Palo Alto Networks rebuilt its certification program in 2025. The six exams most people knew, PCCET, PCNSA, PCNSE, PCDRA, PCSAE and PCCSE, are all retired now. In their place is a lineup built around three tracks (network security, security operations and cloud security) and four levels: Foundational, Professional, Specialist and Architect. We've updated this guide so it points you at the exams you can actually sit today.
Where to start
If you're new to security, start with the Cybersecurity Apprentice. It covers the basics of security, networking, identity and cloud, and it's written for people coming from non-technical roles too. The Cybersecurity Practitioner goes a step further into core security concepts and basic use of the Palo Alto Networks platform. Palo Alto Networks lists both as the alternatives to the retired PCCET.
Network security
The Network Security Professional covers the whole network security portfolio, from NGFWs to SASE and Cloud-Delivered Security Services. For a deeper, product-level credential, pick the Specialist exam that matches your work:
- Network Security Analyst for day-to-day policy and object management in Strata Cloud Manager
- Next-Generation Firewall Engineer for people who deploy and run PAN-OS firewalls
- Security Service Edge Engineer for Prisma Access deployments
- SD-WAN Engineer for Prisma SD-WAN
The Network Security Architect sits at the top of the track and is about design across the platform. If you held PCNSA or PCNSE, these are the exams Palo Alto Networks points to next.
Security operations
SOC analysts and engineers have the deepest bench of new options. The Security Operations Professional covers SOC fundamentals plus basic use of Cortex XDR, XSOAR and XSIAM. From there you can specialize with the XDR Analyst or XDR Engineer (the replacements for PCDRA), the XSOAR Engineer (the replacement for PCSAE), or the XSIAM Analyst and XSIAM Engineer. The Security Operations Architect covers SOC design across Cortex.
Cloud security
The Cloud Security Professional replaces PCCSE and covers cloud posture, runtime and application security with Cortex Cloud. The Cloud Security Engineer is the hands-on Specialist exam for people who deploy and tune it.
What the exams look like now
Every current exam is taken in person at a Pearson VUE test center, in English. Expect multiple choice, matching and ordering items. Foundational exams cost $150, Professional $200, Specialist $250 and Architect $300. Certifications are good for two years, and passing a higher-level exam renews the lower ones you hold in the same track.
How we help
We teach every one of these as an expert-led course built from the official exam blueprint, with labs on the products each exam covers. Not sure which one fits? Our CareerSync team will match a certification to your role and timeline. See all 17 on our Palo Alto Networks certification training page, or email us at info@accumentum.net. Accumentum is an independent training company and isn't affiliated with Palo Alto Networks.
Accumentum® is the leading training provider for a vast array of technology vendors including AWS, Cisco, CompTIA, EC-Council, Fortinet, HRCI, ISACA, ITIL, Microsoft, Palo Alto, PMI, Scrum, ServiceNow, SHRM, Veritas, VMWare, and more.
