What Is Included in Managed IT Services? The Complete List

What Is Included in Managed IT Services? The Complete List

Managed IT services typically include seven things for a flat monthly fee: a help desk your employees can call, monitoring of your servers and workstations, patch management, a security baseline (endpoint protection, MFA, email filtering), managed backups, vendor management, and strategic guidance — often delivered as a vCIO service. If an agreement you’re looking at is missing one of those, ask why before you sign.

That’s the short answer. The longer answer is that "managed IT" is not a regulated term, so what one provider bundles into the monthly fee, another bills separately. Below is what each inclusion means in practice — and, just as important, the list of things that are almost never included, because that’s where most billing surprises come from.

The core inclusions

• Help desk support. Your employees get a phone number and email address for day-to-day problems: a locked account, a printer that won’t print, Outlook acting up. Unlimited remote support during business hours is the standard; confirm whether on-site visits are included or billed per trip.
• Monitoring and alerting. An agent on every server and workstation reports health, disk space, failed services, and offline devices back to the provider around the clock. The point is that the MSP finds out a server is in trouble before you do — ideally before anyone notices at all.
• Patch management. Operating-system and common third-party application updates are tested, scheduled, and pushed on a regular cycle, with reporting on what’s patched and what isn’t. Unpatched software is still one of the most common ways businesses get breached, so this one is non-negotiable.
• Security baseline. A real agreement includes managed endpoint protection (EDR, not just antivirus), multi-factor authentication, email spam and phishing filtering, and basic security policies. Note the word baseline — advanced services like 24/7 threat hunting, security awareness training, or compliance work are often a higher tier.
• Managed backups. The provider runs, monitors, and periodically test-restores backups of your servers and critical data — usually including Microsoft 365 or Google Workspace, since the native retention in those platforms is not a backup. "Managed" is the key word: someone is verifying the backups actually work, not just that the job ran.

The inclusions people forget to ask about

• Vendor management. When your internet is down or your line-of-business software breaks, the MSP calls the ISP or the software vendor, sits on hold, and owns the ticket to resolution. This alone saves owners and office managers hours every month.
• Documentation. Passwords, network diagrams, license keys, and configurations get recorded in a proper system — and, critically, they belong to you, not the provider.
• Reporting. You should receive regular reports on tickets, patch status, backup health, and security posture. If a provider can’t show you what they did last month, assume the answer is "not much."
• vCIO or strategic guidance. Someone senior meets with you periodically to review the roadmap, plan hardware replacements, and budget for the year ahead. Without this, you have a repair service, not a managed service.

What’s usually NOT included

These items are typically quoted separately, and reputable providers say so up front:

• Project work — migrations, office moves, new server rollouts, and major upgrades are scoped and priced as projects.
• Hardware and software licensing — laptops, firewalls, and Microsoft 365 licenses are passed through or purchased by you; the management of them is included, the products themselves are not.
• After-hours emergency work — some plans include 24/7 response, many bill it hourly. Know which one you’re buying.
• Custom application development — an MSP supports and coordinates around your line-of-business software but doesn’t write or modify code unless that’s a separate engagement.
• Onboarding remediation — if your environment arrives in rough shape, the initial cleanup is often a one-time project before the monthly agreement takes over.

How to compare two agreements

Two quotes that look far apart in price are usually not covering the same scope. Put them side by side and check each of the items above: is EDR included or an add-on? Are backups monitored and test-restored, or just "configured"? Are on-site visits covered? Is there a named person doing strategic reviews? The cheaper agreement often gets expensive the first time you need something that turned out to be an exclusion. Ask for the exclusions list in writing — a good provider has one ready.

Equal Tech Solutions provides all of the above — help desk through vCIO — to businesses across Cleveland, Chattanooga, and the Southeast US, with the scope spelled out in plain English before you sign anything. See what a full agreement covers on our managed IT services page, or contact us and we’ll walk through your current agreement line by line, no obligation.