Is security included, or is it an add on?

Endpoint protection, patching, firewall management, multi factor enforcement, and Microsoft 365 or Google Workspace backup are in the base package for every managed client. We do not sell those as an upgrade, because a client without them is a client we cannot defend.

Server backup is quoted separately, per server, with up to 1 TB of storage included for each. Separately billed does not mean optional in any way that matters: we will not take on a managed client whose servers have no working backup. If the budget is not there yet, we will say so during the quote rather than after an incident.

Higher tiers add depth: log monitoring and alerting, tighter identity controls, vendor management, and quarterly risk and compliance reviews.