How much does a cybersecurity bootcamp cost?

Bootcamp pricing in 2025-2026 splits into four tiers. Tier 1, university-affiliated programs run by 2U/edX, Fullstack Academy (rebranded from Trilogy), and Springboard: $10,000-$16,000 for 24-26 weeks part-time. Tier 2, independent vendor-backed academies like Evolve Security Academy and Flatiron's cybersecurity track: $7,500-$13,000 for 12-16 weeks. Tier 3, SANS Cyber Academies (Cyber Workforce Academy, VetSuccess Academy, Diversity Cyber Academy): $15,000-$20,000 sticker but offered free to qualifying veterans, women in cyber, and unemployed adults through scholarships; these include three GIAC exam vouchers. Tier 4, free or near-free options: the Google Cybersecurity Professional Certificate on Coursera at $49/month for an average 6 months ($294 total), plus the LevelUp by IBM SkillsBuild track and Cisco's free CCST Cybersecurity prep.

The math on bootcamp ROI requires honest accounting. Bureau of Labor Statistics Occupational Employment and Wage Statistics May 2024 reports an entry wage (10th percentile) of $69,210 for information security analysts (SOC code 15-1212), with median at $124,910. A $12,000 bootcamp paid out of pocket is recovered inside the first nine months of a $70,000 entry SOC salary, assuming you would otherwise have earned $0 in cybersecurity. Most bootcamp grads do not start at $70,000; CyberSeek (October 2024 release, NIST NICE Framework data) shows entry SOC Tier 1 wages of $55,000-$72,000 in the 25 largest US metros. Plan on 10-14 months to recover bootcamp cost via net wage premium versus your prior career.

Compare against self-study before paying tuition. CompTIA Security+ self-study is roughly $500 all-in: $44 for the official study guide (Sybex), $50 for Professor Messer's video course (free) plus practice tests on Dion Training ($30), $404 for the exam voucher. TryHackMe Premium runs $14/month or $144/year. Hack The Box Academy is $14/month. Add a free Google Cybersecurity Certificate and a $50/month VPS to host a home lab, and the entire entry-prep stack costs under $700. Hiring outcomes are statistically indistinguishable from a $12,000 bootcamp grad in CyberSeek's role-skill matching data, with one exception: bootcamps with employer-partnership pipelines compress time-to-first-offer by 6-12 weeks.

Income Share Agreements (ISAs) and deferred-tuition models exist but require careful reading. The CFPB classifies ISAs as private student loans subject to Truth in Lending Act disclosure. Common terms: pay nothing upfront, then 10-17 percent of salary for 24-48 months once you earn above a threshold (typically $40,000-$50,000 per year), capped at 1.5-2.0x sticker price. A $12,000 ISA paid back at 12 percent of a $75,000 salary for 36 months equals $27,000 in total cost. ISAs are often a worse deal than a federal Direct PLUS Loan if you qualify. Veterans get the cleanest deal: the Post-9/11 GI Bill covers SANS and accredited bootcamps at full tuition plus a monthly housing allowance.

Outcomes-data due diligence is the single most important step. Council on Integrity in Results Reporting (CIRR) member schools publish standardized placement data quarterly: in-field placement rate, median salary, graduation rate. Check the school against the most recent CIRR PDF before paying. Ask the school: percent of graduates placed in cybersecurity-specific roles within 180 days (not general IT), median starting salary, refund policy if you do not complete, and identity of three recent graduates willing to take a 10-minute reference call. Schools that refuse the reference call are usually hiding poor outcomes. Course Report and SwitchUp aggregate verified reviews, but always cross-reference with CIRR data.

What a good bootcamp actually delivers beyond curriculum. Career services with named placement managers, not generic coaching. An employer-partner network that interviews graduates directly (Mandiant, Optiv, CDW, regional MSSPs all have established bootcamp pipelines). Hands-on lab time on real tools, not just slide decks: Splunk Enterprise Security, Microsoft Sentinel, CrowdStrike Falcon, Burp Suite Pro. A capstone project you can show a hiring manager. Resume and interview prep tied to specific role rubrics, not general advice. If the program lacks any of these, you are paying for a textbook you could read for $50.

Per CyberSeek (October 2024), the United States had approximately 457,000 cybersecurity job postings over the preceding 12 months against an estimated supply gap of 265,000 workers. The demand is real and durable. ISC2 2024 Cybersecurity Workforce Study reports the global workforce shortage at 4.8 million. The shortage means hiring managers will look at any credible signal: certification, bootcamp completion, home lab, CTF rank, blog posts. The fastest path is the cheapest credible signal plus relentless application volume. DecipherU's role-readiness assessments score whether your specific certification-plus-portfolio profile clears the bar for SOC Analyst, GRC Analyst, or Detection Engineer roles before you spend $12,000.