Every price on one page.
Fixed prices in US dollars, confirmed in writing before any work starts. No hourly billing, no surprises on the invoice.
Managed Intune
We run your Intune tenant every month: baseline, drift review, app catalogue, update rings and Autopatch, monthly report, small changes inside the fee. Minimum $300 a month, month to month, stop any month. Onboarding baseline $500 one off, waived after a Hardening project or a Full Assessment in the last 90 days.
- Named lead engineer who knows your tenant
- First response within two business hours, P1 within the hour
- Monthly report a director or insurer can read
- Microsoft licences stay billed by Microsoft
Security Health Check
Read only look at the settings that matter most. One page of findings, ranked, and a 30 minute call.
- MFA and Conditional Access for every user
- Admin accounts, legacy sign in, SPF, DKIM, DMARC
- Licences paid for and unused
- Secure Score and the three moves that matter
Full Security Assessment
Your whole tenant scored against Microsoft best practice and the CIS benchmark, 48 checks, with a priced roadmap. Over 50 users: $10 per extra user.
- Everything in the Health Check
- Every device, mailbox setting and sharing setting
- Scored report, grade per domain, evidence attached
- One hour walkthrough and a licence waste page
Hardening and Build
We implement the roadmap in an agreed order with a defined end. The quote lists outcomes, price and date before anything starts.
- MFA and Conditional Access, Intune enrolment and baselines
- BitLocker, Autopilot, Defender for Business
- Joiner and leaver runbooks, documentation, handover
- Report only, then pilot, then everyone
What is in each one off service
| What we do | Health Check$250 · 2 days | Full Assessment$750 · 1 week | Hardeningfixed quote · 2 to 4 weeks |
|---|---|---|---|
| MFA and Conditional Access state, every user | Checked | Checked | Fixed |
| Admin accounts and who really holds them | Checked | Checked | Fixed |
| Legacy sign in protocols (POP, IMAP, basic auth) | Checked | Checked | Blocked |
| Email spoofing protection: SPF, DKIM, DMARC | Checked | Checked | Fixed |
| Licences paid for and not used | Checked | Checked | Removed |
| Secure Score and the three moves that matter most | Checked | Checked | |
| Every device: encryption, patching, compliance, Defender | Checked | Fixed | |
| Intune enrolment, baselines and Autopilot | Checked | Built | |
| Email: Defender for Office, forwarding rules, phishing policies | Checked | Fixed | |
| SharePoint and OneDrive sharing, data loss basics | Checked | Fixed | |
| Scored against Microsoft best practice and the CIS benchmark, 48 checks | Yes | ||
| Evidence for every finding, ranked by risk | One page | Full report | Before and after |
| Priced roadmap | Yes | Is the plan we work to | |
| Joiner and leaver runbooks, documentation, handover | Yes | ||
| Call with you | 30 minutes | 1 hour walkthrough | Weekly, plus handover |
| Access we need | Read only | Read only | Admin, agreed and logged |
| Price | $250 | $750up to 50 users | Fixed quotemost firms $2,500 to $6,000 |
Swipe sideways to see all three columns.
Managed Intune, month by month
| Item | What it covers | Price |
|---|---|---|
| Managed Intune | Monthly drift and compliance review, app catalogue kept current, update rings and Autopatch, monthly report, small changes inside the fee, quarterly review, named lead engineer. | $6per device / month, min $300 |
| Onboarding baseline | First cycle documentation of every policy, app, ring and enrolment setting, gaps flagged in writing. Waived after a Hardening project or a Full Assessment in the last 90 days. | $500one off |
| Projects during the service | New platforms, MDM migrations, app waves, Conditional Access work. Named as projects and quoted in writing before starting. | Fixed quote |
How the pricing works
One off services are paid on completion. Projects are invoiced half on order and half on completion. Managed Intune is invoiced monthly in advance on the device count taken on the invoice date, with no initial term; stop any month after paying the invoices already approved. Payment by bank transfer, Wise or Upwork, in US dollars, within 14 days.
Why it costs roughly half of a US or UK provider: the team works from Islamabad, the tooling is the same Microsoft admin centres a local provider uses, and we only sell fixed scopes we have delivered many times before. You get a named engineer either way.
Not sure which one? Start with the $250 Health Check. If you go on to the Full Assessment within 30 days, the $250 comes off the price.