Four foundations. One goal: less risk for your business.
Every foundation is built on security by design and delivered by our Illinois and Indiana technicians. Compare what's included, then we'll quote a fixed price for your exact setup.
Choose your level of protection
Each step up adds protection and lowers your business risk: lost productivity, damaged customer trust, unreliable systems, lost data, regulatory trouble and cyber incidents.
Level 1 of 4
Consumer / Micro Business
For home offices and the smallest setups.
Business risk Highest- Minimum quantity
- Under 4
- Remote support
- Weekdays 8–5
- Preventive maintenance, patching and firmware updates
- Endpoint detection & response (antivirus)
- Workstation backup with remote and local storage
- Support portal and weekly cybersecurity emails
Level 2 of 4
Support
Core I.T. care for small teams.
Business risk Elevated- Minimum quantity
- Over 5
- Remote support
- Weekdays 8–5
- 24/7 monitoring with automatic escalation
- User, Microsoft 365, software and hardware support
- Training, phishing tests, DNS filtering and MFA
- Server backup with 24/7 monitoring
- Annual vCIO review and dedicated account manager
Level 3 of 4
Manage
Your full I.T. department, on-site included.
Business risk Reduced- Minimum quantity
- Over 5
- Remote support
- Weekdays 8–5
- Everything in Support, plus on-site support and remote emergency response
- Network monitoring, documentation and loaner equipment
- Security assessment, endpoint hardening and privileged access management
- Cyber insurance documentation and password management
- Quarterly vCIO and annual vCISO reviews
Level 4 of 4
Defend
Maximum protection, around the clock.
Business risk Lowest- Minimum quantity
- Over 10
- Remote support
- 24/7
- Everything in Manage, plus 24/7 remote support
- Application control, ring-fencing and computer encryption
- Network access control, storage control and email encryption
- Infrastructure SIEM monitoring
- AUP, policy workshop and twice-yearly vCISO reviews
Every industry is different, and a lower foundation can leave you over-exposed. We'll help you choose the right level on a discovery call.
Not sure which level fits? Talk it through with a solution engineer.
Book a free consultation. One of our solution engineers will review your setup, industry and compliance needs, recommend the right foundation and send you a fixed monthly quote.
Compare every feature
Included Not availableAdd-on Available at extra costUsage-based Billed by consumption
Support
| Feature | Consumer / Micro Business | Support | Manage | Defend |
|---|---|---|---|---|
| Minimum service quantity | Under 4 | Over 5 | Over 5 | Over 10 |
| Remote support hours | 8am–5pm | 8am–5pm | 8am–5pm | 24/7 |
| On-site support | Not available | Add-on | Included | Included |
| Remote emergency response | Not available | Add-on | Included | Included |
| On-site emergency response | Not available | Not available | Add-on | Add-on |
Proactive monitoring & maintenance
| Feature | Consumer / Micro Business | Support | Manage | Defend |
|---|---|---|---|---|
| 24/7 remote monitoring & management | Not available | Included | Included | Included |
| Scheduled preventive maintenance | Included | Included | Included | Included |
| Microsoft OS patch management | Included | Included | Included | Included |
| Automatic problem escalation & resolution | Not available | Included | Included | Included |
| Auto-healing custom alerts | Not available | Not available | Included | Included |
| Firmware updates | Included | Included | Included | Included |
Network services
| Feature | Consumer / Micro Business | Support | Manage | Defend |
|---|---|---|---|---|
| Network component management & updates | Not available | Included | Included | Included |
| Network monitoring & management | Not available | Not available | Included | Included |
Technical services
| Feature | Consumer / Micro Business | Support | Manage | Defend |
|---|---|---|---|---|
| Spam filter allow / block lists | Not available | Included | Included | Included |
| Adding / removing users and mailboxes | Not available | Included | Included | Included |
| Microsoft 365 support & license management | Not available | Included | Included | Included |
| Software installation | Not available | Included | Included | Included |
| E-recycling & secure disposal | Add-on | Add-on | Included | Included |
| Hardware installation | Not available | Included | Included | Included |
| Loaner equipment | Not available | Not available | Included | Included |
| Warranty parts ordering & replacement | Not available | Included | Included | Included |
| Automated software deployment | Not available | Included | Included | Included |
Virtual CIO / CISO & account management
| Feature | Consumer / Micro Business | Support | Manage | Defend |
|---|---|---|---|---|
| Strategic technology business review (vCIO) | Not available | Annual | Quarterly | Quarterly |
| Strategic cybersecurity business review (vCISO) | Not available | Not available | Annual | Twice a year |
| Self-service support portal | Included | Included | Included | Included |
| Weekly cybersecurity emails | Included | Included | Included | Included |
| Asset tracking & management | Not available | Included | Included | Included |
| Dedicated account manager | Not available | Included | Included | Included |
| Network documentation | Not available | Not available | Included | Included |
| DNS management | Not available | Included | Included | Included |
| Acceptable use policy (AUP) creation | Not available | Not available | Add-on | Included |
| Security & compliance policy workshop | Not available | Not available | Add-on | Included |
Security
| Feature | Consumer / Micro Business | Support | Manage | Defend |
|---|---|---|---|---|
| Cybersecurity assessment | Not available | Not available | Included | Included |
| Cyber awareness training* | Not available | Included | Included | Included |
| Simulated phishing* | Not available | Included | Included | Included |
| Endpoint detection & response (antivirus) | Included | Included | Included | Included |
| Secure DNS filtering | Not available | Included | Included | Included |
| Endpoint hardening (baseline security controls) | Not available | Not available | Included | Included |
| Enhanced Microsoft 365 security policies | Not available | Not available | Included | Included |
| Cyber insurance compliance & documentation | Not available | Not available | Included | Included |
| Password management & dark web monitoring | Not available | Not available | Included | Included |
| Inbound & outbound email filtering* | Not available | Add-on | Included | Included |
| Computer encryption | Not available | Not available | Add-on | Included |
| Privileged access management | Not available | Not available | Included | Included |
| Application control | Not available | Not available | Add-on | Included |
| Application ring-fencing | Not available | Not available | Add-on | Included |
| Network access control | Not available | Not available | Not available | Included |
| Storage control | Not available | Not available | Not available | Included |
| Two-factor / multi-factor authentication | Not available | Included | Included | Included |
| Email encryption* | Not available | Not available | Not available | Included |
| Email DMARC / DKIM support & monitoring | Not available | Not available | Included | Included |
| Infrastructure security incident & event monitoring (SIEM) | Not available | Not available | Not available | Included |
Backup & disaster recovery
| Feature | Consumer / Micro Business | Support | Manage | Defend |
|---|---|---|---|---|
| Server backup** | Not available | Included | Included | Included |
| 24/7 backup monitoring | Not available | Included | Included | Included |
| File restores | Included | Included | Included | Included |
| Complete machine restore from backup | Not available | Included | Included | Included |
| Workstation backup*** | Included | Usage-based | Usage-based | Usage-based |
| Microsoft 365 / Google Workspace email backup | Not available | Usage-based | Usage-based | Usage-based |
| Teams, OneDrive, SharePoint & Drive backup | Not available | Usage-based | Usage-based | Usage-based |
| Disaster recovery planning | Not available | Usage-based | Usage-based | Usage-based |
| Immutable remote backup storage | Included | Included | Included | Included |
| Local backup storage | Included | Included | Included | Included |
| Disaster recovery (instant-on backup) | Not available | Not available | Usage-based | Usage-based |
* Limited to two user accounts per endpoint. ** Included in the service foundation for applicable server operating systems. *** Included in the Consumer / Micro Business foundation; usage-based on all other foundations.
See the full feature comparison
Tell us who you are and the complete foundation-by-foundation matrix appears right away.
Add what your business needs
Any foundation can be extended with these services and licensing.
- Microsoft 365 applications
- Hardware & software procurement
- Mobile device management
- Database management & conversion
- Phone & fax service
- Video surveillance & access control
- Hardware & license financing
- Server & domain hosting
- Private cloud hosting
- Structured cabling & fiber optics
- Virtual desktops
- Internet provider sourcing
- Security incident & event monitoring (SIEM)
- Policy & compliance review
- Productivity tracking
- Email archiving & eDiscovery
- AI consulting & security
Agreement and billing, in plain English
- Services run on a 12-month agreement. Pricing is calculated over 12 months and split into equal monthly payments.
- You receive a monthly invoice by email, and you can pay it in the support portal.
- All devices are on the same foundation. Software licensing can vary by device.
- You don't need a foundation to get help, but managed clients get top priority.
- After-hours work is billed at our after-hours rate unless your foundation includes it.
Frequently asked questions
Support & response
What are your support hours?
Remote and on-site support run Monday to Friday, 8:00am to 5:00pm Central and Eastern time. The Defend plan includes 24/7 remote support.
What does on-site support include?
During support hours we support your infrastructure and people at your location whenever we judge a visit is needed, plus regularly scheduled on-site maintenance visits.
How fast do you respond to an emergency?
For remote emergencies we start assessing your ticket within 60 minutes. On-site emergency visits happen the same calendar day during normal support hours, depending on your plan. Emergency on-site support is for problems that can't wait for a scheduled appointment, generally with less than two days' notice.
What about after-hours, weekend and holiday support?
After-hours, weekend and holiday support is available at our after-hours rate under the Master Services Agreement, unless your plan includes it. Holiday support also depends on on-call staff availability.
How do I contact support?
Visit our Support page to open or check a request, start a support chat or connect remotely. You can also call 1-844-624-6672 to reach a live support analyst, or text a request to 217-318-3084 (Effingham) or 812-645-0921 (Terre Haute).
Monitoring & maintenance
What is 24/7 remote monitoring and management?
Every supported device on your plan is monitored around the clock, 365 days a year, with proactive management and alerting.
How does patch management work?
Our Network Operations Center identifies, approves and automatically installs security patches for Microsoft, Adobe, Mozilla, Java, Google Chrome and more, at scheduled times that keep vulnerabilities to a minimum.
What are automatic escalation and auto-healing alerts?
Our monitoring system routes alerts straight to the right engineer. When we spot a recurring problem that automation can fix, we build an auto-healing response so it is resolved without anyone having to call.
What does network monitoring cover?
Beyond basic monitoring, we watch interface status, failed packet counts, traffic flow and network device status, and we routinely update, maintain and power-cycle network equipment to keep it reliable and secure.
Technical services
Do you handle new hires and departures?
Yes. We take care of the technical side of onboarding, offboarding and role changes, including user accounts and mailboxes.
Are hardware and software included?
Installation labor is included in eligible plans. The hardware and software themselves are billed separately, and we can source them for you.
What is loaner equipment?
If critical hardware fails, we lend short-term replacement equipment, based on availability and compatibility. It isn't meant to replace proper redundancy.
How do you dispose of old equipment?
We wipe or physically destroy the data storage, recycle the device responsibly and give you a certificate of destruction for compliance records.
Can you deploy software automatically?
Yes, through our remote management system, for software that supports automated deployment.
Virtual CIO / CISO & account management
What is a strategic technology business review (vCIO)?
We meet with your management team to review the state of your I.T. assets and plan ahead using industry standards. Asset and machine health reports are included.
What is a strategic cybersecurity business review (vCISO)?
We meet with your management team to review your cybersecurity posture and plan for current threats and trends.
What do I get from the support portal?
Our support portal is a single resource for quotes, documents, invoices, payments, open tickets, past tickets, your asset list and much more, depending on your user permissions. You can access it at support.magoo.tech.
What are the AUP and the policy workshop?
Most successful attacks start with a user's click. We help you write an acceptable use policy so staff know the rules, and run a policy and compliance workshop so your organization meets or exceeds industry standards.
Do you document our network?
Yes. You get detailed, up-to-date network maps of your I.T. infrastructure.
Security
What is the cybersecurity assessment?
A structured review of your security controls against national recommendations, which we walk through with you to agree the right level of risk.
How do cyber awareness training and simulated phishing work?
All staff receive interactive training emails, and leadership gets participation reports. Simulated phishing emails test good habits, and reports show who is most at risk. Both are limited to two user accounts per endpoint.
What is endpoint detection and response?
Advanced, layered protection against malicious software, ransomware and network threats, monitored 24/7.
What does secure DNS filtering do?
It uses AI and machine learning to stop people from opening dangerous links or spoofed sites that imitate real ones, before an attack can run.
What are endpoint hardening and Microsoft 365 security policies?
Pre-configured baseline controls that block the most common attack methods on computers, plus security policies that reduce threats and phishing in your Microsoft 365 tenant.
How do you help with cyber insurance?
Insurers now require proof that controls are in place throughout the policy period. We review your policy, document your controls during your plan and provide documentation if an incident occurs.
What is password management and dark web monitoring?
A complete password management solution that reduces breach risk, with dark web monitoring and risk scoring for the covered passwords.
What is privileged access management?
Users work without administrator rights, which stops most malware from installing. Apps that need approval can be approved once automatically or sent for quick review.
What are application control and ring-fencing?
Application control lets us allow, deny or restrict which software can run, a gold standard against ransomware. Ring-fencing limits what your vital applications are allowed to communicate with.
What are network access control and storage control?
Network access control decides which devices can reach which parts of your network. Storage control sets policies for storage locations and devices, auditing and blocking unauthorized access.
What does multi-factor authentication cover?
Something you know (a password) plus something you have (a phone). We set up and maintain MFA and single sign-on for every compatible application.
What are computer and email encryption?
Computer encryption keeps data unreadable if a device is lost or stolen. Email encryption, triggered by the sender when needed, keeps message content private to the intended recipients.
What are DMARC and DKIM?
Email authentication standards that make it much harder for criminals to send email pretending to be your business, with reporting when they try.
What is SIEM?
Security incident and event monitoring logs activity such as network access, security changes and permission changes, and raises an alert when it sees a suspicious pattern. It also helps trace an incident back to its source. Infrastructure SIEM covers servers and network equipment.
Backup & disaster recovery
How does server and computer backup work?
Daily, cloud-first, encrypted copies of your servers or workstations, with bare-metal, application-aware and single-file restores. Data is protected with 256-bit encryption at rest and 128-bit in transit.
Can you restore a single file or a whole machine?
Both. Ask for a file or folder and we restore it remotely. If a machine fails completely, is corrupted or is lost, we restore the full machine from backup (bare-metal recovery).
Do you back up Microsoft 365?
Email backup copies your Exchange Online mail to independent storage so it can be recovered if lost. Complete Microsoft 365 backup adds OneDrive, Teams and SharePoint.
What is immutable remote backup storage?
An air gap between your network and your backups, so attackers can't destroy them, and your data survives a fire, flood or theft. Storage beyond your plan is billed by consumption.
What is instant-on disaster recovery?
A complete backup of your server sits in high-availability storage. If the server goes down, we activate the backup and reroute your traffic to it. Static IPs, networking, compute time and storage are billed when it runs.
What is disaster recovery planning?
A playbook built with all your stakeholders that lowers the chance of failure, sets priorities and shortens recovery time if something goes wrong.
Plans, scope & requirements
Which plan is right for us?
Our plans are built around reducing business risk: lost productivity, damaged customer trust, unreliable systems, lost data, regulatory problems and cyber incidents. Every industry carries different risk, and a lower plan can leave you over-exposed, so we choose the plan with you on a discovery call.
What is a small project?
Our Three 5's Rule: anything that affects fewer than 5 users, takes less than 5 hours, or has fewer than 5 steps. One small project per month is included. Larger projects are quoted separately.
What is out of scope?
Any single ticket over 5 hours of work, phone system support if your VoIP service isn't through Magoo, and systems not enrolled in a plan.
Are there site requirements?
Yes. Each site must have a supported next-generation firewall with intrusion detection and prevention (IDS/IPS).
Not sure which foundation fits your risk?
Book a discovery call. We'll review your setup and industry, recommend the right foundation and send a fixed monthly quote.
