Managed IT Support
Rather than waiting for something to break, managed IT means we're watching your systems around the clock and fixing problems before your team even notices them. You get a predictable monthly cost, a dedicated point of contact, and the peace of mind that someone is always on top of your technology.
What's included
- Remote monitoring and management (RMM) agent on all covered devices
- Automated alerting for disk space, CPU, memory, connectivity, and service failures
- Security patch management for Windows, macOS, and third-party applications
- Unlimited helpdesk support via email and phone during business hours
- Remote troubleshooting and remediation for covered endpoints
- Software installation, configuration, and updates
- User account management — new hires, terminations, password resets
- Monthly IT health report — uptime, ticket volume, patch compliance
- Quarterly IT review and planning call
- Priority escalation path for critical issues
Common scenarios we handle
- A staff member's laptop is running slow — we remote in, diagnose, and resolve without interrupting their day
- A server disk hits 90% capacity at 2am — we get alerted automatically and address it before business hours
- New employee starts Monday — accounts, devices, and software are ready before they walk in
- Employee leaves — accounts locked, data secured, licenses reallocated within the hour
Pricing scales per user — a 5-user team pays $625/mo, a 20-user team pays $2,500/mo. Grows with your business without locking you into a flat rate that punishes growth.
Network Setup & Administration
A reliable, secure network is the foundation everything else runs on. Whether you're setting up a new office, upgrading aging equipment, or just trying to fix persistent connectivity problems, we design and build networks that work — and document them so you always know what you have.
What's included
- Site survey and network assessment — existing infrastructure, coverage gaps, capacity planning
- Firewall setup and configuration (pfSense, Meraki, Ubiquiti, and others)
- Managed switch configuration — VLANs, trunking, port security, QoS
- WiFi access point deployment and optimization — coverage mapping, channel planning, roaming
- Network segmentation — separating guest, staff, IoT, and server traffic
- VPN setup for remote workers — site-to-site and client VPN
- DNS and DHCP configuration and management
- Firewall rule management — inbound/outbound policy, NAT, port forwarding
- Network documentation — topology diagrams, IP address management, device inventory
- Ongoing monitoring and alerting for network devices
- ISP coordination and troubleshooting
Common scenarios we handle
- New office build-out — we design the network from scratch, procure equipment, and handle the full installation
- WiFi dead zones in conference rooms or warehouse areas — we survey, add access points, and optimize
- Remote workers needing secure access to office resources — VPN configured and documented
- Guest WiFi that's currently on the same network as internal systems — segmented properly with a VLAN
- Persistent "internet is slow" complaints — we diagnose whether it's ISP, internal congestion, or a misconfigured device
Network projects are quoted fixed-price. Ongoing network monitoring and administration is included in managed IT plans.
Microsoft 365 & Azure
Microsoft 365 and Azure are powerful platforms — but only if they're configured correctly. A misconfigured tenant leads to email deliverability problems, security gaps, and licensing waste. We've handled complex M365 migrations including full domain rebrands, Exchange Online deployments, and Entra ID integrations, and we manage the ongoing administration so your team can focus on work instead of IT.
What's included
- New tenant setup and hardening — security defaults, MFA enforcement, Conditional Access policies
- Exchange Online — mailbox provisioning, shared mailboxes, distribution groups, room resources
- Email migration from on-premises Exchange, Google Workspace, or other providers
- Domain migration and rebrand support — ProxyAddresses, X500 addresses, SMTP routing
- Email authentication — SPF, DKIM, DMARC configuration and validation
- Microsoft Teams deployment — channels, governance, external access, Teams Phone
- SharePoint Online and OneDrive — site provisioning, permissions, migration from file shares
- Intune MDM — device enrollment (Windows, iOS, Android, macOS), compliance policies, app deployment
- Entra ID (Azure AD) — user management, group management, hybrid sync via AD Connect
- Azure AD Connect — setup, health monitoring, attribute sync, writeback configuration
- License management — right-sizing, assignment, cost optimization
- Azure IaaS — virtual machines, storage accounts, virtual networks, resource groups
- Ongoing M365 administration as part of managed IT plans
Common scenarios we handle
- Business rebranding — old domain email addresses migrated to new domain with full X500 backward compatibility so historical meeting invites still resolve
- On-premises Exchange server end-of-life — full migration to Exchange Online with zero mail flow interruption
- Email landing in spam — SPF/DKIM/DMARC records audited and corrected
- Remote workforce needing company-managed devices — Intune enrollment and compliance policy rollout
- Employees sharing files via personal Dropbox — migrated to OneDrive/SharePoint with proper permissions
- SAML/SSO misconfiguration after tenant change — identity provider settings corrected and validated
Migrations are quoted as fixed-price projects. Ongoing M365 administration is included in managed IT plans.
Active Directory & Identity Management
Active Directory is the backbone of most business IT environments — it controls who can log in, what they can access, and how devices behave. A well-designed AD environment makes everything else easier to manage. A poorly designed one creates security gaps, inconsistent policies, and administrative headaches that compound over time.
What's included
- Active Directory Domain Services (AD DS) — new domain deployment or existing domain administration
- Organizational Unit (OU) design and restructuring
- Group Policy Object (GPO) creation, management, and troubleshooting
- Security group management — role-based access control, nested groups, distribution lists
- User lifecycle management — onboarding, role changes, offboarding, access reviews
- Domain join procedures and troubleshooting
- Password policy management — fine-grained password policies, account lockout
- AD Connect / Entra ID hybrid identity — sync rules, attribute mapping, writeback
- Kerberos and NTLM authentication troubleshooting
- Service account management and audit
- AD health monitoring — replication status, FSMO roles, domain controller health
- Security hardening — RC4 deprecation, legacy authentication blocking, privileged access
- AD auditing and event log monitoring
Common scenarios we handle
- Users getting locked out repeatedly — lockout policy tuned and legacy authentication sources identified
- GPO not applying correctly — scope, filtering, and WMI query reviewed and corrected
- New acquisition or merger — AD domains consolidated or trust relationship established
- Departed employee still has active accounts — full offboarding audit and remediation
- Hybrid identity issues after M365 migration — AD Connect sync rules corrected, attribute conflicts resolved
- Kerberos authentication failures after security hardening — RC4/AES settings aligned across domain
AD work is billed at $150/hr or included in managed IT plans for day-to-day administration tasks.
Security & Compliance
Small businesses are targeted by cyberattacks more than most owners realize — not because attackers are specifically after them, but because automated tools scan for easy targets around the clock. A few foundational security controls significantly reduce your exposure. We assess your current posture honestly, prioritize what actually matters, and implement protections that don't get in the way of your team doing their work.
What's included
- Security assessment — endpoints, network, identity, email, cloud services
- Vulnerability scanning and prioritized remediation plan
- Multi-factor authentication (MFA) rollout and enforcement
- Endpoint protection deployment and management
- Email security — SPF, DKIM, DMARC, anti-phishing, anti-spam configuration
- Patch compliance auditing and enforcement
- Password policy review and enforcement — complexity, length, expiry, breach monitoring
- Privileged access review — admin account audit, least-privilege implementation
- Security hardening — OS configuration, legacy protocol deprecation, attack surface reduction
- Firewall rule audit — removing overly permissive rules, documenting current state
- Security event log monitoring and alerting
- Incident response support — contain, investigate, remediate, document
- Security awareness guidance for staff — phishing recognition, safe practices
Common scenarios we handle
- Employee clicked a phishing link — we contain the potential compromise, assess the damage, and remediate
- Business needs cyber insurance — we help document and implement the controls insurers require
- MFA not enforced consistently — Conditional Access policies implemented across M365 and third-party apps
- Former IT vendor had admin access — full credential rotation, access review, and audit trail
- Security assessment before a compliance audit — gap analysis with prioritized remediation roadmap
Security assessments are scoped and quoted based on environment size and complexity. Ongoing security monitoring is included in managed IT plans.
Server & Infrastructure
Whether you're running a single file server or a multi-host virtualization cluster spanning multiple sites, we design, build, and maintain on-premises infrastructure that performs reliably and scales with your business. We work with VMware vSphere, Microsoft Hyper-V, and Proxmox VE — so you're not locked into a single vendor's ecosystem.
What's included
- Server hardware procurement guidance and rack/tower builds
- Windows Server deployment — AD DS, DNS, DHCP, file services, print services
- VMware vSphere / ESXi — cluster setup, vCenter, datastores, networking, templates
- Microsoft Hyper-V — standalone and clustered, virtual switch configuration, live migration
- Proxmox VE — node deployment, clustering, storage pools, LXC containers, VM management
- Storage configuration — local RAID, NAS/SAN integration, shared storage for clusters
- VM lifecycle management — provisioning, snapshots, cloning, decommissioning
- PowerCLI and PowerShell scripting for automation and reporting
- Capacity planning and performance monitoring
- VMware Tools and guest OS maintenance
- Infrastructure documentation — host inventory, VM inventory, network topology
Common scenarios we handle
- Aging physical server needs to be virtualized — P2V migration to VMware, Hyper-V, or Proxmox
- VMware licensing costs increasing post-Broadcom acquisition — migration path assessment and execution
- vCenter or Hyper-V cluster health issues — FSMO roles, replication, storage latency diagnosed
- New office needs a local file server — Windows Server or NAS deployed, shares configured, permissions set
- Snapshot sprawl causing datastore space issues — snapshot audit, cleanup, and policy implementation
Infrastructure projects are quoted fixed-price based on scope. Ongoing management is available as part of a managed IT plan.
Linux Systems Administration
Linux powers a significant portion of the world's infrastructure — from web servers and databases to network appliances and cloud workloads. We're experienced with Red Hat Enterprise Linux (RHEL) and Ubuntu Server, along with their derivatives, and can manage Linux systems whether they're running on bare metal, in a VM, or in the cloud.
What's included
- Server provisioning and initial hardening — RHEL, Ubuntu, CentOS/AlmaLinux, Debian, and derivatives
- Package management — dnf/yum (RHEL family), apt (Debian family), system updates and patching
- User and group management, sudo configuration, SSH key management
- Firewall configuration — firewalld (RHEL), ufw (Ubuntu), iptables
- Systemd service management — unit files, boot targets, service dependencies
- Storage — LVM, disk partitioning, filesystem management, NFS/Samba shares
- Cron and scheduled task management
- Postfix SMTP relay configuration — outbound mail routing for applications and devices
- Samba integration — Linux file shares in Windows environments, AD domain membership
- Bash scripting — automation, reporting, maintenance scripts
- Log management — journalctl, rsyslog, log rotation and retention
- Performance monitoring and tuning — CPU, memory, disk I/O, network
- SSL/TLS certificate management — Let's Encrypt, DigiCert, internal PKI
- Database server support — MySQL, PostgreSQL, Oracle (see database services)
Common scenarios we handle
- Printer or application needs to relay email through Exchange Online — Postfix configured with proper TLS and authentication
- RHEL server needs to authenticate users against Active Directory — SSSD and Kerberos configured for seamless domain integration
- Application server migration from aging hardware — data preserved, services validated, old server decommissioned cleanly
- SSL certificate expiring on internal server — renewed and deployed without service interruption
- Linux VM in VMware or Proxmox needs performance tuning — kernel parameters, storage I/O, and memory configuration optimized
Linux work is billed at $150/hr or included in managed IT plans for servers under management.
AWS Cloud Services
Cloud infrastructure done right reduces costs, improves reliability, and gives your business capabilities that used to require a dedicated data center. We've led full enterprise migrations from on-premises VMware to AWS, and we design and manage AWS environments for businesses that want the flexibility of cloud without the complexity of figuring it out alone.
What's included
- AWS account setup, organization structure, and IAM configuration — users, roles, policies, MFA
- EC2 — instance provisioning, AMI management, Auto Scaling, placement groups
- VPC design — subnets, routing tables, internet gateways, NAT gateways, security groups, NACLs
- S3 — bucket configuration, lifecycle policies, versioning, replication, access control
- RDS — managed database deployment, parameter groups, backups, Multi-AZ, read replicas
- Route 53 — DNS management, health checks, routing policies
- CloudWatch — monitoring, alarms, dashboards, log groups, metric filters
- AWS Backup — cross-service backup policies, retention, restore testing
- Cost optimization — right-sizing, Reserved Instances, Savings Plans, Cost Explorer analysis
- Hybrid connectivity — AWS Site-to-Site VPN, Direct Connect planning
- Security best practices — Security Hub, GuardDuty, CloudTrail, Config
- Infrastructure as Code — CloudFormation and basic Terraform for repeatable deployments
- Migration planning and execution — lift-and-shift, re-platform, and hybrid scenarios
Common scenarios we handle
- On-premises servers migrated to AWS EC2 — full lift-and-shift with minimal downtime cutover
- AWS bill has grown unexpectedly — cost audit, right-sizing recommendations, Reserved Instance planning
- Application needs high availability — Multi-AZ RDS, load balancer, and Auto Scaling group designed and deployed
- Business needs disaster recovery in the cloud — AWS Backup configured, RTO/RPO validated through testing
- Developer spun up AWS resources without governance — account structure cleaned up, IAM hardened, billing controls implemented
AWS projects are scoped and quoted based on complexity. Ongoing cloud management is available at $150/hr or as part of a managed infrastructure plan.
Backup & Disaster Recovery
Backups are only valuable if they actually work when you need them. Most businesses have some form of backup in place — but far fewer have tested whether it can actually restore their systems in a reasonable timeframe. We design backup strategies around two questions that matter: how much data can you afford to lose (RPO), and how long can you be down (RTO)?
What's included
- Backup strategy design — RPO/RTO requirements, data classification, retention policy
- Local backup — NAS, tape, or external storage for fast local restores
- Cloud backup — offsite replication to AWS S3, Azure Blob, or dedicated backup cloud
- 3-2-1 backup rule implementation — three copies, two media types, one offsite
- Image-based backup for servers and VMs — full system restores, bare-metal recovery
- Agent-based backup for workstations and laptops — file-level and image-based options
- Microsoft 365 backup — Exchange, SharePoint, OneDrive, Teams data protection
- Backup monitoring and alerting — daily job verification, failure notifications
- Restore testing — scheduled test restores to validate backup integrity
- Disaster recovery planning — documented runbook, recovery procedures, contact lists
- Ransomware-resilient backup design — immutable storage, air-gapped copies, retention locking
Common scenarios we handle
- Ransomware hit a server — clean restore from a known-good backup taken before infection, validated and back online
- "We have backups" but nobody has ever tested them — restore test performed, gaps identified and corrected
- Microsoft 365 data assumed to be backed up by Microsoft — it isn't by default; proper M365 backup implemented
- Server room flood or hardware failure — bare-metal restore to new hardware or cloud recovery executed
- Backup jobs silently failing for weeks — monitoring implemented so failures are caught immediately
Backup setup is a fixed-price project. Ongoing monitoring and management is included in managed IT plans.
Managed Data Protection Services
Beyond backup strategy and design, we offer fully managed data protection as an ongoing monthly service — we deploy it, monitor it daily, and test it regularly so you never have to wonder whether your data is actually recoverable. One flat monthly rate per device or user, everything handled.
Managed workstation & server backup
- Backup agent deployed and configured on every covered device
- Encrypted offsite cloud storage included — no egress fees when you need a restore
- Daily backup verification — every job checked, failures remediated same day
- File-level and full-image recovery options
- Quarterly test restores to validate recoverability
- Ransomware-resilient retention with immutable storage options
Managed Microsoft 365 backup
- Complete backup of Exchange mailboxes, OneDrive, SharePoint, and Teams data
- Multiple daily backup points — recover an email or file from any point in time
- Protection beyond Microsoft's default retention windows
- Fast granular restores — a single email, a folder, or an entire mailbox
- Departed employee data preserved without keeping a paid license active
How we manage it for you
- Every backup job across every client reports to our central monitoring dashboard — a failed job gets our attention the same day, not when you need a restore
- Monthly summary included in your IT health report — what's protected, storage used, any issues resolved
- Quarterly restore tests verify your data actually comes back — the step most providers skip
- When you need a recovery, you call us and we handle it — typical file restores completed within hours
Workstation backup from $12/device/mo. Server backup from $35/server/mo (includes up to 500GB; additional storage billed at cost). Microsoft 365 backup from $6/user/mo.
Web, Domain & Productivity Services
The supporting services every business needs but nobody wants to own internally — domains that never lapse, websites that stay online and updated, email that reaches the inbox, credentials managed safely, and new hardware that shows up ready to work. We handle all of it under one roof so nothing falls through the cracks.
Domain & DNS management
- Domain registration, transfers, and renewal management — never miss an expiration again
- DNS hosting and same-day record changes
- SSL certificate management — always valid, auto-renewed
- Email authentication maintained — SPF, DKIM, DMARC kept current as your services change
Website hosting & maintenance
- Fast, secure hosting on enterprise-grade global infrastructure
- SSL, uptime monitoring, and site backups included
- Small content updates handled — hours changes, staff updates, new photos
- Performance and security kept current without you thinking about it
Email security & filtering
- Advanced spam and phishing filtering layered in front of your mailboxes
- Quarantine management — we review and release false positives
- Impersonation and business email compromise protection
- Policy tuning as threats evolve
Password management for teams
- Company-wide password vault deployed and enforced
- Secure credential sharing between team members — no more passwords in spreadsheets
- Enforcement policies — master password strength, MFA required
- Quarterly access reviews and offboarding cleanup
Hardware procurement & deployment
- We spec, source, and order the right equipment for your needs and budget
- Devices arrive to your team fully configured — joined, enrolled, software installed
- Zero-touch deployment via Autopilot and Intune where applicable
- Asset documentation and warranty tracking included
How we manage it for you
- All domains, certificates, and renewals tracked centrally — you get proactive notice before anything expires, and nothing ever lapses
- Email security quarantine reviewed regularly — legitimate mail released, threat patterns tuned
- Password vault access audited quarterly and whenever someone leaves
- New hardware requests go from "we're hiring someone" to a configured laptop on their desk — typically within a week
Website hosting & maintenance from $50/mo — domain & DNS management included. Email security from $4/user/mo. Password management from $6/user/mo. Hardware deployment from $100/device. Domain management is also included free with any managed IT plan, or $15/mo standalone.
Evaluating your VMware options?
With VMware licensing costs rising significantly since the Broadcom acquisition, many businesses are actively looking at alternatives. We've executed migrations to Hyper-V, Proxmox, and AWS — and can help you assess the right path for your environment, budget, and workloads.
Migrations
Migrations are among the highest-risk IT projects a business undertakes — and the ones where experience matters most. We've led migrations across every major platform combination: virtualization platform switches, cloud migrations, email and domain transitions, and database moves. Each one gets a documented plan, a tested rollback path, and a clear cutover strategy before we touch production.
Virtualization platform migrations
- VMware vSphere → Microsoft Hyper-V
- Microsoft Hyper-V → VMware vSphere
- VMware vSphere → Proxmox VE
- Hyper-V → Proxmox VE
- Physical → Virtual (P2V) — any target platform
- Any platform → AWS (lift-and-shift or re-platform)
- Any platform → Azure IaaS
- Cross-cloud migrations (AWS ↔ Azure)
Email & identity migrations
- On-premises Exchange → Exchange Online
- Google Workspace → Microsoft 365
- Domain rebrand and migration — ProxyAddresses, X500, SMTP routing, MX cutover
- Active Directory domain consolidation or migration
- On-premises AD → Entra ID hybrid or cloud-only identity
Data & application migrations
- File server migrations — on-premises NAS/DFS to SharePoint, OneDrive, or new file server
- Database migrations — Oracle, SQL Server, MySQL (schema, data, application validation)
- Application migrations — lift-and-shift of line-of-business applications to new infrastructure
- Storage migrations — between SAN, NAS, and cloud storage platforms
How we approach every migration
- Discovery — document the current environment, dependencies, and requirements before anything moves
- Planning — migration waves, sequence, timing, and rollback procedures documented and reviewed
- Testing — test migrations in non-production first, validate before touching live workloads
- Cutover — planned maintenance window, pre/post checklists, all stakeholders notified
- Validation — post-migration testing, monitoring period, documentation updated
All migrations are scoped and quoted as fixed-price projects after a discovery conversation. No surprises mid-project.
What's included at each tier
Project work is available à la carte at $150/hr or as fixed-price engagements. Managed plans include ongoing administration for the services below.
| Service |
Essentials
$75 / user / mo
|
Managed IT
$125 / user / mo
|
Project
$150 / hr
|
|---|---|---|---|
| Managed IT Support | |||
| Helpdesk support (business hours) | 30 min/user/mo pooled | ✓ | — |
| Unlimited helpdesk support | — | ✓ | — |
| RMM monitoring & alerting | ✓ | ✓ | — |
| Patch management | ✓ | ✓ | — |
| Monthly IT health report | — | ✓ | — |
| Priority response handling | — | ✓ | — |
| Microsoft 365 & Active Directory | |||
| M365 day-to-day administration | — | ✓ | — |
| AD user management & GPO | — | ✓ | — |
| M365 migration / tenant setup | — | — | ✓ |
| Exchange Online migration | — | — | ✓ |
| Security | |||
| Security monitoring & alerting | ✓ | ✓ | — |
| MFA & Conditional Access management | — | ✓ | — |
| Security assessment | — | — | ✓ |
| Security hardening project | — | — | ✓ |
| Infrastructure | |||
| Server & VM monitoring | ✓ | ✓ | — |
| Linux server administration | — | ✓ | ✓ |
| Server / virtualization build | — | — | ✓ |
| Network setup & infrastructure build | — | — | ✓ |
| AWS engagement | — | — | ✓ |
| Backup & Recovery | |||
| Backup monitoring & alerting (of your existing backup solution) | ✓ | ✓ | — |
| Backup strategy & implementation | — | — | ✓ |
| DR planning & documentation | — | — | ✓ |
| Monthly Add-On Services (available with any plan) | |||
| Managed workstation backup — from $12/device | Add-on to any plan | ||
| Managed Microsoft 365 backup — from $6/user | Add-on to any plan | ||
| Email security & filtering — from $4/user | Add-on to any plan | ||
| Password management — from $6/user | Add-on to any plan | ||
| Domain & DNS management | Free with managed plans or hosting · $15/mo standalone | ||
| Website hosting & maintenance — from $50/mo | Add-on to any plan | ||
| Migrations | |||
| All migration types | — | — | ✓ |
Ready to talk about your IT environment?
We offer a free 30-minute IT assessment for new clients — no commitment, just an honest review of where you stand and what we'd prioritize.