PCB Reverse Engineering Cost: Real Price Ranges by Board Type
If you are trying to budget a reverse engineering project, the honest answer is that PCB reverse engineering cost is driven by a small number of physical facts about your board — not by a flat price list. Two boards that look similar in a photo can differ by a factor of ten once you count layers, BGA pitch, and whether the firmware has to come out too. This page breaks the price down the way a lab actually quotes it, so you can sanity-check any quotation you receive, including ours.
As a working guide, commercial and industrial boards land between $600 and $15,000 for the core reverse engineering work. A clean 2-layer consumer board with through-hole parts sits at the bottom of that range; a 12-layer HDI board with stacked microvias, 0.4 mm BGA devices and impedance-controlled traces sits near the top. Below we show how the number moves and why.
What actually drives the price
Five variables explain almost all of the variation between quotes. If a quotation does not reference at least these, it is a guess rather than an estimate.
1. Layer count and via structure
Every additional copper layer has to be exposed, imaged, registered against the others, and traced separately. A 2-layer board is a day of work for one engineer. A 12-layer board with blind and buried vias, thin dielectric and sequential lamination is a two-week project for a team. Labour is the single largest line item in reverse engineering, so layer count is the single largest price multiplier.
2. Component density and package type
A board with 200 components costs noticeably less than a board with 2,000 at the same layer count, because component cataloguing is manual work. The package type matters even more than the count: fine-pitch QFN and BGA devices with 0.4 mm or finer pitch hide their solder joints, so pad mapping requires X-ray and often destructive inspection of a sacrificial board.
3. Board condition
A clean, unpopulated spare board is the ideal input. A board recovered from a failed unit — scorched, corroded, delaminated, or with missing components — needs reconstruction work before the real job starts. Where copper has been destroyed we have to infer the original routing from electrical probing and the surrounding geometry, which typically adds 20–40% to the base price.
4. Deliverable scope
This is the factor clients most often under-specify. “Reverse engineering” can mean anything from a set of Gerber files to a full schematic, a verified bill of materials, and firmware. Each layer of output is priced separately because each requires different skills and different verification.
5. Firmware and protected devices
If the board carries a microcontroller, CPLD or FPGA with read protection, the hardware can still be reproduced — but it will not function without the program. Whether firmware is recoverable, and at what cost, depends entirely on the protection mechanism and the device family. This is quoted per chip and is always separate from the bare-board work.
Typical price ranges by board type
The table below shows the ranges our engineering team works within for the reverse engineering of the board itself, excluding firmware. Treat them as project minimums: actual pricing shifts with condition, urgency and the depth of the deliverables.
| Board category | Layers | Typical range (USD) | Typical turnaround |
|---|---|---|---|
| Simple consumer / IoT | 1–2 | $450 – $1,200 | 3–6 working days |
| Standard industrial control | 4 | $1,200 – $3,500 | 6–10 working days |
| Networking / telecom | 6–8 | $3,000 – $7,000 | 10–18 working days |
| HDI / high-speed digital | 10–16 | $6,000 – $15,000 | 15–25 working days |
| Aerospace / defence (IPC Class 3) | 8–20+ | $12,000 – $30,000+ | 20–35 working days |
| Rigid-flex / flex | 4–10 | $4,000 – $10,000 | 15–25 working days |
These figures cover layer reconstruction, copper geometry, netlist extraction and a DRC pass. They do not include schematic capture, BOM compilation, firmware work, fabrication or assembly.
How deliverable scope changes the price
Scope is the most controllable part of your budget. Decide what you will actually do with the output before you ask for a quote — paying for a schematic you never open is the most common waste in this market.
| Deliverable | What you get | Effect on price |
|---|---|---|
| Gerber set only | All copper layers, drill file, solder mask and silkscreen in RS-274X or Gerber X2 | Base price |
| Gerber + schematic | Adds hierarchical schematic capture with reference designators and net names | +30% to +50% |
| Full package | Gerber + schematic + verified BOM with manufacturer part numbers and alternates | +50% to +90% |
| Firmware readout | Program extraction from protected MCU/Flash, where legally authorised | Quoted per chip |
| Turnkey build | Fabrication, component sourcing, SMT assembly and functional test | Cost of parts + assembly |
Costs people forget to budget for
- Rush surcharges. Compressing a 10-day job into 3 days typically adds 30–50%, because it means reallocating engineers and equipment rather than working faster.
- Second sample board. Multilayer inspection is destructive. If you can supply two identical boards, one stays intact as a reference for continuity checks. If you cannot, we proceed without that safety net and flag the risk in the quote.
- Obsolete component substitution. If a part is no longer manufactured, integrating a modern equivalent requires a small redesign — an engineering task, not a sourcing task.
- Conformal coating removal. Potted or heavily coated boards need chemical or mechanical decapsulation before imaging, which is slow, skilled work.
How to reduce your reverse engineering cost
- Send the best board you have. An unused spare beats a failed unit every time. Clean boards remove an entire reconstruction phase from the project.
- Scope the deliverable honestly. If you only need to reproduce the bare board, ask for Gerbers and skip the schematic.
- Supply two samples for any board with four or more layers. It protects the project and reduces rework.
- Batch related boards. Reverse engineering two boards of the same family in one project is cheaper than two separate projects.
- Accept the standard lead time. Rush work is the single easiest premium to avoid.
DIY versus professional: a realistic comparison
Reverse engineering a 2-layer board yourself is genuinely feasible. Doing a 12-layer HDI board yourself is not, no matter how good you are — the equipment required costs more than the project.
| Project complexity | Tools required | Realistic DIY cost | Engineer hours |
|---|---|---|---|
| Simple 2-layer | Multimeter, flatbed scanner, free CAD | $200 – $500 | 8–20 hours |
| 4-layer | Add microscope and hot-air rework station | $1,000 – $2,500 | 40–80 hours |
| 6+ layer | Add X-ray access and professional CAM software | $5,000 – $15,000 | 80–200 hours |
The crossover point is usually around four layers. Below it, DIY is a reasonable choice if you have the time. Above it, the equation flips: the fixed cost of proper inspection equipment and the risk of an undetected inner-layer error both scale faster than the service fee.
Many engineering teams use a hybrid approach: outsource imaging and netlist extraction — the slow, equipment-intensive stages — and rebuild the schematic in house where they already have the domain knowledge. That structure typically cuts the service cost by 40–60% while keeping design control internal. See how our process is structured if you want to plan around that split.
How to get an accurate quote
We quote from the board itself, not from a description of it. Send us photographs of both sides, the layer count if you know it, and a note on what you intend to do with the output. We return a scope document with a fixed price and a lead time within one business day. If the board turns out to be a poor candidate — severe inner-layer corrosion, potted modules, a custom ASIC with no documentation — we tell you before you commit, not after.
Frequently asked questions
Why is there no single price for PCB reverse engineering?
Because the work is proportional to physical complexity. Layer count, via structure, component density and deliverable scope each change the number of engineering hours required, and labour is the dominant cost. Any lab quoting a flat per-board price is either guessing or planning to change the number later.
Can you reverse engineer just part of a board?
Yes. Partial projects are common — a single section, one noisy power supply, or the interface between two functional blocks. Partial extraction usually costs less because the netlist verification scope is smaller, though fixed setup costs still apply.
Do you charge more if the board is damaged?
Yes, when damage affects the copper we need to read. Scorched or delaminated areas require reconstruction from electrical probing and inference, which adds 20–40% to the base price. If the damage is limited to components rather than traces, there is usually no surcharge.
Is firmware extraction included in the price?
No. Firmware is quoted separately, per chip, because the cost depends entirely on the protection mechanism and device family. Hardware reproduction and firmware recovery use different equipment and different engineers.
How much does it cost to reverse engineer a 4-layer board?
For a standard 4-layer industrial board, expect $1,200–$3,500 for Gerber extraction with netlist verification. Adding a full schematic and BOM typically brings the total to $2,000–$5,000, depending on component count.
What payment and confidentiality terms apply?
We work under NDA as standard, signed before any board is inspected. Payment terms are agreed at quotation stage and tied to project milestones.
If you want a real number for your board rather than a range, send us photographs and we will assess it — the feasibility check is free and carries no obligation.
Related reading
- How a project actually runs — the seven stages your quotation is priced against.
- Software and tools — what a lab uses at each stage, and what free tools can cover.
- Obsolete component sourcing — why a BOM can drive cost more than the board itself.