Service Plans

Clear tiers. Scoped to fit.

Three service tiers help you understand the level of support your business may need. Final pricing is scoped to your users, platforms, security needs, compliance requirements, and service complexity.

Platform Fit

Microsoft-first, not Microsoft-only

Microsoft 365 is our preferred baseline, but Wayfinder can support mixed environments where the tool stack can responsibly manage, monitor, secure, back up, report on, and support the systems in scope.

Availability depends on platform and tool capability. Google Workspace, macOS, websites, networking, backup, security tools, and third-party platforms may be included when Wayfinder-approved tools provide reliable coverage. Systems that cannot be managed responsibly may be excluded, supported on a best-effort basis, or quoted separately.

At a Glance

Choose the support model that fits where you are

These summaries are meant for quick orientation. The fuller service breakouts below show what each tier can include after scoping.

Basic

Essential Foundation

Core IT administration for small teams that need reliable productivity, endpoint management, security basics, domain support, and quarterly planning.

Fit-based quote

Lowest base-cost tier, scoped to your environment.

  • Productivity, email, and identity administration
  • Endpoint management, patching, and EDR
  • DNS, website, and business continuity basics
  • Cyber insurance readiness support
View Details
Premium

Advanced Protection

The most complete option for organizations with higher risk, tighter response needs, or deeper compliance expectations.

Custom scoped

Built around advanced tooling, faster response targets, and deeper reviews.

  • Everything in Standard, plus SIEM and application control
  • Advanced email security and disaster recovery
  • CIS and NIST 800-171 technical support
  • Weekly operational review
View Details

Software and platform licensing is managed transparently as part of each scoped proposal. Managed clients receive preferred rates for out-of-scope work compared with standalone consulting or assessments.

Basic

Essential Foundation

The core productivity, identity, endpoint, and infrastructure services your business needs to operate reliably, with Microsoft 365 as the preferred baseline and mixed-environment support where tooling allows.

Fit-based
Lowest base support cost
Scoped after consultation

Included in administrative services

  • Microsoft 365 Business Premium (Office apps, Exchange, Teams, SharePoint, OneDrive)
  • Microsoft Entra ID — identity and access management
  • Microsoft Intune — device management and enrollment
  • Microsoft Defender for Endpoint — antivirus, EDR, vulnerability management
  • Microsoft Defender for Office 365 — anti-phishing, safe links, safe attachments
  • Huntress Managed EDR — 24/7 threat hunting and incident triage
  • DNSFilter — DNS-layer security and content filtering
  • Atera RMM — endpoint monitoring, remote management, and automated alerting
  • Windows OS patching — automated and monitored with reporting
  • Device asset management
  • Cloudflare domain registration and DNS management
  • Email configuration and ongoing administration
  • Website hosting and basic administration
  • Network failover — prepared and tested
  • Spare active workstation kept ready as backup device
  • Quarterly Business Review

Available as chargeable work hours

  • IT support for workstations and peripheral devices
  • Printer, VOIP, and audio/visual support
  • Simple website construction and enhancements
  • Networking setup and changes

Plan details

Pricing approach
Lowest base-cost tier, scoped to the number of users, platforms, endpoints, support expectations, and environment complexity.
Software licensing
Managed licensing is quoted separately from the support base and includes administration, provisioning, renewal tracking, and lifecycle support.
Best fit
Small teams that need dependable Microsoft-first administration, baseline security, endpoint management, and infrastructure support without heavier compliance or recovery requirements.
Onboarding
Quoted after scoping so the onboarding plan matches your endpoints, platforms, current state, and remediation needs.
Work hours
Out-of-scope work is available in managed-client blocks at preferred rates compared with standalone consulting and assessment work.
Incident/Request SLO
See the SLO table below. Basic targets generally resolve within 3 business days, subject to complexity and third-party dependencies.
Contract terms
6-month or 12-month options. Renewal and termination terms are confirmed in the proposal and service agreement.
Field work
Remote-first; travel time and cost included when on-site required

New to Wayfinder? A one-month precontract consultation is required before signing a Basic tier agreement. Start the conversation →

Standard ★ Most Popular

Security & Compliance

Everything in Basic, plus stronger identity and endpoint security, security awareness, email and file backups, compliance support, and proactive advisory time for scheduled work.

Scoped
Balanced base plus advisory
Includes proactive advisory time

Included in administrative services

  • Everything included in Basic, plus:
  • Microsoft Entra ID P2 — risk-based conditional access, PIM, identity protection
  • Microsoft Defender for Endpoint Plan 2 — advanced threat hunting, vulnerability analytics
  • Microsoft Defender for Office 365 Plan 2 — attack simulation, advanced phishing detection
  • Huntress — managed detection and response
  • DNSFilter — DNS-layer security and content filtering
  • Bitlocker — device encryption management
  • Email and file backup (SharePoint/OneDrive)
  • SPF / DKIM / DMARC email authentication via Cloudflare
  • KnowBe4 KMSAT — security awareness training and phishing simulations
  • Acceptable Use Policy and Change Management Policy assistance
  • Business-grade website construction, administration, and security
  • MSFT environment vulnerability management
  • Monthly Operational Review

Available as chargeable work hours

  • Everything available in Basic, plus:
  • Shadow IT evaluation
  • Attack surface testing
  • Compliance gap assessments (HIPAA, PCI, Cyber Insurance)

Compliance frameworks supported (not guaranteed): HIPAA, PCI, Cyber Insurance requirements.

Plan details

Pricing approach
Balanced base-cost tier, scoped to your user count, platform mix, compliance obligations, security requirements, and support complexity.
Software licensing
Managed licensing is quoted separately from the support base and includes administration, provisioning, renewal tracking, and lifecycle support.
Best fit
Growing teams that need stronger identity security, backups, security awareness, compliance support, and regular advisory time without a fully custom enterprise scope.
Proactive Maintenance Block
Includes scheduled proactive time for advisory services, vCIO guidance, AI guidance, review preparation, and planned work.
Onboarding
Quoted after scoping so the onboarding plan matches your endpoints, platforms, current state, and remediation needs.
Contract terms
6, 12, or 24-month options
Incident/Request SLO
See the SLO table below. Standard targets generally resolve within 2 business days, subject to complexity and third-party dependencies.
Renewal and exit terms
Confirmed in the proposal and service agreement so expectations are clear before work begins.
Field work
Remote-first; travel time and cost included when on-site required

New to Wayfinder? A one-month precontract consultation is required before signing a Standard tier agreement. Start the conversation →

Premium

Enterprise-Grade Protection

The most complete support model for businesses with higher risk, tighter response needs, advanced security tooling, disaster recovery expectations, and deeper compliance requirements.

Custom
Highest-touch support base
Scoped after deeper consultation

Included in administrative services

  • Everything included in Standard, plus:
  • Microsoft Sentinel — SIEM, central log aggregation, threat correlation
  • Microsoft Purview eDiscovery Premium — legal hold, audit, data governance
  • ThreatLocker — application allowlisting and ringfencing
  • KnowBe4 — security awareness training and phishing simulations
  • Datto — business continuity and disaster recovery
  • Mimecast — advanced email security and archiving
  • Disaster Recovery and Incident Response plans
  • Automated response playbooks via Sentinel
  • Advanced endpoint telemetry and audit trails
  • Weekly Operational Review

Available as add-on managed services

  • Server administration — quoted per scope
  • Network administration — quoted per scope for supported environments
  • Penetration testing & vulnerability management — quoted per scope
  • Mobile Device Management — quoted per scope

Compliance frameworks supported (not guaranteed): HIPAA, PCI, CIS, NIST 800-171, Cyber Insurance requirements.

Plan details

Pricing approach
Highest-touch tier with a custom base cost, scoped to higher-risk environments, advanced security tooling, compliance needs, recovery expectations, and response requirements.
Software licensing
Managed licensing is quoted separately from the support base and includes administration, provisioning, renewal tracking, and lifecycle support.
Best fit
Organizations with elevated operational risk, advanced compliance needs, disaster recovery expectations, and a need for deeper security oversight and faster response targets.
Proactive Maintenance Block
Includes scheduled proactive time for advisory services, vCIO guidance, AI guidance, review preparation, and planned work.
Onboarding
Quoted after scoping so the onboarding plan matches your endpoints, platforms, current state, recovery requirements, and remediation needs.
Contract terms
12 or 24-month options
Incident/Request SLO
See the SLO table below. Premium targets generally resolve within 1 business day, subject to complexity and third-party dependencies.
Renewal and exit terms
Confirmed in the proposal and service agreement so expectations are clear before work begins.
Field work
Remote-first; travel time and cost included when on-site required

Premium requires a 3-month precontract consultation. This ensures we fully understand your environment before committing to service levels. Start the process →

Full Details

What's included at a glance

Specific tools may vary by platform and availability. Client-facing agreements describe service functions rather than locking every engagement to a single vendor.

Feature Basic Standard Premium
Microsoft 365 Business Premium ✓✓✓
Atera RMM — monitoring & patching ✓✓✓
Huntress Managed EDR ✓✓✓
DNSFilter ✓✓✓
Cloudflare domain, DNS & email ✓✓✓
Business continuity / failover ✓✓✓
Website hosting & admin ✓✓✓
Cyber Insurance readiness ✓✓✓
Quarterly Business Review ✓✓✓
Entra ID P2 (advanced identity) —✓✓
Defender for Endpoint Plan 2 —✓✓
KnowBe4 security awareness training —✓✓
BitLocker encryption —✓✓
Email & file backups —✓✓
Proactive Maintenance Block (vCIO, advisory)—✓✓
Monthly Operational Review —✓✓
HIPAA / PCI support —✓✓
Microsoft Sentinel SIEM ——✓
ThreatLocker application control ——✓
Huntress MDR + ITDR (upgraded) ——✓
Datto BCDR backup & recovery ——✓
Mimecast email security ——✓
DR & Incident Response plans ——✓
CIS / NIST 800-171 support ——✓
Weekly Operational Review ——✓
Server administration ——Add-on
Network administration ——Add-on
Penetration testing ——Add-on
Pricing model Lowest base cost for essential administration Balanced base cost with proactive advisory time Custom base cost for advanced oversight
Best-fit client Small teams needing a reliable IT foundation Growing teams with security and compliance needs Higher-risk organizations requiring deeper coverage

Software and platform licensing is quoted separately from the support base and includes license administration, provisioning, and lifecycle management. Final pricing is confirmed after scoping.

Service Level Objectives

Response targets by priority

SLOs are operational goals during standard business hours, not contractual guarantees. Resolution timing depends on issue complexity, vendor responsiveness, hardware availability, client approvals, and whether the affected system is fully managed within the approved tool stack.

Priority Description Basic Standard Premium
P1 Critical Outage, breach, ransomware, or business stopped Urgent same-day 2 hrs 1 hr
P2 High Multiple users affected; no good workaround 4 hrs 2 hrs 1 hr
P3 Medium Single user impaired; workaround available 1 business day 4 hrs 2 hrs
P4 Low General, minor, or non-urgent request 2 business days 1 business day 4 hrs
Resolution guidance General target, subject to dependencies Generally within 3 business days Generally within 2 business days Generally within 1 business day

Standard support hours are Monday through Friday, 8:00 AM to 6:00 PM Central Time, excluding federal holidays. After-hours critical issues are handled on a commercially reasonable best-effort basis.

Not sure which plan is right for you?

We'll learn about your business and make a recommendation — no obligation, no pressure.