Co-managed & fully managed · 24/7/365 · US-based

IT services that keep your business running, not just your tickets closed

Managed IT, infrastructure, backup, and consulting for businesses 25 to 500 seats. One contract, one invoice, one account team. 15-minute P1 SLA, US-based engineers, and SOC 2 evidence built into every plan. Since 1986.

15 min P1 response SLA 96% gross client retention 42,000+ managed seats SOC 2 evidence included

No credit card. No-pressure scoping call. Same-day response from a senior engineer, not a sales rep.

0
Managed seats
across 1,400+ businesses
0
Average uptime
across managed environments
0
Years operating
since 1986 — same family ownership
24/7
US-based NOC & helpdesk
Orlando · Tampa · Chicago
IT services portfolio

Five IT lanes. One account team. Pick what you need today, expand when you're ready.

Most clients start with co-managed or fully managed IT and add infrastructure, backup, or consulting as they grow. Every service runs on the same RMM, the same NOC, and the same ticket queue — so you never have to explain your environment twice.

Strategy
IT Strategy & vCIO

A written 12-36 month IT roadmap mapped to your business objectives. Quarterly reviews with the CEO and CFO, budget forecasts, vendor consolidation plays, and the business case for every major investment.

Explore IT strategy →
Infrastructure
Managed IT Infrastructure

Servers, networks, M365, identity, and cloud ops — monitored, patched, and supported 24/7. Engineers who know the difference between a Cisco and a Meraki at 2am, and who carry the pager when something breaks.

Explore infrastructure →
Resilience
Backup & Disaster Recovery

Veeam, Datto, and immutable cloud backup with 15-minute RPO and tested restores every quarter. Built so your Friday-night ransomware event ends Saturday morning, not next month.

Explore BDR →
Consulting
IT Consulting

Discovery sprints, M&A IT diligence, cloud migration roadmaps, security reviews, and vendor selection by people who built the systems they're advising you on. Fixed-fee, time-boxed, deliverable-based.

Explore consulting →
Helpdesk
Managed IT Support

Unlimited helpdesk for businesses of every size: tickets, password resets, M365 questions, onboarding, off-boarding, hardware procurement, and proactive monitoring. The day-to-day work that keeps people productive.

Explore IT support →
Security
Cybersecurity

M-XDR, SIEM, SOAR, EDR, email security, and cloud posture management run from our 24/7 SOC. Bundled with managed IT so detection, response, and remediation all happen on one ticket queue.

Explore cybersecurity →
Service tiers

Three engagement models. Per-seat pricing. The CFO can model it before the next board meeting.

Every tier runs on the same NOC, the same engineers, and the same SLA. The difference is how much of the IT department lives with you and how much lives with us. Most clients with one internal IT person pick Co-Managed. Most clients with no internal IT pick Fully Managed.

Co-Managed IT
Augment your internal IT team. We bring the night shift, the bench, and the hard escalations.
$89/seat/mo
Annual agreement · 25-seat minimum
  • 24/7 NOC monitoring & after-hours helpdesk overflow
  • Tier-3 escalation engineers on-call for your internal team
  • RMM, patch management, EDR licensing & SOC monitoring
  • M365 / Entra admin co-management with your team
  • Quarterly vCIO touchpoint + roadmap update
  • Vendor management for ISP, hardware, SaaS contracts
Start Co-Managed →
Strategic Partner
For multi-site, multi-entity, M&A-active organizations that need an extension of the leadership team.
Custom
Scoped by entity count & project pipeline
  • Everything in Fully Managed across multiple entities
  • Dedicated vCIO embedded with your executive team
  • M&A IT diligence & integration playbooks
  • Multi-site network architecture (SD-WAN, ZTNA)
  • Annual board-level technology review
  • Project bench with reserved engineering hours each quarter
Scope partnership →
The stack we actually run · no white-label mystery boxes
NinjaOne RMM ConnectWise PSA & ticketing SentinelOne EDR Microsoft 365 Productivity Azure / Entra Identity Cisco Meraki SD-WAN & Wi-Fi Fortinet Firewall Veeam & Datto Backup & BCDR Auvik Network mapping Cisco Duo MFA
SLA · what "managed" actually means

Severity levels, response times, and the actual people who pick up the phone.

Every managed contract publishes the same severity model and the same SLA. We track hit-rate monthly and post it in your client portal. Miss a P1 SLA and the credit posts to your next invoice automatically — no claim form, no haggling.

Severity Examples Response (24/7) Resolution target
P1 — critical Server down, ransomware in progress, M365 tenant outage, internet down at HQ 15 minutes ack · engineer working continuously 4 hours mean time to recovery
P2 — high Single user can't work, departmental app down, partial network outage, email delivery issue 1 hour ack · business hours Same business day
P3 — standard Password reset, software install, new user request, how-to question 4 business hours ack 2 business days
P4 — scheduled New hire setup, equipment refresh, M365 license rightsize, planned maintenance Next business day · scheduled Per project plan

Full SLA matrix (escalation tree, named engineers, after-hours dispatch coverage map) is in every Statement of Work. Ask for a sample SOW.

Case file · anonymized

140-person engineering firm. Outgoing IT manager. 30-day cutover with zero tickets dropped.

A mid-Atlantic engineering firm lost their sole internal IT manager to a competitor with two weeks' notice. They had no documentation, two unpatched domain controllers, and a SOC 2 audit in 90 days. This is what the cutover looked like. Names changed, timing real.

Cutover · Fully Managed onboarding · Completed

"Pinemont Engineering" · 140 seats · 4 offices · Mid-Atlantic

Day 0: signed agreement · Day 14: helpdesk live · Day 30: outgoing IT manager off-boarded · Day 90: SOC 2 Type II report delivered, zero managed-control findings
  1. Day 1 Discovery sprint kicks off. Maya Okafor (vCIO, Orlando) runs a 4-day onsite: asset inventory, network diagram, M365 audit, identity audit, backup state, vendor & license inventory. Findings: 2 unpatched DCs, 18 critical CVEs, MFA at 41% of users, no off-site backup.
  2. Day 5 RMM, EDR, and patch management agents deployed across 147 endpoints + 9 servers over a long weekend. Zero downtime. SentinelOne quarantined two existing dormant infections in the first 6 hours.
  3. Day 9 M365 hardening pass. Conditional Access policies deployed, MFA enrolled to 100% of users, anti-phishing tightened, Defender baseline applied, legacy auth disabled. Zero login failures because we ran a 72-hour pilot ring first.
  4. Day 14 Helpdesk number cuts over. First ticket: a printer config request from accounting at 9:17am. Resolved in 11 minutes by Marcus Whittaker (tier-2 helpdesk, Tampa). Outgoing IT manager runs in parallel for 2 weeks.
  5. Day 21 Datto BCDR appliance racked at HQ & secondary site. First successful failover test on Day 24. RPO: 15 minutes · RTO: 47 minutes for a full domain controller restore.
  6. Day 30 Outgoing IT manager's last day. Account disabled at 5:00pm sharp. Documentation handover complete. Zero open tickets transferred. Zero work-stoppage tickets reported the next morning.
  7. Day 90 SOC 2 Type II report delivered. Zero findings on managed controls (RMM, EDR, backup, identity, change management). Auditor described the evidence packet as "the cleanest MSP-supported audit I've done this year." Insurance premium quote came back 18% lower.
Outcome: Zero work-stoppage incidents during the transition. SOC 2 audit cleared on schedule. Cyber insurance premium reduced 18%. Pinemont's CFO says it cost them less than the salary of the IT manager they lost — and their engineering team finally stopped complaining about VPN dropping.
Compliance evidence, done for you

Every managed plan ships an evidence packet. Your auditor finishes in days, not weeks.

We map our managed controls to your primary framework on day one and deliver a quarterly evidence packet to your portal: control mappings, log samples, policy attestations, tested backups, and user-access reviews. Your team stops fighting spreadsheets. Your assessor finishes the engagement faster than they planned.

SOC 2 Type II
Security, availability, and confidentiality trust criteria. Most-requested by your B2B customers during procurement.
HIPAA
Healthcare PHI safeguards, BAA-ready stack, annual risk analysis and workforce training records.
PCI-DSS v4.0
Cardholder data environment scoping, quarterly ASV scans, segmentation validation.
CMMC Level 2
110 NIST 800-171 controls for DoD subcontractors. We're a registered RPO.
CJIS
Criminal Justice Information Services for agencies handling FBI-sourced data.
NIST CSF 2.0
The framework your cyber-insurance carrier is actually scoring you against.
ISO 27001
ISMS controls for clients doing business in the EU or with multinationals.
GLBA / FTC Safeguards
For financial services, including the 2023 FTC Safeguards Rule for tax preparers and auto dealers.
The humans on call

When a server reboots itself at 3am, these are the people who notice before you do.

Our NOC and helpdesk are staffed in-house from Orlando, Tampa, and Chicago. No overseas tier-1 wall. Every engineer holds at least one current certification and has worked production environments before they take a shift on your account.

MO
Maya Okafor
vCIO · Orlando
CISSP PMP Azure Solutions Architect
MW
Marcus Whittaker
Tier-3 Lead · Tampa
MCSE CCNP VCP-DCV
RH
Rebecca Holloway
NOC Manager · Chicago
ITIL Expert CompTIA Sec+ M365 Enterprise Admin
FAQ · the ones that actually block the sale

Nine questions. Honest answers.

What is the difference between co-managed IT and fully managed IT?

Co-managed means you keep your internal IT person or team and we plug in the gaps: 24/7 NOC, after-hours helpdesk, tier-3 escalation, vendor management, and project bench. Fully managed means we are your IT department — helpdesk, infrastructure, M365, security baseline, vCIO, and a single SLA. Most clients with 1-2 internal IT staff pick co-managed. Clients with no internal IT or with an outgoing IT manager pick fully managed.

How fast do you respond to a ticket?

P1 (production down, security incident) is acknowledged within 15 minutes 24/7/365 and worked continuously until resolved. P2 (single user blocked, partial outage) is acknowledged within 1 hour business hours. P3 (request, how-to, non-blocking) is worked within 4 business hours. SLA credits apply if we miss. We publish our actual monthly performance in your client portal — not just our promises.

Are your engineers based in the US?

Yes. Helpdesk, NOC, and tier-3 are all staffed in-house from Orlando, Tampa, and Chicago. Field engineers are deployed in 100+ metros via our W-2 partner network. We do not offshore tier-1, and we do not outsource your account to a VAR. The engineer who picks up your call has access to your stack, your runbook, and your account history.

How long does onboarding take?

From signed agreement to first ticket worked: 14 business days for fully managed engagements under 100 seats. We document your environment in week 1 (asset inventory, network diagram, M365 tenant audit, backup state, identity audit). Week 2 we deploy our RMM, EDR, and patch management agents. Week 3 we cut over the helpdesk number and run a parallel run with your incumbent if one exists. No surprise gaps.

Will you work with our existing software stack or do you force a rip-and-replace?

We work with what you have wherever possible. We support Microsoft 365, Google Workspace, Azure, AWS, GCP, on-prem Active Directory, Entra, Okta, Duo, Cisco, Meraki, Fortinet, SonicWall, VMware, Hyper-V, and 200+ line-of-business apps from our run book. If something in your stack is end-of-life or unsupported by the vendor, we'll flag it in the assessment and propose a migration path with a budget — but we won't force it.

What does pricing actually include?

Per-seat pricing covers unlimited helpdesk tickets (remote and on-site for covered metros), RMM and patch management, EDR licensing and SOC monitoring, M365 admin, backup of endpoints and M365 mailboxes, and quarterly vCIO review. It does not include net-new project work, hardware, third-party software licenses, or after-hours physical dispatch. Those are quoted separately at agreed hourly rates with no markup on hardware over 8%.

Do you handle compliance — HIPAA, SOC 2, CMMC?

Yes. Our managed stack maps to HIPAA, SOC 2 Type II, PCI-DSS, CMMC Level 2, NIST CSF 2.0, and ISO 27001. Quarterly we deliver an evidence packet pre-mapped to your primary framework. We've carried 180+ clients through SOC 2 audits with zero findings tied to managed controls. We are a CMMC RPO and have the cleared engineers to handle CUI environments.

What happens if we want to leave?

60-day written notice, no early-termination fee after the initial 12 months, full documentation handed over (asset inventory, network diagram, license inventory, runbook, M365 admin transition, backup chain handoff). We will also do a 30-day parallel run with your next provider at no charge. We have a 96% gross retention rate because we earn the renewal — not because the contract handcuffs you.

Can you help with a Microsoft 365 migration or cleanup?

Yes. We do M365 tenant migrations (Google Workspace to M365, on-prem Exchange to M365, tenant-to-tenant for M&A), license rightsizing audits (most clients reclaim 12-22% of license spend), security baseline hardening (Entra Conditional Access, MFA, anti-phishing, Defender), and Intune device management rollouts. Pricing is per-mailbox or per-device, fixed-fee.

Do you support remote and hybrid workforces?

Most of our managed seats are remote or hybrid. We deploy device management via Intune or Jamf, identity via Entra or Okta, ZTNA via Cloudflare or Cisco Duo, and endpoint security via SentinelOne or CrowdStrike. New hires get devices shipped pre-imaged with autopilot enrollment. Off-boarding is one ticket: account disabled, device wiped, license recovered, mailbox archived per your retention policy.

Find out what your IT is actually costing you.

Our free IT assessment looks at your current spend, your security posture, your backup readiness, and your M365 license fit. 30-minute scoping call, written assessment back in 5 business days, and a transparent quote if (and only if) it makes sense to engage.

Get my IT assessment Or call (888) 574-5120