why most houston MSPs won't return your call if you have fewer than 10 seats
If you've called two or three MSPs in Houston and gotten no call back, or gotten a quote for $800/month that seemed absurd, you haven't imagined it. There's a structural reason.
Most MSPs price their model around accounts with 15+ seats. Below that, the economics don't work for them. A 4-person law office at $99/user/month is $396/month — after licensing and technician time, many MSPs lose money on that account.
So they ignore the sub-10-seat market. Don't return calls. Don't structure pricing for it. That business ends up with a consumer router, no backups, someone's nephew handling IT by text, and a ransomware event waiting to happen.
A $150-200/user/month quote isn't gouging — it's margin protection. No callback isn't rudeness — it's math. Knowing this helps you ask better questions.
If your business has 1-9 seats: find an MSP that built its model for small accounts, or accept that you'll be low-priority at a larger shop. Neither is wrong — but know which you're signing up for.
the three pricing models you'll see — and which one to pick
MSP pricing comes in three flavors. Most salespeople won't explain the differences clearly because one of the three serves the MSP better than it serves you.
| model | structure | who it benefits | watch for |
|---|---|---|---|
| per-user / per-device | $X per endpoint or user per month. scales with headcount. | MSP — revenue grows as you hire. good for MSP, unpredictable for you. | costs spike during hiring bursts. IT budget becomes a headcount tax. |
| flat-rate managed | one monthly fee covers all users up to the seat ceiling. | buyer — hire freely, budget stays fixed. good for businesses in growth mode. | make sure the ceiling is clearly defined and what happens when you exceed it. |
| break-fix / hourly | no monthly fee. you pay per incident or per hour of work. | neither — works for very simple environments, terrible for anything complex. | no proactive monitoring, no vested interest in keeping your systems healthy. reactive only. |
Which to pick: if your business runs on its technology — you use email, you store files, you have staff who need working computers — get flat-rate managed IT. The predictable bill is worth more than the per-ticket savings. Break-fix is fine for a solo operator with a personal laptop. It's a liability for a 5-person business.
the seven questions that get you a real answer (not sales theater)
Most MSP sales calls are structured to avoid giving you specific information. "It depends on your environment" is a real answer — but it's also a way to avoid committing to anything before they close the deal. These questions force specifics.
- What is your average response time for a P1 ticket? Not the target — the actual. Ask for data. If they don't track it, that's the answer.
- How many clients does each technician own? A ratio above 150:1 means you're in a queue, not a relationship.
- What happens after hours if my server goes down? Who picks up? Is it a real person or a pager that forwards to a junior tech in another time zone?
- What is NOT included in the flat rate? Get the exclusion list in writing before you sign. "Projects" is a common exclusion that can cost you thousands.
- Do you have a public status page or incident history? Transparency about outages and response is a trust signal. Ask to see their last five major incidents and how they communicated during them.
- Can I see a sample contract before we go further? If they won't share the contract until you're ready to sign, that's a red flag. Legitimate providers have nothing to hide in the standard agreement.
- What does the first 30 days look like? Onboarding quality predicts everything. If they don't have a documented onboarding process, their ongoing service will be equally unstructured.
red flags: contract clauses that lock you in for 3 years
MSP contracts are where the industry loses the most trust. A salesperson will be warm and specific in the sales call, and then you'll get a contract that is vague, long-term, and heavily favorable to the provider. Here's what to look for before you sign anything.
Auto-renew with short notice windows. A clause that says "renews for 12 months unless you give 60 days written notice" can trap you. You miss the window once, you're locked in for another year. Ask for the notice window in writing and calendar it the day you sign.
Vague definitions of "managed services." If the contract says "managed IT services" without defining what that includes, you'll fight over scope every time something breaks. Every service should be listed explicitly: monitoring, patching, helpdesk, on-site response, backup verification, security tooling. If it's not listed, assume it's excluded.
Early termination fees calculated as remaining contract value. Some providers charge you every remaining month if you leave early. On a 3-year contract at $2,000/month, leaving at month 6 could cost you $60,000. That is a real number in real Houston MSP contracts.
Hardware "included" but owned by the MSP. Some providers give you equipment — routers, switches, firewalls — as part of the service. When you leave, they take it back. Make sure you understand what you own versus what you're leasing through the contract.
Liability caps at one month's fees. If the provider's negligence causes you a data breach and your liability is $200,000, a contract that caps their liability at $2,000 (one month's fee) is essentially a contract that says they owe you nothing. Ask for a higher cap, especially if you're in a regulated industry.
Broad data use clauses. Some MSP agreements include language that gives the provider the right to "use anonymized data for service improvement." That's often fine. But read it. Sometimes it's broader than it looks, and you're giving permission to aggregate client data in ways that could be problematic.
what "managed" should actually include (and what it usually doesn't)
"Managed IT" means different things to different providers. Here's the baseline of what a real managed service contract should cover, versus what is commonly excluded and sold separately.
Should be included in any managed contract:
- 24/7 endpoint monitoring — someone (or something) watching for alerts at 2am, not just business hours
- Patch management — OS and application patches deployed and verified, not just available
- Helpdesk access during business hours — defined response time, not "we'll get to it"
- Backup verification — not just "backups are configured" but "backups are tested and we know they restore"
- MFA enforcement — Multi-Factor Authentication across your Microsoft 365 or Google Workspace environment
- Antivirus/EDR management — the tooling is deployed, monitored, and alerts are actioned
- Quarterly review — someone reviews your environment's health with you, not just when things break
Commonly excluded (often sold as add-ons):
- On-site visits — most contracts cover remote-only. On-site is extra, usually per-hour.
- Projects — migrations, new deployments, major upgrades. "Projects" is the most common scope exclusion.
- After-hours response — some providers charge a premium for off-hours support even at the managed tier.
- Hardware procurement — sourcing and configuring new equipment is often a billable project.
- Email security tooling (Proofpoint, Defender for O365) — sometimes add-on, sometimes included.
the "fractional CIO" trap: when it's worth it, when it's a markup play
"Fractional CIO" or "virtual CIO" is a service many MSPs offer where they assign a named senior person to your account who attends strategic meetings, reviews your IT roadmap, and advises on technology decisions. It's billed on top of the managed service, usually at $500-2,000/month extra.
Worth it: 15-25 seat business with real decisions — ERP selection, multi-location network design, compliance implementation. A genuine vCIO with relevant experience earns the premium.
Markup play: 5-person business whose "technology decisions" are which QuickBooks version to run, billed $800/month for advisory they'll never use. The "vCIO" is often a junior account manager with a new title.
The honest version of this service is valuable and exists at legitimate providers. The padded version exists too, and it's billed to clients who don't know what to compare it to. Ask before you buy.
why the cheapest MSP might be the most expensive one
There are MSPs in Houston quoting $49/user/month. There are others at $250/user/month. The gap is real but the relationship between price and quality is not linear — the cheapest option usually becomes the most expensive when you add up what it costs you.
Downtime cost. If your team of 8 loses 4 hours of productive work because a server issue wasn't caught until Monday morning, you've burned 32 person-hours. At even $25/hour loaded labor cost, that's $800 in lost productivity from one incident. If your MSP's monitoring would have caught the issue at 2am Friday and resolved it before business hours Monday, the $100/month premium pays for itself in the first incident.
Ransomware recovery cost. PCA handled a ransomware incident (Qilin variant) for a regional food distributor. The total recovery cost — forensics, restoration, hardening, lost business — was significant. The business had a cheap IT vendor before the event. The monthly "savings" over 3 years were erased in one incident. This is not rare. It's the median outcome for businesses that underinvest in IT security.
Hidden billing. Low-headline-price MSPs frequently make up the margin on project billing, on-site call fees, and add-on tools. Before you compare monthly quotes, ask each provider to estimate what your total annual IT spend would be — including all expected extras. That number is more honest than the headline rate.
when PCA is the wrong choice (be honest)
This is the section most MSPs won't write. But it's also the section that makes everything else in this guide credible. PCA is not the right provider for every business. Here's where we're a bad fit:
Solo with a free Gmail account. If you're a single-person operation running on personal Gmail, a personal laptop, and you have no employees or contractors who need shared access to files or systems — you don't need a managed IT provider yet. You need a good backup solution and a cybersecurity-aware habit. Come back when you hire your first person.
Enterprise needing 24/7 on-site tech presence. If your operation requires someone physically on-site every day — a dedicated IT person in your building, 24/7 on-call with guaranteed 15-minute on-site response, or a large server room with staff who maintain it — PCA is a remote-first managed provider that does on-site visits by appointment. We're not the right fit for a 100-person organization that needs embedded IT staff. That's a different service model.
Budget under $50/month. The minimum viable managed IT setup — EDR, monitoring, backup verification, helpdesk — costs real money to deliver. If your entire IT budget is $50/month, the math doesn't work and we'd be setting you up for disappointment. We'd rather tell you that now than sign you up for a service level that can't deliver what you need at that number.
