Ask five managed IT providers in Broward County what endpoint protection costs and you will get five variations of “it depends, let's book a call.” It does depend on some things. It does not depend on so many things that a number is impossible.
Here is ours, and the reasoning behind it.
What does endpoint protection cost per device?
We charge $32 per device per month for the full stack: device management, patch management, EDR and ITDR. Five device minimum, billed monthly, cancel with 30 days' notice.
Bought as separate line items those four services come to $38 per device per month. The bundle is cheaper because managing them as one thing is less work than managing them as four, and that saving belongs to you rather than to us.
For a ten-person office with twelve devices, that is $384 a month. For a four-operatory dental practice with eight devices, $256. You can do that arithmetic without a discovery call.
What is actually in it?
- Device management — remote monitoring, mobile device enrollment, asset inventory, and the ability to remotely lock or wipe a machine that walks out of the building.
- Patch management — automated operating system and third-party application updates, with reporting on what percentage of the fleet is actually current. That last part matters more than people expect; almost every provider patches, and very few can tell you their compliance rate.
- EDR — endpoint detection and response. Behavioural threat detection with the ability to isolate a machine from the network mid-attack.
- ITDR — identity threat detection. Watching for the account behaving unlike its owner, which is how most compromises actually present.
Why do some providers charge two or three times this?
Sometimes because they are bundling in a help desk, which is a genuinely different product with genuinely different costs. Sometimes because they are reselling a security stack at a heavy markup. And sometimes because the price was set by what the last client agreed to rather than by what the service costs to deliver.
The honest version: per-device security tooling has become a commodity. What varies is whether anyone is actually watching the alerts, and whether you can get a human on the phone when something fires. Those are the questions worth asking, not the licence cost.
What should I ask a provider before signing?
- What is the contract length, and what does cancelling cost? A three-year agreement with an early termination fee tells you how confident they are that you will want to stay.
- What happens at 2am when something is detected? Automatic isolation and a phone call, or a ticket that gets read on Monday?
- What do I get every month? If the answer is “a dashboard login,” you will never look at it. Ask for a written summary a non-technical person can read.
- Is the licence cost separate? Some quotes exclude the software they are managing. Ask what the all-in number is.
- What is not included? The most useful question on this list.
What about the work that is not monitoring?
Monitoring runs continuously; a server migration does not. Those are different things and pretending otherwise is how people end up on retainers that do not fit.
Project and reactive work comes out of prepaid support hours — 10, 25 or 50 hour blocks from $115 per hour, drawn down in 15-minute increments. If you have five or more machines with company data on them, you want both: the managed plan for the always-on part, and a block of hours for everything else.
The short version
$32 per device per month for protection that runs continuously. $115–145 per hour for work that happens when you need it. No multi-year contract, no early termination fee, and the numbers on this page are the numbers on the invoice.
If you want to see what we would find before you spend anything, we run a free external security assessment on your domain first.