This is getting covered as a standard partner program refresh. It’s not. It’s Palo Alto Networks restructuring the economic incentives that determine which partners survive platformization.

NextWave’s March 2026 evolution changes three things that matter: how incentives are structured, how discounts are earned, and how partner levels reflect actual capability rather than revenue thresholds. Understanding what moved — and why Palo Alto moved it now — tells you more about the direction of the security channel than the press release does.

Why Now

Palo Alto Networks has been executing a platformization thesis for two years. The strategy is explicit: move customers away from point products and toward integrated, AI-driven security platforms that span network, cloud, and SOC. The logic is defensible — customers managing 30+ security vendors are increasingly consolidating, and Palo Alto wants to be what they consolidate around.

The problem is that a partner program built around transactional box-moving doesn’t support that thesis. Partners who earn money on individual deals have no structural incentive to push multi-year platform adoption. The old NextWave wasn’t designed for that motion.

The new one is.

What the Incentive Shift Actually Means

The restructured program rewards three behaviors the old one didn’t: platform-oriented adoption (not individual product deals), net-new expansion into adjacent solution areas, and multiyear customer engagement that extends past the initial deployment.

That last point is the one most partners will underestimate. Security selling has historically been front-loaded — close the deal, collect the commission, move to the next prospect. The updated NextWave structure explicitly rewards partners who stay involved after deployment, helping customers strengthen adoption and expand across security domains over time.

This creates a new category of earning that didn’t exist before: managed services revenue tied to ongoing platform performance. For MSSPs, the expanded specialization pathways reinforce AI-enabled, platform-driven capabilities as the tier-advancement criteria, not just deal volume.

There’s also a new Partner Development Fund — rebates that get reinvested directly into partner-led demand generation, training, and solution development rather than flowing back as margin. That’s an intentional structural change. Palo Alto is directing earned money toward building partner capability, not rewarding partners for keeping it.

The Discount Redesign

Discounts now vary by level and specialization, with additional proficiency-based incentives for partners who build depth in specific practice areas like cyber risk management and industry-vertical solutions.

Translation: generalist VAR partners are being structurally disadvantaged. A partner who sells Prisma Access and Cortex XDR across a dozen different verticals without deep investment in any of them will earn less than a partner who builds a repeatable, certified practice in one or two areas and owns the customer lifecycle.

This is the right call. Platformization requires partners who can operationalize security, not just recommend it. The partners that Palo Alto needs for its enterprise growth strategy are specialists who stay engaged from architecture through deployment through day-to-day managed operations. The discount structure now reflects that.

For the 40,000+ partners in the NextWave ecosystem, this creates a sorting event. Partners willing to invest in specialization, certifications, and services capacity will earn better economics. Those who show up as resellers on individual deals will see compressed margins over time.

The MSSP Expansion Matters

The program’s expanded MSSP lane — including new Authorized Support Centers and Authorized Professional Services designations — is a direct response to market demand. As AI accelerates both innovation and adversarial activity, customers want partners who can manage the security stack on an ongoing basis, not just sell it.

Palo Alto is investing in that capacity intentionally. Building authorized services pathways gives the vendor more control over delivery quality while giving qualifying partners a tier of access — and revenue — that pure resellers can’t reach.

That’s worth noticing. The vendors who are serious about channel strategy in 2026 aren’t building programs to move more product. They’re building partner tiers that reflect service delivery maturity. NextWave’s MSSP expansion is a signal that Palo Alto thinks the future of its security revenue runs through managed services, not hardware refreshes.

What Partners Should Do With This

The practical read: if you’re a PANW partner, your next investment decision should be evaluated against the new incentive structure, not the old one. Specializations now directly affect discount eligibility and proficiency incentives. If you’ve been meaning to deepen your Prisma or Cortex practice but haven’t prioritized it, this program change is the economic argument you needed.

If you’re a generalist who has been treating PANW as one of ten vendor relationships, watch your margins compress over the next two renewal cycles. The program is designed to push that outcome.

The broader implication for the channel: Palo Alto just put a stake in the ground on what a post-platformization partner looks like. Deep, certified, services-oriented, and engaged across the full customer lifecycle. Every other major security vendor will run a version of this analysis eventually.

The partners building that capability now are positioning for a market where it becomes table stakes. The ones waiting to see how it plays out are building toward the wrong end of a two-tier market.