Managed IT plans built around your business
Three levels of managed IT for Ontario businesses: co-managed, fully managed, and managed with security. Each is quoted per month after we have looked at your environment.
Three levels of coverage
Every plan is delivered by our GTA team, with a 24/7 incident line at (289) 582-9930 for serious incidents such as ransomware or a hacked mailbox. Day-to-day requests go to the helpdesk, which is staffed 24/7.
None of the plans has a published price. Each is quoted per month after we have looked at your environment, so the figure reflects your users, devices, sites and risk.
Co-managed IT
For a business with an internal IT person who needs depth behind them. Covers helpdesk overflow, patch management, managed endpoint protection, Microsoft 365 administration support, backup monitoring with restore tests, and escalation to senior engineers. See co-managed IT.
Fully managed IT
For small and mid-sized teams that want IT handled end to end. Adds the helpdesk for all your staff, monitoring of devices, servers and network, Microsoft 365, email and identity management, offsite backups with tested restores, and onboarding and offboarding of employees.
Managed IT plus security
For regulated or higher-risk firms such as law, accounting, healthcare and financial services. Adds enforced multi-factor authentication, email authentication (SPF, DKIM, DMARC), security awareness training with phishing simulations, and incident response from the team that does our forensic work.
What each plan includes
Put this table beside any other provider's proposal. A dash means not included in that plan; it can still be added as a project.
| Capability | Co-managed | Fully managed | Managed + security |
|---|---|---|---|
Helpdesk for your staff | Overflow only | Yes | Yes |
Escalation to senior engineers | Yes | Yes | Yes |
Employee onboarding and offboarding | - | Yes | Yes |
Patch management | Yes | Yes | Yes |
Monitoring of devices, servers and network | - | Yes | Yes |
Managed endpoint protection | Yes | Yes | Yes |
Microsoft 365 and identity administration | Support | Yes | Yes |
Offsite backups with restore tests | Monitoring only | Yes | Yes |
Enforced MFA and email authentication | - | - | Yes |
Security awareness training and phishing simulations | - | - | Yes |
Incident response | - | - | Yes |
24/7 incident line | Yes | Yes | Yes |
Who watches the alerts, and when
Monitoring raises alerts on failing disks, missed backups, expiring certificates and machines that have fallen behind on patches. Our team reviews them and turns them into scheduled work.
We do not sell monitoring as a round-the-clock security operations centre. Urgent problems outside business hours go to the 24/7 incident line. Your proposal states the monitoring hours and what happens to an alert raised overnight, so you can compare it with other quotes.
What moves the monthly figure
People
The number of staff you want covered is the largest input. Two providers quoting 'per user' can land far apart if they count differently, so ask both who is being counted.
Sites and servers
One office is a different job from four locations with servers between them.
Coverage level
The three plans are different scopes of work. The security plan adds real ongoing work and is priced as such.
What you already have
Tools you already run, or work your internal IT person keeps, come out of scope. We find this before quoting, not after.
What to get in writing, from us or anyone else
The gap between two quotes is rarely the number. It is what the cheaper one left out. Our IT quote checker works through 22 checks with wording you can send back to a provider; it works on our quotes too.
- Is the helpdesk capped by hours or tickets? What happens after the cap?
- What does '24/7' mean in the contract: an engineer, or an answering service that opens a ticket for the morning?
- Are backups restore-tested? Ask for the date of the last test restore.
- Which security controls are in the base price: endpoint protection, MFA, email authentication, training?
- Who owns your Microsoft 365 tenant, your domain and your backup data? If the provider does, leaving needs their cooperation.
- What are the exit terms, and what documentation do you get when you leave?
A note on compliance
The controls in these plans support your obligations under PIPEDA and, for health custodians, Ontario's PHIPA. They do not by themselves make you compliant, and any provider telling you otherwise is overselling. Our privacy and AI practice covers the legal side with your counsel.
How it starts
Not sure what to fix first? The IT risk self-check walks you through your setup in a few minutes, on screen or on paper.
Review
We look at your systems, security and support gaps.
Findings and a recommended plan
A short written report of risks and the level of coverage that fits.
Onboard
Admin access moves to accounts you own, the cheap fixes go in first, and we take over the day-to-day.
Questions about the plans
There is no single figure. A managed service provider quotes per month from four things: how many people and devices you have, how many sites and servers, the coverage level (co-managed, fully managed, or managed IT plus security) and what you already own. We quote after a review and do not publish a figure we have not quoted.
Co-managed backs up your internal IT person. Fully managed is your whole IT function, handled by us.
Terms are set out in writing before you commit, including exit terms.
Usually managed IT plus security, because enforced MFA, email authentication and incident response are what clients, insurers and regulators ask about. We carry $2M cyber liability insurance.
Related.
- ToolHow exposed is your business to a cyber attack?Fifteen questions about the controls that decide how bad a cyber incident gets, each with four answers from strongest to weakest.
Want this handled for your business?
Tell us your users, devices and sites. We are staffed 24/7 and reply with next steps. Quotes are built from your environment, not a price list. Active incident? Call (289) 582-9930, 24/7.