What IT support really costs a small business

Written by Sachin, founder of Pinaka Security.

Managed IT support and infrastructure monitoring for a small business

The quoted price is the easy part. A monthly IT support fee covers monitoring and a helpdesk, but not the internal time, the tools, or the projects that sit around it. Here is what a small business really spends on IT support, and where the money goes.

01 The headline number

Why there is no single price

Ask five providers what IT support costs and you will get five different numbers. Not because anyone is hiding anything, but because the price tracks the scope, not the label.

Published pricing guides from managed service providers put full coverage at roughly $150 to $200 per user per month. Monitoring-only plans sit below that and premium coverage above it. Treat those as a starting range, not a quote.

What moves your number:

  • Users and devices. Managed IT is usually billed per user or per device. Sixty people and four servers is a different job from eight people and one laptop each.
  • How much you hand over. Monitoring only is the cheapest tier. Add a helpdesk, then proactive maintenance, then security work, and each step buys a different service.
  • The size of the environment. One office is simple. Several sites, on-premises kit or a hybrid cloud arrangement take longer to cover and more skill to maintain.
  • Coverage hours. Business-hours support costs less than 24/7 monitoring and triage.
  • On-site work. Remote-first is normal now. Anything that needs somebody in the building is usually priced separately.

The quoted number is the sum of those five. So the useful question is not what IT support costs in general. It is what is in this scope.

02 The scope

What the fee actually buys

A support fee buys a scope of work, and the scope should be written down. If it is not, you are paying for whatever the provider assumes and arguing about the rest later.

Four things belong in it:

  • Who is covered. How many users, how many devices, how many sites, and whether servers and network hardware count as billable.
  • What monitoring watches. Servers, network devices, endpoints, applications, cloud services. Monitoring without triage is just an alarm service. Somebody has to own every alert.
  • What the helpdesk does. What counts as an incident, what response time applies to each severity, and whether after-hours issues are included.
  • What is excluded. New installations, project work, hardware, software licences. These belong on the quote, not on the invoice at the end of the month.

Depth matters more than the number of features. A plan that monitors, triages, patches, finds the cause and reports in plain language is worth more than a longer feature list that leaves the root cause in place.

We scope this after a free review and quote a fixed monthly price. No billing by the alert, and no surprise on the invoice.

03 The invoice

The costs that never appear on it

Four costs sit outside the monthly fee and rarely get counted.

  • Internal time. Somebody on your side resets passwords, chases the hosting provider, books the engineer and explains to staff why email is down. Nobody invoices for that hour, but it is real time.
  • Software and licences. Microsoft 365 licences, endpoint protection, backup, monitoring, a password manager. Some managed IT agreements include the tooling, some pass it straight through. Ask which, and check what it adds up to across the year.
  • Project work. Migrations, a new branch office, a camera system, a laptop refresh. Good providers keep this separate from the monthly fee, because it is a different kind of work and bundling it makes the monthly number look better than it is.
  • The cost of leaving. Ask what happens to your documentation, credentials, DNS and configurations when you move. A provider who cannot hand those over cleanly has already told you something.

None of these make a managed service a bad deal. They just have to be on the same page as the fee.

04 The gap

What it costs when nobody owns it

Here is the number most quotes never mention: the cost of the days when nothing is being watched.

Work it out yourself. Take your team size, multiply by the hours lost in a typical incident, then multiply that by how often it happens. A 40-person business that loses four hours of one team's time to a shared drive outage has spent 160 paid hours producing nothing. Add the revenue that did not close while the system was down, and the work that has to be redone because half of it was interrupted.

Three things make that worse.

  • You find out from a customer. Unmonitored infrastructure means the first alert is a complaint, and the person complaining has usually already told other people.
  • The same problem keeps coming back. Patching the symptom moves the incident to next month, and the business keeps paying that bill quietly.
  • Recovery is slower. Nobody has run the failover in a year, so the first attempt becomes three attempts, and the first attempt happens during working hours.

Monitoring exists to convert lost hours into caught-early hours. That is most of the value, and it is not a line item.

05 The quote

What to ask before you sign

A useful quote answers these without being pushed:

  • Per user or per device, and are servers and firewalls included in the count?
  • Is coverage 24/7 or business hours, and does that change the price?
  • What are the response times for critical and normal tickets?
  • What is excluded, and what is the rate for excluded work?
  • When something breaks, do they find the cause and fix it, or close the ticket? A restart is not a fix.
  • What does the monthly report contain, and who reads it?
  • Who owns the documentation, credentials and runbooks if you leave?
  • Is this a fixed monthly price after a review, or a rate card with a spend estimate?

Eight questions. If a provider cannot answer them without booking another call, you are not comparing scope.

06 Where we start

One owner and a fixed price

Managed IT works when somebody owns it. Monitoring runs continuously, maintenance happens on a clear cadence, and recurring problems get investigated rather than patched over. You get one owner for the work nobody has time to own, and reporting you can act on without translating it first.

We also work alongside in-house teams rather than replacing them. Most clients keep their IT people. We take the monitoring and maintenance load and back them up on the hard problems.

If you want the arithmetic behind it, our post on managed IT versus hiring an IT person covers where the cost flips. Our managed IT page has the full scope, what is included, and how the fixed monthly price is set.

Send us a description of your setup and we will scope it honestly, free.