Managed IT & Cybersecurity · Dallas–Fort Worth
One Price. Every Endpoint. Support Included.
Security-controlled IT operations for Dallas–Fort Worth businesses with 10 to 50 users. Identity, email, endpoints, patching, monitoring, backup and recovery — operated to one enforced standard, with the help desk in the price.
No good-better-best ladder of tools. Two ways to buy: the operation on its own, or the operation with a governance program on top for organizations that have to prove it.
Before You Compare Any Two Quotes
Managed IT pricing is almost impossible to compare honestly, and the reason is the unit. Some providers price per endpoint. Some price per user. Some price per user but add a phantom user for every server and every site. A $145 quote and a $138 quote can differ by fifty percent once you normalize them.
Ask every provider you are talking to — including us — these nine questions. Put the answers side by side. Then compare.
- Is the price per endpoint, per user, or per user with servers and sites counted as users?
- Is the help desk in the rate, or billed hourly — and what is the hourly rate after hours?
- What coverage window does that include, in actual hours?
- Is it EDR or MDR? Does someone contain the incident, or only alert you?
- Is backup in the base price, and is there a per-gigabyte overage?
- Is Microsoft 365 licensing in or out?
- What is the monthly minimum?
- What does onboarding cost?
- How long is the contract, and what is the month-to-month premium?
And one more, which is the one that matters: ask them when they last restored a client's server and proved it booted. We do that four times a year and send you the evidence in writing.
Two Ways to Buy
Same operation underneath. The difference is whether you also need to prove it to an auditor, an insurer or a customer.
The operation
Secure IT Operations
Support included. Twelve-month agreement. No support retainer, no hourly help desk bill.
Your whole technology environment run to one security standard, by one accountable provider. Every computer covered — we do not price protection a la carte, because half-protected is not protected.
Schedule an IT Operations ReviewThe operation, plus proof
Secure IT Operations + Governance
The governance program is a flat monthly fee for the organization, not a per-seat charge. It does not scale down with headcount, because the work does not.
Everything in Secure IT Operations, plus framework mapping, control ownership, quarterly network penetration testing, retained evidence and a quarterly executive briefing.
Discuss a Governance ProgramThese tiers are built for 10–50 user organizations that want enforced standards and structural risk reduction.
If you're looking for break-fix IT or the lowest monthly fee, we're not the right fit — and we'll tell you so.
Six Pillars. One Standard. Enforced, Not Suggested.
Included in both offerings. This is the operating standard, priced.
Identity Control
Multi-factor enforced on every account, conditional access, and privileged accounts separated from daily-use ones. The highest-value control, and the one most often left half-configured.
Email Threat Defense
Advanced filtering, impersonation and payload protection, and mailbox-level backup. Email is still where most incidents begin.
Detection and Response
A 24/7 security operations center with analysts authorized to contain an incident, not just alert you about it at three in the morning. Detection without action is noise.
Patch Enforcement
Operating system and third-party application patching on a managed schedule, with exceptions reviewed and documented rather than silently accumulating.
Data Protection
Every workstation, every server and every Microsoft 365 mailbox backed up, with recovery to a working machine — not a file off a tape. Tested quarterly.
Safeguards Oversight
A monthly report of what was enforced, what failed, and what was fixed. You should never have to ask whether your controls are actually running.
Plus the help desk. Support is included in both offerings — not a retainer, not an hourly bill, not an add-on.
Four Times a Year, We Prove It Works.
Every client gets a documented recovery test every quarter. We fail your servers over, confirm they boot, and send you the evidence in writing — whether or not anything ever goes wrong.
Ninety percent of businesses believe they could recover from an attack. Twenty-eight percent of the ones who were actually hit recovered everything. The gap between those two numbers is made entirely of untested backups.
When You Have to Prove It, Not Just Do It
Running good controls and being able to evidence them are different jobs. An auditor, an insurer or a customer's security team will not accept "we have backups" — they want to know which control, who owns it, when it was last verified, and where the evidence is.
The governance program is that second job, priced as its own line because it is its own work.
- Framework mapping — your obligations translated into a named set of controls, whether that is HIPAA, PCI DSS, CMMC, SOC 2 or a customer questionnaire
- Control ownership — every control has a named owner and a review date, not a spreadsheet nobody maintains
- Quarterly network penetration testing — automated internal and external testing against your network, with a written report and tracked remediation
- Evidence retention — the artifacts an auditor asks for, collected as you go rather than reconstructed in a panic
- Policy set, maintained — written once and then kept current, which is the part almost everyone skips
- Quarterly executive briefing — what changed, what the gaps are, and what it would cost to close them
- Annual tabletop exercise — a facilitated walk-through of a real incident with your leadership team
On penetration testing, plainly: the quarterly testing included here is automated network penetration testing, internal and external. It is thorough, it runs four times a year rather than once, and it produces a full report. It is not a manual test performed by a human tester. If your auditor or insurer specifically requires an independent third-party manual penetration test, tell us and we will scope that separately — we would rather say so now than have you discover it at audit.
Onboarding Is Quoted Before You Sign
Taking over an environment properly takes real work: documenting what is there, enforcing the standard everywhere, and fixing whatever the last provider left. We quote it as a one-time fee up front so there is no open-ended project invoice later.
| Environment | One-time |
|---|---|
| Up to 15 endpoints | $1,500 |
| 16 to 30 endpoints | $2,500 |
| 31 or more endpoints | $3,500 |
| Each server | + $500 |
Quoted and agreed before any agreement is signed.
Hardware at Cost Plus Five Percent.
We do not make money on hardware. You see the invoice we paid, plus five percent to cover handling. Most providers mark hardware up twenty to forty percent and call it a value-add. We would rather you spent that money on the controls that actually protect you.
What the Monthly Price Does Not Cover
Included — never invoiced
- Backup failures, re-runs and recovery work
- Security alerts and the response to them
- Patch approval, exceptions and rollback
- Protection agent health and reinstalls
- The quarterly recovery test and its report
- Your monthly report and review call
- Day-to-day help desk support
Quoted or billed separately
- Microsoft 365 and other software licensing
- Projects — migrations, office moves, new deployments
- Firewall and network equipment management
- Onboarding, as above
- Hardware, at cost plus five percent
The line is simple: anything that keeps your environment running to standard is already paid for. A project that changes your environment is quoted before it starts.
Who This Fits
A good fit
- 10 to 50 users in the Dallas–Fort Worth area
- One provider accountable for the whole environment, not three vendors pointing at each other
- Facing a compliance obligation, an insurance renewal, or a customer security questionnaire
- Let down by a break-fix or ticket-driven provider
Probably not a fit
- Looking for the cheapest possible monthly number
- Wants to protect some machines and not others
- Wants us to manage an environment we are not allowed to bring to standard
- Under 10 users — talk to us anyway, but the economics are usually wrong
Start With a Review, Not a Quote
Thirty minutes. We look at what you have, what it would cost you to be down, and where your current setup would fail — and you leave knowing that whether or not you work with us.