The standard pitch for managed IT is that it costs less than break-fix. That's sometimes true and sometimes not. What's almost always true is that the comparison most business owners are making is wrong — they're comparing the managed monthly fee against their average IT invoice, and ignoring the rest. This post runs the real numbers.
How the Two Models Actually Work
You call when something breaks. The provider fixes it. You pay for time and parts. No ongoing relationship, no monitoring, no SLA.
Typical rates (2025–2026):
- Remote support: $100–$175/hr
- Onsite labor: $150–$250/hr
- After-hours/emergency: 1.5–2× base rate
- Parts markup: 15–30% above cost
- Minimum billing: 1 hr onsite, 30 min remote
Flat monthly fee covers monitoring, help desk, patching, security tools, and backup administration. Issues are often caught before they become outages.
Typical rates (2025–2026):
- Essential tier: $75–$150/user/month
- Standard/all-in tier: $150–$225/user/month
- Premium (24/7, vCIO): $225–$300+/user/month
- Contract length: 12–36 months (24 most common)
- Onboarding fee: $500–$3,000 one-time
The key difference isn't the price structure — it's what you get between incidents. Break-fix providers have no visibility into your environment when nothing is broken. No one is watching your server's disk health, your backup completion rate, or whether a patch is 90 days overdue on a machine with an open vulnerability.
The Costs That Never Appear on Your IT Invoice
Break-fix bills are deceptive because they only capture the IT provider's time. They leave out the larger costs that are real and measurable — they just don't show up as a line item.
Lost productivity during downtime
ITIC's 2024 research puts SMB downtime cost at $8,000–$25,000 per hour. For a 15-person professional services firm where staff bill or generate value at $65–$150/hour each, the math is straightforward: one 4-hour server outage with all 15 people unable to work costs $3,900–$9,000 in labor alone, before you count the IT invoice, missed client deadlines, or relationship damage.
The recurring-problem cycle
Break-fix restores function — it doesn't fix root causes. The same printer, the same VPN drop, the same login problem comes back 6 weeks later and you pay the minimum call fee again. Over 12 months, a problem that could be permanently resolved with 2 hours of diagnostic work generates 6 reactive calls at the minimum billing increment each. That's 6× $175 = $1,050 for a problem that a $350 fix could have eliminated.
No monitoring means no warning
A failing hard drive, a RAID array running in degraded mode, or a backup volume that's been silently failing for 6 weeks — none of these generate a service call because nothing has "broken" yet. In an unmonitored environment, ransomware and malware dwell for an average of 197 days before detection. The breach has already happened. You just don't know it until something stops working.
Emergency premium exposure
The most expensive IT events always happen at the worst times. A server failure at 5:30 p.m. Thursday before a client deadline Friday morning is a $2,000–$5,000 emergency call at 1.75× after-hours rates — not a $400 scheduled task during business hours. Under managed IT, that server failure was likely caught as a warning the day before, addressed remotely, and handled without premium billing.
Cyber insurance and compliance gaps
Break-fix providers generally cannot sign a Business Associate Agreement (BAA), produce documented security controls, or provide the audit trail that cyber insurance underwriters now require. As insurers tighten requirements, unmanaged environments are increasingly uninsurable at reasonable premiums — or carry exclusions that effectively void coverage for the most likely claims.
A Real 12-Month Comparison
Scenario: a 15-person accounting or legal support firm in suburban Philadelphia. One file server, 15 workstations, Microsoft 365, standard internet circuit. No dedicated IT staff. Mix of in-office and hybrid work.
Break-Fix — Year 1 (no major incident)
| Item | Detail | Annual Cost |
|---|---|---|
| Routine support calls | 18 calls × 1.5 hrs avg × $175/hr | $4,725 |
| New hire workstation setup | 2 setups × 3 hrs × $175/hr | $1,050 |
| After-hours emergency | 1 server issue × 4 hrs × $306/hr (1.75× rate) | $1,224 |
| Hardware failure + parts | 1 workstation failure, labor + parts markup | $2,400 |
| Patch management tool | Purchased separately (e.g., Action1 or similar) | $900 |
| EDR / antivirus (15 seats) | $8–$12/user/month purchased separately | $1,350 |
| Backup solution | $150–$300/month, separately managed | $2,400 |
| IT vendor costs subtotal | ~$14,050 | |
| Lost productivity | 2 outages × 4 hrs × 15 staff × $65/hr loaded cost | $7,800 |
| Total true cost — good year, no breach | ~$21,850 | |
Managed IT — Year 1
| Item | Detail | Annual Cost |
|---|---|---|
| Managed services | 15 users × $185/user/month (mid-tier, all-in) | $33,300 |
| Includes | Monitoring, help desk, patching, EDR, backup admin, M365 support | $0 additional |
| Onboarding fee (one-time) | Environment documentation and tool deployment | $1,500 |
| After-hours event | Server issue caught proactively, resolved remotely within SLA | $0 |
| IT vendor costs subtotal | ~$34,800 | |
| Lost productivity | ~0.5 significant outages (issues caught proactively) × 1 hr × 15 staff × $65/hr | ~$975 |
| Total true cost — Year 1 | ~$35,775 | |
In a "good" break-fix year with no major incident, managed IT costs roughly $13,900 more. That's the honest number. The question is whether that premium is worth it given what it buys — and what happens in a bad year.
Unmanaged SMBs face a 1-in-5 to 1-in-7 annual chance of a security incident. The average SMB breach costs $140,000. Ransomware recovery (excluding the ransom itself) averages $1.53 million. One incident erases 10 years of managed IT premium. The math on break-fix looks good until the year it doesn't — and there's no warning when that year arrives.
Year 2+ under managed IT: the onboarding fee disappears. At a 4% annual increase, the 15-person firm pays roughly $34,600 in year 2 — and the infrastructure is better documented, more stable, and incrementally more secure each year. Break-fix costs tend to rise as hardware ages and as more deferred maintenance accumulates.
What MSPs Don't Always Mention
Fairness requires saying this clearly: not all managed IT costs are included in the monthly fee, and a bad MSP contract can make this model worse than break-fix.
What's typically out of scope
- Hardware purchases — new workstations, servers, switches, and firewalls are almost always billed separately. The MSP may recommend them and markup 15–25% over direct pricing.
- Project work — server migrations, office moves, new system implementations are out of scope and billed at hourly rates ($150–$200/hr). Get project rates in writing before signing.
- After-hours coverage — many standard plans are Mon–Fri, 8am–6pm. Nights and weekends trigger hourly charges. Know the exact definition before you sign.
- Cybersecurity incident response — most MSP contracts explicitly exclude breach response. A ransomware incident can generate $50,000–$100,000 in out-of-scope fees even under a managed contract. Ask directly whether IR is in-scope before you need it.
Contract terms to read carefully
- Auto-renewal clauses — most agreements require 60–90 days written notice before the renewal date to cancel. Miss that window and you're locked in for another full term.
- Early termination penalties — typically 50–100% of remaining contract value. Exiting a $3,000/month contract with 18 months left can cost $27,000–$54,000.
- Annual price escalation — read the fine print. A 5% annual escalation clause on a $3,000/month contract adds $7,650 in cumulative excess cost over 3 years compared to the quoted rate. Caps of 3–5% are reasonable; uncapped escalation is a red flag.
- Data portability — ask what happens to your backups, documentation, and monitoring history if you switch providers. Some MSPs use proprietary systems that don't transfer; switching becomes an expensive rebuild.
The Honest Answer: Which Model Fits Which Business
- 1–3 person shop, downtime tolerance of 24–48 hours, fewer than 6 IT issues per year
- Seasonal business that's operationally active only part of the year
- 100% SaaS-based with no on-prem servers — Google Workspace, browser-based CRM, cloud accounting
- You already have an internal IT person and need specialist overflow only
- You're vetting a prospective MSP with a 3–6 month break-fix trial before committing to a contract
- 10+ employees all dependent on IT to do their jobs — the productivity math alone is compelling
- Any compliance requirement: HIPAA, PCI-DSS, state privacy laws, or client security questionnaires
- On-premises servers or hybrid infrastructure — servers require proactive monitoring to avoid catastrophic failure
- Remote or hybrid workforce — endpoint security across multiple locations requires ongoing management
- Cyber insurance requirement — underwriters increasingly require documented controls that break-fix can't produce
The Question Isn't Which Is Cheaper — It's What You're Actually Comparing
When business owners tell us break-fix is cheaper, they're usually comparing a managed monthly fee against their average IT invoice in a year when nothing catastrophic happened. That's not a fair comparison.
The fair comparison is: managed IT annual cost vs. break-fix annual cost including productivity losses, security tools you'd buy separately, and a probability-weighted share of a major incident. On that comparison, managed IT is typically cheaper for any business with more than 10 employees and meaningful infrastructure — even in years when nothing goes wrong.
That said, managed IT is only worth it if the MSP is actually doing the work. A provider who collects the monthly fee but hasn't configured monitoring, hasn't verified backup integrity, and doesn't respond within SLA is worse than break-fix — you're paying the premium without getting the protection. Ask for documented proof of what's being managed before you sign.
If you're not sure which model fits your business right now — or you're on managed IT and want to know whether your MSP is actually delivering — we're happy to give you an honest assessment.