Estimate what a data breach could realistically cost your company. Enter your record count, sector, and the controls you already have in place to see a cost range with the assumptions spelled out.

Records you hold (people)

Primary sector

Controls you already have

Encryption at rest and in transit Tested incident response plan MFA on all critical systems Tested, isolated backups Centralized logging / monitoring Security awareness training

Estimated total breach cost (range)

$0 - $0

How we estimate, and what we assume. We use a per-record cost that varies by sector (a reasonable industry estimate, not a quoted figure), multiply it by your record count, and add a fixed incident-response and notification baseline of roughly $90,000 that most breaches incur regardless of size. We then apply a modest discount for each control you have in place, because mature controls are consistently associated with lower breach costs and faster recovery. The low end of the range assumes a contained incident handled well. The high end reflects a worse case with legal and regulatory exposure. These figures are for planning conversations only. They are not a forecast, and they exclude contract penalties, lawsuit settlements, and brand damage that vary widely.

Questions

How is breach cost calculated?

We start from a per-record cost estimate that varies by sector, multiply by the number of exposed records, add a fixed incident response and notification baseline, then apply a discount for security controls you already have in place. The result is a range, not a single number.

Are these numbers accurate for my company?

No estimate can be exact. The figures are reasonable industry estimates meant for planning and budgeting conversations, not a forecast. Actual costs depend on legal exposure, regulatory fines, contract penalties, and the specifics of the incident.

What counts as a record?

A record is one individual whose personal data you hold: a customer, patient, user, or employee. If a single person has multiple data points, that is still one record for this estimate.

How do controls reduce the estimate?

Controls like encryption, an incident response plan, MFA, and a tested backup strategy are associated with lower breach costs because they reduce blast radius and recovery time. We apply a modest discount per control to reflect this.

Is this calculator free?

Yes, it is completely free with no signup. If you want a tailored risk and cost analysis, book a call with our team.

Not ready for a call yet?

Get the security playbook

A few short notes from Jacob on locking down your startup without a big security team. No fluff, unsubscribe in one click. Reply anytime; it reaches him directly.

From Jacob Masse, founder of traztech. No spam, unsubscribe in one click.

Want it done for you?

Cyber Insurance Readiness

Get the controls in place to be insurable and lower premiums.

Explore Cyber Insurance Readiness →

Worried about a breach?

We help teams reduce breach exposure and build incident response capability before they need it. Get a real risk picture from a CVE researcher, not a calculator. Not sure where to start? Talk to a fractional CISO or look at ongoing vulnerability management to close gaps before they turn into a breach.

See incident response Book a call

Go deeper, still free

Want the full picture?

This gives you the shape of the problem. The free compliance workspace walks you through every control of whichever frameworks apply to you, in plain English, with an evidence register, policy templates, a risk register, vendor questionnaires, and an audit-readiness score. Start a free assessment and walk every control.

Start your free assessment See what is in the platform

No credit card, no trial clock, no locked features. Traztech makes money when someone wants help closing the gaps, not from the workspace.