Our IT Service Packages

Choose the right level of IT support for your business — backed by clear SLAs, proactive monitoring,
and a proven framework trusted by NZ SMEs. Choose a package, secure your IT, and scale with confidence.

Virtus Group
  • Switch to month-to-month after 6 months
  • 90-day onboarding milestone exit (if Virtus misses agreed onboarding milestones)
  • Service-credit SLA for repeated response misses
  • Seat = a named user covered for day-to-day support + identity and device policy for their standard endpoints. It funds the “people side” of IT: requests/incidents, onboarding/offboarding, MFA & Conditional Access hygiene, device baselines, and productivity platform administration (Microsoft 365 / Google Workspace support — licensing billed separately as pass-through).
  • Site = a distinct physical location / network boundary. It funds the “location overhead”: network monitoring, site health checks, vendor liaison, and a baseline managed network footprint per tier (Bronze: 1 firewall, 1 switch, 3 access points · Silver: 1 firewall, 2 switches, 5 access points · Gold: 2 firewalls, 4 switches, 8 access points).
  • Micro Site (optional) = for small locations (≤9 seats, ≤9 managed devices, remote-first, no complex server stack; limit: 2 servers). Micro Site fee: Bronze $200 · Silver $350 · Gold $500/site/month (ex GST). Included footprint (micro): Bronze 1 firewall, 1 switch, 3 access points · Silver 1 firewall, 2 switches, 5 access points · Gold 1 firewall, 2 switches, 6 access points.
  • Beyond the included footprint: we’ll normally propose a predictable monthly uplift (“Growth Pack”) so you can plan. If you prefer itemised billing, per-device add-ons are available (see the Pricing Annex unit catalogue).
  • High device/MAC churn (guest Wi‑Fi, shift workers, BYOD) doesn’t automatically increase fees — pricing follows named users and managed assets. If you want us to manage additional shared devices (kiosks/POS/loan devices), we’ll price them as managed devices per the Annex.

Service Guarantee: a safer way to switch MSPs

We’re local, transparent, and accountable. If we miss the standard we agree with you, you get real remedies — not excuses.

  • Onboarding milestone protection: if we miss agreed onboarding milestones, you can trigger a 90-day exit window.
  • Flex term option: month-to-month after 6 months (available by agreement in your Order Form / SoW).
  • Service credits for repeated misses: if we repeatedly miss response targets, service credits apply as defined in your service schedule.

Note: Guarantee terms are confirmed in your Order Form / SoW so expectations are explicit and enforceable.

Plan comparison (at a glance)

A simple, predictable matrix showing what changes by tier. For detailed definitions, see the Pricing Annex.

What changes by tier
Bronze
$80 / seat / month
Business-hours support • response 4h • resolution target 24h
Silver
$115 / seat / month
Business-hours support • response 1h • resolution target 8h
Gold
$165 / seat / month
24/7 P1 response • response 15m • resolution target 4h
Remote support & incident handling Included (reasonable use) Included (priority triage) Included (24/7 P1 pathway)
Endpoint management (monitoring + patching) Standard cadence Tighter cadence + reporting Highest cadence + rapid response
Identity & cloud tenant operations (M365 / Google) Core admin + hygiene Policy consistency + hardening Continuous improvement + roadmap
Access controls (MFA / Conditional Access) Baseline policies Expanded policies High-assurance policies
Device compliance (Intune / MDM) Optional (if in scope) Included (where applicable) Included + tighter guardrails
Threat protection (AV/EDR operations) Baseline endpoint protection EDR ops + tuning EDR ops + rapid response pathway
Backup oversight (policy + verification) Baseline checks Regular verification evidence Highest cadence + recovery focus
Voice & Collaboration (Teams/VoIP) operational support Supported (ops) Supported (ops + hygiene) Supported (ops + governance)
Reporting & governance cadence Monthly summary Monthly + quarterly review Monthly + quarterly vCIO cadence
Standard site fee (per site / month) $350 + included footprint $600 + included footprint $850 + included footprint
Micro Site (≤9 seats, remote-first) $200 / month $350 / month $500 / month
Coverage Weekdays 8:00-17:00 Weekdays 7:00-19:00 24x7
Included footprint (site fee) 1 FW • 1 SW • 3 APs 1 FW • 2 SW • 5 APs 2 FW • 4 SW • 8 APs

Informational summary only. Exact inclusions, limits, and definitions live in the Pricing Annex and your Order Form / SoW.
Licensing is billed separately as pass-through unless agreed otherwise.
All prices are ex GST. Licensing is pass-through (LIC-PROD). Onsite is billed separately unless explicitly included.

Pricing Bronze: $80 / seat • Silver: $115 / seat • Gold: $165 / seat  

Custom Tailored package: start from $80/seat and $350/site — final pricing per scope.

M365/Google licensing billed separately as LIC-PROD (pass-through)

Site fee Base site fee (per site / month): Bronze $350Silver $600Gold $850

What the site fee covers: Network stack monitoring, ISP/vendor coordination, firewall/Wi-Fi/switch baseline management, onsite logistics, site runbooks/diagrams, patch windows.

Typical monthly examples (ex GST)

Some MSPs bundle Microsoft 365 into the per-user price. Virtus bills licensing at vendor/CSP price (pass-through) and separates service from software.

Micro Site Example

Small Office (≤9 seats)

Remote-first support, predictable pricing.

  • Seats: 9 × $80 = $720
  • Micro site: 1 × $200 = $200
  • Total: $920/month (ex GST)

Assumes 1 site with 1 firewall, 1 switch, 3 access points, ≤2 servers, and standard support hours.

Bronze

10 users · 1 site

$1,150/mo

  • Seats: 10 × $80 = $800
  • Site fee: 1 × $350 = $350
  • Total: $1,150/mo

SLA: Response 4h · Resolution 2 business days

Silver

25 users · 1 site

$3,475/mo

  • Seats: 25 × $115 = $2,875
  • Site fee: 1 × $600 = $600
  • Total: $3,475/mo

SLA: Response 1h · Resolution 8h

Gold

50 users · 2 sites

$9,950/mo

  • Seats: 50 × $165 = $8,250
  • Site fees: 2 × $850 = $1,700
  • Total: $9,950/mo

SLA: Response 15m · Resolution 4h

Want an exact estimate? Tell us seat count, sites, and whether you need SIEM, after-hours coverage, or device add-ons.

SIEM add-on (per site)

Bronze: $150/month
Silver: $200/month
Gold: $300/month

Includes a telemetry credit of 10/15/20 GB per site each month with tuning, weekly checks and a monthly report pack.

Additional telemetry is $12/GB (metered monthly). Prepaid telemetry packs available per site: +20 GB = $220, +50 GB = $550, +100 GB = $1,100.

Notes: Data volume varies by environment (M365, Windows, firewall, endpoints). We’ll recommend a starter pack during onboarding and adjust after 30 days of baselining.

SLAs at a Glance

Bronze: Response 4h • Resolution 2 business days
Silver: Response 1h • Resolution 8h
Gold: Response 15m (24/7) • Resolution 4h

Managed Services

Outcome‑driven care you can subscribe to. Each card links to the matching pilot for scope & pricing.

Email Trust & Domain Protection

Stop spoofing & phishing at the domain level.

Included: Silver/Gold   Add‑on: Bronze

Identity Guard (MFA + Conditional Access)

Reduce account takeovers; keep CA policies healthy.

Baseline: Bronze   Enhanced: Silver/Gold

Backup Integrity Assurance

Confidence you can restore—before you need to.

Included: Silver/Gold   Add‑on: Bronze

Safe Web & DNS

Block risky sites & downloads anywhere users work.

Included: Silver/Gold   Add‑on: Bronze

Cloud Cost Guardrails (FinOps Lite)

Keep cloud bills from creeping up.

Included: Silver/Gold   Add‑on: Bronze

Tenant Care for Microsoft 365

A tidy, secure, compliant M365.

Included: Silver/Gold   Add‑on: Bronze

Managed Cloud

Governance, cost control, and proven restores across Microsoft 365 & Azure.

Included: Silver/Gold   Add-on: Bronze

Project / Programme Management (PMaaS)

Cadenced delivery, pragmatic CAB, and simple status reporting.

Included: All tiers

Managed Infrastructure

Servers/storage/virtualisation kept healthy, patched, and recoverable.

Included: Silver/Gold   Add-on: Bronze

Managed Network (LAN/Wi-Fi/WAN)

Operations with change governance and right-sized safeguards.

Included: Silver/Gold   Add-on: Bronze

CAB-as-a-Service

Lightweight change control & risk reduction with clean records.

Included: All tiers

Vulnerability & Patch Management

Continuous findings + achievable patch cadence with trend reports.

Included: Silver/Gold   Add-on: Bronze

Managed Services — what’s included monthly

Each service is billed monthly. The setup pilot ensures a clean baseline; ongoing care keeps KPIs green.

Email Trust & Domain Protection

Coverage — Bronze: Add‑on · Silver: Included · Gold: Included (+ enforcement checks)

  • DMARC monitoring & policy tuning
  • Sender/source reviews & alerts
  • Monthly report with actions

KPIs we report:

  • DMARC pass rate %
  • Spoofed attempts blocked
  • Authorised sources count
  • Policy level (none→reject)

Identity Guard (MFA + Conditional Access)

Coverage — Bronze: Baseline · Silver: Enhanced · Gold: Enhanced (+ privileged reviews)

  • MFA coverage tracking
  • Conditional Access baseline maintenance
  • Risky sign‑ins watch & break‑glass checks
  • Monthly review

KPIs we report:

  • MFA coverage %
  • Risky sign‑ins trend
  • CA policy drift
  • Break‑glass validity

Backup Integrity Assurance

Coverage — Bronze: Add‑on · Silver: Included · Gold: Included (+ quarterly tests)

  • Backup job monitoring
  • Retention policy drift checks
  • Quarterly restore test
  • Monthly report

KPIs we report:

  • Restore success %
  • RPO/RTO adherence
  • Failed jobs count

Safe Web & DNS

Coverage — Bronze: Add‑on · Silver: Included · Gold: Included (+ escalation path)

  • DNS/Web filtering policy care
  • Blocklist updates
  • Incident reviews
  • Monthly posture report

KPIs we report:

  • Blocked threats/week
  • Policy drift
  • Roaming user coverage %

Cloud Cost Guardrails (FinOps Lite)

Coverage — Bronze: Add‑on · Silver: Included · Gold: Included (+ automation)

  • Budgets & anomaly alerts
  • Idle/rightsizing queue
  • Monthly savings summary
  • Policy guardrails

KPIs we report:

  • Monthly savings $
  • Anomaly MTTR
  • Idle resources reduced

Tenant Care for Microsoft 365

Coverage — Bronze: Add‑on · Silver: Included · Gold: Included (+ vCIO & compliance checks)

  • Baseline config & license hygiene
  • Secure Score deltas
  • Stale sharing cleanups
  • Monthly service review

KPIs we report:

  • Secure Score trend
  • Stale sharing reduction
  • License waste

Managed Cloud

Coverage — Bronze: Add-on · Silver: Included · Gold: Included (+ optimisation)

  • Tenant governance & cost guardrails
  • Backup policy & restore sampling
  • Monthly scorecard & actions

KPIs: Spend variance vs forecast • Restore success % • Secure Score trend

Project / Programme Management (PMaaS)

Coverage — All tiers (cadence differs by tier)

  • Prioritisation, gating & status packs
  • Risk / issue / change control (CAB notes)

KPIs: Milestone hit rate • Change success • Risk burn-down

Managed Infrastructure

Coverage — Bronze: Add-on · Silver: Included · Gold: Included

  • Patch cadence & health checks
  • Backup/restore verification
  • Capacity monitoring

KPIs: Patch compliance • Restore success • Capacity risks

Managed Network (LAN/Wi-Fi/WAN)

Coverage — Bronze: Add-on · Silver: Included · Gold: Included

  • Config backups & change governance
  • Health & link monitoring
  • SWG/DNS/Firewall posture alignment

KPIs: Change success • Uptime • Incident MTTR

CAB-as-a-Service

Coverage — All tiers (cadence differs by tier)

  • Change scheduling & approvals
  • Risk assessment & post-change reviews

KPIs: Change success • Emergency changes • Exceptions

Vulnerability & Patch Management

Coverage — Bronze: Add-on · Silver: Included · Gold: Included

  • Asset & vuln discovery; prioritisation
  • Patch windows & exception handling
  • Monthly risk reports

KPIs: Risk trend • Patch cadence hit-rate • Exceptions

Typical monthly examples (detailed)

All pricing is ex GST. Licensing is pass-through (LIC-PROD). SIEM add-on pricing shown per site.

Bronze

10 users · 1 site

$1,150/mo (service)

Breakdown
  • Seats: 10 × $80 = $800
  • Site fee: 1 × $350 = $350
  • Monthly service total: $1,150
SLAs
  • Coverage: Weekdays 8:00-17:00
  • Response: 4 hours
  • Resolution target: 2 business days
What this tier is great for
  • Proactive patching + baseline protection
  • Clear response targets + predictable budgeting
  • Best for smaller teams that want structure, not chaos
Common add-ons
  • SIEM add-on: +$150/site/mo (10 GB credit; extra $12/GB)
  • M365/Google licensing: billed separately (pass-through)

Notes: Pricing is seat + site fees. Projects/material changes delivered via SoW (fixed price or T&M).

Silver

25 users · 1 site

$3,475/mo (service)

Breakdown
  • Seats: 25 × $115 = $2,875
  • Site fee: 1 × $600 = $600
  • Monthly service total: $3,475
SLAs
  • Coverage: Weekdays 7:00-19:00
  • Response: 1 hour
  • Resolution target: 8 hours
What you get most from Silver
  • Faster escalation + stronger operational cadence
  • Better reporting and remediation focus
  • Ideal for teams that want fewer incidents and faster recovery
Common add-ons
  • SIEM add-on: +$200/site/mo (15 GB credit; extra $12/GB)
  • M365/Google licensing: billed separately (pass-through)

Note: We’ll recommend a SIEM starter telemetry level after 30 days baselining.

Gold

50 users · 2 sites

$9,950/mo (service)

Breakdown
  • Seats: 50 × $165 = $8,250
  • Site fees: 2 × $850 = $1,700
  • Monthly service total: $9,950
SLAs
  • Coverage: 24x7
  • Response: 15 minutes
  • Resolution target: 4 hours
Best fit for
  • High-dependency environments where downtime is expensive
  • Security-forward operations and faster incident handling
  • Teams with multiple sites and business-critical systems
Common add-ons
  • SIEM add-on: +$300/site/mo (20 GB credit; extra $12/GB)
  • M365/Google licensing: billed separately (pass-through)

Reminder: SIEM add-on is per site. For 2 sites: +$600/mo SIEM base.

With Virtus You Get

🛡️

Stronger Security Posture

Layered protection with EDR/MDR, SIEM, and proactive hardening.

⚙️

Higher Uptime & Productivity

Continuous monitoring, patching, and fast incident response.

💸

Lower Cloud & IT Costs

Right-size resources and automate to eliminate waste.

Learn more
📜

Simplified Compliance

Policies, logging, and retention aligned to NZ sector needs.

🧭

Clear Strategy & Roadmap

vCIO guidance and quarterly roadmap for stakeholders.

📈

Predictable Budgeting

Seat-based pricing with SLA guarantees and reporting.

Add-Ons & Customisation

Extend any package as your needs grow.

Advanced Security (EDR/MDR)

24/7 monitoring and guided response by security analysts.

24/7 Support

Round-the-clock coverage for priority incidents.

Quarterly vCIO

Business reviews, KPIs, risk register, and investment plan.

Compliance & Projects

Audits, remediation, migrations, and automation via SOW/WO.

Technology Partnerships

Microsoft, Cisco, Palo Alto, Citrix, VMware, Fortinet, AWS, Check Point, F5, Zscaler, Juniper and more partnerships

Our Delivery Framework

Discover
Protect
Detect
Respond
Recover
Optimise

We continuously monitor and protect endpoints, proactively detect threats, respond rapidly to incidents, recover data and systems, and optimise performance and costs. This cycle ensures Virtus Group clients achieve sustainable IT resilience and business alignment.

Custom Packages — Built for Your Environment

When Bronze, Silver, or Gold don’t fit perfectly, we build a tailored package using the same seat + site (and micro-site) model — then quote a predictable monthly total.

  1. Choose a baseline tier (Bronze / Silver / Gold).
  2. Confirm footprint: standard site(s) or Micro Site (≤9 seats, remote-first).
  3. Add the modules you need (after-hours uplift, SIEM-lite, compliance evidence packs, vCIO cadence, voice/collab ops).
  4. Agree the “beyond included footprint” approach: predictable monthly uplift (recommended) or itemised per-device rates (see Pricing Annex).
Base examples below are service-only (ex GST) using current seat + site fees. Licensing is billed at vendor/CSP price (pass-through) unless otherwise agreed. Projects are quoted separately (fixed price or T&M).

Example A — 25 seats, 1 site (standard)

Bronze: $2,350 / month

Silver: $3,475 / month

Gold: $4,975 / month

Common add-ons: SIEM-lite, after-hours uplift, compliance reporting, extra network footprint.

Example B — 60 seats, 2 sites (standard)

Bronze: $5,500 / month

Silver: $8,100 / month

Gold: $11,600 / month

Good fit for multi-site ops with stronger governance and faster response targets.

Example C — 120 seats, 3 sites (standard)

Bronze: $10,650 / month

Silver: $15,600 / month

Gold: $22,350 / month

Often paired with: compliance evidence packs, SIEM-lite, and a regular vCIO cadence.

Micro Site — 9 seats, remote-first

Bronze: $920 / month

Silver: $1,385 / month

Gold: $1,985 / month

Includes Micro Site fee (≤9 seats, ≤9 managed devices, remote-first). Onsite is charged separately unless agreed. Simple server stack only (limit: 2).

Ideal for multi-site environments, regulated workloads, or teams with unique workflows. Turnaround for a scoped quote: usually 1 business day.

Beyond the Packages

More ways we help you accelerate outcomes — expand each section for what you get, how it runs, and what “good” looks like.

Micro Sites — how they work (and when they fit)

Micro Sites are designed for small locations that still want “proper MSP” hygiene without paying for enterprise overhead.

  • Eligibility: ≤9 seats, ≤9 managed devices (including network gear), remote-first; no complex server stack (limit: 2 servers).
  • Pricing: Seats are priced per tier (Bronze $80 · Silver $115 · Gold $165). Micro Site fee adds $200 / $350 / $500 per site/month.
  • Included footprint: Bronze 1 firewall, 1 switch, 3 access points · Silver 1 firewall, 2 switches, 5 access points · Gold 1 firewall, 2 switches, 6 access points.
  • On-site: charged separately (per the Annex) unless otherwise agreed.
If a site grows beyond the micro limits, we simply move it to the standard Site fee (same tier) — no drama, just a clean re‑baseline.

Included footprint per site — avoiding surprise add-ons

Each Site fee includes a baseline managed network footprint so you can budget.

  • Bronze: 1 firewall, 1 switch, 3 access points
  • Silver: 1 firewall, 2 switches, 5 access points
  • Gold: 2 firewalls, 4 switches, 8 access points
Beyond baseline: we normally propose a fixed monthly uplift (“Growth Pack”) so billing stays predictable. If you prefer fully itemised billing, we can apply per-device add-ons instead (unit catalogue in the Pricing Annex).

What if we have <10 seats but many devices / MACs changing daily?

Pricing follows named users and managed assets — not the raw count of devices seen on Wi‑Fi. Guest/BYOD/shift-worker churn doesn’t automatically change your bill.

If you want Virtus to manage additional shared devices (POS/kiosks/loan devices/IoT), we’ll classify them as managed devices and price them transparently using the Annex units, or include them as part of an agreed Growth Pack uplift.

Voice & Collaboration (Teams / VoIP) — what we cover

We support collaboration as part of the day-to-day operating layer:

  • Microsoft 365 / Google Workspace administration (mailflow, security defaults, account hygiene).
  • Teams/SharePoint/OneDrive troubleshooting and governance.
  • Coordination for Teams Phone / SIP / VoIP providers (call quality triage, configuration guidance, escalation).
Carrier charges, new deployments, SBC work, major migrations and complex call-routing redesign are typically delivered as a project (fixed price or T&M) so scope stays clean.

Strategy & vCIO — what’s included?

This is the “turn IT into an operating rhythm” layer — built for owners/leadership who want fewer surprises.

  • Quarterly Business Review (QBR): what improved, what degraded, what changed.
  • KPI dashboard: SLA outcomes, security posture trends, backup confidence, ageing risk items.
  • Risk register: top risks ranked by likelihood/impact with “next best actions”.
  • Spend plan: forecasted run costs + planned uplift costs, explained in plain language.
  • Roadmap: 90-day actions + 12-month priorities (security, resilience, productivity).
  • Standards & policies: lightweight, usable standards (not shelfware) that support growth and compliance.
Outcome: IT becomes predictable, and investment choices become easier to justify.

Automation — what’s included?

Practical automation that reduces noise and labour while improving consistency.

  • Device provisioning: repeatable onboarding/offboarding and baseline enforcement.
  • Patch orchestration: rings/cadence, exception handling, and rollback-aware deployment.
  • Auto-remediation runbooks: common fixes that trigger safely from alerts.
  • Ticket enrichment: context added automatically (asset, site, user, priority, known issues).
  • Reporting automation: monthly packs generated from operational signals, not hand-written updates.
Outcome: faster MTTR, fewer recurring incidents, and more time spent on improvements instead of firefighting.

Core Infrastructure — what’s included?

The foundational controls that keep environments stable and recoverable.

  • Identity & access: MFA/CA health, privileged access hygiene, break-glass integrity.
  • Network segmentation: sensible separation to reduce blast radius and improve performance.
  • Endpoint baselines: security posture baselines that don’t break productivity.
  • Server hardening: patching patterns, backup verification, access controls, drift checks.
  • Backup/DR patterns: tested recovery pathways aligned to your RPO/RTO reality.
Outcome: fewer outages, faster recovery, cleaner audits, and reduced “mystery behaviour” in systems.

Project Delivery — how we work

Projects stay controlled because we run them with clear acceptance and clean change governance.

  • Fixed-scope SoWs when outcomes are well-defined (ideal for migrations and uplifts).
  • Agile work orders when discovery is part of the work (cadenced delivery, transparent burn).
  • Change control (CAB) for risky changes: planned windows + rehearsed rollback.
  • Weekly cadence: short standups, risk tracking, and visible progress.
  • Acceptance criteria: what “done” means is defined before we start.
Outcome: fewer surprises, predictable delivery, and decisions documented when trade-offs exist.

Cloud & FinOps — what’s included?

Keep cloud spend sane while strengthening security and resilience.

  • Right-sizing: remove waste and align capacity to business need.
  • Cost optimisation: guardrails + monthly savings log (so improvements are measurable).
  • Backup/DR: cloud-aware protection patterns and periodic restore confidence checks.
  • Security baselines: least privilege, logging, identity hygiene, and secure defaults.
Outcome: stable monthly run cost, fewer “bill shocks”, and fewer insecure exceptions.

Security & Compliance — what’s included?

A pragmatic “security you can operate” approach — aligned to NZ SME reality.

  • EDR/MDR: endpoint detection + guided response (optionally SOC-backed).
  • SIEM-lite: log visibility, weekly checks, and monthly report packs where needed.
  • Policies & evidence: controls that produce proof, not paperwork.
  • Audits & remediation: identify gaps, fix them, and document the outcome.
  • Awareness & hardening: reduce human-risk without slowing the business down.
Outcome: reduced likelihood/impact of incidents, and a compliance posture that doesn’t collapse under operational load.


Note: Packages on this page are Managed Services (monthly) unless explicitly labelled as a setup/pilot. Setup/baseline work is CPS; the ongoing care is MS.


Get in touch

We’ll help you choose the right package for your business.