Managed Endpoint Care
Keep laptops and desktops secure and up‑to‑date without slowing people down.
SME‑friendly offers with clear scope, predictable pricing, and simple next steps.
Virtus Group provides Managed Services that operate, monitor, and improve your environment under defined SLAs/SLOs. Many MS offerings are natural follow-ons from CPS projects: we take the baselines, runbooks, and controls built during CPS and operate them as a monthly service.
Keep laptops and desktops secure and up‑to‑date without slowing people down.
Cut phishing & spoofing; manage DMARC/SPF/DKIM and filtering posture.
Backups you can actually restore—tested, monitored, and reported.
Reduce account takeovers; keep MFA and Conditional Access healthy.
Sensible internet access controls, SD‑WAN/SASE posture, and change governance.
Keep cloud costs in check with simple guardrails and a monthly savings log.
Block risky sites & downloads with DNS/SWG policies and sensible exceptions.
Keep your M365 tenant healthy—Secure Score, baselines, and change notes.
Keep Microsoft 365/Azure tidy with governance, cost control, and proven restores.
Cadenced delivery, pragmatic CAB, and simple status reporting.
Servers/storage/virtualisation kept healthy, patched, and recoverable.
LAN/Wi‑Fi/WAN operations with change governance and right‑sized safeguards.
Lightweight change control and risk reduction with records you can trust.
Find and reduce risk with continuous scanning and achievable cadence.
A simple, predictable matrix showing what changes by tier. For detailed definitions, see the Pricing Annex.
| What changes by tier |
Bronze
$80
|
Silver
$115
|
Gold
$165
|
|---|---|---|---|
| Remote support & incident handling | ✓ Included (reasonable use) | ✓ Included (priority triage) | ✓ Included (24/7 P1 pathway) |
| Endpoint management (monitoring + patching) | ✓ Standard cadence | ✓ Tighter cadence + reporting | ✓ Highest cadence + rapid response |
| Identity & cloud tenant operations (M365 / Google) | ✓ Core admin + hygiene | ✓ Policy consistency + hardening | ✓ Continuous improvement + roadmap |
| Access controls (MFA / Conditional Access) | ✓ Baseline policies | ✓ Expanded policies | ✓ High-assurance policies |
| Device compliance (Intune / MDM) | Optional (if in scope) | ✓ Included (where applicable) | ✓ Included + tighter guardrails |
| Threat protection (AV/EDR operations) | ✓ Baseline endpoint protection | ✓ EDR ops + tuning | ✓ EDR ops + rapid response pathway |
| Backup oversight (policy + verification) | ✓ Baseline checks | ✓ Regular verification evidence | ✓ Highest cadence + recovery focus |
| Voice & Collaboration (Teams/VoIP) operational support | ✓ Supported (ops) | ✓ Supported (ops + hygiene) | ✓ Supported (ops + governance) |
| Reporting & governance cadence | ✓ Monthly summary | ✓ Monthly + quarterly review | ✓ Monthly + quarterly vCIO cadence |
| Standard site fee (per site / month) | $350 + included footprint | $600 + included footprint | $850 + included footprint |
| Micro Site (≤9 seats, remote-first) | $200 / month | $350 / month | $500 / month |
| Coverage | Weekdays 8:00-17:00 | Weekdays 7:00-19:00 | 24x7 |
| Included footprint (site fee) | 1 FW • 1 SW • 3 APs | 1 FW • 2 SW • 5 APs | 2 FW • 4 SW • 8 APs |
Informational summary only. Exact inclusions, limits, and definitions live in the Pricing Annex and your Order Form / SoW.
Licensing is billed separately as pass-through unless agreed otherwise.
All prices are ex GST. Licensing is pass-through (LIC-PROD). Onsite is billed separately unless explicitly included.
Clear answers on scope, SLAs, licensing, and how we work.
Book a Lite / Standard / Plus Assessment. We confirm scope, capture the key constraints (people, sites, systems, risk tolerance),
identify quick wins, and recommend the right managed service(s) and tier so you’re not overbuying.
You get: a short findings summary, a prioritised action list, and a clear “start here” plan for the next 30–90 days.
Managed Services are for ongoing operation of a known baseline: monitoring & alert triage, patch/vulnerability cadence,
backup/DR run-state, identity/access operations, M365 tenant care, managed network/cloud, scheduled reporting & service reviews, and CAB participation.
Not included: one-off discovery/uplifts (that’s CPS), major projects, and custom application development.
If it’s a material change, we quote it and deliver it via SoW/WO (fixed-scope or T&M).
Tiers map to a few practical levers:
Licensing is billed separately as a pass-through line (LIC-PROD) at the prevailing vendor/CSP SKU price.
We don’t “hide” margin in licensing unless explicitly agreed in writing.
Your managed plan includes management/operations of the tenant and environment; licenses remain a separate cost driver.
Seat pricing covers the “people side” of IT: day-to-day requests/incidents, onboarding/offboarding, identity hygiene (MFA/Conditional Access), device baseline controls,
and productivity platform administration (Microsoft 365 / Google Workspace support — licensing billed separately).
Site fees cover the “location overhead”: network monitoring, site health checks, vendor liaison, and a baseline managed network footprint.
Response = acknowledgement + triage starts (we engage, gather facts, stabilise).
Resolution = service restored (or a safe workaround + next-step plan agreed).
For complex incidents (e.g., vendor outage, cyber event, hardware lead-times), we still work to a predictable rhythm:
containment → recovery → remediation → prevention actions recorded through CAB.
Yes. Silver extends hours, and Gold includes 24×7 P1 coverage.
After-hours effort is billed using your agreed rules (weeknights at a multiplier; weekends/public holidays higher).
If you need true “always-on” coverage for more than P1, we can quote it as an add-on aligned to your risk profile.
Yes. We cover Taranaki and schedule onsite where it genuinely reduces risk or accelerates recovery.
To keep pricing transparent, onsite travel and minimums follow your published rules (e.g., onsite minimums + travel treatment).
We assign the minimum safe level based on risk and complexity:
Managed Services are not “hour banks”. Anything that materially changes scope (migrations, major uplifts, redesigns, compliance remediation, automation builds) is delivered via Statement of Work / Work Orders as either fixed-scope or T&M — depending on what you prefer and what’s sensible.
A predictable monthly pack:
SLA/SLO outcomes, key incidents & root causes, risk & improvement items, and evidence where applicable
(e.g., restore-test outcomes for backup integrity assurance).
Optional: quarterly roadmap/vCIO cadence for leadership-level alignment.
Yes. Your environment remains yours. We aim for a clean handover: runbooks, key configs, access lists, and “what’s important” operational notes so you’re not held hostage by tools or tribal knowledge.
Helpful links: Packages · Pricing Annex
Our Lite / Standard / Plus Assessment finds the quickest wins and the right managed service to keep things healthy.
And/or send us a quote request for Managed Services.