Cybersecurity and managed IT pricing

Every price we charge and what changes it.

We publish our prices, because the first question every business owner asks is what this costs.

Making you fill out a form to find out wastes your afternoon and ours. Here is the price list. Everything after it explains the numbers, shows what businesses like yours pay and tells you where our team might not be the perfect fit.

‍

Get my price See the full price list

“Absolutely the best. This team is responsive, thorough, and has a great sense of humor.”

Mary S., Montana client

10 min

Median first response

for security issues, measured in our own system over the last 90 days

100+

Incidents supported

by our team

7,500+

Devices monitored

under current contracts

5.0

On Google and Birdeye

Read our Google reviews

Our standard

Vetted, tested, and in writing.

Every certified client is assessed by a third party risk assessor and keeps the required controls in place. The Big Sky Guarantee and Service Warranty put that standard in writing.

Ransomware

● Response within 1 hour

Business email compromise

● Response within 1 hour

Backup recovery failure

● Response within 4 hours

The Big Sky Guarantee

We do the work.

Containment, forensics, eradication, recovery, and rebuilding if needed, at no additional cost, within defined service limits.

The Big Sky Guarantee is not an insurance policy. It’s our commitment to do the response work ourselves.

PLUS

The Big Sky Service Warranty

Up to $500,000

Eligible payments made directly to the organization, up to $500,000 per covered incident, depending on plan.

The Big Sky Service Warranty is not an insurance policy and does not replace cyber insurance.

For certified clients on Professional, Enterprise, or co-managed plans, with required controls in place. Eligibility requirements, service limits, and exclusions apply. Full terms are provided for your review before you sign.

How the guarantee and warranty work

The price list

Every price we charge.

Managed IT is priced per device (workstations, laptops and servers), plus a per user charge for anyone with an email account. No onboarding fee, no per ticket charge, no hourly remote support, no travel rate.

Managed IT, Essentials

$75/ device / mo

Plus the per user charge

Managed IT, Professional

$95/ device / mo

Adds logging, email detection and eligibility for The Big Sky Guarantee and Service Warranty once certified

Co-managed IT

Scoped to your team

Alongside your in-house IT staff. Eligible for The Big Sky Guarantee and Service Warranty once certified

Project based support

From $850

Fixed scope projects, priced before work starts

Full service details: Fully managed IT · Co-managed IT · Project based support

Compliance Foundations

From $350/ mo

One location, first baseline under one framework

Full Compliance Management

From $560/ mo

Multiple locations or administrators, or real audit exposure

HIPAA security risk assessment

From $6,500

For organizations that aren’t clients. Managed IT clients get it at a reduced rate

HIPAA training and policy attestation

$14/ employee / mo

Billed annually. A 20 person practice pays $3,360 a year

Security audit, focused

From $2,500

Single site, no regulated data

Security audit, aligned to a framework

From $6,500

Measured against HIPAA, PCI DSS, CMMC or GLBA

Full service details: Compliance as a service · HIPAA services · Cybersecurity audit

Penetration test, one time

$3,750

Three days of manual testing, 90 day retest included

Testing as a service

From $250/ mo

For environments that keep changing

Network assessment

From $1,500

Credited against the fix

Full service details: Penetration testing · Network support

Incident response

$165/ hour, any hour

Certified clients: under The Big Sky Guarantee, within defined service limits. Retainer clients: within their agreed hours.

Devices, preserved in our lab

Cellphone preservation

$850/ device

One phone, with documented chain of custody

Full file system extraction

$2,100/ device

The deepest phone extraction, where the device supports it

Computer preservation

$1,150/ device

Laptop or desktop, with documented chain of custody

Remote phone acquisition

Remote iPhone acquisition

$950/ device

Collected remotely, with documented chain of custody

Remote Android acquisition

$950/ device

Collected remotely, with documented chain of custody

Email, cloud and social accounts

Email or cloud account preservation

$600/ account

One email or cloud storage account, preserved with documented chain of custody

Social media account preservation

From $450/ account

One social media account, preserved with documented chain of custody

Analysis and media

Forensic analysis

$165/ hour

Returning clients: $150 / hour. Billed hourly, no expedite fees

Storage media

$120/ 1 TB drive

Evidence drives, supplied as the case needs them

Full service details: Incident response and digital forensics

Real bills

What three businesses pay for Managed IT

These are estimage figures pulled from clients including devices and users together, with Professional and Essentials tiers listed, and what Professional adds underneath for your business.

10 devices · 12 users

A 10 person office

Essentials

$774/mo

Professional

$998/mo

Adds eligibility for The Big Sky Guarantee and Service Warranty once certified

Most common

25 devices · 30 users

A 25 device firm

Essentials

$1,935/mo

Professional

$2,495/mo

Adds eligibility for The Big Sky Guarantee and Service Warranty once certified

60 devices · 75 users

Two locations

Essentials

$4,650/mo

Professional

$6,000/mo

Adds eligibility for The Big Sky Guarantee and Service Warranty once certified

There is no onboarding fee, no charge per ticket, no hourly billing for remote support, and no travel rate.

The tiers

What each tier does for your business.

Essentials

Keeps your systems patched, backed up and monitored.

Patching, including the third party software where many exploited vulnerabilities live

Endpoint and server backup

EDR on every machine, with malicious code blocked and logged when detected

Scheduled security awareness training for all staff, with reporting

The right tier if nobody outside your business is asking you to prove your security posture.

Professional

Everything in Essentials, plus the ability to prove it.

Managed SIEM, with logs collected and retained across your environment

Microsoft 365 detection and response on email and cloud identity

An answer when your insurer asks about log retention

An answer when a client asks how you detect unauthorized email access

Professional, Enterprise and co-managed

The Big Sky Guarantee and Service Warranty, once certified

Response work at no additional cost, within defined service limits, plus eligible payments of up to $500,000 per covered incident, depending on your plan. Eligibility requirements, service limits and exclusions apply.

Full terms provided for your review before you sign

Enterprise

Security governance rather than security operations.

A vCISO in your leadership conversations

A maintained policy and procedure library

Onsite training for your staff

Professional tier underneath, plus custom scope based on your organization's requirements

For businesses where a board, a regulator, or a major client has made security someone's job — and you'd rather it not be yours.

What’s included in managed IT

What moves the number

What pushes your price up or down.

Still predictable either way. If something will push your number up, we tell you before it reaches an invoice — and you can ask for every discount on the first call.

↑Pushes it up

Servers

They count as devices, so an office heavy on servers costs more than one that's mostly laptops.

Backup over 500GB

Per client. We'll flag it before it reaches your invoice.

Multiple locations

Regular onsite presence is billed hourly, with no separate travel charge.

Legacy systems

Anything we can't patch through standard tooling.

↓Brings it down

Multiyear agreements

On a tiered schedule.

Bundling

Add penetration testing or compliance work.

Loyalty pricing

For existing clients.

Referrals

Send us a business that becomes a client, and your rate reflects it.

Before we start: the remediation conversation

If your environment has gone years without management, there's usually work to do first. We check three things before you sign, and tell you what falls outside the contract.

End of life hardware

Anything that can no longer be secured or is failing we’ll recommend replacing.

Leased hardware

We’d rather you own your equipment, so hardware leased from your current provider will need replacing.

Installation time

If equipment is replaced outside of onboarding there is an hourly onsite fee.

Before you sign anything

Five questions to ask anyone who quotes you. Us included.

We’re not the cheapest and don’t try to be. The difference over a year usually sits outside the base rate, so get the answers in writing.

Is remote support included, or billed hourly?

Our remote support/helpdesk is included in our contracts. The only charge for hourly is onsite.

Which software licences are inside this rate?

All of the security software both user and device are included. Your EHR, office and productivity software will be a separate charge.

Is there an after hours or emergency rate?

Not for our certified clients under our guarantee - IR is included. We also don't add an emergency rate to existing IR hours.

Is there a fee to leave, and who keeps the documentation?

No offboarding fee. We hand over at the same pace we onboarded you, and your documentation and network map go with you.

What happens if my device count drops?

We adjust your bill accordingly for any user or device count changes.

Already have a quote? Tell us what you’ve been quoted. We’ll show you what sits outside the base rate.

Get my price

Giant Springs State Park in Great Falls, Montana

Honest fit

Where we're not a good fit.

Price is your deciding factor.

Providers will quote below $75 per device. If you don't need cybersecurity depth and total cost is what matters, one of them is your answer.

You need a framework outside our range.

We're strongest on HIPAA and general security frameworks. For FedRAMP or a specialized certification, we'll refer you rather than learn it on your budget.

You want a provider who never pushes back.

We'll tell you your hardware is too old, or that you're about to buy something you don't need. Some businesses find that tiresome.

You're a one person business.

“They understand that small communities have different needs and resources than large organizations, and recommend security measures that are practical, effective, and make sense for a small municipality.”

Loren T.

Mayor of Fairfield

Next step

Get a number for your own environment.

The assessment is free, 30 to 45 minutes onsite, and the findings are yours either way.

Want a number?

Tell us your devices and users. We'll price it.

Comparing quotes?

Tell us what you've been quoted. We'll show you what sits outside the base rate.

Ready to talk?

Call 406-924-3731, or use the form.

5.0 on Google and Birdeye & Birdeye · No commitment, no sales pressure, no obligation to move providers.

Thanks. We’ll reply within one business day with a written price for your environment.

Oops! Something went wrong while submitting the form.

Outside business hours, we reply within one business day.