How Ohio SMBs should price managed IT — three models, one published baseline

On a first walkthrough, most Ohio SMB owners — Lancaster and Columbus to Cleveland, Cincinnati, Dayton, Akron, Toledo, and Canton — open with the same line: "What does this cost per month?" The SLA question comes second. That order is not wrong. Pricing is the line item that lands on the books every month; the SLA is the line that does or does not hold up under load. Pricing is also the variable a vendor can hide behind — the one that determines whether the contract survives the next hire, the next office open, or the next pivoting compliance ask. The SLA is a contract term; pricing is a math game the vendor runs on the quote page.

Endpoint count is the single number that moves the line item the most across all three pricing models. Under per-endpoint, the count is the bill. Under per-user, the headcount carries the load — and the device each person actually carries is a separate billing conversation you have at signing. Under flat-rate, the count is the tier cliff you cross when the next laptop shows up. That same variable also drives the volume discount. Central IT Dept publishes the same ladder at 5 / 10 / 25 / 50 endpoints, step 5% / 10% / 15% / 20% off against the $189 baseline. The math is identical whether you're quoting for 7 endpoints or 70: count endpoints, look up the breakpoint, apply the percent. No sales pitch, no "custom quote", no term bargain. Endpoint count is also the variable that's hardest to fudge on a walkthrough. A vendor can add a layer, drop a layer, or quote hourly behind the scenes — but the count is the count. Press on it first.

Managed IT in 2026 is no longer helpdesk plus antivirus. The Ohio SMB baseline now spans eight operational layers under one contract scope. A quote that is missing any one of these is not "managed" in the buyer-side sense — it is a fragment contract with a sales pitch bolted on. The eight layers are: (1) helpdesk, business-hours on Starter or 24/7 on Managed and Premium; (2) 24/7 endpoint monitoring; (3) managed antivirus / EDR; (4) patch management for OS plus third-party; (5) mobile security via MDM; (6) building security, covering card readers, cameras, and access logs; (7) SIEM log correlation on Managed and Premium; (8) network and bandwidth monitoring, same tiers. A quote that covers three of the eight and quotes each as a separate line item is not cheaper — it is a fragmented contract with three billing conversations and three escalation paths when something fails. The line item that looks like $89 per endpoint hides another $120 per endpoint in add-ons, until you read the attached scope.

Most Ohio SMBs we walk through have a vendor quoting one of three things: a strict helpdesk line, a bundled line that misses security altogether, or a base + per-incident model that turns a ransomware event into a five-figure invoice the week of the incident. The tell is what is missing from the attached scope. A quote that does not mention SIEM, helpdesk SLA, or endpoint monitoring language is a break-fix contract with a different sales pitch. The right test is whether the eight operational layers ship under one signed scope, attached to one monthly number, with the same first-response SLA on every ticket.

Central IT Dept default — Per-endpoint

What it is. Billed per device covered: laptops, desktops, servers, mobile devices under MDM, and point-of-sale terminals each count as one endpoint. Infrastructure (firewalls, switches, cameras) sits on the same contract without a per-device line item.

What it typically hides. Vendors who count "endpoint" differently. Some quote by user seat (which can mean two billable items for one laptop plus phone). Some quote by agent but exclude servers. Some bucket infrastructure into a separate line item. The line item looks the same on a quote until you read the attached scope.

Typical Ohio SMB range. For Ohio SMBs with 10–50 employees, the typical published range is roughly $120 to $220 per endpoint per month. The spread is driven by what is bundled in (SIEM, on-call, MDM), not by the per-device number itself.

How Central IT Dept, LLC compares. Central IT Dept publishes $189 per endpoint as the Starter baseline, with the volume ladder stepping to 5% / 10% / 15% / 20% off at 5 / 10 / 25 / 50 endpoints. The eight operational layers ride on the same line item from the helpdesk through the SIEM — no scope amendment is needed at signing.

Alternative model — Per-user

What it is. Billed per named employee, regardless of how many devices they carry. A typical Ohio SMB office worker carries a laptop, a phone, and occasionally a desktop — all on one billable seat.

What it typically hides. The per-user math drifts the moment a single user carries multiple devices (laptop plus phone plus tablet), or when contractors, kiosks, or a warehouse scanner crew sit outside the named-user list. You pay for the seat you named; the third device that shows up on your network is a separate billing conversation.

Typical Ohio SMB range. For Ohio SMBs with 10–50 employees, the typical published range is roughly $80 to $250 per user per month. The spread comes from whether the line covers helpdesk, security, or both — and from how the vendor counts the seat (named user vs. active user).

How Central IT Dept, LLC compares. Central IT Dept does not publish a per-user line item. Every endpoint receives the same scope under the $189 per-endpoint baseline, and the volume ladder steps against endpoint count rather than headcount — so a contractor, kiosk, or warehouse scanner joining the fleet mid-contract moves the line item by exactly one endpoint, not by a seat renegotiation.

Alternative model — Flat-rate (all-you-can-eat)

What it is. A single monthly number covers a stated scope from one endpoint up to a published threshold. Common in SMB shops that want one predictable line item on the books — a constant read every month, regardless of fleet size, until the next tier cliff.

What it typically hides. Tier cliffs and hidden overage. Tier 1 covers 25 endpoints; the moment you cross 26, the entire flat-rate number jumps to the next tier — sometimes by 40% or more, with no per-device visibility into where the new money goes. Hidden overage is the second trap: each device beyond a soft cap is per-ticket or per-month surcharge, and the surcharge code is rarely in the headline.

Typical Ohio SMB range. For Ohio SMBs with 10–50 employees, the typical published range is roughly $1,500 to $8,000 per month, depending on scope. The wide spread is mostly tier boundaries and which security layers are bundled — not differences in service quality.

How Central IT Dept, LLC compares. Central IT Dept does not publish a flat-rate line item. The per-endpoint model keeps every device at the same contract scope and steps the volume discount automatically against endpoint count — there is no tier cliff and no per-ticket surcharge, so adding a single endpoint moves the line item by one $189 (or the discounted rate at the current count).

The $189 per-endpoint baseline that citcyber.com publishes is what the public contract page says — with the same volume ladder at 5% / 10% / 15% / 20% off at 5 / 10 / 25 / 50 endpoints. It is not a quote; quotes are valid 30 days and lock against the endpoint count at signing. The baseline is the floor the volume ladder walks down from, line-itemed in writing on every signed scope. The right test is not "who is cheaper per endpoint" — it is "what scope is the line item carrying, and what does the same scope cost against the same scope at the same endpoint count?" Three out of four is not four; one provider's per-endpoint $129 with no SIEM sits beside another provider's per-endpoint $189 with SIEM, MDM, and SIEM-fed building security built in.

The ladder is the part of the contract most Ohio SMBs skip. Adding five endpoints should not move a vendor away from the published baseline; that is supposed to be the volume discount stepping to the next breakpoint automatically. The same is true in reverse — removing five endpoints should not unlock a penalty fee, since the discount was applied to a percent, not a contract prepay. Central IT Dept publishes the 5 / 10 / 25 / 50 ladder with 5% / 10% / 15% / 20% percent steps, calculated against the endpoint count at signing.