Managed IT onboarding, step by step: Four weeks from "we should sort this out" to sorted.
You get the deliverable from step one whether or not you continue. That's the entire risk.
Audit & inventory, free
We map what you have: machines, servers, accounts, subscriptions, licences, network gear, and the undocumented thing only one person knows how to restart. You get a written inventory and a prioritised risk list. Free, yours to keep, no obligation to continue. During the audit we have read access only, we change nothing without asking, and if you don't proceed we delete our working copies within 30 days.
Stabilise
We fix what's already broken or one bad day away from it. We tell you in writing whether your existing backups have ever been restored from. Admin accounts inventoried and locked down. Stale access removed. Anything risky, we tell you before we do it.
Instrument & document
Monitoring agents deployed, alert routing configured, helpdesk opened to your team, and runbooks written for the things that will eventually break. Your documentation lives in your account, not ours.
Hand over
We take ownership. From here, alerts come to us and tickets come to us. Tickets are taken 24 hours a day, seven days a week, and we work them every day, weekends included. On-site visits run Monday to Friday, 3pm to 8pm Eastern, and at weekends by arrangement. A P1 outage gets a best-effort response within two hours at any hour. You get a monthly report and a quarterly review of what keeps generating tickets, because the goal is fewer of them each quarter, not more billable hours.
What the audit looks at
The audit is a checklist, not a sales call. Here is the checklist.
- Every device. Make, age, OS version, patch state, encryption, who uses it, whether it's still supported by its vendor.
- Every server and service. What runs where, what depends on what, what happens if it goes down, and whether anyone has ever restarted it on purpose.
- Backups. What is backed up, where the copy lives, when it was last restored, and who holds the encryption key.
- Accounts and access. Every admin account, every shared password, every former employee who still has a login somewhere.
- Email and identity. MFA coverage, mail security records (SPF, DKIM, DMARC), forwarding rules nobody remembers creating. Want a head start? Grade your own domain in seconds with the free email security grader.
- Network. Firewall rules, open ports, remote access paths, Wi-Fi configuration, the device in the cupboard nobody can identify.
- Subscriptions and licences. What you pay for, what you use, what's about to expire.
- Single points of failure. People as well as machines.
You get all of it as a written document with the risks ranked, so you can act on it with us, with someone else, or on your own.
What changes after handover
Alerts route to us and are triaged by a person before you hear about them. Your team raises tickets by email or in the client portal and gets a response inside the target in your agreement. New starters and leavers are handled the same day you tell us. Patches happen on a schedule you know about. Once a month you get a report that says what happened, what we fixed, and how we did against the targets; once a quarter we sit down and look at what keeps breaking and what to do about it.
If you ever leave, the hand-over notice walks both of us through giving everything back (documentation, credentials, agents off your machines) within 30 days and at no charge.