate contracts at no cost to you. Talk to an advisor → or get your free Cyber-Ready Score →
Stackcurve is independent. No vendor pays for placement or editorial influence on this blog.