What would managed IT really cost you?

Directional, not a quote. The per-user rates are what we actually charge. Advanced is $180 per user per month and bundles full SOC services, SIEM, Identity and Endpoint MDR, vulnerability management, Microsoft 365 Business Premium licensing, Fusion Advanced Backup for Microsoft 365, and vCISO check-ins. CIS-compliant is $230 per user per month and adds CIS v8.1 hardening on every endpoint plus audit-ready posture evidence. Email-only seats are $30 per user per month. Servers and cloud VMs go through Fusion Advanced Backup at $160 per unit per month, first 5 TB per unit included. Industry, location and internal-staff adjustments come from Canadian engagement data and 2026 Robert Half and BambooHR salary surveys. A binding quote always comes after a 30-minute scoping call.

Three reasons. It's hybrid: a local appliance keeps a fresh copy on site for fast restore, and a synced copy lives in a Canadian cloud region so a fire or theft doesn't take you down. It does remote virtualization: if the physical server dies, we boot a working copy in the cloud within minutes so your team keeps working while we replace the hardware. The copies are immutable, so ransomware can't encrypt them. The monthly restore test actually boots a copy. It doesn't just count files. Most SMBs we onboard have scheduled-job backups that have never been tested with a real restore.

An EDR product (Defender for Endpoint, SentinelOne, CrowdStrike) generates alerts. A SOC service is the humans who triage those alerts, investigate the ones that matter, and contain the threat. Advanced includes the SOC: 24-hour analyst coverage, SIEM-based log correlation across endpoints, identity and cloud, Identity MDR for Entra ID, Endpoint MDR with managed response (not just notification), and a vulnerability management program with 30, 60, 90 day remediation SLAs. You don't need to figure out which alerts matter. The SOC does.

Compliance is real work, and it varies by sector. A law firm has privilege controls. An accounting practice has tax-season scale. A wealth firm has CIRO Rule 2300 and Guidance Note GN-2300-21. A clinic has PHIPA in Ontario, HIA in Alberta or the BC E-Health Act. A municipality has FIPPA, FOIPPA or FOIP. Each one has to keep evidence of what they did and when. That overhead sits in the per-user rate so the final number is honest before we ever talk. General SMBs with no regulator pay the base rate.

Advanced ($180 per user per month) is what most growing Canadian SMBs run on. CIS-compliant ($230 per user per month) is the same service plus CIS Critical Controls v8.1 hardening on every endpoint, audit-ready posture evidence per device, annual penetration-test prep with remediation tracking, and support responding to customer and insurer security questionnaires. Pick CIS-compliant when you owe someone evidence: a SOC 2 report, a CIRO 2300 review, a buyer security questionnaire, a tightened-up cyber-insurance renewal. Otherwise Advanced is the right call.

Almost certainly yes. We've delivered managed IT, cybersecurity and AI work across legal, accounting, financial services, wealth management, healthcare, public sector, manufacturing, construction, transport, design and non-profits. Industry-specific line-of-business applications and integrations are routine. If you're a Canadian SMB with an IT, security or AI requirement that isn't obviously on the list, book a 30-minute call and we'll tell you straight whether we're a fit.

We work co-managed. Each in-house FTE shares the helpdesk load so the per-user rate adjusts down to reflect what your team already handles. Your team owns line-of-business apps and end-user relationships. We own security operations, the SIEM, vulnerability management, after-hours rotation, and the things your team doesn't want to be paged for at 2am.

No. The full monthly and annual estimate, the itemized line items, the in-house comparison and the methodology all show up on Step 4 with no email gate. Your email only generates the branded PDF — which we also open in a new tab immediately — plus one follow-up message. No drip campaign, no sales sequence.