Pricing
How KES Prices Managed IT: Transparent, Flexible, Built for SMBs
You want to know, “What will this cost—and why?” Fair question. At KES, pricing reflects the outcomes you need (security, uptime, compliance) and the components required to deliver them reliably. Because every business is different, the price varies—mostly with the number of people/devices we look after, the security level you choose, and the support response you expect.
We exist to serve small to medium-sized businesses in Kent and the South-East. That means we tailor solutions, not shoehorn you into a one-size-fits-all bundle. You’ll always see a line-item quote, so you can choose what matters now and add more later.
What makes the price go up or down?
Biggest drivers
- Users & devices: desktops/laptops, servers, and network gear to monitor and manage.
- Security level: baseline antivirus vs EPDR + firewall + XDR.
- Support model: pooled minutes vs unlimited remote; standard vs priority SLAs; on-site options.
- Backup scope & retention: Microsoft 365 backup only, endpoints too, and how long you keep versions.
- Complexity: multiple sites, legacy systems, compliance needs (e.g., Cyber Essentials), vendor integrations.
Why some components cost more
- They’re critical to effective monitoring and prevention (e.g., RMM, patching, EPP/EPDR, Firebox). Skipping them raises risk and downstream effort.
- They include human time: UK-based engineers who answer, fix, patch, document, and improve. You’re paying for outcomes, not just software.
- They carry overheads: training & certifications (WatchGuard/Microsoft), insurance, tooling, secure documentation, out-of-hours readiness, and the monitoring infrastructure that runs 24/7.
What’s “critical” vs “optional”?
Core (recommended for every client)
- RMM (Remote Monitoring & Management) – Our agent keeps devices healthy: monitoring, patching, remote access, alerting, asset/reporting. Without it, we can’t proactively support you.
- Endpoint Security – EPP – Modern antivirus/anti-malware baseline. Stops known threats and enforces policies.
- Backup – At minimum: Microsoft 365 (Exchange, OneDrive, SharePoint, Teams). Often also endpoint/server backup for laptops and on-prem systems. Backups protect you from accidents, ransomware, and regulatory/insurance gaps.
Advanced protection (for higher risk, or when you want fewer “unknowns”)
- EPDR (Endpoint Protection, Detection & Response) – Adds behavioural detection and response actions to stop unknown threats. Gives us deeper visibility and faster containment.
- WatchGuard Firebox with Total Security – Unified edge security: IPS, web filtering, advanced threat detection, DNS protection, sandboxing, and more.
- XDR (Extended Detection & Response) – When EPDR on endpoints and a Firebox licensed with Total Security are in place, we can correlate signals across endpoint + network to spot and stop multi-stage attacks. That’s the “joined-up” defence many insurers and auditors now expect.
Optional add-ons (pick as needed)
- Mobile device management, advanced email security, privileged access controls, longer backup retention, after-hours SLAs, compliance reporting packs, and project services (migrations, network refreshes, etc.).
How the technology fits together (in plain English)
- RMM is our “eyes and hands” for patching, health checks, and fast remote fixes.
- EPP/EPDR is your device bodyguard: EPP blocks known threats; EPDR hunts unknown behaviour and can isolate a device automatically.
- Firebox (Total Security) protects everything between you and the internet—stopping threats before they reach endpoints and enforcing safe access.
- XDR ties endpoint + firewall data together so we see the whole story, not just one piece.
- Microsoft 365 licensing underpins identity, email, collaboration and device security baselines.
- M365 backup and endpoint backup ensure you can recover quickly—from user error to ransomware.
Why staffing and overheads matter (and why we talk about them)
Great tools still need great people. Your monthly fee covers:
- Skilled engineers (UK-based) who answer quickly, fix issues, maintain your estate, and advise on improvements.
- Training & certifications (WatchGuard, Microsoft) so you benefit from best practice.
- 24/7 monitoring infrastructure and secure documentation, so you’re not paying to rebuild knowledge every time.
- Insurance, audits, and quality processes that reduce your operational risk.
This is how we keep response times low and resolution quality high—without surprise costs.
Remote support vs on-site support
Remote support: First line for speed. Most issues are resolved this way—faster and with less disruption.
Support is delivered either as pooled minutes (Essentials as an optional add-on, Business included) or unlimited in-hours remote support (Premium).
-
Essentials: Optional add-on — 20 minutes per user per month (pooled)
-
Business: Included — 30 minutes per user per month (pooled)
-
Premium: Included — Unlimited in-hours remote support
On-site support: When hands are needed (hardware swaps, Wi-Fi surveys, cabling, complex outages). Available to all clients; how it’s billed depends on your bundle (see below).
What’s included in each KES bundle?
Essentials (best for lean, low-risk estates)
Essentials (best for lean, low-risk estates)
-
RMM + core monitoring/patching
-
WatchGuard EPP (baseline antivirus)
-
Optional add-on: Pooled remote support time each month (20 mins per user/month, pooled) for incidents and “how-do-I?” requests
-
On-site available pay-as-you-go
-
Optional add-ons: M365 backup, endpoint backup, projects
Business (best for most SMBs)
- Microsoft 365 Business Premium (strong identity, device management, email security)
- WatchGuard EPDR (behavioural detection & response)
- RMM + proactive maintenance
- More pooled remote support time each month than Essentials
- On-site available at preferred rates
- Optional: Firebox with Total Security, XDR, backup choices (M365 + endpoints)
Premium (best for regulated or zero-downtime teams)
- Microsoft 365 E3
- WatchGuard Firebox with Total Security
- WatchGuard EPDR with XDR enabled (endpoint + firewall correlation)
- RMM + enhanced maintenance and reporting
- Unlimited in-hours remote support
- Endpoint backup included (and M365 backup available/commonly included)
- Priority on-site response for business-critical incidents (routine on-site available by plan)
(We’ll always clarify exact inclusions on your quote so there are no surprises.)
How backups affect price (and risk)
- M365 backup: Microsoft safeguards the platform, not your retention. Backup ensures quick, granular restores and satisfies many insurers/auditors.
- Endpoint/server backup: Laptops and on-prem servers still lose data or get encrypted. Backup controls downtime and recovery costs.
- Retention: Longer retention = more storage = higher cost, but often required for compliance or board-level risk appetite.
Do you need everything?
No. We’ll help you decide based on:
- Risk tolerance & insurer requirements
- Device mix & where data lives
- Regulatory needs (e.g., Cyber Essentials readiness)
- Budget vs business impact if systems go down
We’ll show a good/better/best option, explain trade-offs in plain English, and let you choose.
What you can expect in your quote
- Line-item pricing by user/device and by service (RMM, security, firewall, backup, support).
- Clear SLAs (response and escalation).
- Scalable options so you can start lean and grow security depth as needed.
- Onboarding plan (who does what, when, and how we minimise disruption).
Ready to see your numbers?
Tell us:
- Number of users/devices (laptops/desktops, servers, Firebox or other firewall)
- Sites/locations
- Current Microsoft 365 licences
- Your priorities (e.g., cyber insurance, compliance, remote work, uptime)
We’ll respond with a transparent, tailored proposal you can sanity-check with your team—no pressure, no jargon.
KES — your local IT partner for SMBs. Security that makes sense, support that doesn’t make you wait, and pricing you can explain to your board.
Overview of Our Managed Services
| Included feature | Essentials Service Only |
Essentials + 20m pooled |
Business + 30m pooled |
Premium |
|---|---|---|---|---|
| Price (per user / month) | £25.00 | £39.00 | £79.00 | £139.00 |
| Core monitoring & maintenance | ||||
| RMM (monitoring, patching, remote access) | ✓ | ✓ | ✓ | ✓ (enhanced) |
| Microsoft & 3rd-party application updates | ✓ | ✓ | ✓ | ✓ |
| 24×7×365 infrastructure monitoring | ✓ | ✓ | ✓ | ✓ |
| Support | ||||
| Support portal / ticketing (bespoke support application) | ✓ | ✓ | ✓ | ✓ |
| Remote support (pooled minutes per user, per month) | — | 20 mins pooled | 30 mins pooled | Unlimited (in-hours) |
| On-site support | Price on request | Price on request | Price on request | Price on request |
| Security | ||||
| Endpoint security | WatchGuard EPP | WatchGuard EPP | WatchGuard EPDR | WatchGuard EPDR (+ XDR ready) |
| Managed WatchGuard firewall (Firebox) | Price on request | Price on request | ✓ (Total Security) | ✓ (Total Security) |
| Password management system | ✓ | ✓ | ✓ | ✓ |
| Dark web monitoring | ✓ | ✓ | ✓ | ✓ |
| Vulnerability scanning / penetration testing | Price on request | Price on request | Price on request | Price on request |
| Microsoft 365 & backup | ||||
| Microsoft 365 licence included | — | — | Business Premium | Microsoft 365 E3 |
| Microsoft 365 cloud backup | Price on request | Price on request | ✓ | ✓ |
| Endpoint cloud backup (up to 2 computers per user) | Price on request | Price on request | Price on request | ✓ |
| Quarterly human backup testing | Price on request | Price on request | Price on request | ✓ |
| Management & training | ||||
| IT documentation | Price on request | ✓ | ✓ | ✓ |
| Monthly executive report | Price on request | ✓ | ✓ | ✓ |
| Technology Business Review meeting cadence | Price on request | Bi-annual | Quarterly | Monthly |
| Security awareness training | Price on request | ✓ | ✓ | ✓ |
| End-user training programme | Price on request | Price on request | ✓ | ✓ |
| Technology adoption session cadence | Price on request | Annual | Bi-annual | Quarterly |
| Notes: Prices shown are per user/month (ex VAT). Multi-site, servers, legacy systems, compliance requirements, and project work are scoped separately (price on request). | ||||
Want to see pricing for you? Try our Pricing Calculator page here
Frequently Asked Questions
Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident sunt in culpa qui officia.
“What will this cost us—and why do prices vary?”
Pricing scales with what we’re looking after (users/devices/servers), the protection level (EPP → EPDR → Firebox Total Security with XDR), support model (pooled minutes vs unlimited), and backup scope/retention (M365 only vs endpoints/servers and how long you keep versions). Complexity—multi-site, legacy systems, compliance targets—can also influence cost. We always provide a line-item quote so you can see exactly where every pound goes.
“Do Microsoft 365 licences include backup?”
No. Microsoft protects the platform, not your retention. M365 backup gives granular restores, sensible retention, and satisfies most cyber-insurance and audit questions. If you also have laptops/servers with important local data, add endpoint/server backup to reduce downtime and recovery costs.
“What are the absolute essentials we shouldn’t skip?”
-
RMM for 24/7 monitoring, patching and rapid remote fixes.
-
Endpoint Security (EPP) as a modern baseline.
-
Backup at minimum for Microsoft 365 (mail, OneDrive, SharePoint, Teams).
These keep you visible, protected and recoverable. From there, add EPDR, Firebox (Total Security) and XDR based on risk, insurer expectations and data sensitivity.
“Do we need EPDR, a WatchGuard Firebox and XDR?”
-
EPDR adds behaviour-based detection and response on endpoints (strongly recommended for higher risk).
-
Firebox with Total Security stops threats at the edge (IPS, web filtering, sandboxing, DNS protection).
-
XDR kicks in when you have EPDR + Firebox (Total Security), letting us correlate endpoint + network signals to catch multi-stage attacks early—often preferred by insurers and auditors.
“What support is included in Essentials, Business and Premium?”
-
Essentials: RMM + monitoring/patching, WatchGuard EPP, pooled remote support minutes; on-site is pay-as-you-go; backups optional.
-
Business: Microsoft 365 Business Premium, WatchGuard EPDR, RMM + proactive maintenance, more pooled remote minutes, on-site at preferred rates; options for Firebox, XDR and backups.
-
Premium: Microsoft 365 E3, Firebox (Total Security), EPDR with XDR enabled, RMM + enhanced reporting, unlimited in-hours remote support, endpoint backup included, priority on-site for critical incidents.
“Can you work with what we already have, or do we need to switch?”
We start from today’s reality, not a blank sheet. We’ll adopt your current environment and deploy RMM for visibility. If you want XDR, you’ll need EPDR across endpoints and a WatchGuard Firebox with Total Security. We’ll then move through a practical, phased programme to standardise and lower risk, complexity and cost.