Reading an MSP quote: 12 questions before you sign

Two IT quotes are sitting on your desk. One says $145 per user, one says $210, and both list proactive monitoring and help desk in the bullet points. They look like the same product at different prices. They are almost certainly different products at honest prices — you just can't see the difference from the one-pager. These twelve questions surface it.

Use them the boring way: email the list ahead of the second meeting and ask for written answers. Charm survives a conference room; vague answers don't survive being typed. And the speed and shape of the reply is itself your first data point about what being their client will feel like.

The money questions

• Is this per user or per endpoint — and which way is my office cheaper, counted honestly?
• What exactly triggers a charge beyond the monthly fee? I'd like the complete list, in writing.
• What do after-hours and emergencies cost?
• What counts as a project, and what did your last three clients pay for theirs?
• Do you mark up hardware and licenses, and can I buy elsewhere without penalty?
• What does leaving cost — and do I own my admin passwords and documentation from day one?

The security and substance questions

• Is EDR on every machine included in this price, or available?
• Who watches alerts nights and weekends — your staff, a partner SOC, or software and hope?
• When did you last test-restore a client's backup? Tell me the story.
• What response expectations will you put in the contract — not on the poster, in the contract?
• Will you fill out my cyber-insurance questionnaire and stand behind the answers?
• Can I call two clients my size, in my industry?

How to read the answers

None of this is adversarial. Good providers love these questions — they're the ones losing deals to fine print they refuse to write. Watch for the tells. Hesitation on the backup-restore story means restores aren't routinely happening. Vagueness about who watches overnight means the honest answer is software. And any wobble at all on do-I-own-my-passwords should end the meeting on the spot. That one isn't a red flag; it's the whole flag.

Notice what the pricing pattern tells you, too. The cheap quote is usually cheap because the security questions came back wrong — the EDR, the SOC, the tested backups are missing or sold separately. Price the two quotes apples-to-apples with the security spine included in both, and the gap usually collapses. At which point you're choosing on substance and trust, which was the goal all along. One more pattern: notice which questions get answered with a story and which get answered with a page number. Contracts run on page numbers. And if the reference question strikes them as unusual, remember that you're about to hand these people the keys to every system you own.

Cyber Alamo will happily sit its own quote in front of all twelve: flat $189–$229 per endpoint with the 24/7 SOC, EDR, tested backups, help desk, and compliance paperwork inside the number, and your credentials documented as yours from day one. Book the free assessment and bring the other quotes along. We'll answer for ours and translate theirs.