Advisory · Filed · London · 6 min read

vCISO Pricing Models: Fixed Retainer, Hours, or Outcomes

A breakdown of virtual CISO pricing models — fixed retainer, hourly, and outcome-based — with the engagement patterns that fit each.

By Cyber Inspect Editorial Board

Three pricing models, three commercial fits

Fixed monthly retainer suits companies with predictable scope. Hourly suits interim or capacity gaps. Outcome-based suits companies with a specific milestone (certification, incident response, board readiness).

Typical rate cards

  • Fixed retainer: $9,000 – $28,000 per month.
  • Hourly: $350 – $650 per hour.
  • Outcome-based: $60,000 – $180,000 per milestone.