Sales and Support: (317) 300-4606

What Managed IT Services Include (and What Usually Costs Extra)

What a managed IT monthly fee usually covers, what gets quoted separately, and the questions worth asking before you sign with any IT provider.

Short answer

A managed IT monthly fee usually covers help desk support for your team, security tools watched by people, monitoring and updates for every computer, onboarding and offboarding, vendor management, regular planning, and backup of your Microsoft 365 or Google Workspace data. Projects such as office moves and migrations, hardware, network gear, cameras and compliance programs are usually quoted separately. The clearest way to know what you're buying is to ask every provider for a written list of what's in and what's out.

What is managed IT, in plain terms?

Managed IT means one outside team runs your technology for a predictable monthly fee. Instead of calling someone when something breaks and paying by the hour, you pay a team whose job is to keep things from breaking, support your people and plan what comes next.

The details vary from provider to provider, which is why two quotes that look similar can cover very different work. Here's what you'll usually find on each side of the line.

What's usually included in the monthly fee?

  • Help desk support. Your team calls or emails when something isn't working, and a person fixes it or escalates it.
  • Security tools, monitored. Protection on every computer, email filtering, and multi-factor sign-in (MFA), which asks for a second proof of identity such as a code on your phone. The key word is monitored: someone watches the alerts and acts on them.
  • Monitoring and patching. Patching means installing the security updates that software makers release. A managed provider keeps every machine current and watches for warning signs like failing drives.
  • Onboarding and offboarding. New hires get accounts and a working laptop. Departing employees lose access, and company devices come back.
  • Vendor management. When the internet goes down or a business application misbehaves, your provider calls the vendor so you don't sit on hold.
  • Planning and regular reviews. A standing meeting, often quarterly, to look at what's aging, what's at risk and what's coming next year.
  • Backup of cloud data. A separate backup of the email, files and accounts in Microsoft 365 or Google Workspace, so deleted or overwritten data can be recovered.

What usually costs extra?

Most providers separate ongoing work, which is in the monthly fee, from one-time work, which is quoted as a project. Common extras:

  • Projects: office moves, email or file migrations, new software rollouts, and replacing a server.
  • Hardware: laptops, monitors, phones and docks, plus the labor to set them up in some agreements.
  • Network equipment: firewalls, switches and Wi-Fi access points, and sometimes the ongoing management of them, priced per office.
  • Cameras and door access: physical security is usually its own system with its own pricing.
  • Compliance programs: preparing for a framework like SOC 2 or HIPAA involves policies, evidence and audits that go well beyond day-to-day IT.
  • After-hours project work: scheduled changes done nights or weekends at your request.
  • Software licenses: Microsoft 365, Google Workspace and your business applications are often billed separately from the support fee, even when the provider resells them.
Usually includedUsually separate
Help desk for your teamOffice moves and build-outs
Security tools and monitoringEmail, file or system migrations
Updates and patchingLaptops, phones and other hardware
Onboarding and offboardingFirewalls, switches and Wi-Fi gear
Vendor managementCameras and door access
Planning and regular reviewsCompliance programs and audit preparation
Backup of Microsoft 365 or Google Workspace dataAfter-hours project work you schedule

Treat this as a starting point, not a rule. Some providers bundle network management into the monthly fee; others include a set number of project hours. The only list that matters is the one in your agreement.

Can contractors, personal devices or light users be left out?

Often, yes. The useful question is who touches company data. Someone who signs in to your email, files or client systems is a security exposure whether they're on payroll or not, so leaving them unprotected saves little.

Common middle grounds:

  • Contractors get a limited account that expires when the engagement ends, instead of full coverage.
  • Personal phones get app-level protection that separates work data from personal data, rather than full device management.
  • Light users, such as staff who only check email, may be covered differently from people who live in their laptops all day. Ask how each provider handles them.

Is a flat monthly fee worth it if we rarely submit tickets?

Tickets are the visible part of the work, not most of it. A good month is a quiet one, and quiet months are usually the result of updates installed on time, a suspicious sign-in stopped before anyone noticed, and a new hire whose laptop worked on the first morning.

Picture a 30-person firm that submits a handful of tickets a month. The fee still pays for security monitoring every day, patching every week, clean onboarding and offboarding as people come and go, and someone planning ahead so the next server or laptop replacement isn't a surprise. If a provider can't show you that work, ask them to.

Will managed IT duplicate tools we already pay for?

It can, and it's worth checking before you sign. The most common overlaps are antivirus, backup, password managers and email filtering. Ask any provider to list the tools they deploy, then compare that list with what you're already paying for.

A sensible provider maps your current tools, tells you which ones to keep, and times any replacement to your renewal dates so you're not paying for two products for a year. Any change to security tools should be tested with a small group before rolling out to everyone, so nothing important gets blocked by surprise.

Is the quote over-scoped? Can it come in tiers?

Ask the provider to explain each line in plain language and what would change if you removed it. If they can't explain a line, that's useful information. Some providers offer tiers, and that can work well, as long as the basics of security, backup and offboarding stay in every tier. For a closer look at pricing models and how to compare quotes line by line, read how IT providers price their services.

What reporting should we expect?

You should be able to see what you're paying for, but more reports aren't always better. Monthly reports that nobody reads become noise. What matters is that you can get answers when you ask, and that someone walks you through where things stand on a regular schedule, often quarterly. On request, a provider should be able to show you:

  • Tickets opened and closed, and how quickly they were answered
  • Recurring issues and what's being done about the root cause
  • Security status: devices up to date, MFA coverage, backups completing
  • Upcoming renewals, aging equipment and recommendations

None of it needs to be long. It needs to be honest and readable by someone who isn't technical.

What questions should we ask any managed IT provider?

  • What exactly is in the monthly fee, and what is billed separately?
  • How is the fee calculated: per person, per device, per location, or a mix?
  • What happens when someone joins or leaves? How fast is access removed?
  • What are your help desk hours, and how do we reach you after hours?
  • Which security tools do you deploy, and who watches the alerts?
  • Is our Microsoft 365 or Google Workspace data backed up, and when was a restore last tested?
  • How often do we meet to plan, and who attends?
  • What reporting can we get, and how often do we review it together?

How Simple IT handles it

Our Managed IT services page lists exactly what our monthly service covers. A few things we'll say plainly: our help desk runs Monday through Friday, 8 AM to 8 PM Eastern, with after-hours emergency support by phone: you reach someone, or leave a voicemail and we respond within an hour. Reporting is available whenever you ask for it, and we review where things stand with you quarterly. Typical first response is under an hour during business hours, and the help desk fixes or escalates issues the same day. Departing employees lose access the same day. Our security work follows the CIS Controls v8 Implementation Group 1 as a baseline, and you can see how that shows up day to day on our cybersecurity page.

Where to start

If you're comparing providers, or wondering whether your current agreement covers what you think it does, take the free 5-minute IT Snapshot to see where things stand. If you're weighing a change, our guide to switching IT providers without disruption walks through the process. Or book a 15-minute call and we'll talk through what you have today.

Last reviewed October 13, 2026. This article is general information, not legal, insurance or compliance advice, and reading it doesn't make you a Simple IT client. Have your IT provider confirm any steps for your setup, and talk with your attorney, insurance broker or auditor about how anything here applies to your business. See our Terms of Use.