There is no single “MSP price” in Canada because providers bundle very different things into one line. This guide explains the common pricing models, the factors that move the monthly number, and a practical way to compare quotes so you pay for coverage you actually need.
| Model | How it is billed | Best for | Watch out for |
|---|---|---|---|
| Per user | Flat fee per staff member per month, all their devices included | Teams where each person uses a laptop + phone + Microsoft 365 | Who counts as a “user” (part-time, shared accounts) |
| Per device | Fee per managed laptop, server, firewall | Shops with many shared or kiosk devices | Cloud apps and identities may be billed separately |
| Tiered bundles | Good / better / best packages | Buyers who want a fast apples-to-apples choice | Security tools often sit only in the top tier |
| Break-fix / hourly | Pay per incident or hour | Very small offices with little risk exposure | No prevention; costs spike exactly when things break |
| Hybrid / co-managed | MSP covers tooling, security and after-hours; internal IT keeps day-to-day | Organizations that already employ an IT person | Unclear ownership unless the split is written down |
What drives the monthly cost
Most of the difference between two quotes comes from scope, not margin. The same “managed IT” label can mean a help desk only, or a help desk plus endpoint detection, backups, patching, vendor management and security awareness training.
- Number of users and devices (including servers, firewalls and Wi-Fi).
- Security stack: MFA enforcement, EDR/antivirus, email filtering, backups with tested restores, 24/7 monitoring.
- Compliance and privacy obligations (PIPEDA, Quebec Law 25, industry rules) and the reporting they require.
- Response SLA and support hours (business hours vs after-hours vs 24/7).
- On-site visits versus remote-only delivery.
- Projects kept outside the monthly fee: migrations, new offices, website or app work.
What should be included in a baseline quote
The Canadian Centre for Cyber Security publishes baseline controls for small and medium organizations. A credible managed IT quote should map to them: asset inventory, patching, MFA, backups, secure configuration and incident response basics.
How Amen Security prices
We run a free assessment, then send a written proposal that lists every inclusion, the response SLA and anything billed separately. Delivery is remote-first across Canada and the United States, so you are not paying for a storefront. We do not publish a one-size price because a 12-person accounting firm and a 60-seat clinic need different coverage.
How to compare MSP quotes
- List your users and devices. Count staff, laptops, servers, firewalls and cloud tenants so every provider quotes the same scope.
- Ask for the inclusions in writing. Help desk, monitoring, patching, backups, EDR, MFA and vendor management should each be a yes or no.
- Compare the response SLA. Look at response and resolution targets, support hours and how after-hours emergencies are billed.
- Check what is billed outside the fee. Onboarding, projects, hardware and on-site visits often sit outside the monthly price.
- Confirm privacy and exit terms. Ask where data is stored, how PIPEDA or Law 25 obligations are handled, and how admin credentials are handed back if you leave.
Frequently asked questions
- Why do managed IT quotes vary so much in Canada?
- Because providers bundle different services under the same name. One quote may be a help desk only while another includes security tooling, backups and 24/7 monitoring. Compare inclusions and SLAs line by line.
- Is per-user or per-device pricing better?
- Per-user is simpler when each person has several devices and Microsoft 365. Per-device suits environments with many shared machines. Either works if the inclusions are explicit.
- Are onboarding fees normal?
- Yes. Most MSPs charge a one-time onboarding for documentation, tooling deployment and cleanup. It should be quoted upfront, separate from the monthly fee.
- Does Amen Security publish fixed prices?
- No. We quote in writing after a free assessment so every inclusion and the SLA are explicit for your size and risk profile.