The best managed IT provider in Boston for your company is the one that can show you, in writing, how fast it responds, what its price includes, how it protects your accounts and backups, and how you would leave if it didn’t work out. Rankings and award lists won’t tell you that. The twelve questions below will, and a good provider will answer every one of them without hesitation.
Key takeaways
- Ask for measured response times, not promises. A median first response tells you more than a “we respond quickly” line on a website.
- Get the price per user and the list of what is included and excluded before the first sales meeting ends.
- Security basics (MFA, endpoint detection, tested backups) should be part of the base plan or clearly priced, not an upsell you discover after an incident.
- Make sure your company, not the provider, owns every admin account, domain and password vault.
Why don’t “best MSP in Boston” lists settle the question?
Most lists are built from paid placements, self-reported awards or how much content a company publishes. None of that tells you whether the engineer who answers your call at 8:15 on a Monday knows your network. The useful signals are things you can check: response data, published pricing, public reviews, and how the provider handles access and offboarding.
What should you ask about support and response times?
1. What is your median first response time, and how do you measure it? Ask for a number from real tickets over the last quarter. Medians are more honest than averages because one ticket that sat over a weekend skews an average badly. Ours is published: a median email first response of 12 minutes over the last 90 days, and we explain how we measure it on how support works.
2. Who actually answers when we call? A call center that logs a ticket is different from an engineer who can fix the problem. Ask whether the people on the phone are employees, where they are based, and how escalation to a senior engineer works.
3. What happens after hours? Get the honest version. Many providers, us included, offer best-effort after-hours help to every client and guaranteed after-hours response only on a paid add-on. That is fine as long as it is written down.
4. When do you come on site, and what does it cost? Remote support handles most issues. For the rest, ask where engineers are based and whether on-site visits are included or billed hourly.
What should you ask about price and scope?
5. What is the price per user, and what is excluded? A per-user price is easy to compare. The exclusions list is where the real differences hide: projects, new computer setup, after-hours work, vendor management, server support. Our rates are on our pricing page: $125 per user for fully managed IT, $75 for co-managed, $165 per hour for projects.
6. What does onboarding involve, and what does it cost? Onboarding is where a provider documents your environment, installs its tools and fixes the obvious risks. Ask for the plan, the timeline and the fee in writing.
7. What are the contract length and exit terms? Read the termination clause before you read anything else. Know the notice period, any early termination fee, and what the provider must hand back when you leave.
What should you ask about security?
8. Which security tools are in the base price? At a minimum you want multi-factor authentication on every account, endpoint detection and response on every device, email filtering, and patching on a schedule. If any of these are add-ons, get the price now.
9. How do you test backups? “We back up nightly” is not the answer. Ask when they last restored a file or a whole server for a client, how failed backup jobs are flagged, and who gets the alert.
10. Can you help us meet Massachusetts requirements? If you hold personal information about Massachusetts residents, 201 CMR 17.00 requires a written information security program. A provider should be able to explain what that means for you and help you write one. Our WISP guide covers the basics.
What should you ask about ownership and leaving?
11. Who owns the admin accounts, domains and documentation? The right answer is you. Your company should hold the global admin account for Microsoft 365 or Google Workspace, the domain registrar login, and a copy of the documentation. A provider that keeps those to itself makes leaving hard on purpose.
12. Can we talk to current clients? Ask for two references at a company your size and in your industry, and read the public reviews on Google and Clutch. Look for comments about response, communication and how problems were handled, not just “great service.”
What are the red flags?
- No price until after a long discovery process.
- Vague answers about response times, or only “average” numbers.
- Shared admin logins, or reluctance to give you your own global admin account.
- Security tools that are all optional extras.
- No clear answer on what happens when the contract ends.
Frequently asked questions
How many managed IT providers should we talk to?
Three is usually enough. Ask each one the same questions in writing so you can compare the answers side by side.
Is a bigger provider always safer?
No. A larger provider may have more coverage, and a smaller one may give you senior engineers who know your setup. Judge on the answers to the questions above, not headcount.
Should a Boston company use a local provider?
Local matters for on-site work, network installs and office moves. For daily support, response time and expertise matter more than the provider’s zip code.
How long does switching providers take?
Plan on several weeks of overlap so admin access, documentation and tools change hands cleanly. Rushing the handoff is where accounts and backups get lost.
If you are comparing providers and want a second opinion on the answers you’re getting, Boston Managed IT will walk through them with you, even if you don’t pick us. Call (617) 322-5155 or visit bostonmit.com/contact for a free 15-minute IT provider review.
— Boston Managed IT
