What should I look for in a managed IT provider?

The five most important factors are: transparent pricing with no hidden fees, responsive support with documented SLAs, proactive monitoring (not just break-fix), cybersecurity included in the base plan, and local presence for on-site support when needed. Avoid providers who require long-term contracts, won't share their tool stack, or can't provide client references in your industry.

How much should a managed IT provider cost?

In 2026, managed IT services typically cost $99-$250 per user per month depending on the service level and region. For a 20-person company, expect $2,000-$5,000/month. Be wary of prices significantly below $75/user — they usually indicate limited scope with expensive add-ons, or a provider who will underdeliver.

What questions should I ask an MSP before signing a contract?

Ask: What is your average response time? What happens if I want to cancel? What is NOT included in the monthly fee? Can I talk to 2-3 current clients? Do you provide 24/7 monitoring or business-hours only? What cybersecurity protections are included? How do you handle on-site issues? What does your onboarding process look like?

Should I choose a local or national MSP?

For small businesses, local MSPs typically provide better service. They can be on-site within hours for hardware issues, understand your local business environment, and provide more personalized service. National MSPs have scale advantages but often route you through call centers and charge premium rates for on-site visits.

How long should an MSP contract be?

Month-to-month is ideal and shows the provider is confident in their service quality. Some providers offer discounts for annual commitments (typically 10-15%), which can be reasonable. Avoid contracts longer than one year, and be wary of any provider requiring a 2-3 year commitment — they know it will be hard to leave.

How to Evaluate a Managed IT Provider: The 2026 Buyer's Checklist

Why Choosing the Wrong MSP Costs More Than No MSP at All

Hiring the wrong managed IT provider is worse than having no IT support. A bad MSP gives you a false sense of security — you think your systems are monitored, your data is backed up, and your security is handled. Then something goes wrong and you discover none of it was being done properly.

We've onboarded dozens of clients who came from other MSPs and found:

•"Managed backups" that haven't run successfully in months

•"24/7 monitoring" that was actually automated alerts nobody reviewed

•"Cybersecurity protection" that was just a basic antivirus from 2019

•"Flat-rate pricing" with $15,000+ in annual add-on charges

This guide gives you a systematic framework for evaluating MSPs so you don't end up in that situation. Whether you're hiring your first MSP or replacing an underperforming one, these are the questions and red flags that matter.

Step 1: Define What You Actually Need

Before talking to any provider, document your current IT situation:

Your IT Inventory

•**How many employees** need IT support?

•**How many locations** does your business operate from?

•**What line-of-business applications** do you run? (EMR, case management, accounting software, CAD, etc.)

•**Do you have on-premises servers**, or is everything cloud-based?

•**Do you have compliance requirements?** (HIPAA, PCI-DSS, CMMC, SOX)

•**What's your current IT budget** — and what are you willing to spend?

Your Pain Points

•What IT problems are costing you time or money right now?

•What triggered the search for an MSP? (A breach? Constant downtime? Your IT person quit?)

•What would "good IT support" look like for your business?

> **Tip:** Use our IT Cost Calculator to estimate what managed IT should cost for your business size before getting quotes. It compares managed IT, break-fix, and in-house hiring costs side by side — so you have a baseline before any sales conversations.

Step 2: The 15 Questions Every MSP Must Answer

Use these questions in your evaluation calls. The answers will separate competent providers from ones that will waste your money.

Pricing and Contracts

**1. "What is your per-user monthly cost, and what's included?"**

Good answer: A specific price range ($99–$175/user) with a detailed list of inclusions.

Red flag: "It depends" with no ballpark, or unwillingness to discuss pricing before doing a paid assessment.

**2. "What is NOT included in the monthly fee?"**

Good answer: A clear, short list (major projects, hardware purchases, after-hours on-site).

Red flag: A long list of exclusions, or "I'd have to check."

**3. "What are your contract terms? Can I cancel month-to-month?"**

Good answer: Month-to-month available, or annual with a clear exit clause (30-60 days notice).

Red flag: Multi-year contracts required, early termination penalties exceeding one month of service, or vague language about data handoff.

**4. "Is there an onboarding fee, and what does it cover?"**

Good answer: "Yes, it covers documentation, security baseline, agent deployment, and knowledge transfer — typically [specific amount or range]."

Red flag: "No onboarding fee" (they're either cutting corners or hiding the cost elsewhere).

Support Quality

**5. "What is your average response time for support tickets?"**

Good answer: Specific numbers with priority tiers: "Critical issues: 15 minutes. Standard requests: 1-2 hours. Low priority: same business day."

Red flag: "We're very responsive" with no specifics, or response times over 4 hours for standard requests.

**6. "Who answers the phone when I call? Can I talk to a technician or just a dispatcher?"**

Good answer: "Our technicians answer directly" or "A dispatcher triages and connects you with a tech within [time]."

Red flag: "You'll submit a ticket through our portal." If you can't call someone when email is down, that's a problem.

**7. "Do you provide on-site support? How quickly? What does it cost?"**

Good answer: "Yes, within [X hours/next business day]. Included in your plan for [Y visits/month] or billed at $[amount]/hour."

Red flag: "We're fully remote" (fine for some businesses, but if you have server hardware or network equipment, you need on-site capability).

**8. "Can I speak with 2-3 current clients in my industry?"**

Good answer: "Absolutely, I'll send you references this week."

Red flag: Reluctance, excuses about NDAs (references don't violate NDAs), or offering only testimonials on their website.

Technical Competence

**9. "What remote monitoring and management (RMM) tools do you use?"**

Good answer: Named tools (ConnectWise Automate, Datto RMM, NinjaOne, etc.) with an explanation of what they monitor.

Red flag: Can't name their tools, uses free/consumer-grade software, or doesn't understand the question.

**10. "What cybersecurity protections are included?"**

Good answer: A specific stack: "EDR (SentinelOne/CrowdStrike), email security (Proofpoint/Barracuda), MFA enforcement, security awareness training (KnowBe4), and dark web monitoring."

Red flag: "We install antivirus." If that's their entire security answer, they're a decade behind.

**11. "How do you handle backups? Have you tested a restore recently?"**

Good answer: "We use [backup product], back up [frequency], to [location]. We test restores [monthly/quarterly]. Here's our last test report."

Red flag: "We set up backups during onboarding." If they can't show you a recent test restore, their backups may not work when you need them.

**12. "What does your onboarding process look like? How long does it take?"**

Good answer: A documented process — typically 2-4 weeks — including network documentation, security assessment, agent deployment, and staff introductions.

Red flag: "We can have you up and running by Friday" (rushing onboarding means skipping critical steps like documentation and security baseline).

Strategic Value

**13. "Do you provide a technology roadmap or strategic IT planning?"**

Good answer: "Yes, we do quarterly business reviews with a technology roadmap, budget projections, and recommendations. It's included in our plan."

Red flag: "We focus on keeping things running." An MSP that doesn't plan for the future is just a more expensive break-fix provider.

**14. "What happens to my data if we part ways?"**

Good answer: "All your data is yours. We provide a full documentation package, remove our agents, and assist with transition to your next provider — typically over 2-4 weeks."

Red flag: Vague answers, "proprietary systems" that make migration difficult, or no documented offboarding process.

**15. "What's your client-to-technician ratio?"**

Good answer: 100-200 users per technician (varies by automation level).

Red flag: Over 300 users per tech (they're stretched too thin — your tickets will take days, not hours).

Need help with your IT?

Get a free consultation — no obligation, just honest advice for your business.

Get Free Assessment

Step 3: Red Flags That Should Disqualify an MSP

Beyond the individual question red flags above, watch for these dealbreakers:

Pricing Red Flags

•**No written proposal** — everything discussed verbally with "we'll figure out the details later"

•**Per-device pricing with no cap** — you'll get surprise charges every time someone adds a phone or tablet

•**"Loss leader" entry pricing** — $49/user/month with critical services (security, backup, on-site) as expensive add-ons

•**Long-term contract pressure** — "We're offering 20% off but only if you sign for 3 years today"

Technical Red Flags

•**They don't mention cybersecurity** until you ask. Security should be the foundation, not an afterthought.

•**They can't explain their backup strategy** in plain English

•**They don't use MFA themselves** — check their own login practices. If they don't enforce MFA on their admin tools, they won't enforce it on yours.

•**They have no documentation standards** — if they don't document your environment, you're locked into them by tribal knowledge

Cultural Red Flags

•**They talk about their technology more than your business needs.** Good MSPs ask about your business goals before talking about their tool stack.

•**They can't explain what they do in non-technical terms.** If an MSP can't communicate clearly before you're a client, they'll be worse after.

•**High staff turnover.** Ask how long their team members have been with the company. Constant churn means constant relearning of your environment.

Step 4: How to Compare MSPs Apples-to-Apples

Once you have proposals from 2-3 MSPs, use this framework to compare:

Create a Comparison Spreadsheet

|----------|-------|-------|-------|

Calculate Total Cost of Ownership

Don't compare monthly per-user rates alone. Calculate the full annual cost:

**Annual cost = (per-user rate × users × 12) + onboarding fee + estimated add-on costs + estimated project costs**

A provider charging $149/user with everything included may be cheaper than one charging $99/user with $500/month in security add-ons and $200/hour project rates.

> **Run your own numbers:** Our IT Cost Calculator helps you estimate costs across different IT support models — managed, break-fix, and in-house — so you can benchmark the proposals you're receiving.

Step 5: The Trial Period

Before committing long-term:

1. **Start month-to-month** if the provider allows it (they should)

2. **Set specific expectations** for the first 90 days: response times, onboarding milestones, documentation completion

3. **Evaluate at 90 days** against those expectations before discussing any longer commitment

4. **Talk to your team** — the people who actually interact with IT support daily. Are they happy with the responsiveness and quality?

The MSP Evaluation Checklist (Summary)

Print this and bring it to your evaluation calls:

•[ ] Clear per-user pricing with no hidden fees

•[ ] Month-to-month or reasonable contract terms

•[ ] Documented onboarding process (2-4 weeks)

•[ ] Named RMM and security tools

•[ ] Cybersecurity included, not add-on (EDR, email security, MFA, training)

•[ ] Backup solution with tested restores

•[ ] On-site support capability

•[ ] Specific response time SLAs

•[ ] Client references in your industry

•[ ] Quarterly business reviews / technology roadmap

•[ ] Clean data handoff / offboarding process

•[ ] 100-200 users per technician ratio

•[ ] Transparent about what's NOT included

•[ ] Willing to start month-to-month

**If a provider checks 12+ of these 14 boxes, they're worth serious consideration.**

**If they check fewer than 8, keep looking.**

One More Thing: Trust Your Gut

After all the spreadsheets and checklists, there's a simple test: **Do you trust this person to have admin access to your entire business?**

Your MSP will have the keys to everything: your email, your files, your financial systems, your customer data. If something about the relationship feels off during the sales process — if they're evasive, pushy, or can't communicate clearly — it won't improve after they have your money.

The best MSP relationships are built on transparency and direct communication. Find a provider who talks to you like a partner, not a prospect.

---

*Marshall Durden is the founder of Triangle Tech LLC, a managed IT and cybersecurity company serving small businesses in Raleigh-Durham, NC. We offer month-to-month managed IT starting at $99/user and answer every question on this checklist — ask us or call (919