Our Managed IT Services

SME‑friendly offers with clear scope, predictable pricing, and simple next steps.

Virtus Group

Overview

Virtus Group provides Managed Services that operate, monitor, and improve your environment under defined SLAs/SLOs. Many MS offerings are natural follow-ons from CPS projects: we take the baselines, runbooks, and controls built during CPS and operate them as a monthly service.

  • Switch to month-to-month after 6 months
  • 90-day onboarding milestone exit (if Virtus misses agreed onboarding milestones)
  • Service-credit SLA for repeated response misses
Included (MS): ongoing monitoring & alert triage, patch/vulnerability cadence, backup/DR run-state, identity & access operations, M365 tenant care, managed network/cloud, scheduled reporting & service reviews, CAB participation.
Not included: one-off discovery/uplifts (that’s CPS), major projects, or custom app dev.

Browse services

Managed Endpoint Care

Keep laptops and desktops secure and up‑to‑date without slowing people down.

View service →

Email & Domain Protection

Cut phishing & spoofing; manage DMARC/SPF/DKIM and filtering posture.

View service →

Backup & Recovery

Backups you can actually restore—tested, monitored, and reported.

View service →

Identity & Access Management

Reduce account takeovers; keep MFA and Conditional Access healthy.

View service →

Network Security Management

Sensible internet access controls, SD‑WAN/SASE posture, and change governance.

View service →

Cloud Spend Guardrails

Keep cloud costs in check with simple guardrails and a monthly savings log.

View service →

Safe Web & DNS

Block risky sites & downloads with DNS/SWG policies and sensible exceptions.

View service →

Tenant Care for Microsoft 365

Keep your M365 tenant healthy—Secure Score, baselines, and change notes.

View service →

Managed Cloud

Keep Microsoft 365/Azure tidy with governance, cost control, and proven restores.

View service →

Project / Programme Management (PMaaS)

Cadenced delivery, pragmatic CAB, and simple status reporting.

View service →

Managed Infrastructure

Servers/storage/virtualisation kept healthy, patched, and recoverable.

View service →

Managed Network

LAN/Wi‑Fi/WAN operations with change governance and right‑sized safeguards.

View service →

CAB‑as‑a‑Service

Lightweight change control and risk reduction with records you can trust.

View service →

Vulnerability & Patch Management

Find and reduce risk with continuous scanning and achievable cadence.

View service →

Plan comparison (at a glance)

A simple, predictable matrix showing what changes by tier. For detailed definitions, see the Pricing Annex.

What changes by tier
Bronze
$80 / seat / month
Business-hours support • response 4h • resolution target 24h
Silver
$115 / seat / month
Business-hours support • response 1h • resolution target 8h
Gold
$165 / seat / month
24/7 P1 response • response 15m • resolution target 4h
Remote support & incident handling Included (reasonable use) Included (priority triage) Included (24/7 P1 pathway)
Endpoint management (monitoring + patching) Standard cadence Tighter cadence + reporting Highest cadence + rapid response
Identity & cloud tenant operations (M365 / Google) Core admin + hygiene Policy consistency + hardening Continuous improvement + roadmap
Access controls (MFA / Conditional Access) Baseline policies Expanded policies High-assurance policies
Device compliance (Intune / MDM) Optional (if in scope) Included (where applicable) Included + tighter guardrails
Threat protection (AV/EDR operations) Baseline endpoint protection EDR ops + tuning EDR ops + rapid response pathway
Backup oversight (policy + verification) Baseline checks Regular verification evidence Highest cadence + recovery focus
Voice & Collaboration (Teams/VoIP) operational support Supported (ops) Supported (ops + hygiene) Supported (ops + governance)
Reporting & governance cadence Monthly summary Monthly + quarterly review Monthly + quarterly vCIO cadence
Standard site fee (per site / month) $350 + included footprint $600 + included footprint $850 + included footprint
Micro Site (≤9 seats, remote-first) $200 / month $350 / month $500 / month
Coverage Weekdays 8:00-17:00 Weekdays 7:00-19:00 24x7
Included footprint (site fee) 1 FW • 1 SW • 3 APs 1 FW • 2 SW • 5 APs 2 FW • 4 SW • 8 APs

Informational summary only. Exact inclusions, limits, and definitions live in the Pricing Annex and your Order Form / SoW.
Licensing is billed separately as pass-through unless agreed otherwise.
All prices are ex GST. Licensing is pass-through (LIC-PROD). Onsite is billed separately unless explicitly included.

FAQs

Clear answers on scope, SLAs, licensing, and how we work.

What’s the fastest way to get started?

Book a Lite / Standard / Plus Assessment. We confirm scope, capture the key constraints (people, sites, systems, risk tolerance), identify quick wins, and recommend the right managed service(s) and tier so you’re not overbuying.

You get: a short findings summary, a prioritised action list, and a clear “start here” plan for the next 30–90 days.

What’s included in Managed Services (and what isn’t)?

Managed Services are for ongoing operation of a known baseline: monitoring & alert triage, patch/vulnerability cadence, backup/DR run-state, identity/access operations, M365 tenant care, managed network/cloud, scheduled reporting & service reviews, and CAB participation.

Not included: one-off discovery/uplifts (that’s CPS), major projects, and custom application development. If it’s a material change, we quote it and deliver it via SoW/WO (fixed-scope or T&M).

How do Bronze / Silver / Gold tiers differ in practice?

Tiers map to a few practical levers:

  • Hours coverage (business hours vs extended vs P1 24×7).
  • Response & resolution targets (SLOs).
  • Cadence (patch/vuln cycle, review frequency, reporting depth).
  • Security posture (baseline vs enhanced vs SOC-backed options).
We can also mix-and-match by area (e.g., Gold for identity + email, Silver for endpoints, Bronze for low-risk sites) to keep value tight.

Do you include software licensing (Microsoft 365 / Google)?

Licensing is billed separately as a pass-through line (LIC-PROD) at the prevailing vendor/CSP SKU price. We don’t “hide” margin in licensing unless explicitly agreed in writing.

Your managed plan includes management/operations of the tenant and environment; licenses remain a separate cost driver.

What’s the difference between seat pricing and site fees?

Seat pricing covers the “people side” of IT: day-to-day requests/incidents, onboarding/offboarding, identity hygiene (MFA/Conditional Access), device baseline controls, and productivity platform administration (Microsoft 365 / Google Workspace support — licensing billed separately).

Site fees cover the “location overhead”: network monitoring, site health checks, vendor liaison, and a baseline managed network footprint.

  • Bronze site footprint: 1 firewall, 1 switch, 3 access points
  • Silver site footprint: 1 firewall, 2 switches, 5 access points
  • Gold site footprint: 2 firewalls, 4 switches, 8 access points
Micro Sites are available for small locations (≤9 seats/devices, remote-first, ≤2 servers): $200/$350/$500 per site/month.

Beyond baseline, we usually propose a predictable monthly uplift (“Growth Pack”) so you can budget; per-device add-ons are also available if you prefer itemised billing (see Annex).

If you have a small team but lots of Wi‑Fi churn, pricing still follows named users and managed assets, not every MAC address seen on the network.

What does “response” vs “resolution” mean?

Response = acknowledgement + triage starts (we engage, gather facts, stabilise). Resolution = service restored (or a safe workaround + next-step plan agreed).

For complex incidents (e.g., vendor outage, cyber event, hardware lead-times), we still work to a predictable rhythm: containment → recovery → remediation → prevention actions recorded through CAB.

Is after-hours or 24×7 support available?

Yes. Silver extends hours, and Gold includes 24×7 P1 coverage. After-hours effort is billed using your agreed rules (weeknights at a multiplier; weekends/public holidays higher).

If you need true “always-on” coverage for more than P1, we can quote it as an add-on aligned to your risk profile.

We’re in Taranaki — can you come onsite?

Yes. We cover Taranaki and schedule onsite where it genuinely reduces risk or accelerates recovery.

To keep pricing transparent, onsite travel and minimums follow your published rules (e.g., onsite minimums + travel treatment).

How do you decide which engineer rate (L1–L4 / vCIO) applies?

We assign the minimum safe level based on risk and complexity:

  • L1–L2: runbook tasks / standard requests / low complexity.
  • L3+: identity, network, firewall, server changes; incident work.
  • L4 / vCIO: architecture, complex troubleshooting, governance, strategy.
This prevents overcharging for simple tasks while ensuring higher-risk work is done by the right hands.

How do projects and “material changes” work?

Managed Services are not “hour banks”. Anything that materially changes scope (migrations, major uplifts, redesigns, compliance remediation, automation builds) is delivered via Statement of Work / Work Orders as either fixed-scope or T&M — depending on what you prefer and what’s sensible.

What reporting will we see each month?

A predictable monthly pack: SLA/SLO outcomes, key incidents & root causes, risk & improvement items, and evidence where applicable (e.g., restore-test outcomes for backup integrity assurance).

Optional: quarterly roadmap/vCIO cadence for leadership-level alignment.

What happens if we leave — do we keep documentation and configs?

Yes. Your environment remains yours. We aim for a clean handover: runbooks, key configs, access lists, and “what’s important” operational notes so you’re not held hostage by tools or tribal knowledge.

Service tiers & reporting

Where to start?

Our Lite / Standard / Plus Assessment finds the quickest wins and the right managed service to keep things healthy.

And/or send us a quote request for Managed Services.

Additional Resources