IT Managed Services

The shortcut: New MSPs win their first clients on price, then bleed for a year doing break-fix support at a flat monthly fee. Standardize the stack — one RMM, one endpoint, one backup — and refuse any client who won't move to it. The recurring fee is not the business; the standardized stack is.

Industry: Software & Tech | Investment level: Medium — $10,000-$50,000 | Time to launch: 10-16 weeks (RMM + PSA + backup stack picked, two anchor clients signed before you go full-time) Best for: A sysadmin, helpdesk lead, or solo IT consultant who has run Active Directory, patched servers at 2am, and watched a ransomware cleanup from the inside. What you'll likely make: $3,000-$6,000 month 3, $8,000-$15,000 month 6, $18,000-$35,000 month 12 (3-6 anchor clients on per-user contracts). Math is in Section 4.

Market Opportunity

It's 7:14am on a Monday. The 22-person law firm two suites down from your old office can't print, can't get into their case-management system, and has a deposition at 9am. Their "IT guy" is the managing partner's nephew, who is in college in another state and not picking up. They are about to call the first MSP that answers the phone, sign whatever contract gets put in front of them, and pay whatever number is on it. That phone call is the entire business model.

Small businesses with 10-100 seats outgrow the nephew model around 15 employees. They can't hire a full IT person ($85K-$120K base plus benefits) and can't keep limping along on Geek Squad. Flat monthly fee, all-you-can-eat support, proactive monitoring — managed services was built for exactly this gap.

The trap: most new MSPs sell on price. A $50/user quote from someone in a basement closes faster than $125/user from an established shop. Then the basement MSP discovers 11 printer drivers, three SaaS apps with missing admin credentials, and a 2014 Windows server running QuickBooks Desktop. The hours climb. The flat fee doesn't. By month four they lose money on every ticket.

What works is owning the stack. One RMM (remote monitoring and management) tool, one endpoint product, one backup product. If a prospect won't standardize, they aren't a client — they're a hobby.

US managed services market: $365B in 2024, growing at 13.6% CAGR through 2030 — Grand View Research
Per-user is now the dominant SMB MSP model: $75-$200/user/month typical range — ConnectWise pricing models guide
Per-device alternative: $25-$100/device/month — fading because clients can't audit their own device count

Why this is a good time to start: the cyber insurance market rebuilt itself between 2022 and 2024. SMBs renewing policies now get questionnaires demanding managed EDR (endpoint detection and response), 24x7 monitoring, and documented patching. Their broker says: "Get an MSP or your premium triples." That conversation is happening on every renewal.

Launch With AI

Pro section. AI doesn't replace the on-call work — it cuts the parts that drained you (writing the vCIO quarterly report, drafting MSAs, generating onboarding runbooks, building IT Glue documentation). Spend the saved time on what AI can't do: rolling MFA across a client's 25 users, restoring from a Datto BCDR snapshot at 2am, and walking the cyber insurance broker through your client's posture before renewal.

The trap most first-year MSP founders fall into: they think AI will research patches or compliance for them. It will hallucinate KB numbers and CVE IDs that don't exist. AI for the writing tail (vCIO reports, onboarding runbooks, marketing copy, sales follow-ups) is where it pays you back — every technical claim gets your eyes on it before it goes to a client.

Important up-front: AI cannot patch a server, deploy SentinelOne, or refuse a client who wants to keep their nephew's antivirus. It will also confidently generate placement-grade SLAs you can't deliver solo. You own every commitment, every patch decision, every breach response; AI scales the writing around them.

AI Tools You'll Use

Tool	Price	What it does
ChatGPT Plus	$20/mo	vCIO reports, RFP responses, MSA boilerplate, sales follow-ups, customer comms
Claude Pro	$20/mo	Long-context environment audits, multi-ticket triage, runbook generation
Cursor	$20/mo	PowerShell scripts, runbook code, Intune profiles, scoped automation
NinjaOne / ConnectWise built-in AI	included with RMM	Ticket triage, RMM alert prioritization, patch automation, EDR alert correlation
Loom AI	free	Onboarding walkthroughs, monthly client updates, audit deliverables

The Workflow

Discovery + environment audit (Claude long-context, ~3 hours/prospect). New client onboarding starts with a 1-day audit. Paste the asset inventory + AD/Entra export + RMM scan results into Claude:

"Below is a discovery audit for [prospect, N seats, vertical]. Includes: AD/Entra export, asset inventory CSV, current backup config, current AV/EDR posture, M365 license report, network topology summary. Generate: (a) a risk-ranked findings list (high/med/low — MFA gaps, unpatched servers, missing backups, shadow IT), (b) the 90-day stabilization plan (week-by-week — which findings get fixed first, with the SLA target each enables), (c) the per-user pricing recommendation (Tier 1/2/3 based on the actual environment), (d) the one-paragraph vCIO summary I'll send the client this week. NEVER hallucinate KB numbers or CVE IDs — if you cite one, flag for my verification. Tone: senior MSP advisor."

Verify every patch + KB cite before sending to client. Claude long-context turns a 6-hour audit into a 90-min audit — that's billable hours back to the technical work.
Onboarding runbook (Cursor + Claude, ~6 hours one-time, then reusable). Standardized stack onboarding is the asset you reuse across every client. Paste:

"I'm building a reusable MSP onboarding runbook for clients on my standardized stack (NinjaOne RMM, SentinelOne EDR, Datto BCDR backup, IT Glue documentation). Generate: (a) the day 1-7 runbook (asset inventory, RMM agent rollout, MFA enforcement, EDR deployment, backup verification), (b) the PowerShell scripts for bulk MFA enforcement + Intune compliance baseline + Conditional Access deployment, (c) the IT Glue document templates per client (network topology, password vault structure, vendor list, runbook), (d) the day 7 client check-in email template. Code only for the scripts; documentation as Notion-ready Markdown."

You verify every PowerShell script in a sandbox before running on client tenants. The first build is 6 hours; client 2 onward, onboarding compresses from 30 hours to 12 hours.
vCIO quarterly business review (ChatGPT + RMM data, ~90 min/client/quarter). The vCIO QBR is what justifies Tier 2/3 pricing and prevents churn. Paste each client's RMM + EDR + ticket data:

"I run the managed IT retainer for [client, N seats]. Below is this quarter's data: ticket volume, mean-time-to-resolution, EDR incidents, patches deployed, backup verifications, M365 license utilization, and the cyber insurance attestation status. Generate the QBR deck (8 slides): (1) executive summary, (2) security posture (MFA %, patch %, backup health), (3) ticket trends + the top 3 issues, (4) cost-per-user + ROI, (5) cyber insurance posture, (6) the 3 risks I'm flagging this quarter, (7) the 3 projects I'm recommending next quarter, (8) the year-over-year comparison. Tone: senior advisor. Output as Notion-ready slide content."

Run the QBR live with the client. The QBR is what stops competitive RFPs cold — clients who get a quarterly strategic review don't shop their MSP.
Cyber insurance attestation help (ChatGPT, ~30 min/client/year). SMBs renewing cyber policies get questionnaires demanding MFA, EDR, 24x7 monitoring, documented patching. Paste the questionnaire:

"My client received this cyber insurance questionnaire from [carrier]: [paste]. For each question, generate the response based on their actual posture (which I'll verify): (a) MFA on what % of accounts (target: 100% before answering), (b) EDR vendor + coverage %, (c) backup frequency + 3-2-1 compliance, (d) patch SLA, (e) MFA-bypass exception list. Flag any question I should answer NO truthfully — never auto-answer YES to inflate the application (insurance fraud). Tone: technical, defensible."

The honest answer is the legally-required answer. MSPs that help clients pass the questionnaire honestly become the broker's preferred referral — that's $80K-$200K/year in inbound.
NinjaOne ticket triage + customer comms (NinjaOne AI + ChatGPT, ~30 min/day). NinjaOne AI auto-categorizes incoming tickets, suggests fix steps from your KB, and flags repeat issues. ChatGPT writes the customer comms:

"My RMM flagged this ticket: [paste]. The fix took 25 min. Generate the customer-facing 'we fixed it' email: (a) what happened in 1 sentence (NEVER 'a minor issue'), (b) what we did (1 line), (c) what we put in place to prevent recurrence (1 line), (d) any action the client needs to take (1 line). 4 sentences max. Tone: senior MSP, transparent NOT corporate. NEVER 'apologize for any inconvenience' filler."

The 4-sentence post-resolution email drops escalation calls by 60% — clients trust the MSP that explains what happened.

Time Saved Per Week

Roughly 8-15 hours/week once your onboarding runbook, QBR template, and ticket comms are built:

New-client environment audit: 6 hours/prospect → 90 min (Claude long-context)
Onboarding execution: 30 hours/client → 12 hours (reusable runbook)
vCIO QBR per client: 4 hours/quarter → 90 min (ChatGPT + RMM data)
Cyber insurance attestation: 90 min/client/year → 30 min (ChatGPT)
Daily ticket comms: 2 hours/day → 30 min (NinjaOne AI + ChatGPT)

Trade that time for: the 5 LinkedIn DMs/day to vertical prospects, the cyber insurance broker coffee meeting, and the third anchor client onboarding.

Total AI Stack Cost

Budget tier ($20/mo): ChatGPT Plus only. NinjaOne AI is included with the RMM platform; Loom AI is free. Right for the pre-revenue setup phase.
Full tier ($80/mo): ChatGPT Plus + Claude Pro + Cursor + Loom AI. Worth it once you sign anchor client 2 — Claude long-context on environment audits alone saves 4+ hours per client.
Compare: A junior MSP technician handling onboarding + QBR + ticket comms runs $5,000-$8,000/mo. The full AI stack is one-eightieth that cost — and you keep eyes on every patch and PowerShell script before it runs.

Cancel anything you don't open in a 7-day window. The trap is using AI for technical research without verification — every KB and CVE cite gets verified before it leaves the office.

Your First Win

30 minutes from now your standardized-stack one-pager is written. Open ChatGPT (free tier works). Paste:

"I'm a solo MSP founder. I'm running on a standardized stack: NinjaOne RMM, SentinelOne EDR, Datto BCDR backup, IT Glue documentation. Build a 1-page client-facing 'why our stack' explainer I'll send to every prospect with the SOW: (a) hero — 'we deliver outcomes, not vendor variety,' (b) the 4 pillars (RMM = visibility, EDR = ransomware defense, BCDR = recovery, IT Glue = institutional memory), (c) why standardization matters (cyber insurance attestation, faster ticket resolution, lower per-user cost), (d) the trade-off — clients who refuse the stack aren't a fit; we'll refer them to a competitor. Tone: senior MSP advisor, NEVER 'comprehensive solution' filler. Output as Notion-ready 1-pager."

Send to every prospect with the SOW. The 'standardize or no deal' framing is what attracts the 10+ seat clients and filters out the $50/user basement-MSP shoppers — that one-pager is worth your first $200K of recurring revenue.

Product / Service Offering

You sell a flat monthly fee per user. Inside that fee sits a defined stack you control end-to-end.

Core offering — managed IT, per-user, all-you-can-eat:

Tier 1 — Essentials: $90-$110/user/month. 8x5 helpdesk (next-business-day response), patching, managed antivirus, M365 license management.
Tier 2 — Standard: $125-$160/user/month. Adds 24x7 monitoring, managed EDR, managed backup (Datto BCDR or Acronis), quarterly business review.
Tier 3 — Advanced: $175-$225/user/month. Adds 24x7 helpdesk with 4-hour response SLA (service level agreement), security awareness training, vCIO (virtual chief information officer) strategy time.

Project work, one-time:

M365 / Google Workspace migration: $2,500-$8,000.
Server-to-cloud migration: $5,000-$20,000.
New office buildout (cabling + AP + firewall): $3,000-$15,000.

What never sits inside the recurring fee: hardware (10-25% margin pass-through), licenses, major projects, and any client refusing the standardized stack.

Pricing model: flat monthly per-user, billed in advance, 12-month initial contract auto-renewing monthly after. Anything shorter than 12 months and the math breaks.

Revenue Model

Three anchor clients on per-user contracts get you to real income. The math is where most new MSPs lie to themselves.

Line item	Amount
3 clients × 25 users avg × $135/user/month (Tier 2)	$10,125
RMM + PSA + EDR + backup tools (per-endpoint cost ~$25/user)	-$1,875
Cyber liability + E&O (errors & omissions) insurance, monthly portion	-$650
Stripe / ACH processing fees (~1%)	-$100
Take-home before your time	~$7,500

Your first $1K month: one 12-user client at $110/user (Tier 1) = $1,320 MRR, minus ~$300 in tool costs and insurance = ~$1,000 take-home. Roughly 4-6 hours/week of ticket work if their environment is clean.

Your first $3K month: two clients averaging 18 users at $130/user = $4,680 MRR, minus ~$700 in tool + insurance = ~$3,980 take-home. Roughly 8-12 hours/week of steady-state support plus one onboarding week.

The number that decides your year is support hours per user per month. New MSPs without a standardized stack run 1.5-2.5 hours/user/month. Mature MSPs running one RMM, one endpoint, one backup, one documentation tool drop to 0.4-0.8. That delta is the difference between losing money and clearing $200K profit on the same client list.

Startup Costs

LLC + EIN: $35-$500 — LLC University 50-state table. EIN free at IRS EIN Online — never pay a third party.
RMM tool: NinjaOne ~$3-$4/endpoint/month or ConnectWise RMM at higher per-endpoint pricing. Budget $300-$600/month for your first 100 endpoints.
PSA (Professional Services Automation): ConnectWise Manage or HaloPSA. $50-$150/technician seat/month.
Endpoint detection (EDR): SentinelOne or CrowdStrike — $5-$10/endpoint/month at MSP pricing.
Backup / BCDR: Datto or Acronis — $60-$200/protected device/month.
IT documentation: IT Glue or Hudu. $29-$49/user/month. This is the asset you sell when you exit — skip at your peril.
Cyber liability + E&O insurance: $5,000-$15,000/year for an MSP with $500K-$2M in revenue per MSSP Alert benchmarks. Starting solo with two clients, you pay the floor.
Contracts: $500-$1,500 attorney review of an MSA + SOW template from Bonsai.
CompTIA A+ ($246 exam) + ITIL 4 Foundation ($385 exam) — credentials worth carrying for government, regulated, or enterprise clients. CompTIA | Axelos ITIL 4.
Demo + spare-parts buffer: $1,500-$3,000.

Realistic all-in: $10,000 if you bring your own laptop and use monthly tool subscriptions; $50,000 if you bind cyber liability year one, prepay annual tool contracts, and keep 6 months of runway in the bank before signing your first client.

Legal & Formation

Business entity. Single-member LLC the day you sign your first MSA. Exposure here is real — a ransomware event at one client, where your RMM credentials were the entry vector, can produce claims across your entire client base. Filing fee $35-$500 — LLC University 50-state table. EIN free at IRS EIN Online — never pay a third party. By year two with three or four clients on Tier 2, net profit will likely cross $80K-$100K — at that point file IRS Form 2553 for an S-corp election. Payroll tax savings on $50K-$100K of distributions clear the $2,000-$4,000/year of added accounting overhead easily.

Licenses & sales tax. No state professional license is required to run an MSP. Custom managed services billed as a professional service are generally not taxable. But the moment you bundle hosted software (a managed firewall as a service, a hosted backup where you own the infrastructure, a security-monitoring SaaS) into the recurring fee, about 25 states treat that bundled portion as taxable SaaS. Cross $100K or 200 transactions in any state and you have economic nexus there post-Wayfair. Avalara state tracker is the canonical reference. Itemize the SaaS portion on every invoice from day one — retroactively splitting it for an audit is brutal.

Industry-specific risk. The contract and the insurance are where this business gets won or lost. Three things bite in this exact order. First, the SLA you can actually deliver solo. Tier 3 SLAs (24x7, 1-hour response with named engineer) need on-call staff or a sub-MSP partner. Promise Tier 3 alone and the first 2am ransomware page kills the contract. Sell Tier 1 or Tier 2 only until you have a NOC-as-a-service partner. Second, cyber liability with a "MSP E&O" rider, not generic E&O. Standard tech E&O policies fight ransomware claims originating from compromised RMM credentials. You need a policy built for managed services — Cowbell, Coalition, or an MSP-focused broker. The $5,000-$15,000/year is non-negotiable from contract one. Third, hard liability cap + "client cooperation" clause in your MSA. Cap total liability at fees paid in the trailing 12 months — never accept uncapped. Add a clause requiring the client to apply security recommendations within a stated window (90 days for critical). Without it, a client who refused MFA for a year and got breached will still name you in the lawsuit. The $500-$1,500 attorney review pays for itself the first time a client claims $400K in business interruption.

Marketing & First Customers

Your first 3 clients almost certainly come from people who already know your name — a former employer, a peer in IT, a friend running a small business. Cold MSP sales is brutal. Warm sales is how every successful MSP started.

After the first 3 anchor clients, the playbook is repeatable.

Vertical referral partners — CPAs, bookkeepers, business attorneys. Highest-converting channel. Take 5-10 local CPAs and bookkeepers to coffee. A bookkeeper running QuickBooks for 30 small businesses sees every IT problem before you do. Target: 2-3 coffees/week. Referral close rate 30-50% of warm intros.
LinkedIn outreach to specific verticals — law firms, dental practices, accounting firms in your city. Sales Navigator filter: 15-75 employees + your industry. Two-sentence message naming a real pain ("we cover M365 + EDR + backup as one fee — most firms run all three on different vendors"). Target: 10-20 DMs/day. Reply rate 4-6%, reply-to-meeting 25-35%.
MSP peer groups (Evolve, ASCII, TruMethods) for sub-contract overflow. Established MSPs overflow with leads below their preferred client size. Get on their referral list as the small-client option for steady inbound on clients they don't want.
Cyber insurance brokers in your city. Brokers writing cyber policies need clients to clear MFA, EDR, and patching attestations. Email 5-10 cyber-focused commercial brokers. Target: 1-2 referrals/quarter at $80K-$200K annual contract value.

Document the standardized stack on your website. A prospect who lands on "we use NinjaOne, SentinelOne, Datto, and IT Glue" is pre-qualifying themselves before the sales call. Vague websites filter out the ready-to-buy prospects.

First 90 Days

Week 1. File LLC. Get free EIN. Pick your stack: one RMM, one EDR, one backup, one PSA, one documentation tool.
Week 1-2. Open vendor accounts. Get NFR (not-for-resale) licenses to learn the tools on your own infrastructure first. Don't deploy a tool to a client you haven't run for 30 days yourself.
Week 2-3. Attorney drafts MSA + Tier 1/2/3 SOW templates. Bind cyber liability + MSP E&O. Buy the CompTIA A+ exam voucher.
Week 3-5. Build your standardized onboarding runbook in IT Glue: AD/Entra setup, MFA enforcement, EDR rollout, backup verification, patching policy, password manager. This is the asset you reuse on every client for the next decade.
Week 5-7. Sign anchor client one. 12-25 seats, ideally a vertical you know. Tier 1 or Tier 2, 12-month contract, 30-day onboarding.
Week 7-10. Onboard against the runbook. Document everything in IT Glue. Track every hour — the data from this one onboarding sets your pricing for the next 10 clients.
Week 10-12. Sign anchor client two. Walk away if they insist on keeping their incumbent backup or nephew's antivirus.
Week 12. Target: 2-3 clients signed, ~40-60 users under management, ~$5,000-$8,000 MRR (monthly recurring revenue), reusable onboarding runbook documented.

Common Pitfalls

Selling to clients with fewer than 10 seats. A 6-person client at $125/user is $750/month — onboarding alone runs 12-15 hours, and one break-fix incident eats next month's margin. Set a 10-seat minimum from contract one. Smaller clients get a $200-$300/month "co-managed" plan with no SLA, or you refer them out.
Promising a Tier 3 SLA as a solo founder. A 24x7, 1-hour SLA cannot be delivered by one person who needs to sleep. The first 2am ransomware page kills the SLA, the client, and your reputation in a small market. Sell Tier 1 or Tier 2 until you have a NOC-as-a-service contract or a second technician.
Skipping IT documentation because "it's overhead." Undocumented environments are why your average ticket runs 90 minutes instead of 25. It's also why your business is unsellable — MSPs trade at 1-2x ARR, but only if the buyer can take over without re-discovering every server. Pay $29-$49/user/month for IT Glue or Hudu. Document on every ticket. Catching up later never happens.
Letting a client refuse the standardized stack. Every "we'd like to keep our existing antivirus" turns into a 2am incident your tools couldn't see. Either the client is on your stack end-to-end or they aren't your client. Walking away from a $90K/year prospect feels insane in month three. By month eighteen — when you're profitable and the MSP next door is drowning in mixed-stack clients — you'll know it was right.

Get your full launch plan — take the free 60-second quiz.