Managed IT, Security & Compliance

Full-lifecycle IT services built for professional services firms — from day-to-day helpdesk to enterprise-grade cybersecurity and compliance documentation.

Managed IT & Helpdesk

Proactive monitoring, automated maintenance, and fast support so your staff stays productive and your systems stay stable.

  • Remote helpdesk — unlimited at Standard and above, priority at Premium
  • 24/7 device health monitoring via enterprise RMM
  • Automated patching — OS, third-party apps, drivers
  • Scheduled maintenance and optimization
  • Asset inventory and lifecycle tracking
  • Baseline configuration and endpoint hardening
  • Software deployment and bloatware removal
  • BitLocker encryption guidance; enforced via Intune at Premium+
  • Onboarding and offboarding procedures
  • Escalation to onsite support when needed

Cybersecurity & EDR

Managed endpoint and identity protection with 24/7 SOC-backed threat detection, investigation, and response — not just alerts.

  • Managed EDR — threat monitoring, investigation, response
  • Identity threat detection (ITDR) for Microsoft 365
  • Admin account protections and role-based access
  • MFA strategy and conditional access guidance
  • Secure onboarding/offboarding and account hygiene
  • Security baseline and hardening — workstations and M365
  • Local admin reduction strategy
  • Browser and email hardening recommendations
  • Password policy, SSO, and MFA best practices
  • Managed Security Awareness Training

Microsoft 365 Management

Licensing, administration, and security hardening for Microsoft 365 — deployed correctly from day one and kept that way.

  • Tenant setup and licensing guidance
  • Security defaults, baselines, and MFA deployment
  • User provisioning, groups, shared mailboxes
  • Mail routing, SPF/DKIM/DMARC configuration
  • Device and identity alignment for secure access
  • Email migration planning and cutover support
  • Domain, DNS, and mail flow configuration
  • Teams, SharePoint, and OneDrive standardization
  • M365 backup for mail, Teams, SharePoint, and OneDrive
  • Post-migration cleanup and documentation

Backup & Disaster Recovery

Managed backup for workstations and servers, M365 backup, and tested recovery procedures — not just a backup that sits there.

  • Managed backup — workstation and server
  • Microsoft 365 backup (mail, Teams, SharePoint, OneDrive)
  • Ransomware-aware recovery planning
  • Documented restore procedures with tested RTOs
  • Rapid restore execution when incidents occur
  • Bare-metal recovery options where applicable
  • File, mailbox, and item-level recovery support
  • Business continuity planning for regulated environments

Network & Infrastructure

Reliable, secure networking with proper segmentation and monitoring — enterprise-grade platforms and beyond.

  • Firewall configuration and rules review
  • Managed switch, Wi-Fi, and gateway deployment
  • VLAN segmentation and guest network design
  • Dual-WAN failover configuration
  • IDS/IPS and network-level threat monitoring
  • New office deployments and structured cabling coordination
  • Rack/closet cleanup and documentation
  • Printer and line-of-business app setup
  • Vendor coordination for ISP and phone systems
  • Ongoing network monitoring and config backups

Compliance Consulting

Practical compliance program management for regulated verticals — not policy templates collecting dust. Available as the Compliance tier of our managed plans or as standalone engagements for existing clients.

  • IRS Publication 4557 WISP drafting & annual review
  • Attorney data security & state bar ethics alignment
  • HIPAA-aligned IT practices for medical and dental
  • NYDFS 23 NYCRR Part 500 readiness for NY firms — see dedicated page →
  • Documented incident response plan + annual tabletop exercise
  • Annual third-party vendor security review
  • Security awareness training with phishing simulation
  • Dark web credential monitoring
  • Secure password vault deployment & management
  • Quarterly admin access review & attestation
  • Monthly patching & vulnerability status reports
  • Annual compliance attestation letter for auditors & insurers

Workstation packages. Per user, per month.

Most clients choose a flat monthly managed plan. Pricing is per user and includes everything listed — no surprise add-ons. We'll recommend the right tier after a discovery call.

Standard
Sentinel Workstation Package — Standard
Established firms that need reliable IT.
$109
per user / month
  • Microsoft 365 Business Standard (full productivity suite)
  • Centralized RMM & patching
  • Automated OS, third-party app & driver patching
  • Endpoint + identity protection (EDR + ITDR)
  • Email backup & archiving
  • Documented environment & asset inventory
  • Onboarding & offboarding workflows
  • Unlimited business-hours support
Get Started
Compliance
Sentinel Workstation Package — Compliance
Regulated verticals — law, accounting, medical.
$229
per user / month
  • Everything in Premium, plus:
  • Security awareness training + phishing sim
  • Dark web credential monitoring
  • Secure password vault
  • WISP drafting & annual review
  • Incident response plan + annual tabletop
  • Quarterly admin access review
  • Monthly patching & vulnerability report
  • Annual compliance attestation letter
  • Quarterly business review
Get Started
Starter Plan · Lite
Sentinel Workstation Package — Lite
For solo practitioners and very small teams. M365 Business Basic, centralized RMM & patching, endpoint + identity protection, and 30 min/user/month remote support.
$ 69 /user / month
Get Started

Available à la carte or with any plan.

Security & Backup
Managed EDR — Standard
24/7 SOC-backed endpoint detection & response
$15/device
Endpoint + Identity Protection
Managed EDR + M365 identity threat detection
$25/user
Workstation BCDR
Image-based backup with bare-metal recovery
$20/device
Secure Password Vault
Enterprise password manager with SSO & shared vaults
$10/user
Security Awareness Training + Phishing Sim
Monthly training modules, simulated phishing campaigns, and per-user completion reporting
$10/user
Dark Web Credential Monitoring
Continuous 24/7 monitoring of your domains across breach databases, dark web forums, and paste sites — instant alerts when employee credentials appear
$120/mo/firm
Infrastructure & Services
Network Monitoring — Standard
Managed gateway/switch/Wi-Fi, dual-WAN, IDS/IPS
$149/site
M365 Backup + Email Archiving
Daily backup of mail, Teams, SharePoint, OneDrive
$10/user
Domain Package — Standard
Registration, managed DNS, SPF/DKIM/DMARC
$149/yr
Security Onboarding
One-time: RMM deploy, EDR/ITDR activation, MFA, baseline
$995 once
Data Recovery Coordination
Third-party data recovery coordination — we manage the vendor relationship, chain of custody, and communication from drive failure through recovery completion. Per incident.
$999/incident
Fractional vCISO
Quarterly security reviews, board reporting, IR plan ownership, insurance liaison — your named security officer without the full-time cost
From $1,500/mo
Hardware Procurement & Lifecycle
Workstations, servers, networking gear — we source, deploy, warrant-track, and schedule refresh cycles so you have one point of contact
Contact us
Data classification, permissions audit, sensitivity label deployment, shadow AI blocking, and governance policy — before AI tools access your firm's data
Looking for business voice?
Enterprise-grade cloud PBX with 4 tiers starting at $25/user/month — full feature comparison, add-ons, and onboarding details on our dedicated Voice Services page.
View Voice Services →
Multi-location & volume pricing available. Organizations with 50+ users or multiple offices receive custom per-user pricing. Multi-site network monitoring, enterprise onboarding, and dedicated account management are available for larger engagements. Contact us for a custom quote →
Service Response Commitments
Priority (P1 — System Down): 1-hour response during business hours
High (P2 — Major Impact): 4-hour response during business hours
Standard (P3 — Non-critical): Next business day
After-Hours Urgent: Available at premium rate — discuss at onboarding
What "Unlimited Support" Means

Unlimited business-hours support covers reactive helpdesk and standard administration for the managed environment. Project work, after-hours coverage, and certain specialized engagements are scoped and billed separately at our published rates. We're transparent about the line — you should never get a surprise invoice.

Included in the monthly plan
  • · Reactive helpdesk for managed users and devices
  • · M365 user, mailbox, and group administration
  • · Endpoint and identity issue resolution
  • · Software install and configuration on managed devices
  • · Printer and peripheral troubleshooting
  • · Password resets, MFA enrollment, account recovery
  • · Standard onboarding and offboarding workflows
  • · Routine network and security monitoring response
Scoped & billed separately
  • · Projects, migrations, and new-office buildouts
  • · After-hours and weekend work
  • · Onsite dispatch (covered by dispatch fee + onsite rate)
  • · Hardware procurement and lifecycle replacement
  • · Structured cabling and physical install work
  • · Practice-management software consulting and training beyond first-touch
  • · Litigation hold, eDiscovery, and forensic engagements
  • · Home network and personal-device support
  • · Vendor-caused outages requiring extended coordination
Final scope is documented in the Master Services Agreement and Statement of Work. When something falls in a gray area, we tell you up front whether it's in-scope, with a quoted estimate when applicable.

Project & break-fix rates.

Remote Support — Business Hours
15-min minimum
$185/hr
Remote Support — After Hours
1-hr minimum
$275/hr
Bench Labor — Standard
1-hr min, 15-min increments
$185/hr
Engineering — Projects & Migrations
1-hr min, 15-min increments
$200/hr
Onsite Support — Business Hours
2-hr min + $95 dispatch fee
$235/hr
Onsite Support — After Hours
2-hr min + $95 dispatch fee
$350/hr
Dispatch Fee — Local
Flat fee per onsite visit
$95 flat

Not sure which plan fits? Let's figure it out together.

We'll do a free 15-minute discovery call, review your current environment, and recommend the right tier — no pressure, no upsell.