Your number
$1,400
Your rate card
- Day rate$1,300 per day
- Hourlyfor anything that does not fit a day$175 per hour
- A security assessment$8,400 per project
- Monthly retainer$6,725 per month
What to charge for each thing (4)
- Penetration test$10,500 each
- SOC 2 or compliance prep$6,650 each
- Incident response$200 per hour
- Security training session$1,400 each
US rates for cybersecurity consultants at your level, adjusted for your market. What you last got wins.
For 8 hours at $175, the quote is $1,400.
To take home $85,000 after $9,000 of costs and 30% tax you need to bill $134,286 a year. At 24 billable hours a week for 47 weeks that is $125 an hour, $950 a day. Anything under that is a pay cut you did not agree to.
Cybersecurity consultants at your level in your market day at about $1,300 ($1,200 to $2,500 in New York and LA). Your income math lands under that, so the market number is the one to quote; the gap is a raise you are owed.
A security assessment runs $4,000 to $20,000 and takes about 40 hours of your time; at your hourly that is $7,000. The number is the higher of the two, because the client is buying the outcome, not the hours.
A retainer is the month, not the hours: a set scope, paid up front on the 1st. It is priced about 20% under the same work bought one at a time, in exchange for the certainty; three months minimum, or it is not a retainer.