Preview

Client Information

Client Information

Entity Type Individual Person Corporation Limited Liability Company (LLC) Partnership Sole Proprietorship Trust Non-Profit Organization Government Entity

Select the type of entity

Full Legal Name

As it should appear on the document

Doing Business As (DBA)

Optional trade name

State of Formation Select state... Alabama Alaska Arizona Arkansas California Colorado Connecticut Delaware Florida Georgia Hawaii Idaho Illinois Indiana Iowa Kansas Kentucky Louisiana Maine Maryland Massachusetts Michigan Minnesota Mississippi Missouri Montana Nebraska Nevada New Hampshire New Jersey New Mexico New York North Carolina North Dakota Ohio Oklahoma Oregon Pennsylvania Rhode Island South Carolina South Dakota Tennessee Texas Utah Vermont Virginia Washington West Virginia Wisconsin Wyoming District of Columbia

Where the entity was formed

Authorized Representative

Person authorized to sign

Representative Title

Title or position

Address

Street Address

Full street address including suite or unit number.

City

City of client residence or business.

State Select... Alabama Alaska Arizona Arkansas California Colorado Connecticut Delaware Florida Georgia Hawaii Idaho Illinois Indiana Iowa Kansas Kentucky Louisiana Maine Maryland Massachusetts Michigan Minnesota Mississippi Missouri Montana Nebraska Nevada New Hampshire New Jersey New Mexico New York North Carolina North Dakota Ohio Oklahoma Oregon Pennsylvania Rhode Island South Carolina South Dakota Tennessee Texas Utah Vermont Virginia Washington West Virginia Wisconsin Wyoming District of Columbia

State where this address is located.

ZIP Code

5-digit ZIP code.

Email Address

Used for correspondence and notices.

Phone Number

Best number for direct contact.

Cybersecurity Consultant Information

Consultant Information

Entity Type Individual Person Corporation Limited Liability Company (LLC) Partnership Sole Proprietorship Trust Non-Profit Organization Government Entity

Select the type of entity

Full Legal Name

As it should appear on the document

Doing Business As (DBA)

Optional trade name

State of Formation Select state... Alabama Alaska Arizona Arkansas California Colorado Connecticut Delaware Florida Georgia Hawaii Idaho Illinois Indiana Iowa Kansas Kentucky Louisiana Maine Maryland Massachusetts Michigan Minnesota Mississippi Missouri Montana Nebraska Nevada New Hampshire New Jersey New Mexico New York North Carolina North Dakota Ohio Oklahoma Oregon Pennsylvania Rhode Island South Carolina South Dakota Tennessee Texas Utah Vermont Virginia Washington West Virginia Wisconsin Wyoming District of Columbia

Where the entity was formed

Authorized Representative

Person authorized to sign

Representative Title

Title or position

Address

Street Address

Full street address including suite or unit number.

City

City of consultant residence or business.

State Select... Alabama Alaska Arizona Arkansas California Colorado Connecticut Delaware Florida Georgia Hawaii Idaho Illinois Indiana Iowa Kansas Kentucky Louisiana Maine Maryland Massachusetts Michigan Minnesota Mississippi Missouri Montana Nebraska Nevada New Hampshire New Jersey New Mexico New York North Carolina North Dakota Ohio Oklahoma Oregon Pennsylvania Rhode Island South Carolina South Dakota Tennessee Texas Utah Vermont Virginia Washington West Virginia Wisconsin Wyoming District of Columbia

State where this address is located.

ZIP Code

5-digit ZIP code.

Email Address

Used for correspondence and notices.

Phone Number

Best number for direct contact.

Engagement Terms

Type of Engagement * Select… Penetration Testing Vulnerability Assessment Security Audit / Compliance Review Incident Response Ongoing Security Advisory Red Team Exercise

Penetration testing requires explicit written authorization. Unauthorized access — even well-intentioned — may violate the CFAA.

Engagement Fee ($) *

The total or estimated fee for the engagement. For ongoing advisory services, specify the monthly retainer amount.

Systems / Assets in Scope *

Define scope precisely. Out-of-scope systems must also be listed. Testing systems not listed here may create legal liability for the consultant.

Systems / Assets Out of Scope

Explicitly listing out-of-scope systems protects the client from unintended disruption and the consultant from legal exposure.

Testing Start Date

The date active testing may begin. The client's IT and security teams should be notified in advance to avoid false incident responses.

Testing End Date

The date active testing must conclude. The consultant should deliver the final report within an agreed period after this date.

Data Retention After Engagement No client data retained after engagement Retained for 30 days post-engagement Retained for 90 days

Consultants who retain sensitive client data after an engagement create ongoing security risk. Define a clear data destruction requirement.

Review & Generate

Review your entries below before generating. Click Edit on any section to make changes.

Building your summary…

Document Preview

Refresh Preview Hide Preview

This is a preview of how your document will look. The final version will include complete legal language and state-specific provisions.

Cybersecurity Consulting Agreement — Preview

Generating preview…

Everything looks good? Click Generate Document below to create your professional document instantly.

Previous Next Step Generate Document

Enable autosave (your progress will be saved locally)

Clear saved data

Not Legal Advice: This automated form assistance tool provides general information and document templates. It is not a substitute for legal advice from a qualified attorney. Laws vary by jurisdiction and change over time. Consult with a licensed attorney for advice specific to your situation.
Last updated: January 2026