A fixed-price plan is a contract in which the agreed economic terms stay unchanged for a defined period. In practice, the customer pays the same rate or fee structure until the term ends, regardless of short-term market swings or changes in underlying costs.
In cyber security, fixed-price plans matter because many defensive services are budgeted this way: managed detection and response, vulnerability scanning, cloud hosting, software subscriptions, and incident-response retainers. Predictable pricing helps teams plan continuous protection and avoid gaps caused by surprise costs. Defenders also use fixed-price contracts to simplify procurement and compare vendors more easily. The trade-off is flexibility: if scope grows, new systems are added, or an incident requires extra work, the contract may need change orders or overage fees. Attackers do not target the pricing model itself, but they can benefit when organizations underbuy security services or delay urgent remediation because the plan seems cheaper than variable alternatives.