What custom software actually costs in 2026, and why estimates double
Ranges you can plan against, the four things that actually move the number, and the specific reasons a quote doubles between kickoff and launch.
Working on something like this?
Get an estimate- Most custom builds land between $60k and $400k. The spread is driven by integration count and compliance scope, not feature count.
- Estimates double for five predictable reasons, and four of them are visible during discovery if anyone looks.
- A quote given without access to your existing systems is a guess dressed as a number.
- Budget 15–20% of build cost per year for maintenance. Software that nobody maintains gets replaced, which costs more than maintaining it.
Nobody publishes real numbers for this, which is why the question gets answered with “it depends.” It does depend, but on four things you can identify in a week, and the ranges are narrower than the non-answer suggests.
What follows is how we price custom software development at Centricone, what moves the number, and the specific failure modes that turn a $120k quote into a $250k invoice.
The ranges
These assume a competent team building on a modern stack, including design, testing, and a production deployment. They exclude ongoing hosting and maintenance, which are covered further down.
The four things that actually move the number
Feature count is what clients count, and it is close to irrelevant. Screens are cheap. What follows is expensive.
How many systems it has to talk to
This is the single biggest driver. A self-contained app is straightforward. The same app writing to NetSuite, reading from Salesforce, and reconciling against Stripe is three integrations, each with its own auth, rate limits, sandbox, failure modes, and a partner whose API docs are wrong in at least one place. Budget two to four weeks per non-trivial integration and you will be roughly right.
Whether anyone audits it
HIPAA, PCI DSS, SOC 2, and GDPR do not add features. They add access control, encryption, audit logging, data retention, incident process, and evidence. Expect 20–35% on top of an equivalent unregulated build, and expect it to be cheaper designed in than retrofitted, usually by a factor of three — a fintech MVP we scoped that way put the control set in during weeks one to three rather than ten to twelve.
Whether something already exists
Greenfield is the cheap case, which surprises people. Replacing a live system means running both in parallel, migrating data that has fifteen years of accumulated inconsistency, and cutting over without an outage. The migration is frequently larger than the application, which is why we take these one seam at a time.
How many people have to agree
A founder who decides on the call is fast. Six stakeholders across three departments with a monthly steering committee is not, and the cost is real: idle engineering time while a decision is pending is still billed. This is the factor nobody puts in a quote and everybody pays for.
Why estimates double
Not because the team was cynical. Estimates double for five reasons, and four of them are findable during discovery if somebody bothers to look.
- The integration was described, not tested. “It has an API” covers everything from a documented REST endpoint to a nightly SFTP drop of a fixed-width file. The difference is six weeks.
- The data was worse than anyone said. Every legacy database has duplicate customers, nulls in required columns, and a free-text field somebody has been using as a status flag since 2014. This is discovered in week three, not week one.
- Scope was fixed but requirements were not. If the contract lists deliverables and the business keeps learning, one of the two has to move. It is always the budget — which is the real argument in fixed price versus time and materials.
- Non-functional requirements arrived late. “It also needs to handle Black Friday” and “security will need to review this” are architecture inputs. Arriving in month four, they are rework.
- Nobody costed the last 20%. Error states, empty states, permissions, admin tooling, data export, and the migration script are not features and get left out of feature-based estimates. They are consistently a fifth of the work.
A quote produced without read access to your existing systems is a guess with a decimal point on it. The only estimates worth anything come after somebody has looked at the data.
What discovery should produce
A paid discovery of one to three weeks costs $8k–$25k and should end with artefacts you own outright, usable by another firm if you decide not to proceed. If a discovery ends in a sales deck rather than these, it was a sales process:
- A ticket-level backlog with estimates per item, not a lump sum
- An architecture diagram naming every system and every integration
- A written list of assumptions, each one a thing that changes the price if wrong
- The migration and cutover plan, if something already exists
- A fixed number, with the conditions under which it changes stated plainly
The cost after launch
Budget 15–20% of build cost per year. On a $150k build that is $22k–$30k annually, covering dependency and security patching, cloud spend, monitoring, bug fixes, and small changes.
This is the line most often cut, and cutting it is how three-year-old software becomes a rewrite. Dependencies go end-of-life whether or not you have budget for them. The rewrite costs more than the maintenance would have, and it costs it all at once — which is the case for buying maintenance and support as a line rather than a reaction.
of build cost, per year, to keep software supported
typical premium for retrofitting compliance versus designing it in
How to read a quote
Two firms quoting $95k and $180k for the same brief are not pricing the same work. Before comparing, find out what each has assumed, and whether either has actually looked.
- 1Which integrations are in scope, and has anyone tested credentials against them?
- 2Who writes the migration script, and against what volume of real data?
- 3Is QA a line item or a hope? Is there a written definition of done?
- 4What happens to the price when an assumption turns out wrong: a change order, or absorbed?
- 5Who owns the code and the cloud account on day one, and on the day you leave?
Working through this on a real project?
Tell us what you are building. You will get a scoped estimate and an architecture you own, not a capability deck.

