5.0 on Google & Clutch 96%LIVE of calls answered in under 60 seconds by our local Huntington Beach team

Fully managed IT · all-inclusive

$179 per user. The computer and mailbox are in it.

Managed Care is $179 per user, per month for your first 100 users, then $149 for each additional user beyond 100 — and that includes the user’s workstation, their mailbox, the full security stack, help desk and on-site support. No per-computer or per-mailbox fees stacked on top.

Every email or portal ticket gets a real engineer within 20 minutes during service desk hours — a promise on every ticket, not an average, so you’re never left wondering whether your request was seen. Our written promises →

This pricing is for fully managed IT. Have an IT department? We also offer co-managed IT, scoped to what you need →

See your price →

Fully managed IT calculator

Estimate your monthly cost — Full Security Stack Included

This pricing is for fully managed IT. Have an IT department? We also offer co-managed IT, scoped to what you need →

All 38 services included in every user’s price — no add-on fees

Managed IT 24 services

  • Unlimited Help Desk & Desktop Management
  • 24×7 Network Operations Center (NOC)
  • Network Equipment Management
  • Additional Sites
  • Microsoft 365 & Google Workspace Administration
  • Mac & Windows Support
  • New Workstation Setups
  • Employee Onboarding & Offboarding
  • On-site Incident Remediation
  • Vendor Management
  • Managed Backup & Disaster Recovery
  • Business Continuity (Azure Site Recovery)
  • Microsoft 365 & Google Workspace Backup
  • VoIP Administration
  • Secure Remote Access
  • Conferencing A/V Support
  • vCIO Services
  • IT Policies & Procedures
  • IT Runbook & Technology Roadmap
  • Workstation Lifecycle Planning
  • Workstation Deployment
  • Patch Management (OS)
  • Third-Party Patch Management
  • Client access to NinjaOne & SentinelOne

Managed Cybersecurity 14 services

  • Managed Extended Detection & Response (MxDR)
  • Endpoint Detection & Response (EDR)
  • Managed SIEM
  • 24×7 Security Operations Center (SOC) with NOC
  • Continuous Vulnerability Management
  • Email Security
  • DNS Content Filtering
  • Security Awareness Training
  • Identity & Device Security Configuration
  • Multi-Factor Authentication (MFA)
  • Mobile Device Management (MDM)
  • Attack Surface Management
  • Browser Security (DefensX)
  • vCISO Services
Full descriptions of all 38 services →

This is an estimate for standard business operations, not a formal quote. Some environments — for example specialized systems, compliance requirements or unusual infrastructure — may need to be scoped differently, and your final price is confirmed after a free on-site IT review. Managed Care is subject to a $4,000/month minimum; Microsoft licensing is additional; every project is quoted as a fixed fee before work starts.

Have an IT department?

We also do co-managed IT — working alongside your IT team.

The calculator above is for fully managed IT. If you already have IT staff, we work side by side with them, and we’re flexible: we scope our services to exactly what you need and nothing you don’t.

  • Help desk overflow and after-hours coverage for your team
  • Our full cybersecurity stack, 24×7 NOC & SOC monitoring
  • Patching, monitoring and backup management
  • vCIO / vCISO guidance, compliance and projects
  • Your team keeps the work it wants to own

Scope it on a call

Tell us what your team handles today and where you want help. We’ll scope and price a co-managed plan on a short call.

Call 866.24.CALIT Book a scoping call → How co-managed IT works →

Read the fine print

Some MSPs advertise one per-user price — then bill extra for every computer and mailbox.

A low headline number can hide separate monthly charges for each workstation, each mailbox and a required security package. Our per-user price already covers what a user actually needs, so the number you see is the number you pay.

“Per-user” pricing elsewhere

  • Per-user fee — the advertised number
  • + a fee per computer, on top of the user
  • + a fee per mailbox, on top of the user
  • + a security package, often required
  • + fees per site and for each firewall, switch or access point

The real monthly cost only shows up on the invoice.

CAL IT Group Managed Care

  • $179 per user — that’s the number (for your first 100 users; each additional user is $149)
  • Their workstation is included
  • Their mailbox is included
  • Full cybersecurity included — SentinelOne MxDR, 24×7 NOC & SOC, SIEM and more
  • Phones & tablets included
  • Additional sites & all network equipment included — firewalls, switches, access points

Extra workstations, servers and additional user mailboxes are listed below at a flat rate. Shared mailboxes are not charged.

Why clients switch to us

More hours of support. No surprises on the invoice.

Service desk staffed 5 AM–6 PM, not 8 to 5

Most IT providers staff their help desk from 8 AM to 5 PM. Ours is staffed Monday–Friday, 5 AM–6 PM Pacific — 13 hours a day instead of 9 — and the same local team is on call for emergencies 24×7.

Why it matters:

  • Problems get fixed before the workday starts. Early arrivals, opening crews and shift workers get a live engineer, not a voicemail.
  • You’re covered when the East Coast is open. 5 AM Pacific is 8 AM Eastern, so you can serve customers and partners across every U.S. time zone.
  • The end of the day is covered too. Late meetings, month-end closes and evening deadlines don’t stop at 5, and neither do we.
  • A 20-minute promise, not an average. Every email or portal ticket gets a real engineer within 20 minutes (Mon–Fri, 5 AM–6 PM) — so clients know every request has been seen and is being handled, and are confident their needs are addressed promptly.
  • 44% more staffed hours every week — 65 hours versus 45 — for the same flat price.

Transparent pricing. We never bill extra time.

Our price is published on our website, and your monthly invoice is the price we quoted. Supporting your existing environment is never billed as additional time — no hourly overages, no “out of scope” surprises, no block-hour top-ups.

  • No onboarding fee. There’s no upfront cost to switch to us.
  • A written way out. A 90-day satisfaction exit, and you can leave if we miss our written promises.
  • One flat per-user price — help desk, monitoring, security stack and strategy included.
  • Unlimited support, remote and on-site. On-site visits to support your existing environment are included.
  • No hourly billing for support. However many tickets you open, the bill stays the same.
  • Projects are fixed-fee, quoted in writing before any work starts. If it takes longer, that’s on us.
  • Accountability and attention to detail. Every change is documented, every ticket is followed through to the finish, and our co-founders, Kevin Nichols and Joe Kemp, personally own your experience.
See your price

Projects

Every project is fixed-fee. Our interests line up with yours.

Migrations, new office setups, server refreshes — every project gets a written, fixed-fee quote before work starts. If a project takes longer than planned, that’s on us, not on your invoice.

Hourly billing quietly rewards a provider for taking longer. A fixed fee rewards us for scoping carefully and finishing efficiently — the same outcome you want.

  • Written fixed priceAgreed before any work begins.
  • No hourly overrunsThe quote is what you pay.
  • Scope in plain languageYou know exactly what’s delivered.

What’s included

Everything in the per-user price

Each user includes one workstation and one mailbox, plus every service below — Managed IT and Managed Cybersecurity together, with no add-on tiers. Every office location and all network equipment (firewalls, switches and access points) are covered too.

Download the service overview (PDF)

Managed IT 24 services

  • Unlimited Help Desk & Desktop Management

    Unlimited remote support, plus on-site support, for end users and ongoing management of all managed workstations. During service desk hours, every ticket submitted by email or our portal gets a response from a real engineer within 20 minutes — for ALL tickets, not just emergencies. The service desk is staffed Monday–Friday, 5 AM–6 PM, and the same local team is on call for emergencies 24×7.

    Included
  • 24×7 Network Operations Center (NOC)

    Continuous monitoring and management of LAN/WAN infrastructure and servers.

    Included
  • Network Equipment Management

    Management and monitoring of all network equipment — firewalls, switches and wireless access points — at no per-device charge.

    Included
  • Additional Sites

    Every office location is covered under the same per-user price, with no per-site or per-location fees.

    Included
  • Microsoft 365 & Google Workspace Administration

    Management of users, licensing, mailboxes, groups, and tenant settings in Microsoft 365 or Google Workspace.

    Included
  • Mac & Windows Support

    Full support and management for Mac and Windows computers alike, including Apple device management.

    Included
  • New Workstation Setups

    Imaging, configuration, application installs, security stack deployment and data transfer for new and replacement workstations — included, not billed as a project.

    Included
  • Employee Onboarding & Offboarding

    Account provisioning, access setup, device assignment, and secure deprovisioning.

    Included
  • On-site Incident Remediation

    On-site response to resolve issues on managed devices at Client office locations.

    Included
  • Vendor Management

    Coordination with third-party vendors, including line-of-business application providers, ISPs, and printer service providers.

    Included
  • Managed Backup & Disaster Recovery

    Managed server backups with an on-site appliance for fast restores and off-site replication to Microsoft Azure¹, with monitoring and recovery support.

    Included
  • Business Continuity (Azure Site Recovery)

    Replication and failover of critical systems to Microsoft Azure.¹

    Included
  • Microsoft 365 & Google Workspace Backup

    Backup of email, files, calendars, contacts, and chat, powered by Dropsuite.

    Included
  • VoIP Administration

    Moves, adds, and changes (MACs) to the Client's phone system, plus support for desk phones and softphones.

    Included
  • Secure Remote Access

    Secure remote access for remote and hybrid users — VPN or zero-trust access to company systems, protected with multi-factor authentication.

    Included
  • Conferencing A/V Support

    Support for conference rooms and audio/video equipment — displays, cameras, speakers and meeting-room systems such as Microsoft Teams Rooms and Zoom Rooms.

    Included
  • vCIO Services

    Strategic IT guidance and planning.

    Included
  • IT Policies & Procedures

    Development of IT policies and standard operating procedures that fit the Client's business.

    Included
  • IT Runbook & Technology Roadmap

    Creation and ongoing maintenance of system documentation and a multi-year technology roadmap.

    Included
  • Workstation Lifecycle Planning

    Reporting on workstation age and health, with a planned replacement strategy.

    Included
  • Workstation Deployment

    Configuration and deployment of new Windows and macOS workstations.

    Included
  • Patch Management (OS)

    Automated security updates and patching for workstations and servers.

    Included
  • Third-Party Patch Management

    Automated updates for common third-party applications.

    Included
  • Client access to NinjaOne & SentinelOne

    Your own access to the device management and SentinelOne consoles, for full visibility into your devices, patching and threats.

    Included

Managed Cybersecurity 14 services

  • Managed Extended Detection & Response (MxDR)

    Managed threat detection, investigation, and response across the Client environment, powered by SentinelOne.

    Included
  • Endpoint Detection & Response (EDR)

    SentinelOne next-generation antivirus and EDR on all managed endpoints.

    Included
  • Managed SIEM

    Centralized collection, correlation, and analysis of security logs from firewalls, Microsoft 365, Google Workspace, Azure, AWS, SentinelOne, and other supported sources.

    Included
  • 24×7 Security Operations Center (SOC) with NOC

    Round-the-clock security monitoring, threat hunting, and threat reporting, working alongside our 24×7 Network Operations Center (NOC).

    Included
  • Continuous Vulnerability Management

    Ongoing internal and external vulnerability scanning and remediation tracking, powered by Qualys.

    Included
  • Email Security

    Advanced email threat protection using Microsoft Defender for Office 365 Plan 2.¹

    Included
  • DNS Content Filtering

    DNS-layer web filtering and threat blocking with Cisco Umbrella.

    Included
  • Security Awareness Training

    Online security awareness training plus simulated phishing campaigns for all users.

    Included
  • Identity & Device Security Configuration

    Security hardening of Microsoft Intune and Microsoft Entra ID.¹

    Included
  • Multi-Factor Authentication (MFA)

    Deployment and management of Microsoft MFA for email and VPN access.

    Included
  • Mobile Device Management (MDM)

    Microsoft Intune device management with conditional access policies.¹

    Included
  • Attack Surface Management

    Continuous discovery and monitoring of systems, configurations, and changes, powered by Liongard.

    Included
  • Browser Security (DefensX)

    Remote browser isolation, advanced phishing defense, and DNS filtering inside the browser, ideal for remote and hybrid teams.

    Included
  • vCISO Services

    Security leadership, risk management, and compliance guidance.

    Included

Available at additional cost

  • Keeper Password Manager — Integration, management, and support of Keeper for your team's credentials. About Keeper →
  • ThreatLocker application allowlisting — Zero-trust control that lets only pre-approved applications run. About ThreatLocker →
  • SentinelOne Prompt Security (AI security & governance) — See which AI tools your team uses, keep client data out of prompts and enforce your AI policy on every device. Learn about AI security & governance.
  • Annual network penetration testing — Third-party test of your network, including one free retest within 90 days. About penetration testing →
  • Major upgrades and migrations — Server, network, and cloud projects, always quoted as a fixed fee before work starts. About project services →
  • Hardware purchases — Workstations, servers, and network equipment.

¹ Requires the appropriate Microsoft licensing (and Azure usage for consumed storage and Site Recovery), billed separately.

Doing it yourself

What those tools cost if you buy them yourself

Managed Care’s $179 includes the software as well as the people who run it. Bought one by one, the same kinds of tools cost a small business roughly $46 to $103 per user per month in subscriptions alone — before anyone is paid to set them up, patch them and answer the alerts at 2 AM. Compare the totals for your own team in our in-house vs. managed IT calculator.

Included in Managed CareBought separately, per user / month
Endpoint protection (EDR)SentinelOne EDR on every computer$5–$16
24×7 managed detection & responseSentinelOne-powered MxDR$1–$4
Managed SIEM + 24×7 SOCLog monitoring by a 24×7 SOC$7–$16
Vulnerability managementQualys internal + external scanning$10–$18
DNS content filteringCisco Umbrella$1–$5
Security awareness training & phishing testsTraining + simulated phishing for every user$2–$4
Browser securityDefensX browser isolation & phishing defense$7–$17
Remote management & patchingNinjaOne, OS and third-party patching$6–$8
Microsoft 365 / Google backupDropsuite backup of email, files and chat$3–$8
Server backup with cloud copyOn-site appliance + Azure replication$2–$4
Disaster-recovery failoverAzure Site Recovery$0.83–$2
Dark web monitoringAlerts when staff logins leak$0.15–$0.72
IT documentationRunbook and system documentation$0.90–$2
Software aloneabout $46–$103

Typical prices for a 30-person company buying each tool itself, as of October 2026: vendors’ published list prices where they publish them, otherwise reputable estimates. Not included: the people to set up and watch these tools 24×7, backup hardware, and Microsoft licensing (MFA, Intune and Defender come with Microsoft 365 Business Premium). Several vendors require annual or multi-year contracts and minimum seat counts. Benchmarks: SentinelOne Singularity Complete list price; SentinelOne Vigilance MDR (third-party estimate; not published); Huntress Managed SIEM; Blumira Respond; Tenable Vulnerability Management (100-asset minimum); Qualys VMDR estimate; DNSFilter; Cisco Umbrella estimate; KnowBe4 Foundation–Advanced, 25–50 seats; Cloudflare Zero Trust + browser isolation (DefensX doesn’t publish prices); NinjaOne (third-party estimate; not published); Veeam Backup for Microsoft 365; Microsoft 365 Backup; Veeam Backup Essentials + Azure storage (hardware not included); Microsoft Azure Site Recovery, about $25 per protected server per month; Have I Been Pwned domain monitoring; Hudu, 1–2 admin seats.

Pricing questions

Do you charge extra per computer or per mailbox?

No. Each user's workstation and mailbox are included in the $179 per-user price. Only additional workstations and servers, and additional mailboxes for users, are billed at flat published rates. Shared mailboxes are not charged.

What does the per-user price include?

Each user at $179/month includes one workstation and one mailbox, plus our full Managed IT and Managed Cybersecurity services: help desk and desktop management, 24×7 NOC & SOC monitoring, Microsoft 365 administration, on-site remediation, backup and disaster recovery, SentinelOne MxDR and EDR, managed SIEM, vulnerability management, email security, DNS filtering, security awareness training, MFA, MDM, and vCIO and vCISO services.

Is there an onboarding fee?

No. We don’t charge an onboarding fee. Our full 60-day onboarding — including a transition from your current MSP or internal IT — is included, so there’s no upfront cost to switch. Sixty days is our recommended timeline; if you need to switch sooner, we can take over support as soon as the next business day.

What is the contract term, and can we leave?

Managed Care uses a straightforward annual agreement. New clients have a 90-day satisfaction exit, and at any point in the term, if we miss our written service promises, you can end the agreement without penalty.

Why an annual agreement instead of month-to-month?

An annual agreement is a compliance requirement for us, not a sales tactic. Our agreements with our security and software vendors, and the requirements of our cyber and professional liability insurance, are built around annual terms. Those same commitments are part of the controls an independent CPA firm audits for our SOC 2 Type II report, across all five Trust Services Criteria. The annual term is also what lets us staff the service desk above our workload and run a 24×7 NOC & SOC for every client. You're still never trapped, and we work to re-earn your business on every ticket. New clients have a 90-day satisfaction exit. And at any point in the term, if we miss our written service promises, you can leave without penalty.

Some providers advertise a lower per-user price. How do you compare?

Compare the total, not the headline. Some Orange County providers advertise a lower per-user rate, then add a separate monthly charge for every computer and every mailbox — which can put the real cost per employee well above $179. Our $179 already includes each user's computer and mailbox, all network equipment, phones and tablets, additional sites, VoIP and A/V support and our full security stack. Use the calculator to see your total.

Are tickets submitted by email treated as low priority?

Absolutely Not. Some providers default emailed tickets to their lowest priority with a same-day or next-business-day response. With us, every ticket submitted by email or our client portal gets a response from a real engineer within 20 minutes during service desk hours — for ALL tickets, not just emergencies.

Will we ever be billed for extra support time?

No. Supporting your existing environment is never billed as additional time — no hourly overages, block hours or out-of-scope charges. Unlimited remote support, plus on-site support, is included in the per-user price, and projects are quoted as a fixed fee before work starts.

What are your service desk hours?

Our service desk is staffed Monday–Friday, 5 AM–6 PM Pacific — 13 hours a day, compared with the 8-to-5 most providers offer — and the same local team is on call for emergencies 24×7. That covers early starts, East Coast business hours and end-of-day deadlines.

Is there volume pricing for larger teams?

Yes. Your first 100 users are $179 per user per month. Users beyond 100 are $149 per user per month. For example, 150 users is 100 × $179 plus 50 × $149. The calculator applies it automatically.

Do you charge for phones and tablets?

No. Mobile device support for iPhones, Android phones and tablets is included at no additional fee.

Do you charge for additional sites or network equipment?

No. Additional office locations and all network equipment — firewalls, switches and wireless access points — are included in the per-user price. Only additional workstations and servers are billed per device.

Is VoIP and A/V support included?

Yes. VoIP administration (moves, adds and changes, desk phones and softphones) and conferencing A/V support for meeting rooms are both included in the per-user price.

Are new workstation setups included?

Yes. Setting up new and replacement workstations — imaging, configuration, applications, security tools and data transfer — is included in the per-user price. You only pay for the hardware.

Is remote access for remote workers included?

Yes. Secure remote access for remote and hybrid users, protected with multi-factor authentication, is included in the per-user price.

Are shared mailboxes charged?

No. Shared mailboxes (like info@ or support@) are not charged. Each user's own mailbox is included, and only additional mailboxes assigned to users are $10/month each.

What counts as an additional device?

Any workstation beyond the one included with each user, and every server, is $40/month. Network equipment such as firewalls, switches and access points is included at no charge.

How fast will an engineer respond to a ticket?

During service desk hours (Monday–Friday, 5 AM–6 PM), within 20 minutes for every ticket submitted by email or our client portal — for ALL tickets, not just emergencies. After hours, clients can call 866.24.CALIT for emergencies; an engineer from the same local team is on call 24×7. Phone calls are answered by a live local engineer in under 60 seconds.

Is the calculator a formal quote?

No. The calculator gives an estimate for standard business operations. Some environments — such as specialized systems, compliance requirements or unusual infrastructure — may need to be scoped differently. Your final price is confirmed in writing after a free on-site IT review.

Is after-hours support included?

Yes. Outside service desk hours (Monday–Friday, 5 AM–6 PM Pacific), an engineer from the same local team is on call 24×7 and responds to emergencies within 20 minutes. There are no after-hours surcharges for supporting your existing environment.

Is there a monthly minimum?

Yes. Managed Care has a $4,000 monthly minimum. If your users and devices add up to less, you pay the minimum.

Do you offer non-profit pricing?

Yes. 501(c)(3) non-profit organizations receive 15% off our published Managed Care pricing — the same services and response promises as every client. The $4,000 monthly minimum still applies. Tick the non-profit box in the calculator to see your price.

Why is there a monthly minimum, and is it worth it for a smaller team?

The $4,000 minimum covers the same team, tools and coverage every client gets — and includes things other providers often charge for separately. There's no onboarding fee, so switching has no upfront cost. Our service desk is staffed 5 AM–6 PM Pacific, 13 hours a day instead of the typical 8 to 5. And on-site support is included, with no dispatch fees or hourly charges. When you compare total cost — including onboarding fees, per-computer and per-mailbox charges, and after-hours or on-site billing — the minimum is often the better value.

Is Microsoft licensing included?

No — Microsoft licensing, such as Microsoft 365, is additional. We can manage and transfer those subscriptions for you.

What costs extra?

Only Microsoft licensing, server backup storage, hardware, and optional services: Keeper Password Manager, ThreatLocker application allowlisting, annual third-party network penetration testing, and major server, network, or cloud upgrades and migrations (always a fixed-fee quote). Everything else — the full security stack included — is in the per-user price.

Is backup storage included?

Backup management, monitoring and recovery support are included, and cloud backup for Microsoft 365 and Google Workspace is included with no storage charge. Server backup storage is additional and billed based on the amount of data protected.

How are projects billed?

Every project — migrations, office build-outs, server or network refreshes — is quoted as a fixed fee in writing before work starts. If it takes longer than planned, the price doesn't change. Regular support, including on-site dispatch, is already included in Managed Care.

Customer service first · we re-earn your business on every ticket

Obsessive about service. Relentless about the details.

CAL IT Group brings enterprise-class IT, cybersecurity and SOC 2 Type II–audited operational excellence to small and midsize businesses across Southern California — a customer service organization first and foremost, proven day in and day out for over 10 years.

Call 866.24.CALIT