Number of Seats/Users: Beyond Identity offers discounts based on the number of users or seats. A higher volume typically leads to a better discount structure, especially for enterprise-level usage.

Commitment to a Long-Term Contract: Discounts are often provided to companies that commit to using the service for a longer period (e.g., 1-year or 3-year contracts). A longer commitment shows Beyond Identity that the company is serious and willing to invest in the platform long-term.

No Active Discounts: Companies that are not already receiving other active discounts may have a better chance of qualifying for additional discounts from Beyond Identity. Beyond Identity reserves discounts for new customers or those not currently under promotional pricing.

Volume or Usage Commitment: Beyond Identity offers discounts if you agree to a minimum amount of usage or transaction volume. This could be based on data storage, transactions, or other metrics tied to how much you will use the platform.

Enterprise-Level Negotiation: Companies that qualify as “enterprise” due to their size or complexity (e.g., having large teams, multiple departments, or geographical presence) may be eligible for additional discounts from Beyond Identity. Such companies are often in a position to negotiate for better pricing.

Early Renewal or Prepayment: Beyond Identity often offers discounts if you renew early or prepay for the entire contract period. This is a common approach to securing a lower price.

Here at Spendbase, our internal data shows that Beyond Identity is hitting a very strong balance between security, usability, and deployment speed for our clients.

From what Spendbase clients share with us, the main value pillars look like this:

1. Time savings and user experience
   – Logging in becomes “one click and I’m into all my systems.”
   – No more searching for phones, typing codes, or remembering complex passwords.
   – People like that they can just log in once in the morning and get on with work.

2. Security and risk reduction
   – Passwordless MFA removes a huge chunk of password-related risk and support tickets.
   – Cryptographic, device-bound authentication is seen as “core security” rather than a nice-to-have.
   – Device trust and policy-based controls are appreciated for zero-trust initiatives.

3. Easy deployment and administration
   – Clients say rollout is “minutes, not days” once the integration (often with Okta) is configured.
   – Group-based enrollment and automatic invite emails reduce IT overhead.
   – Self-service flows help lower helpdesk load, especially around password resets.

4. Support and partnership
   – Engineering and support teams are repeatedly called out as responsive and collaborative.
   – Clients feel like they have a partner, not just a vendor, especially during PoC and rollout.

At the same time, our internal data also surfaces a few recurring friction points:

1. Product maturity and features
   – Management/analytics dashboards are still “evolving” and some clients want deeper reporting.
   – Gaps like end-to-end passwordless for SSH/sudo and richer OS-level compliance checks come up.

2. Client-side experience
   – Frequent updates are the number one annoyance; even if short, they interrupt flow.
   – Some endpoints flag updates as malware, requiring coordination with security tools.
   – A few users mention the app not always opening smoothly if it’s not already running.

From a Spendbase discount and optimization standpoint, Beyond Identity tends to deliver:

• Hard savings from reduced helpdesk tickets and fewer password resets.
• Soft savings from higher productivity and less log-in friction.
• Long-term value as part of a broader zero-trust and compliance strategy.

Overall, our internal data shows that when clients budget for Beyond Identity, they mainly stay for the usability-security combo, while pushing the vendor for fewer update interruptions and richer policy/analytics capabilities.