Success fee recruitment: how it works for employers
Success fee recruitment explained: the fee base, when it is due, replacement guarantees, exclusivity and the contract clauses to check before you sign.
"You only pay if you hire." The promise is simple, but the contract behind it holds clauses that matter: the fee base, when the invoice is due, what happens if the hire leaves, exclusivity. This guide explains how success fees work, what they actually cover and what to check before you hand a security hire to a recruitment firm.
The principle: paying for a result, not for effort
With a success fee, the firm is paid only if the company hires a candidate the firm introduced. As long as nobody is hired, nothing is invoiced: not the role scoping, not the direct search, not the screening interviews.
The model differs from two other common arrangements:
- Retained search: part of the fee is paid at launch, the balance on hiring. The firm commits more deeply over time, but the upfront payment is usually kept even if the search fails.
- Fixed fee: a set price for a defined service, such as a sourcing campaign or a technical assessment of candidates you have already found.
The success model shifts the risk onto the firm. That is its strength for the employer, and it also explains the clauses around it: the firm invests time with no guarantee of payment, so it protects the work it has done.
How the fee is calculated
In most cases, the fee is a percentage of the hired candidate's annual gross salary. Some firms also offer a flat amount per role, which helps when several similar hires are planned.
The percentage is negotiable and varies between firms, with how scarce the profile is and with the number of roles you entrust. More important than the figure itself is the definition of the base. Check what it includes.
| Pay element | Question to ask |
|---|---|
| Annual base salary | Is it the only base, or a starting point? |
| Variable pay or bonus | Is it included, and on which assumption (target or actual)? |
| On-call allowances | Are they counted even though they depend on activity? |
| Benefits (car, profit sharing) | Are they explicitly excluded? |
| Sign-on bonus | Is it part of the base? |
For security roles, on-call pay deserves particular attention: a SOC analyst or an incident response profile can earn a meaningful share of their pay through activity-based allowances. Our article on remote work and on-call duties covers these topics from the candidate's side. A base limited to fixed salary, or fixed plus target variable, avoids disputes after the hire.
When the fee is due
The contract should state which event triggers the invoice. The most common options:
- Signature of the employment contract, or an accepted offer letter.
- The actual start date, which protects the employer if the candidate backs out before joining.
Notice periods are often long for people already in a job, so the gap between those two dates can stretch to several months. It is reasonable to ask for the invoice to be issued on the start date, or for the guarantee to explicitly cover a withdrawal before arrival.
Two more situations are worth anticipating:
- The candidate hired later. You turn a candidate down today, then hire them a few months later. Most contracts set a period during which an introduction remains valid. Check that period and its wording.
- The candidate hired for another role. The person introduced for a SOC analyst role turns out to fit a detection engineering role better. Contracts usually say the fee is still due. Better to know beforehand.
The replacement guarantee
This is the clause that protects the employer if the hire does not last. If the candidate leaves, or you end the probation period, within a defined time after they join, the firm commits to act.
Guarantees take different forms:
- Replacement: the firm runs a new search for the same role at no additional fee.
- Credit or partial refund: part of the fee is returned or deducted from a future assignment.
Read the exclusions carefully. A guarantee may not apply if the role changed after the hire, if the departure follows a reorganisation, or if the fee was not paid on time. Those exclusions are legitimate, but they must be clear.
A guarantee is no substitute for a good start. Many early departures come from a gap between the advertised role and the real one, or from a neglected onboarding. Our guide to onboarding a SOC analyst shows how to secure the first months.
Exclusivity or competition
Success fees often go with non-exclusive assignments: the employer gives the same role to several firms, and only the one that introduces the hired candidate gets paid. It looks attractive, but it has side effects worth knowing.
| Setup | Benefit for the employer | Watch out for |
|---|---|---|
| Several firms in parallel | No commitment, several candidate sources | Firms optimise for speed, the same candidates may be approached several times |
| One firm, no formal exclusivity | One contact, little commitment | The firm may invest less if it fears competition |
| Exclusivity for a limited period | A fully committed firm, one message to the market | Set a duration and checkpoints so you can exit if nothing moves |
For scarce security profiles, competition has a hidden cost: a professional contacted by several intermediaries for the same role forms a poor image of the employer. Our article on the mistakes that drive security candidates away covers this risk. If you work with several firms, agree on a clear rule for duplicate introductions: usually, the first firm to introduce the candidate with their consent is retained.
What the success model expects from you
The firm earns nothing until you hire. That does not make it a one-way commitment. For the model to work, the employer has to play its part:
- A validated need: the role exists, the budget is approved, the decision makers are known.
- Consistent pay: a salary below market for the level required stalls any search, whatever the firm.
- Fast feedback: a few days, not a few weeks, after each introduction and each interview.
- A defined process: the number of steps, interviewers and timeline known from the start, as our guide to time to hire in cybersecurity describes.
A firm that sees a role will not close, for lack of budget or decisions, will end up spending less time on it. That is the logical consequence of a model where it carries the risk.
The checklist before you sign
Before accepting a success fee proposal, make sure the contract answers each of these questions clearly:
- What is the percentage or amount, and on exactly which pay base?
- Which event triggers the invoice: signature, accepted offer or start date?
- How long does a candidate introduction remain valid?
- What happens if the candidate is hired for another role or by another group entity?
- Which guarantee applies, for how long, in what form and with which exclusions?
- Is the assignment exclusive, and if so for how long?
- What does the service include: scoping, direct search, technical assessment, follow-up until the start date?
- Which rule applies if the same candidate is introduced twice?
That point about the service deserves a closer look. Two firms charging the same fee can deliver very different work: one forwards CVs, the other introduces candidates whose skills a practitioner has verified. Our comparison of a specialist firm versus in-house hiring helps you judge what justifies a fee.
What about candidates?
The fee is paid by the hiring company, never by the candidate. In France, the Labour Code prohibits charging job seekers for placement services. A firm asking you for money to introduce you to employers is not respecting that principle.
Being introduced by a firm does not lower your pay either: the fee is a hiring cost for the employer, separate from the salary negotiated with you.
In short
Success fees align interests: the firm is paid only if you hire. Their real value still depends on the contract details (fee base, trigger event, guarantee, exclusivity) and above all on the quality of the work done before candidates reach you.
At Cyber Recrut, we work on a success fee only, and the service is free for candidates. A recruiter and a security practitioner scope the role with you, run the direct search and introduce a shortlist of candidates who have proved their skills on hands-on labs. See how we work or tell us about your hire.