Here's what managed IT actually costs, with the sources behind every number.
One constraint up front, because it shapes everything below: no research organization publishes verified per-user or per-device managed IT pricing benchmarks for the US small business market. The per-user figures circulating online generally appear on individual providers' marketing pages without any stated methodology. What is measured, by a survey of over a thousand providers, is what businesses actually pay per month in total. That turns out to be the more useful number anyway, because it's the one that goes in a budget.
So: what businesses pay, how the three pricing models work, what moves your number, and what to check in any proposal. If you're still working out what you'd be buying, start with what managed IT services include and come back.
Just under half of small and mid-sized businesses — 48% — pay between $1,000 and $5,000 per month for managed IT services. About 30% pay less than $1,000, and 3% pay more than $10,000, typically larger or heavily regulated organizations. That last figure is an open-ended band rather than a ceiling, and all of it describes small and mid-sized businesses. If you run multiple plants, there's a section further down on where these figures stop applying.
That comes from Kaseya's 2026 State of the MSP Report, published November 2025, which surveyed 1,061 managed service providers worldwide, 76% of them in North America. Their reported monthly recurring revenue per client breaks down like this:
Shares as published; they sum to 94%, with the remainder not reported.
Two-thirds of businesses fall under $3,500 a month. Here's what moves you within that range.
Per-device pricing is the most common approach at 32% of providers, followed by per-user at 20%, per-seat at 5%, and flat-rate at 3.5%, with about 40% using some combination — according to a January 2025 MSP Success reader survey. That survey didn't disclose its sample size and likely skews toward growth-focused providers, so treat it as directional. Per-seat and flat-rate are variants of the same two ideas, so the three models below cover what you'll actually be quoted.
A flat rate per employee, covering all the devices that person uses. Predictable, scales cleanly with headcount, and simple to forecast when you're hiring.
Best fit: office-heavy businesses where each person has a laptop, a phone, and maybe a desktop.
Priced per endpoint, usually with different rates for workstations, servers, and network equipment. Transparent about what's actually being managed.
Best fit: device-light environments, or organizations that want to see exactly what each covered asset costs.
Good, better, best — about 71% of providers offer two or three tiers, and 25% offer none at all, per the same MSP Success survey. Easy to compare across vendors. The thing to scrutinize is what moves between tiers, because security tooling is often what separates them.
This is where standard MSP pricing math breaks, and it's the part most pricing pages skip entirely.
Device-dense operations have a fundamentally different device-to-user ratio than offices. A 60-person distribution center might run 90 handheld scanners and mobile computers, 40 shared workstations and kiosks, 30 label and thermal printers, 25 access points, and 20 conveyor and sortation control nodes. That's north of 200 devices against 60 people — roughly three and a half per employee, and most of them shared rather than assigned to a person. A plant with shared terminals, industrial HMIs, and machine-attached PCs has the same problem plus a scope question: are those systems inside the covered count at all?
Under per-device pricing, that ratio multiplies your bill. Under per-user pricing, it doesn't. For most device-dense operations, per-user is the better structure — but only if the agreement is explicit that shared devices are covered.
The question worth getting in writing: Are shared workstations, scan guns, industrial terminals, printers, and network devices inside the covered count, and at what rate? This is the most common source of surprise line items in device-heavy environments.
The baseline. But as above, the ratio between them and how shared devices are counted matters as much as the raw numbers.
How many servers, on-premise or cloud, and how old. Aging hardware costs more to manage, not less — it fails more often, takes longer to patch, and eventually can't be patched at all.
This is the largest swing factor in 2026 pricing, and the most common reason two quotes for the same company diverge sharply.
Endpoint detection and response, a 24/7 security operations center, multi-factor authentication, email security, DNS filtering, and user awareness training are all separable, and providers bundle them differently. Kaseya's 2026 report found security services are now the single largest MSP revenue category at 52%, with 71% of providers reporting year-over-year growth in cybersecurity revenue. That growth is partly demand and partly the fact that security has moved from an add-on into the base package at many providers — which raises the base price.
Compare the security line items individually, or you aren't comparing the quotes at all.
HIPAA, FDA recordkeeping, customer and OEM security questionnaires, and CMMC for defense suppliers all add documentation and evidence work, which is real labor rather than a checkbox. The Department of Defense estimated that roughly 8,350 medium and large entities would require third-party CMMC Level 2 assessments under its final rule — a meaningful share of them in Michigan's supply chain.
How often a technician is physically in your building, and whether that's included or billed separately.
This is where cheap quotes hide, and it matters far more in a plant or a warehouse than in an office. A cabling fault, a misplaced access point, a failed cabinet, or a new production line all require hands on site. If a quote is silent on on-site coverage, assume it's billable and ask for the rate.
Business hours, extended hours, or 24/7. If you run more than one shift, do not buy 8×5 coverage — you'll pay emergency rates for the hours you actually need help, and the discount will evaporate.
One to three years is typical, with month-to-month available at a premium. Longer commitments generally carry lower monthly rates.
No pricing survey segments below the North America level, so there's no verified Michigan-specific or Midwest-specific managed IT benchmark. Anyone presenting one is extrapolating. What follows maps the cited Kaseya distribution onto representative operations, with per-user figures shown as arithmetic so you can see exactly where they come from.
How to read these figures. The monthly bands are Kaseya's. Which band a given operation falls into is our own estimate based on environments we've scoped — Kaseya reports a single distribution and does not segment by company size, device count, or industry. The per-user figures are simple division off those bands, included so you can sanity-check a proposal against something. They are not a benchmark, and no credible source publishes one. Your actual quote depends far more on security stack and coverage hours than on headcount.
Note what the co-managed example shows: the manufacturer with internal IT has the lowest derived per-user cost despite the most complex environment, because internal staff absorb work the provider would otherwise do. 37% of providers offered co-managed as a core service in 2025, up 17 percentage points in a year, according to Canalys and N-able's MSP Horizons Report 2025.
Everything above describes small and mid-sized businesses, roughly 10 to 250 employees operating from one site or a few. The survey behind those figures tops out at clients spending $250,000 to $500,000 a year and recorded almost none above that, which tells you what it is measuring. It is not measuring enterprise IT spend, and neither is this article.
If you run multiple plants, the arithmetic changes rather than scales. Every site carries its own network, its own OT environment, and its own uptime exposure, and none of that gets cheaper per location. Coverage usually means dedicated or embedded staff instead of a shared pool. Compliance stops being a line item and becomes a program with an owner. A single plant inside a large manufacturer can exceed the top of every range above on its own.
Engagements at that scale are built as a master agreement with per-site schedules, and the number comes out of a scoping exercise across your facilities rather than off a page like this one. If that describes your operation, the figures above are the wrong starting point — start with a conversation instead.
A low monthly number usually means a narrow scope, and the gap surfaces later as change orders.
Check specifically for: on-site visits billed separately; after-hours work at premium rates; project work carved out of included support; hardware and software licensing passed through with a markup; one-time onboarding fees; security tooling as an add-on rather than included; and caps on ticket volume or support hours.
None of that is necessarily dishonest — a narrow scope at a low price is a legitimate product, as long as you know that's what you bought.
There's also a sustainability question worth understanding. ConnectWise's Service Leadership Index reported that average adjusted EBITDA across MSPs fell to 11.1% in Q4 2024, and 18% of providers operated at a loss — up from 14% the prior quarter. A provider pricing well below market is either running a scope you haven't understood or running unprofitably, and neither ends well for the client who depends on them being around in three years.
Normalize everything to total monthly cost, then check the six things that actually vary:
If two quotes differ materially, the difference is almost always in items 3 and 4. A dedicated provider evaluation guide covering the ten questions worth asking is coming in September.
How much do managed IT services cost per month?
Just under half pay $1,000 to $5,000 monthly. Kaseya's 2026 survey of 1,061 providers found 48% of clients fall in that band, 30% pay under $1,000, and 3% pay above $10,000 — an open-ended band, not a cap. Those figures cover small and mid-sized businesses; multi-site and enterprise operations are scoped separately.
Is per-user or per-device pricing better?
It depends on your device-to-user ratio. Offices with roughly one device per person often do better per-device. Warehouses, plants, and distribution centers running three or more shared devices per employee almost always do better per-user.
Are managed IT services worth the cost for a small business?
It depends on what an hour of downtime costs you. If work stops when the network stops, the arithmetic usually favors managed services. If a lost afternoon is merely inconvenient, hourly support may be sufficient — we compare the two models here.
Does the monthly fee include hardware and software licenses?
Usually not. Microsoft 365 licensing, hardware purchases, and third-party software are typically passed through separately, sometimes with a markup. Ask whether licensing is included, passed through at cost, or marked up.
Can we start with a smaller scope and expand?
Yes. Many businesses begin with network, servers, security, and backup, then add end-user support later. Co-managed arrangements are specifically built for phased expansion.
Benchmarks tell you whether a quote is reasonable. They can't tell you what your environment costs, because that depends on what's actually in your building — and in a plant or warehouse, it's usually more than anyone expects.
CTC Technologies will inventory your environment, document what's there, and quote against what we find rather than a headcount. You'll get the documented network map regardless of whether you engage us.
Request a custom quote or call 734-408-0200. Managed IT across Michigan, including Novi, Livonia, and Sterling Heights.
