Essential
For teams that need IT to work and stay secure at a solid baseline. Everything runs, everything is patched, everything is backed up, and someone answers when you call.
Compare coveragePlans
Three plans, fixed monthly cost, unmetered support hours. You will know your number before we ask you to commit to anything.
How to choose
Most organizations land in one of three places, and the honest way to choose is by what you are accountable for rather than by what you can afford.
If you are not sure which one fits, that is a thirty-minute conversation, not a research project. We will tell you which plan we think you need and why, including when the answer is the cheaper one.
What is included
Every plan is priced per user per month, billed at a fixed monthly amount, with unmetered support hours.
On a small screen, scroll the table sideways to compare all three plans.
| Service | Essential | Professional | Secure & Comply |
|---|---|---|---|
| Support and service | |||
| Help desk, phone, email, and chat | Included | Included | Included |
| Unmetered support hours | Included | Included | Included |
| Published response targets by priority | Included | Included | Included |
| 24/7 emergency outage line | Included | Included | Included |
| Named service lead on your account | Included | Included | Included |
| Remote support | Included | Included | Included |
| Onsite support when remote cannot resolve it | Included | Included | Included |
| Employee onboarding and offboarding | Included | Included | Included |
| Documented environment and runbooks | Not included | Included | Included |
| Priority scheduling for planned work | Not included | Not included | Included |
| Monitoring and maintenance | |||
| 24/7 monitoring, endpoints, servers, network | Included | Included | Included |
| Operating system and third-party patching | Included | Included | Included |
| Asset and license inventory | Included | Included | Included |
| Vendor coordination on your behalf | Included | Included | Included |
| Network and firewall management | Included | Included | Included |
| Hardware lifecycle and refresh planning | Not included | Included | Included |
| Configuration baseline and drift monitoring | Not included | Not included | Included |
| Security, included in every plan | |||
| Next-generation endpoint protection | Included | Included | Included |
| Multifactor authentication enforced | Included | Included | Included |
| Email spam and malware filtering | Included | Included | Included |
| Backup of servers and Microsoft 365 | Included | Included | Included |
| Documented test restores | Included | Included | Included |
| Annual security awareness training | Included | Included | Included |
| Security, monitored operations | |||
| Endpoint detection and response, monitored | Not included | Included | Included |
| SPF, DKIM, and DMARC enforced | Not included | Included | Included |
| Impersonation protection on finance and executive accounts | Not included | Included | Included |
| Conditional access and privileged account separation | Not included | Included | Included |
| DNS and web filtering | Not included | Included | Included |
| Network segmentation | Not included | Included | Included |
| Credential exposure monitoring | Not included | Included | Included |
| Immutable, off-site backup | Not included | Included | Included |
| Ongoing training with simulated phishing | Not included | Included | Included |
| Quarterly security posture report | Not included | Included | Included |
| Managed detection and response, 24/7 | Not included | Not included | Included |
| Log aggregation and retention | Not included | Not included | Included |
| Data loss prevention | Not included | Not included | Included |
| Vulnerability scanning with remediation tracking | Not included | Not included | Included |
| Annual penetration test coordination | Not included | Not included | Included |
| Cloud and Microsoft 365 | |||
| Microsoft 365 administration and support | Included | Included | Included |
| Identity and mailbox management | Included | Included | Included |
| Annual license review | Included | Not included | Not included |
| Quarterly license right-sizing | Not included | Included | Included |
| Tenant hardening to a defined baseline | Not included | Included | Included |
| Cloud infrastructure management, Azure or hybrid | Not included | Included | Included |
| Cloud migration planning | Not included | Included | Included |
| Cloud security posture monitoring | Not included | Not included | Included |
| Device management | |||
| Standard device setup and configuration | Included | Included | Included |
| Centralized enrollment and provisioning | Not included | Included | Included |
| Security policy enforcement and encryption | Not included | Included | Included |
| Remote lock and wipe | Not included | Included | Included |
| BYOD separation of work and personal data | Not included | Included | Included |
| Application distribution | Not included | Included | Included |
| Device compliance reporting | Not included | Not included | Included |
| Strategy and planning | |||
| Annual technology review | Included | Not included | Not included |
| Quarterly business reviews | Not included | Included | Included |
| Multi-year technology roadmap | Not included | Included | Included |
| Budget and lifecycle planning | Not included | Included | Included |
| Vendor selection and negotiation support | Not included | Included | Included |
| Assigned vCIO | Not included | Not included | Included |
| Risk register with prioritized remediation | Not included | Not included | Included |
| Board and funder reporting | Not included | Not included | Included |
| Compliance and evidence | |||
| Monthly ticket and response performance report | Included | Included | Included |
| Annual access review | Not included | Included | Not included |
| Quarterly documented access reviews | Not included | Not included | Included |
| Control mapping and documentation | Not included | Not included | Included |
| Written information security program maintenance | Not included | Not included | Included |
| Audit and examination evidence pack | Not included | Not included | Included |
| Client security questionnaire support | Not included | Not included | Included |
| Cyber insurance questionnaire support | Not included | Not included | Included |
| Incident response plan and annual tabletop exercise | Not included | Not included | Included |
Migration execution is scoped and quoted as a project on every plan.
Frameworks we map to include HIPAA, CMMC and NIST 800-171, PCI DSS, FERPA, and the FTC Safeguards Rule.
What is not included in any plan
We would rather tell you now than have you find out later.
Hardware
Computers, servers, firewalls, and network equipment are yours to own. We quote at cost plus a stated markup and show you the invoice.
Third-party licensing
Microsoft 365, line-of-business applications, and specialist software are billed at cost.
Major projects
An office move, a data center migration, or a large cloud transformation is scoped and quoted separately, with a fixed price agreed before work starts.
Onsite visits beyond your agreed allowance
Remote-first is the default. Your agreement states what onsite coverage is included.
How pricing works
- Per user, not per device
- One person with a laptop, a desktop, and a phone is one user.
- Your count can move
- Headcount changes are reflected in the next billing cycle, in both directions. You do not pay through a quiet quarter for seats you no longer have.
- Unmetered means unmetered
- Support hours are not a bucket you draw down. We are not incentivized to discourage you from calling, which is rather the point of the whole arrangement.
- Fixed monthly
- Your operating line is predictable. Capital items get flagged in your review, ahead of your budget cycle, with costs attached.
We built these plans for organizations of ten or more users. Below that, the economics usually work against you, and you are often better served elsewhere. Tell us your situation and we will give you a straight answer, including a referral if that is the right one.
Questions we get asked
Have a question about your setup? Include it in the form below.
Why are there no prices on this page?
Because the honest number depends on what we find. Two thirty-person organizations can differ by a factor of two once you account for servers, sites, compliance obligations, and the state of what is already there. Quoting a figure before we have looked would either overstate it or set an expectation we would have to walk back. You will have a real number, in writing, after a thirty-minute conversation and a short discovery, and you will not be asked to commit to anything before you have it.
What if we only need part of a plan?
Say so. These are where most organizations land, not a fence. If you already have an internal IT person and want security operations only, that is a real conversation and we will have it.
Can we start on one plan and move up?
Yes, and a good number of clients do. Essential to Professional is usually driven by an insurance requirement or a board question. Professional to Secure & Comply is usually driven by a contract, an examiner, or a client's security review.
Do you require a long contract?
We would rather keep you because leaving is unattractive than because it is contractually difficult. Terms are in the agreement and we will walk you through them before you sign.
Do you resell hardware at a markup?
We quote hardware at cost plus a stated markup and show you the invoice. We do not make recommendations based on what we earn on the box.
Tell us what is going wrong.
Tell us about your systems, locations and current IT concerns. We support organizations in DC, Maryland, Virginia and Delaware.
- New enquiries
- (301) 850-2994
- Existing clients
- (888) 816-8119
- Office
- 1 Research Court, Suite 450, Rockville, MD 20850
Something down right now? Call (888) 816-8119 instead. A live engineer answers, day or night.