MSP pricing is deliberately hard to compare — per-user vs per-device, tiers, flat fees, and a long tail of out-of-scope charges. Here are the market ranges for managed IT, managed security, and managed cloud, plus the contract traps and the levers to right-size and cap them.
What you should really pay — managed IT
| Model | Typical 2026 range |
|---|---|
| Per-user / month (all-in managed IT) | $100–400/user/mo |
| Per-device / month (workstation) | $50–100/device/mo |
| Per-server / month | $100–400/server/mo |
| A la carte / out-of-scope hourly | $150–350/hr |
| Onboarding / transition (one-time) | $3,500–5,500 |
The strongest cross-source agreement is the $100–400/user/mo managed-IT range, with an SMB sweet spot around $150–175/user/mo. Basic managed (helpdesk, patch, AV, M365) runs $100–200; fully managed (24/7, EDR/MDR, backup/DR, vCIO) $200–400; compliance (HIPAA/PCI/CMMC) adds +20–40%.
Managed security and cloud
MDR/managed EDR runs $3–50 per endpoint/mo (most mid-market $7–25); SOC-as-a-Service $5,000–25,000/mo; and a vCISO/fractional CISO retainer $3,000–20,000/mo. Managed cloud is typically 10–25% of monthly cloud spend (labor only) or a flat retainer — ~$3,000–8,000/mo (SMB) up to $25,000–100,000+/mo (enterprise), with FinOps as a standalone service $2,000–10,000/mo.
The cost traps
- Out-of-scope re-bills. The #1 trap — vague "managed IT support" language lets routine tasks be re-billed as projects, inflating the headline quote 30–70%.
- Per-user vs per-device gaming — MSPs pick the model that maximizes their count against your device:user ratio.
- Onboarding fees ($3.5K–5.5K) presented as non-negotiable when they usually aren't.
- Annual increases — 2025 averaged ~8.3%/user; templates allow up to 10% or CPI+5%, compounding 20–30% over the term.
- Auto-renewal for a full term with a 30-day opt-out, early-termination penalties ~50% of remaining value, and offboarding/data-egress used as exit leverage.
The levers that work
- Right-size counts first — audit active users/devices, strip stale accounts, and pick the model matching your real ratio.
- Cap annual increases at 5% or CPI, whichever is lower (vs the 8–10%/CPI+5% default).
- Shorten the term and fix renewal — 12-month max or month-to-month after the initial term, with a wider opt-out window.
- Require SLA response tiers with service credits, not "best effort."
- Demand explicit scope lists with pre-approval and a blended out-of-scope rate; waive onboarding with a competing bid; and lock exit terms (data return in 5 days, deletion certified in 30, liability caps raised to 3–6 months' fees).
Bottom line
Right-size your counts, cap increases and out-of-scope re-bills, shorten the term, and lock exit terms up front — with a competing MSP bid in hand to move all of it.
Get the full MSP / managed services rate benchmark
Real pricing benchmarks, every cost trap with dollar examples, the discount levers and the ranges buyers actually hit, fiscal-year timing, and copy-paste negotiation emails.
Browse the benchmarksGet the free checklist