SERVICES / MANAGED IT
MANAGED IT
Your IT team, on tap.
Microsoft 365 or Google Workspace, Intune, JAMF, endpoint management, patching, monitoring and helpdesk, fully managed by real engineers who know your environment. Pay a flat monthly fee, get a complete IT department.
WHAT'S INCLUDED
Everything an in-house IT team would do, without the headcount
Microsoft 365 or Google Workspace administration
Tenant management, licensing optimisation, mail (Exchange / Gmail), document collaboration (SharePoint / Drive), comms (Teams / Meet) and storage policies.
Intune endpoint management
Windows device enrolment, configuration profiles, compliance policies, app deployment, Autopilot zero-touch provisioning.
JAMF for Apple fleets
macOS and iOS device management, configuration profiles, app store deployment, lost-mode and remote wipe.
Entra ID or Cloud Identity management
Conditional Access or Context-Aware Access policies, MFA / 2-step enforcement, identity protection, privileged identity management, guest governance.
24/7 helpdesk
Real engineers, not call-centre triage. Phone, email, ticket portal. 95% of issues resolved within five minutes of first contact.
Backup & disaster recovery
M365 or Google Workspace backup (mail, files, calendar, chat), endpoint backup, immutable storage, documented recovery runbooks.
Patching & monitoring
Automated patch deployment, vulnerability scanning, asset inventory, proactive incident detection via M365 Defender.
Account manager & QBR
Named account manager, monthly health reports, quarterly business reviews tied to your strategic roadmap.
HOW WE PRICE
Built around your environment. Not a price-list off a shelf.
Every BaseHost engagement is scoped to the specific environment, compliance scope and risk profile in front of us. Here is how the pricing model works, and what it does not include.
1
Per-user, all-inclusive
One predictable monthly fee per active user. No ticket caps, no after-hours surcharges, no "premium support" upsells when something breaks at 2am.
2
Scoped to your environment
Pricing reflects what you actually run: platform mix (M365 / Workspace), endpoint count and type, compliance scope (Essential 8, SOC2, ISO 27001), site complexity, and SLA tier.
3
Quoted once, locked in
Your monthly fee is fixed for the term of the agreement. No quarterly rate changes. No mid-year indexation. Annual review built into the QBR cycle.
4
No surprise invoices
Project work, hardware procurement and out-of-scope items are quoted separately and approved before we start. You will never get a bill you were not expecting.
INCLUDED IN THE MONTHLY
- ✓ Microsoft 365 or Google Workspace administration
- ✓ Intune / JAMF endpoint management
- ✓ 24/7 helpdesk (real engineers, contracted SLA)
- ✓ Backup & recovery + quarterly restore drills
- ✓ Patching, monitoring, security alerting
- ✓ Named account manager + quarterly business review
- ✓ Monthly health and compliance reporting
QUOTED SEPARATELY
- → Initial onboarding & environment uplift project
- → Hardware procurement (quoted at transparent margins)
- → Microsoft / Google licensing (CSP, EA, Workspace)
- → Major migrations (tenant moves, M&A consolidations)
- → Compliance audit support (SOC2, ISO 27001 cycles)
- → Incident response retainer (optional)
- → Net-new build projects (Azure landing zones, offices)
Want a quote scoped to your environment?
30-minute discovery call with a senior engineer. We will review your environment, identify Essential 8 gaps, and follow up with a written scope and fixed monthly quote within five business days.
FREQUENTLY ASKED
Common questions
What's the typical response time for a P1 ticket?
Critical incidents (P1, production down, mail outage, ransomware suspected) get engineer engagement within 15 minutes during business hours and within 30 minutes 24/7 for clients on the appropriate SLA tier. P2 within 1 hour, P3 within 4 hours, P4 within 1 business day.
Do you take over from an existing MSP?
Yes, most of our onboardings are takeovers, not greenfield. We do a paid onboarding audit first to map your environment, then a structured 30-60-90 day transition. We work cooperatively with outgoing MSPs where they are professional about handover; we have a plan B for when they are not.
What's in scope of the helpdesk?
Microsoft 365 administration, endpoint troubleshooting, network issues, printer issues, account management, mobile device support, password resets, MFA enrolment, common software installs and configuration, escalation to vendor support where needed. Out of scope: third-party application support where we have no vendor relationship, we can usually still help but it may be quoted as project work.
Do you support Mac as well as Windows?
Yes, we are JAMF-certified for Apple device management. Many of our clients run mixed fleets. Mac support is included in standard managed IT, not an upcharge.
Will I have a named contact?
Yes, every managed client has a named account lead and a named technical lead. They are your escalation point and they will know your environment. Tickets are still handled by the broader engineering team for response speed, but escalations and strategic conversations go through your named contacts.
What about software licensing, Microsoft 365, Defender, Intune?
Software licensing is billed separately from managed services. As a Microsoft CSP we can procure, manage and pass through your Microsoft licensing at vendor cost, no mark-up. You can also bring your own licensing if you are already buying direct or through another reseller. Either way, the engineering work to manage your tenant is our managed services fee.
Do you cover after-hours support?
24/7 emergency line is included for P1 incidents on all managed contracts. After-hours work for non-emergency activities (planned maintenance windows, weekend project work) is scoped and quoted separately.
HOW WE DELIVER MANAGED IT
Managed IT that runs in the background.
Behind every Managed IT account is a named team of senior engineers who know your environment intimately: your tenant, your line-of-business applications, the integrations between them, the user quirks. They follow ITIL-informed runbooks for the routine work and write new ones when something novel breaks. First response is SLA-backed, escalation paths are documented, and the same engineer who joined your onboarding is the one who picks up your call three years later. Monthly reporting comes in plain English, not a dashboard you have to interpret.
Routine work is invisible by design: patches, monitoring, identity changes, mailbox provisioning, backup verification, certificate renewals. You only hear from us when there is a decision to make or a recommendation we need to land. We will not be the email landing in your inbox because the basics were missed, that is the bar we hold ourselves to.
ALWAYS ON
Every endpoint monitored. Every alert investigated.
Engineers monitoring around the clock from our operations base. No outsourced helpdesk, no script-readers. Just experienced people who know your environment.
Let's get the IT off your desk.
30-minute discovery call. We will review your environment and tell you honestly whether managed services is right for you.
RELATED READING