Cost per result is a unit metric that shows how much money, time, or operational effort is needed to produce one useful outcome. In cybersecurity, the “result” can be a blocked phishing email, a detected intrusion, a remediated endpoint, or any other measurable security action. The metric is more useful than a single total budget number because it ties spending to an outcome that matters.
This measure helps security teams compare controls on the same basis. For example, an email filter, an EDR rule, and a SOAR playbook may all reduce risk, but their value depends on how many incidents they stop per dollar spent. Attackers also think in similar terms: low-cost automation, credential stuffing, and mass scanning are effective because they can produce many attempts or compromises cheaply. For defenders, tracking cost per result helps identify which tools scale, which processes waste analyst time, and where automation improves efficiency without reducing security quality.