Complete Palo Alto Networks Certifications List (2026 Updated Guide)

Palo Alto Networks rebuilt its entire certification progra. If you’ve been searching for a current, accurate list of available credentials — including what replaced legacy exams like the PCNSE, PCNSA, and PCCET — this guide covers everything you need to know.

Whether you’re just entering cybersecurity or you’re a seasoned engineer looking to validate your skills in next-generation firewalls, Cortex XDR, XSIAM, or cloud security, there’s a Palo Alto credential mapped precisely to your role.

Quick Answer: What Palo Alto Networks Certifications Are Available?

Palo Alto Networks currently offers 14 role-based certifications across four levels — Foundational, Professional, Specialist, and Architect — organized into three tracks: Network Security, Security Operations, and Cloud Security. Legacy exams including PCCET, PCNSA, PCNSE, PCCSE, PCDRA, PCSAE, and PCSFE were all retired in 2025. The new framework is available through Palo Alto Networks Education Services, with exams delivered exclusively at Pearson VUE test centers.

What Is the Palo Alto Networks Certification Program?

Palo Alto Networks is one of the most widely adopted enterprise cybersecurity platforms globally, covering next-generation firewalls (NGFWs), Prisma Access, Cortex XDR, XSIAM, XSOAR, and Cortex Cloud. Its certification program validates that IT professionals can deploy, manage, and secure these environments in the real world.

In 2025, the company completed a significant overhaul. The old product-centric exams were retired in favor of a role-based framework that maps directly to actual job functions. This shift makes certifications more relevant to employers and gives candidates a clearer learning progression.

The new program is organized around:

• Four certification levels: Foundational → Professional → Specialist → Architect
• Three platform tracks: Network Security, Security Operations, Cloud Security
• In-person testing only: In 2026, all exams are delivered at Pearson VUE test centers (no online proctoring)
• Two-year validity: All credentials are valid for two years from the date of issue

Complete Palo Alto Networks Certifications List (All Levels & Tracks)

Foundational Level

Foundational certifications are entry points for professionals who want to validate core cybersecurity knowledge before specializing. No prior Palo Alto Networks experience is required.

1. Cybersecurity Apprentice Designed for individuals with no prior cybersecurity background — students, IT generalists, or career changers. Covers foundational networking and cybersecurity concepts, threat landscapes, and basic security principles. Exam fee: $150 USD.

2. Cybersecurity Practitioner A step above the Apprentice level. Validates knowledge of cybersecurity concepts and the basic application of Palo Alto Networks solutions across network security, endpoint security, cloud security, and security operations. Exam fee: $150 USD. This certification serves as a recommended starting point for all three tracks.

Professional Level

Professional certifications validate job-ready skills across the full platform of a given track. These are the most popular credentials for working security professionals.

3. Network Security Professional The primary Professional-level credential for the Network Security track (formerly called “Network Security Generalist”). Validates knowledge and hands-on understanding of Next-Generation Firewalls (NGFW), Prisma Access, Prisma SD-WAN, and Strata Cloud Manager (SCM). Ideal for network and security engineers managing Palo Alto deployments. Exam fee: $200 USD.

4. Security Operations Professional The Professional-level credential for the Security Operations track. Validates job-ready skills in the Cortex portfolio — including Cortex XDR, XSOAR, and XSIAM — in a Security Operations Center (SOC) context. Targeted at SOC analysts and security operations practitioners. Exam fee: $200 USD.

5. Cloud Security Professional Launched September 30, 2025. Validates knowledge and skills for securing cloud environments using the Cortex Cloud platform, covering Cloud Runtime Security, Application Security, Cloud Posture Security, and SOC integration. Exam fee: $200 USD.

Specialist Level

Specialist certifications go deeper into a specific product or technology area. They are intended for engineers and analysts who work hands-on with Palo Alto products daily.

6. Network Security Analyst Validates skills in object configuration, policy creation, and centralized management using Strata Cloud Manager (SCM). Targets analysts and administrators responsible for firewall configuration and network security operations. Exam fee: $250 USD.

7. Next-Generation Firewall (NGFW) Engineer Validates deployment, networking, device configuration, integration, automation, and centralized management using Panorama, templates, and rulesets. Designed for engineers managing PAN-OS environments. Exam fee: $250 USD.

8. SD-WAN Engineer Validates skills in planning, deploying, configuring, operating, monitoring, and troubleshooting SD-WAN environments, including both standalone and integrated SD-WAN for SASE solutions. Exam fee: $250 USD.

9. Security Service Edge (SSE) Engineer Validates skills to deploy, configure, manage, and troubleshoot Security Service Edge (SSE) and Secure Access Service Edge (SASE) environments. Relevant for engineers working with Prisma Access and related SASE technologies. Exam fee: $250 USD.

10. XSIAM Analyst Validates skills to use the Cortex XSIAM platform for automation, threat detection, and threat response. Targeted at SOC analysts advancing their careers in AI-driven security operations. Exam fee: $250 USD.

11. XDR Analyst Validates understanding of the basic architecture, components, and operation of Cortex XDR in a SOC environment. Ideal for security analysts working in detection and response roles. Exam fee: $250 USD.

12. XSIAM Engineer Validates skills to deploy, configure, manage, onboard data, and create playbooks in a Cortex XSIAM environment. Designed for engineers building and maintaining XSIAM deployments. Exam fee: $250 USD.

13. XDR Engineer Validates skills to deploy, configure, manage, onboard data, and create playbooks using Cortex XDR. Targeted at engineers responsible for XDR infrastructure in security operations centers. Exam fee: $250 USD.

14. XSOAR Engineer Validates skills to deploy, configure, manage, integrate, and troubleshoot Cortex XSOAR solutions in security operations environments, including automation and playbook development. Exam fee: $250 USD.

Architect Level

15. Network Security Architect The highest-level credential in the Network Security track. Validates skills and experience required to understand technical and business requirements, architect secure and scalable systems using the Palo Alto Networks portfolio, and oversee complex security blueprints using industry frameworks including Zero Trust principles. Reserved for senior architects with deep platform expertise. Exam fee: to be confirmed via Pearson VUE Palo Alto store.

Certification Overview Table

Exam fees sourced from the official Palo Alto Pearson VUE voucher store.

What Happened to Legacy Palo Alto Certifications?

If you’re familiar with older credentials, here’s a quick reference on what changed:

Existing holders of retired credentials retain their certification validity until their original two-year expiry date.

Exam Details: Fees, Format, Passing Score & Validity

Understanding the logistics before you book is essential. Here’s what to expect:

• Format: All exams are computer-based assessments delivered at Pearson VUE test centers. Question types include multiple-choice, matching, and ordering. As of September 1, 2025, online proctoring is no longer available — you must test in person.
• Duration: Most exams run 90 minutes, which includes the NDA agreement, the exam itself, and a post-exam survey.
• Passing Score: Exams use a scaled scoring system with a passing mark of 860 on a 300–1000 scale.
• Language: Exams are in English. Candidates in non-English-speaking countries are eligible for a 30-minute time extension.
• Validity: All Palo Alto Networks certifications are valid for two years from the date of issue. Earning a higher-level certification in the same track extends the validity of active lower-level credentials by an additional two years.
• Rescheduling: Exam appointments can be modified up to 48 hours before the scheduled time without penalty. Changes within 48 hours September result in forfeiture of fees.
• Booking: Exams are scheduled directly through the Pearson VUE Palo Alto Networks portal.

Palo Alto Networks Certification Career Paths & Salary

Earning a Palo Alto Networks credential opens doors to some of the most in-demand roles in cybersecurity. Below is a look at relevant job titles and average salaries based on data from Glassdoor.

Salary data sourced from Glassdoor . Actual compensation varies significantly by location, experience, and employer.

Palo Alto Networks-certified professionals are in high demand because enterprises running Palo Alto platforms require staff who can operate, not just recognize, the toolset. The combination of a role-based credential and hands-on platform experience creates a particularly strong hiring profile.

Top industries hiring for these roles include financial services, healthcare, government, technology, and managed security service providers (MSSPs).

How to Prepare for a Palo Alto Networks Exam

Step-by-Step Preparation Plan

• Step 1: Choose your track and level. Start by identifying your current role. If you work daily with NGFWs, the Network Security Professional or NGFW Engineer certification is likely the right fit. If you operate in a SOC, consider the Security Operations Professional or an XDR/XSIAM Analyst credential.
• Step 2: Review the official exam blueprint. Every Palo Alto Networks certification comes with a publicly available exam datasheet listing domains, objectives, and topic weightings. Download it from the official Palo Alto Networks certification page before you begin studying.
• Step 3: Use the official Learning Center. Palo Alto Networks replaced its Beacon platform with a new personalized Learning Center at learn.paloaltonetworks.com. It offers free, self-paced modules with built-in knowledge assessments — this is your primary study resource.
• Step 4: Supplement with TechDocs and LIVEcommunity. The official TechDocs library provides in-depth product documentation, configuration guides, and admin references. The LIVEcommunity forums include exam discussions, study tips, and community-vetted resources from certified professionals.
• Step 5: Practice hands-on lab work. Scenario-based questions make up a significant portion of Specialist and Architect-level exams. Configure real firewall policies, practice with Strata Cloud Manager, and work through Panorama management tasks wherever possible.
• Step 6: Use practice tests to benchmark readiness. Practice exams help identify weak domains before your test date. Resources like PassITExams offer practice tests and study materials for Palo Alto Networks certifications, helping you simulate exam conditions and reinforce key concepts.
• Step 7: Schedule your exam. Book your Pearson VUE appointment well in advance — popular test centers fill up quickly, especially for Specialist-level exams. Set a calendar reminder 48 hours before your exam date as your last rescheduling window.

Common Mistakes to Avoid

• Studying for retired exams: This is the most common pitfall in 2026. Study guides and prep materials for PCNSE, PCNSA, and PCCET are still widely circulated online. These exams have been retired — always verify that your materials align with the current role-based certification you’re targeting.
• Skipping the exam blueprint: Every certification has domain weightings. Candidates who skip the blueprint often over-study low-weight topics and underestimate high-weight areas like policy configuration or platform-specific deployment tasks.
• Relying on theory alone: Particularly for Specialist and Architect-level exams, practical knowledge of Palo Alto products matters. Questions are scenario-based and test real-world judgment, not just definitions.
• Ignoring the 48-hour rescheduling rule: Missing the reschedule window means losing your exam fee. Set a reminder early.
• Waiting for online proctoring: In 2026, online proctoring is gone. Factor travel and test center scheduling into your exam preparation timeline.

Frequently Asked Questions FAQ’s

How many Palo Alto Networks certifications are currently available?

As of 2026, Palo Alto Networks offers 15 active certifications across four levels (Foundational, Professional, Specialist, Architect) and three tracks (Network Security, Security Operations, Cloud Security).

What replaced the PCNSE certification?

The PCNSE (Palo Alto Networks Certified Network Security Engineer) was retired on September 31, 2025. It has been replaced by the NGFW Engineer certification at the Specialist level and the Network Security Architect at the Architect level, depending on your career stage and focus.

What is the cost of a Palo Alto Networks certification exam?

Foundational exams cost $150 USD, Professional exams cost $200 USD, and Specialist exams cost $250 USD. Architect-level pricing should be verified directly via the Pearson VUE Palo Alto store.

How long are Palo Alto Networks certifications valid?

All certifications are valid for two years from the date you pass the exam. Earning a higher-level cert in the same track extends the validity of active lower-level certs by another two years.

Can I take Palo Alto Networks exams online?

No. In 2026, all Palo Alto Networks exams are delivered in person only at Pearson VUE testing centers. Online proctoring is no longer available.

What is the passing score for Palo Alto Networks exams?

The passing score is 860 on a scaled score range of 300–1,000. Scores below 860 do not result in a pass, regardless of how close they are to the threshold.

Do I need prerequisites to take a Palo Alto Networks exam?

There are no mandatory formal prerequisites for most certifications. However, Palo Alto Networks recommends completing the Cybersecurity Apprentice before attempting the Cybersecurity Practitioner, and completing Foundational-level credentials before advancing to Professional or Specialist exams.

Which Palo Alto Networks certification should I start with?

If you’re new to cybersecurity, begin with the Cybersecurity Apprentice or Cybersecurity Practitioner. If you already work with Palo Alto products in a network security role, the Network Security Professional certification is typically the right starting point.

What is the best way to study for a Palo Alto Networks exam?

Use the official Learning Center at learn.paloaltonetworks.com for self-paced modules, download the exam blueprint from the certification portal, practice in lab environments, and supplement with community resources on LIVEcommunity.

Can I earn multiple Palo Alto Networks certifications?

Yes. Many professionals pursue credentials across multiple tracks — for example, a Network Security Professional alongside a Security Operations Professional — to demonstrate breadth across the Palo Alto Networks platform.

Conclusion: Which Palo Alto Networks Certification Is Right for You?

The 2025 restructure has made the Palo Alto Networks certifications list significantly more practical and role-relevant than its predecessors. Whether your focus is NGFW engineering, SASE, cloud security, or SOC operations, there’s now a credential that maps directly to the work you do every day.

Here’s the short decision guide:

• New to cybersecurity? → Start with Cybersecurity Apprentice or Cybersecurity Practitioner
• Working with firewalls and SASE? → Pursue the Network Security Professional, then the NGFW Engineer or SSE Engineer Specialist
• Working in a SOC? → Target the Security Operations Professional, then the XDR Analyst or XSIAM Analyst
• Cloud security focus? → Go for the Cloud Security Professional
• Senior architect? → The Network Security Architect is your top-tier credential

For exam preparation, combine official Palo Alto learning resources with hands-on lab practice. You can also use PassITExams for quality practice tests and study materials across Palo Alto Networks and other leading IT certifications, helping you walk into your Pearson VUE test center ready to perform.Book your exam through the official Pearson VUE Palo Alto Networks portal and verify all current exam fees and availability on the Palo Alto Networks Education Services page before registering.