Managed IT pricing is set by the scope of work, not by a standard rate. The number of people and systems supported, the security controls included, any compliance obligations, the hours covered and how often someone must be on site move a quote far more than the pricing model does. Two quotes are only comparable when their scopes match.
This article explains the common pricing models, the factors behind the number, and a method for comparing proposals. It deliberately contains no price list: a figure without a defined scope tells you very little, and the purpose here is to help you read any provider's quote, including ours.
Which pricing models do managed IT providers use?
Per user. A monthly rate for each person supported. It covers that person's devices and accounts, which fits organizations where most staff use a laptop, a phone and cloud email. It is simple to budget and scales naturally with hiring.
Per device. A rate for each workstation, server and network device. This fits environments where equipment counts do not track headcount: shared workstations, shift work, lab or plant-floor machines, or a large server estate supporting a small team.
Tiered bundles. Two to four packages at increasing levels of service, often with names rather than numbers. Tiers make comparison easy within one provider and hard between providers, because every provider draws the tier lines differently.
Hybrid. Many real agreements combine these: a per-user fee for people, a per-device fee for servers and network equipment, and fixed fees for specific services such as backup or security monitoring.
None of these models is inherently cheaper. Ask each provider to show you the same environment priced line by line, whatever model they use.
What factors actually change the price?
How many people and systems are in scope?
Headcount is the starting point, but servers, network devices, cloud tenants and separate locations each add work. A 20-person office with two servers, a firewall, a wireless network and one cloud tenant is a different job from a 20-person team entirely in the cloud.
How much of the environment is on-premises?
Physical servers, storage, on-site backup appliances and older applications need patching, monitoring, hardware lifecycle management and eventually replacement planning. Cloud services shift some of that work to the cloud vendor, though they add identity, configuration and licensing work of their own.
How deep is the security stack?
This is usually the largest variable between quotes. A basic agreement may include endpoint protection and email filtering. A more complete one adds monitoring by people who respond to alerts, vulnerability scanning, security awareness training, centralized log collection and a defined incident process. Ask each provider which of these are included, which are optional, and who responds when an alert fires at 2 a.m. Our cybersecurity services page describes what each layer does.
Does a compliance framework apply?
Obligations such as NIST SP 800-171 for defense contractors, HIPAA for healthcare, or the FTC Safeguards Rule for many financial businesses add documentation, specific technical controls, evidence collection and review cycles. A scope that must stand up to an assessor costs more to run than one that only has to work. See compliance services and, for defense suppliers, our CMMC and NIST 800-171 guide.
What hours are covered?
Business-hours support, extended hours and around-the-clock coverage are priced very differently, because someone has to be staffed and awake. Be precise about which you need: many organizations need 24-hour monitoring and response for security events but only business-hours help desk support.
How often is someone needed on site?
Remote work is efficient; travel time is not. The number of locations, their distance from the provider, and how often on-site work is realistically required all affect price. Ask whether site visits are included, capped or billed separately.
What condition is the environment in today?
An environment with undocumented systems, unsupported operating systems, shared administrator passwords or no working backup needs remediation before it can be managed on a predictable basis. Some providers price this into onboarding; others absorb it into the first months of the agreement. Either is reasonable if it is stated.
What is the contract term?
Longer terms sometimes lower the monthly rate. Weigh that against the cost of being unable to leave a provider who is not performing. Look at the termination terms and at what the provider must hand back when the agreement ends.
How do you compare two managed IT quotes fairly?
Build a one-page scope sheet and give the same sheet to every provider:
- Number of users, workstations, servers, network devices, locations and cloud tenants.
- The security controls you require, listed individually.
- Any compliance framework that applies, and whether assessment preparation is expected.
- Coverage hours for help desk and for security monitoring, stated separately.
- On-site expectations: how often, where, and for what.
- Known projects in the next 12 months.
Then line up the answers in a table with one row per item and one column per provider. Where a provider has marked an item "optional" or "additional," add its cost before comparing totals. The quote that looks lowest is often the one with the most exclusions.
Which questions reveal hidden costs?
- What is not included, in writing?
- How are projects quoted and approved?
- Are after-hours and on-site time included, capped or billed separately, and at what rate?
- Are hardware and licenses resold, and is the markup visible?
- What does onboarding cost, and what does it produce?
- What does it cost to leave, and what do we receive when we do?
A provider that answers these clearly before you sign is likely to be clear with you afterwards.
Is managed IT more expensive than paying for support when things break?
The monthly fee is always higher than a month in which nothing breaks. The comparison that matters is total cost over a year, including downtime, emergency rates and the problems prevention avoids. We walk through that calculation, using your own numbers, in managed IT vs. break/fix support. For a broader view of what the service includes, start with the managed IT buyer's guide.
If you would like a written scope and quote for your environment, or a walkthrough of a proposal you already have, schedule a consultation.