Pricing
Houston managed IT — published prices, full math.
Most Houston MSPs publish a number, then quietly add 30-40% in pass-through licenses at contract time. We surveyed 18 of them. One publishes real per-user prices. The other 17 use a “Schedule Discovery Call” gate. We’d rather put the math on the page than make you trade an email address for a number.
Trust isn’t earned by claiming you have it. It’s earned by showing the numbers most MSPs hide. That’s how we’ve kept clients 10+ years.
Survey data: 18 Houston-area MSP websites audited April 24, 2026. We’ll re-run this periodically and update the date.
Per-user pricing
Full stack below. Microsoft 365 licenses billed direct by your vendor. Hardware billed at our wholesale, no markup.
What’s in the $125
Every line below is included at our wholesale partner cost — no license markup. We earn on the labor and the relationship, not on a hidden margin in your security stack.
24/7 monitoring + help desk + patching
Mako laborReal-engineer support, same-business-day SLA, named escalation. Not a call center.
Microsoft Defender
MicrosoftBaseline antivirus on every desktop. Comes with the Microsoft 365 license you already pay for.
ThreatDown
Malwarebytes ThreatDownManaged malware / EDR layer above Defender. Mako is a direct ThreatDown partner — not a reseller chain.
Huntress Managed ITDR
HuntressIdentity threat detection on Microsoft 365 — anomalous logins, account takeover, malicious OAuth grants, BEC indicators.
Phishing simulations, training videos, completion reporting. The cyber-insurance-questionnaire workhorse.
Endpoint backup with image-level restore. Tested monthly.
Mailbox + OneDrive + SharePoint + Teams backup. Microsoft does NOT back up your M365 data — they keep 30 days, that's it. We do.
MXSnap email gateway
MXSnapInbound email filtering — phishing, malware-bearing attachments, malicious links — caught before the inbox.
Keep Aware AI activity monitoring
Keep AwareWatches what your team is pasting into ChatGPT, Claude, Gemini, Copilot. Catches accidental disclosure of client data and shadow-AI tool sprawl.
Meraki content filtering
Cisco MerakiDNS-layer filtering at your firewall — malicious domains blocked at the resolver. Comes with your Meraki license.
vCIO + vendor management + quarterly strategy reviews
Mako laborNamed vCIO, quarterly business review with leadership, single point of contact for ISP / SaaS / hardware vendors.
Server & cloud pricing
Four tiers, depending on where the workload runs.
Servers run mission-critical workloads. The pricing reflects that — these aren’t desktops with extra RAM. Cloud VMs get their own tier because the hardware piece is gone. Each price is per-server / per-month.
Cloud VMs and managed cloud workloads — same management as a physical server, minus the hardware. Cloud compute (Azure / AWS) billed direct by AppRiver.
- 24/7 monitoring + alerting on the cloud VM
- OS patching + reboots
- Backup with monthly tested restore
- EDR coverage on the cloud VM
- Cloud-cost optimization review (right-sizing, reserved instances)
- Quarterly performance + spend review
- Cloud compute billed direct to you by AppRiver — see disclosure below
Day-to-day on-premises workloads — file server, application server, domain controller, mid-tier business apps.
- 24/7 monitoring + alerting
- OS patching + reboots
- Backup with monthly tested restore
- EDR coverage on the server itself
- Disk / memory / event-log health monitoring
- Quarterly performance review
Workloads under HIPAA, CMMC, PSM (OSHA 1910.119), CFATS, IRS Pub 4557, or SOC 2 audit scope.
- Everything in Standard, plus:
- Audit-grade access logging with 3-year retention
- Documented change management for every modification
- Evidence-package automation for auditors
- Annual access review with named-user signoffs
- Compliance-framework gap mapping (HIPAA / CMMC / PSM / CFATS / IRS 4557)
Server lives inside the Westland Bunker — Tier III data center where Mako engineers work every day.
- Everything in Compliance-heavy, plus:
- Tier III colocation (concurrent maintainability, N+1 cooling, redundant power)
- Inland of the Ship Channel surge zone — named-storm safe
- Carrier-neutral cross-connects available
- Physical access by Mako engineers in minutes, not 'remote-hands tickets'
- Biometric access controls + logged entry
Security appliance & network gear
One flat rate for your firewall. Zero for the gear that doesn’t change.
We standardize on Cisco Meraki for every client. One vendor, one cloud dashboard, one ticket path to Cisco support. That standardization is why we can charge $50/month regardless of which Meraki model is on your wall — the ongoing work lives in the dashboard, not in box-by-box hands-on tuning.
Flat rate across all Meraki MX models. Cisco Meraki licensing billed separately on 1, 2, or 3-year terms — see disclosure in “Not included” below.
What’s in the $50
Cisco Meraki firewall — fully managed, cloud-dashboard monitored, firmware patched automatically. One flat rate regardless of model (MX67, MX75, MX85, MX95+).
- 24/7 Meraki-dashboard monitoring + alerting
- Firmware patching (automatic, Meraki-vetted)
- Policy + rule changes on request (same-business-day)
- Content filtering + malicious-domain blocking (Meraki layer)
- VPN tunnels to cloud resources + site-to-site maintained for you
- Quarterly config review + rule cleanup
- Named Cisco ticket escalation when firmware goes sideways
Access points & switches: managed, not billed.
We patch them, monitor them, back up their configs, and open tickets with the vendor when firmware goes sideways — but we don’t charge a monthly fee for it. Once a properly specified AP or switch is deployed and configured, it sits there and does its job. The config rarely changes. We’d rather not invoice you every month for something that never changes.
You pay for the hardware (passed through at our wholesale cost, no markup) and the project labor to deploy it. After that, ongoing management is absorbed into your per-user fee. That’s not an industry norm — most MSPs bill $10–$30 per switch and $5–$20 per AP every month. We think that’s hard to justify once the gear is configured.
Hourly rates
For work that falls outside the managed agreement.
Most of what your business needs is covered by the per-user and per-server fees above — that’s the point of a managed agreement. These hourly rates apply when a contracted client asks for something outside that scope (ad-hoc integrations, project work, after-hours requests) or when a project gets quoted on a fixed-fee basis with a time-and-materials fallback for scope expansion.
Contract client — additional / scope-adjacent work
$135/hrWhen something falls outside your managed agreement (a one-off integration, custom configuration, ad-hoc training session) but you still need a Mako engineer on it.
Project work
Fixed-fee against scope ($150/hr T&M fallback)M365 migrations, office moves, low-voltage cabling, on-prem-to-cloud cutovers, M&A integrations. Quoted as a fixed fee against a defined scope. T&M fallback applies only when scope expands mid-project.
After-hours / weekend / holiday
$250/hrFor off-hours work that falls outside the 24/7 monitoring + on-call response your managed agreement already covers. Example: a client-requested Saturday-night office move.
Break-fix / non-contract
We don't accept this workMako only takes on clients with managed agreements. Break-fix work is reactive, expensive for the client (no preventive coverage), and doesn't produce the kind of long-term partnership we trade on. If you're looking for one-off emergency support, we'll refer you to a shop that does that work — but we won't be it.
Why we don’t do break-fix
Break-fix work means a business calls a tech only when something is already broken. It’s reactive, unpredictable, expensive at the moment of crisis, and produces zero of the preventive infrastructure that would have stopped the crisis in the first place. We turned that work down a long time ago. Every client we have is under a managed agreement; every engineer’s time is allocated to a relationship that’s built to last. That’s how the average tenure ends up at 10+ years instead of 18 months.
Not included — billed separately
Things that aren’t in the per-user or per-server price.
We bundle aggressively where it makes sense — security tools, backup, monitoring. We don’t bundle the things that should stay variable, like which Microsoft 365 SKU you run, or whether you’re replacing 12 laptops this quarter.
Microsoft 365 licenses + Azure / AWS cloud compute
Microsoft 365 and Azure are sold through our partner AppRiver. AppRiver bills you direct at Microsoft's published rates and pays Mako a small commission on every license and cloud-spend dollar. We disclose that here because the rest of this page is built on transparency — and quietly pretending we had no economic interest in which M365 SKU you pick would be the kind of move we just spent the page criticizing.
Hardware
Workstations, laptops, servers, switches, firewalls, phones — sourced through us, billed at our wholesale (no markup). You own the hardware. Refresh cycles planned in your QBR.
Project work
Office moves, low-voltage cabling, M365 migrations, on-premises-to-cloud cutover, mergers and acquisitions integration, special builds. Quoted as fixed-fee or T&M against the project scope.
Onboarding
First 30-60 days of a new engagement — discovery, documentation, environment audit, baseline security implementation. Typically 1-2 months of monthly fee, paid once.
Specialized line-of-business software
Industry-specific platforms (EHRs, ERPs, inspection software, legal practice management, construction project management) — license costs are vendor-direct. We integrate, support, and manage; we don't resell the license.
Cisco Meraki licensing (1, 2, or 3-year terms)
Every Meraki firewall requires an active license (Enterprise or Advanced Security). Mako is a Cisco partner; we bill you direct at our Cisco partner wholesale cost, no markup. Term length matches your managed services agreement — 1, 2, or 3 years — so you capture Cisco's term-commitment discount rather than us holding it as margin. The $50/mo appliance fee above is pure Mako labor + dashboard admin; the license is separate.
Build your number
What does Mako cost for your business?
Plug in your user count, your server mix, and which Microsoft 365 SKU your team actually needs. The breakdown updates live and shows what Mako bills versus what AppRiver bills, separately. No lead-capture form, no “contact us for a quote” gate.
Your environment
Adjust the numbers — the breakdown updates live.
How many people need IT support — full-time, part-time, contractors with email accounts.
Servers + cloud VMs
Security appliance
One per site is typical. Meraki licensing billed separately on 1/2/3-year terms — not shown here.
Standard + Defender for Business + Intune MDM + compliance tooling. Recommended for healthcare, legal, financial. Microsoft sets the price; AppRiver bills you direct and pays Mako a small partner commission.
Your monthly breakdown
Mako-billed lines and AppRiver-billed lines shown together — the way the math actually lands on your books.
| Line item | Per-unit | Monthly |
|---|---|---|
Mako per-user fee 10 users × $125 Billed by Mako | $125 | $1,250 |
Cisco Meraki firewall(s) 1 × $50 — Meraki license billed separately (1/2/3-yr term) Billed by Mako | $50 | $50 |
Microsoft 365 — Business Premium 10 × $22.00 — billed by AppRiver, not Mako Billed by AppRiver | $22.00 | $220 |
| Total monthly | $1,520 | |
| Annual (× 12) | $18,240 |
Hardware, one-time project work, onboarding, and any specialty line-of-business software are quoted separately against actual scope — those don’t belong in a recurring monthly number. Use this to build a real expectation; we’ll confirm everything in writing before you sign.
FAQ
Pricing — common questions.
Why publish prices when most Houston MSPs don't?+
Because the alternative — 'request a quote' on every page — is the polite version of 'our number is bigger than the competitor's published number, and we don't want it on the same page where it can be compared.' We surveyed 18 Houston MSPs in April 2026; one of them publishes real per-user dollar figures. The other 17 use the same 'Schedule Discovery Call' gate. We'd rather put the math on the page than burn a discovery call on someone who would have walked away once they saw the number anyway.
How does your $125/user compare to other Houston MSPs?+
Houston MSP managed IT runs roughly $75–$250 per user per month depending on what's included. $125 lands mid-market on the headline number. What moves a buyer up or down that range is the stack: MSPs at the lower end ($75–$100) typically don't bundle EDR, managed backup, identity threat detection, AI activity monitoring, or Microsoft 365 backup — those get charged as add-ons after the contract is signed. MSPs at the higher end ($200+) usually do include those items but don't publish the total anywhere public. Mako is priced mid-market with upper-market inclusions because we pass vendor partner discounts through to you rather than keeping them as margin.
Why is Microsoft 365 not included in the per-user fee?+
Because every business needs a different M365 SKU. A construction company can run on Business Basic at $6/user. A multi-location healthcare practice needs Business Premium at $22/user for Defender + Intune + Compliance. A petrochemical firm with TWIC contractors might need E5 at $57/user for advanced compliance and identity protection. Bundling M365 into our fee would either force you onto the wrong tier or hide the cost in a way that benefits us, not you. We help you pick the right SKU; you buy it through our partner AppRiver at Microsoft's published rate; AppRiver bills you direct.
Does Mako get paid on the M365 / Azure I buy through AppRiver?+
Yes — AppRiver pays Mako a small partner commission on every M365 license and Azure-spend dollar. The price you pay is the same as buying anywhere else (Microsoft sets the rates, AppRiver passes them through at MSRP). We disclose this because the whole point of this pricing page is that you should know where the money goes. A commission you didn't know about is functionally the same as a markup you couldn't see — and we'd rather you know.
Do you mark up the security tools in the $125 bundle?+
No. ThreatDown, Acronis, Keep Aware, Huntress ITDR, Huntress Managed Security Awareness, MXSnap — all included in the $125 per-user fee at our wholesale partner cost. We earn on the labor and the relationship, not on a hidden license markup. The vendor partnerships we hold (direct ThreatDown partner, Acronis partner, Huntress partner) get us better wholesale rates that we absorb into the $125 rather than pad our margin with.
Why are servers more expensive?+
A managed server is closer to a 24/7 critical-infrastructure engagement than a desktop. Standard at $275/server/month covers monitoring, patching, backup, EDR, performance review. Compliance-heavy at $400 adds audit-grade logging and evidence retention for HIPAA / CMMC / PSM / CFATS workloads. Bunker-hosted at $600 includes Tier III colocation in the Westland Bunker — a real data center we work inside of every day.
Why only $50 for a managed firewall when other MSPs charge $150+?+
Two reasons. First, we standardize on Cisco Meraki for every client — one vendor, one cloud dashboard, one Cisco ticket path. That standardization means the ongoing work is largely in the dashboard, not in box-by-box hands-on tuning. Second, we pass through our Cisco partner wholesale on the license rather than holding it as margin — so your Meraki license cost (a 1, 2, or 3-year term match with your MSA) is a separate line on your bill, and the $50 is pure Mako labor: policy changes, dashboard monitoring, firmware patching, config backups, named Cisco escalation. An MSP that quotes you $150/mo 'all-in' for a managed firewall is usually bundling a license markup into that number without itemizing. We'd rather show the math.
Why don't you charge monthly for access points and switches?+
Because they don't change. Once an AP or switch is specified correctly, deployed, and configured, it sits there and does its job. Firmware updates happen on a vendor cycle. Config changes are rare. The ongoing 'managed' work on a switch or AP is real but not recurring — we patch, monitor, back up configs, and open tickets with the vendor when firmware goes sideways, but that activity doesn't justify a monthly line item. You pay for the hardware (passed through at our wholesale, no markup) and the project labor to deploy it. After that, it's absorbed into your per-user fee. Most Houston MSPs charge $10-$30 per switch and $5-$20 per AP every month. We think it's hard to justify invoicing you every month for something that never changes.
We're a small business — what's the minimum?+
Practically, the model fits best for businesses at 10 users and up. Below that, our minimum starts to look like a high per-user rate because the underlying engineering cost doesn't scale linearly. If you're under 10 users we'll have a straight conversation about whether co-managed support, a single project engagement, or a referral to someone better-suited makes more sense for you.
We just had a ransomware incident. Can you come in for emergency response?+
Not as a one-off. We don't do break-fix or non-contract emergency work. The reason: post-incident response done well requires a real engagement (forensic preservation, environment hardening, ongoing monitoring) — and a one-off engagement for the IR phase only leaves you in the same vulnerable state two months later. If you're in active crisis, we'll refer you to an incident-response specialist firm that does that work as a focused engagement. If you want long-term IT under a managed agreement after the dust settles, that's a different conversation — we're often the right fit for that. Call us either way.
Do you offer month-to-month contracts?+
No, and we're upfront about why. Most of your monthly cost is vendor pass-through — EDR, SIEM, backup, email security. We sign term commitments with those vendors to lock in bulk pricing and pass the discount through to you. A longer commitment on your side gets you a better rate on ours. We offer 1, 2, and 3-year agreements with no mid-term exit; everything is spelled out in writing before you sign.
What about a Risk Review or one-time engagement?+
Yes. We offer a standalone Risk Review for businesses that aren't ready to switch MSPs but want an honest second opinion on their current security posture. Project work (M365 migrations, office moves, compliance gap audits) is also available as one-time engagements — quoted against the actual scope. See /services/cybersecurity/risk-review for the Risk Review specifically.
Can these prices change at renewal?+
Within reason — we adjust at renewal to reflect vendor cost changes (Microsoft, Huntress, Acronis, etc. raise their wholesale rates over time) and to reflect any new tools added to the standard stack. We don't surprise you mid-contract; mid-contract pricing is locked.
Want a real quote against your environment?
Twenty minutes, no pressure, no pitch deck. We’ll map your user count, server count, and compliance posture against the table above and give you the actual monthly number — including the M365 line.

