Four jobs, three tiers, and a switch-over that doesn't break your week. Here's exactly what you get and what it costs — because you shouldn't have to sit through a sales call just to see a price.
20 minutes. A Copilot + security readiness assessment. No pitch deck.
Everything a growing business needs from an IT department, organized by the outcome you actually care about — not by the hardware involved. Every tier below is built from these four.
The infrastructure underneath everything — monitored around the clock, managed proactively, and replaced before it fails.
A help desk your team actually likes calling — tiered L1–L3, AI-triaged for speed, human-resolved with judgment.
Security isn't an add-on here — it's the spine. Detection, response, backup, and compliance run as one program.
The reason we exist. We take businesses from "we should look into AI" to AI working safely in daily operations — governed, measured, and owned by you.
Pick the level that fits where your business is today. Move up when you're ready — every service laddered cleanly into the next tier.
// pricing model: per-user, billed monthly — scales with seats, not device counts. // add-ons billed separately (below). // project work scoped per engagement, never buried in the monthly fee. // every tier includes AI from day one — that's the whole point of us.
The non-negotiable baseline. Monitoring, patching, EDR, and a help desk — your business protected and running.
Everything in Foundation, plus 24/7 eyes, Microsoft 365 done right, and Copilot put to work.
The full program. Advanced security, compliance, disaster recovery, and a dedicated vCIO steering a 3-year roadmap.
| Capability | Foundation$75–150/user | Momentum$125–250/user | Velocity$200–400+/user |
|---|---|---|---|
| Run — keep you running | |||
| Remote monitoring & management (RMM) | ✓ | ✓ | ✓ |
| Patch management (OS + third-party apps) | ✓ | ✓ | ✓ |
| Network monitoring | Basic | 24/7 | 24/7 |
| Asset & inventory management | – | ✓ | ✓ |
| Support — support your people | |||
| Help desk (L1–L3) | ✓ | ✓ | ✓ |
| Microsoft 365 / Google Workspace mgmt | – | ✓ | ✓ |
| Vendor management | – | ✓ | ✓ |
| Remote & on-site support | Remote | Remote | Remote + on-site |
| After-hours & weekend support | – | – | ✓ |
| Protect — protect what matters | |||
| Antivirus / EDR | ✓ | ✓ | ✓ |
| Backup monitoring (server & critical data) | ✓ | ✓ | ✓ |
| Email security (spam & phishing filtering) | – | ✓ | ✓ |
| Compliance reporting | – | Basic | Full |
| Advanced security — SIEM, threat hunting, MDR | – | – | ✓ |
| Compliance mgmt — HIPAA, PCI-DSS, CMMC, SOC 2 | – | – | ✓ |
| Disaster recovery planning & testing | – | – | ✓ |
| Advance — move you forward | |||
| AI-triaged help desk (every ticket) | ✓ | ✓ | ✓ |
| Quarterly business reviews (QBRs) | – | ✓ | ✓ |
| Microsoft Copilot rollout & governance | – | ✓ | ✓ |
| Workflow automation | – | – | ✓ |
| Dedicated vCIO | – | – | ✓ |
| Strategic IT roadmapping | – | – | ✓ |
| Service level | |||
| Response-time SLA | Next business day | 4-hour | 1-hour |
| Support hours | Business hrs (8–5 PT) | Business + 24/7 monitor | 24/7 |
Most MSPs gate AI behind their most expensive plan. We were AI-first since founding, so every ticket runs through our triage pipeline from your first dollar — and Copilot, automation, and a vCIO layer on as you grow. The same upgrade ladder, minus the bolted-on AI story.
Some things carry their own meter or only matter to some businesses. We price those à la carte instead of padding everyone's monthly bill — so you only pay for what your business actually needs.
Your tier monitors the backups. This is the backup infrastructure itself — full business-continuity and disaster-recovery storage that scales with your data, not your headcount.
Native M365 retention isn't a backup. Independent, point-in-time recovery for Exchange, SharePoint, OneDrive, and Teams — separate from the M365 management already in Momentum and up.
Baseline awareness training rides in the higher tiers. This is the full simulated-phishing platform — ongoing campaigns, scoring, and reporting that turns your team into a firewall.
Carrying or applying for cyber insurance? We map your environment to the policy's control requirements and produce the evidence underwriters ask for — so you qualify and stay covered.
Longer retention windows and legal-hold options for regulated or litigation-exposed businesses that need to keep records well past the standard window.
Migrations, office buildouts, new hardware, security overhauls. Scoped and quoted separately with dedicated project management — never silently absorbed into your monthly agreement. Often the best way to start before you commit.
Changing IT companies sounds risky — lost access, downtime, things slipping through the cracks. It isn't, when there's a plan. Here's the exact order we take you over, with nothing breaking in your workday.
We map every device, license, and risk in your environment, and take ownership of credentials securely — no sticky notes, no shared passwords.
Our monitoring, security, and management stack rolls out quietly in the background while your team keeps working. No downtime, no "IT is down today."
Everything gets written down — your whole environment documented, then audited for security gaps so we fix what your last provider missed.
We coordinate the handoff from your old vendors and flip on live support. From here, when something breaks, an owner answers.
A 20-minute call and a Microsoft 365 Copilot + security readiness assessment. You'll leave knowing your three biggest risks and your single best AI opportunity — whether you hire us or not.
$ hello@carnationtech.ai · mon–fri 8–5 PT · support 24/7
CarnationTech