Licensing wise, the agentless cost is the same way as agent-based as each module depending on the resource protected. Example: A linux host (non Docker) is 1 credit. A host with containers will be 7 credits
Overhead cost wise: If you're referring to overhead cloud resource charges, the agentless scanner instance is spun up within your cloud environment to perform the scanning and then torn down. That can incur some extremely minimal resource charges.
When ‘auto-scale scanners' is enabled, an additional scanner is spun up for every ‘n’ running instances in the region (Ohio, etc) in the cloud account, up to 40 scanners (where ‘n’ is the number of snapshots that provider supports to be attached per instance) The limit is placed so we don't spin up too many instances charging customers. Customers can choose to have more by manually adding the number of scanners.
Note: Although auto-scaling scan your workload much faster, it can also increase your associated overhead charges. So keep that in mind if enabling auto-scaling
For more details: https://docs.paloaltonetworks.com/prisma/prisma-cloud/22-06/prisma-cloud-compute-edition-admin/vulnerability_management/agentless_scanning
... View more