Guide · 7 min · For Owners

Predictable pricing, line by line

Every charge should be on the contract. Per-user, per-device, per-site, per-mailbox — plus the rates for the work that's outside the recurring scope (project work, hardware, after-hours). If a number can change without your sign-off, that's not flat pricing. That's discretion you've handed to your provider.

Tools you can name (and check)

Ask which EDR, which backup product, which email-security platform, which RMM. Real MSPs use named, category-leading tools. "Proprietary platform" usually means a thin wrapper around the same tools — at a markup. Names you can search are names you can compare.

An offboarding clause you can read in five minutes

Read the part of the contract that explains what happens when you leave. If it's vague, the goodbye will be expensive. The right MSP commits in writing to handing back configurations, recovery keys, and documentation — at no charge — within a fixed window.

A response SLA in the contract, not the brochure

First-response time, onsite response time, after-hours coverage, and what counts as a P1 should all be in the agreement, not on the website. "Within one business hour" is meaningful; "as soon as possible" isn't a commitment.

A real conversation with the technician, not a salesperson

Before you sign, ask to talk to the engineer who'll be on your account. The salesperson's job is to close. The engineer's job is to keep your network running. The longer that conversation lasts comfortably, the better the fit.

Frequently asked questions

What should I look for in a managed IT provider?
A published per-unit pricing model, a named security stack with specific vendors per layer (EDR, SOC, MFA, DNS, backup), a written SLA with current-quarter response numbers, fixed-price project quoting, and a documented onboarding process. Vague answers on any of those are the red flags.
What are the biggest red flags in an MSP sales pitch?
"Unlimited everything" (the contract is hiding the exceptions), refusal to publish per-unit pricing, "best-in-class tools" without naming vendors, no termination notice or a punitive exit clause, and heavy emphasis on selling you cyber insurance instead of building the controls that lower your premium.
How long should evaluating an MSP take?
Two to four weeks for a small business: a 30-minute discovery call, a written proposal within a week, one reference call per finalist, and a contract review. Anything faster usually skips the discovery; anything slower is the MSP dragging the cycle on purpose.
When should I switch managed IT providers?
Common triggers: tickets routinely take more than a business day, the same problem recurs, you can't get a straight answer on cost, you've discovered a security gap they should have closed, or the QBR has become a sales meeting. None of those alone is decisive, but two or three together usually means it's time to look. How to compare managed IT providers walks through the evaluation.

Related reading