The honest starting point: not every small business needs a managed service provider yet. Below roughly ten staff, with everything in Microsoft 365 and no servers, a good hourly relationship with a competent local firm is often better value than a monthly contract. Any provider unwilling to say that is selling rather than advising.
What changes the answer is headcount, and it changes at fairly predictable points.
Under 10 staff
What you genuinely need: multi-factor authentication on everything, a backup you have tested, email security, and someone who answers the phone. That is it.
What you do not need: a security operations centre, a twenty-four seven monitoring contract, or anything with the word “enterprise” in it. Buy the four things above and revisit at fifteen people.
10 to 25 staff
This is where the maths tips. Somebody is now spending real time on IT who was not hired to do it — usually the owner, the office manager, or the one person who is good with computers. That hidden cost is generally larger than a managed contract.
At this size a monthly arrangement should include:
- A help desk your staff will actually use
- Patch management, so it stops being nobody’s job
- Endpoint protection with someone watching the alerts
- Identity security and a clean joiner-leaver process
- Tested backup, with a stated recovery time
- Someone accountable for the annual plan
25 to 50 staff and beyond
Two things appear here. First, compliance — a client, insurer or contract starts asking questions, and answering them requires documentation you do not have. Second, the internal-versus-outsourced question, because one internal IT hire becomes financially plausible.
The usual best answer at this size is not either-or. It is co-managed: one internal person who knows the business, with a provider covering after-hours, security operations, patching and projects. Our guide to in-house versus managed IT covers the comparison.
How MSP pricing actually works
Three models dominate, and the differences matter more than the headline rate.
| Model | How it works | Watch for |
|---|---|---|
| Per user | Flat fee per person, all their devices included | Whether servers and network gear are extra |
| Per device | Flat fee per endpoint | Costs rise if staff have multiple devices |
| Tiered bundles | Bronze, silver, gold packages | What the cheaper tier deliberately excludes |
Whichever model, the five lines that decide the real number are: are servers included, is security tooling included, is project work included, what is the after-hours commitment, and what happens on the contract when you grow. Normalise those across quotes before comparing prices. Most large gaps are scope.
Questions worth asking
- Do we actually need a monthly contract yet? A provider willing to say no is worth keeping.
- What is not included? More useful than asking what is.
- Who owns our credentials? Domain, DNS, tenant admin, backups. Yours, in writing.
- Have you tested a restore this year? Backups that have never been restored are a hope, not a control.
- What does leaving look like? Ask before you need it.
- Under 10 staff: MFA, tested backup, email security, someone who answers. Nothing more.
- At 10 to 25, the hidden cost of an accidental internal IT person usually exceeds a contract.
- At 25 to 50, co-managed usually beats choosing between internal and outsourced.
- Ask what is excluded. That is where the price difference lives.
Where IP Consulting fits
We run both fully managed and co-managed programmes for small and midsize organisations across Virginia and Michigan. If you are not sure which stage you are at, an IT assessment answers it, and IT budgeting and planning turns the answer into a number. See Navigate IT for the programme detail.
Frequently asked questions
Does a small business need a managed service provider?
Not always. Below roughly ten staff with everything in Microsoft 365 and no servers, a good hourly relationship with a competent local firm is often better value than a monthly contract. What you do need at any size is multi-factor authentication, a tested backup, email security, and someone who answers the phone.
At what size should a small business hire an MSP?
Usually between 10 and 25 staff. That is where somebody who was not hired to do IT starts spending real time on it, and that hidden cost typically exceeds a managed contract. At 25 to 50 staff, co-managed often becomes the better answer than choosing between internal and outsourced.
How does MSP pricing work for small business?
Most providers price per user, per device, or in tiered bundles. The model matters less than five specific lines: whether servers are included, whether security tooling is included, whether project work is included, what the after-hours commitment is, and what happens to the contract as you grow.
What should a small business ask before signing an IT contract?
Ask what is not included rather than what is. Confirm in writing that you own your domain, DNS, tenant administrator access and backups. Ask whether they have tested a restore this year. And ask what leaving looks like before you need to know.
Keep exploring
- Navigate IT managed services
- In-house IT vs managed IT
- How much do managed IT services cost?
- What is an IT assessment?
Ready for a clear path forward?
Start with a Navigate Clarity Conversation. A free 30 minute review of where you stand and what to do first.
Start with a Clarity Conversation