A small cybersecurity practice can sell defined engagements from one specialist calendar; monitoring support does not establish continuous coverage. In fictional Quarry Shield, three paid specialists have 480 scheduled hours per base month, but only 168 are sold. Its January 2027 to December 2029 forecast retains operating losses despite a larger proposed reserve.
Test collected contribution from scoped engagements before promising a wider calendar.
Define the engagement before reserving the calendar
Quarry Shield is a Dallas-Fort Worth hybrid practice for business sponsors with a defined security question. Assessments, testing, incident work, monitoring help and advisory divide the same principal-and-analyst pool. An incident engagement can displace a planned assessment; another service label does not create another team.
An engagement plan needs a sponsor, agreed systems, deliverables, access readiness and a closeout point. This is a commercial workload explanation, not a technical testing procedure. Software resale, accredited certification and continuous security operations are outside the offer.
Price one specialist-hour mix
The base 35% utilization produces $40,110.00 at a weighted $238.75 per sold hour. Each row allocates part of the same calendar; these are fictional fees before opening ramp and later growth.
| Service | Base sold volume | Fee per hour | Base revenue |
|---|---|---|---|
| Assessments | 33.6 hour | $225.00 | $7,560.00 |
| Pen testing | 42 hour | $250.00 | $10,500.00 |
| Incident work | 33.6 hour | $300.00 | $10,080.00 |
| Monitoring help | 25.2 hour | $175.00 | $4,410.00 |
| Advisory | 33.6 hour | $225.00 | $7,560.00 |
| Total selected mix | 168 hour | $238.75 weighted | $40,110.00 |
Pay for review, interruptions and coordination
The principal is already paid as one of the three delivery specialists. Operations support coordinates scheduling and billing without adding technical hours. Selling, training, internal review and access delays must fit within the nonsold calendar.
Outside specialists and engagement cloud services are 4% of revenue. Recurring tools, office and training budgets remain separate. After variable operating costs as well as direct purchases, 90.5% remains for fixed costs; that is contribution, not profit.
A reserve can absorb the loss without resolving it
The saved opening year forecasts $441,210.00 revenue, EBITDA of -$144,654.87 and net income of -$148,654.88. EBITDA means earnings before depreciation, interest and income tax. Final-year EBITDA remains -$48,472.56.
The proposed $370,000.00 equity comprises $125,000.00 from the owner and $245,000.00 external capital. Launch uses are $21,500.00; the remainder is reserve, not another expense. The model assumes 30-day collection, no debt and no physical inventory. Capital is uncommitted and refundable premises deposits are excluded.
Test interruption costs before promising wider coverage
Log actual scope effort, readiness delays, review, urgent interruptions, bought-in support and payment. A higher reserve cannot turn unsold hours into collected fees.
Use a limited paid engagement to establish effort from readiness through accepted findings. If urgent work repeatedly consumes planned capacity, change the schedule, scope or paid roster before selling simultaneous obligations.
Make the next decision with your own evidence
Collect paid engagement logs covering specialist effort, interruptions, purchased support, accepted fees and actual payment dates before expanding the coverage promise.
Explore published business plan examples ↗Quarry Shield is a fictional prelaunch scenario prepared with AI assistance. Inputs are illustrative; forecast results come from the matching saved financial model. Funding is proposed. The diagrams explain the case and do not depict actual premises, established demand or promised earnings. Replace the assumptions with evidence before committing.
Read our methodology