Question 1

How do cybersecurity consultants charge?

Accepted Answer

Per engagement for testing ($3,000-50,000+), hourly for advisory ($150-300), or retainer for ongoing security monitoring and response.

Question 2

What does a penetration test include?

Accepted Answer

Scoping, active testing (1-2 weeks), a detailed findings report, executive summary, and remediation guidance. Retesting is often an add-on.

Question 3

Should I offer retesting?

Accepted Answer

Yes — offer a retest at 30-50% of the original engagement fee after the client has remediated findings. This validates their fixes.

Question 4

What about incident response?

Accepted Answer

Incident response is billed at premium hourly rates ($250-500/hour) with a minimum engagement. Some clients prefer a monthly retainer for guaranteed response times.

Cybersecurity Consultant Invoice Template