IT Support Costs UK: What Businesses Actually Pay Per User in 2026
27th July 2026
The short answer: Most UK businesses pay between £30 and £120 per user per month for managed IT support in 2026. Basic remote helpdesk cover sits at the £30 to £50 mark, standard managed IT with monitoring and patching runs £50 to £80, and security-led support with backup monitoring and proactive maintenance costs £80 to £120 per user per month. A 20 person business should therefore budget roughly £1,000 to £2,000 a month, or £12,000 to £24,000 a year. Anything quoted below about £25 per user is almost certainly remote-only cover with add-ons billed separately.
That is the number you came for. The rest of this guide explains how providers arrive at it, which pricing model leaves you exposed, and how to read a quote properly before you sign a three year contract.
How much does IT support cost in the UK?
There is no published price list for managed IT, because no two networks are the same. What does exist is a fairly consistent market range. Cross-checking the pricing guides published by UK providers in 2026, the numbers cluster tightly.
| Service level | Typical cost per user, per month | What it usually covers |
|---|---|---|
| Basic / remote helpdesk | £30 to £50 | Remote helpdesk, ticketing, basic monitoring |
| Standard managed IT | £50 to £80 | Helpdesk, monitoring, patch management, Microsoft 365 admin |
| Advanced / security-led | £80 to £120 | Everything above plus security tooling, backup monitoring, proactive maintenance |
| Enterprise / regulated | £120+ | Dedicated team, advanced security, compliance and governance support |
Sources: Qual’s 2026 UK pricing guide puts the SME average at £40 to £80 per user per month. Blisstech’s January 2026 guide quotes a wider £50 to £150 range and warns that headline prices of around £10 per user “most likely only provides remote support and very limited services or has hidden costs”.
Those two ranges disagree at the top end, and that disagreement is the useful part. The spread reflects scope, not greed. A £45 quote and a £110 quote are usually selling genuinely different things, and the only way to compare them is line by line.
What does IT support cost for a small business?
Scaling the per-user figure gives you a realistic monthly budget:
| Business size | Typical monthly spend | Typical annual spend |
|---|---|---|
| 5 users | £150 to £600 | £1,800 to £7,200 |
| 10 users | £300 to £1,200 | £3,600 to £14,400 |
| 25 users | £750 to £3,000 | £9,000 to £36,000 |
| 50 users | £1,500 to £6,000 | £18,000 to £72,000 |
Two caveats. Cost per user usually falls as headcount rises, so a 50 user business rarely pays 10 times what a 5 user business pays. And many providers set a minimum monthly fee, often around 10 users, which is why very small businesses sometimes find the effective per-user rate higher than the advertised one.
For context, a single in-house IT hire in the South East costs upwards of £35,000 a year once salary, pension, holiday cover and training are counted. That is the comparison most businesses are really making, and it is why the government’s own data shows 64% of small businesses and 70% of medium businesses use an external cyber security provider, compared with just 42% of large ones.
Which IT support pricing model will you be quoted?
The model matters as much as the number, because it decides who absorbs the risk when something goes wrong.
| Model | How it works | Best for | Watch out for |
|---|---|---|---|
| Per user, per month | Fixed fee per employee, covering all their devices | Most SMEs; predictable budgeting | Staff with three devices each can make it look expensive |
| Per device, per month | Fixed fee per endpoint, server or firewall | Businesses with few users but lots of kit | Costs creep as device count grows |
| Tiered packages | Bronze / Silver / Gold bundles | Buyers who want simple comparison | The feature you need is always one tier up |
| Fixed fee, all inclusive | One monthly price, unlimited support | Businesses wanting zero surprises | Check the definition of “unlimited” and what is out of scope |
| Block hours / pay as you go | Buy a bundle of hours upfront | Very small or low-change environments | No incentive for the provider to prevent problems |
| Break-fix | Pay only when something breaks | Almost nobody, in 2026 | Costs are unpredictable and security is reactive |
The critical distinction is between proactive and reactive models. Under break-fix, your provider earns more when your systems fail. Under a managed contract, they earn more when your systems do not. That incentive alignment is the actual product you are buying, and it is worth more than a £10 per user saving.
What should be included in the monthly fee?
Ask every provider to confirm, in writing, which of these sit inside the monthly fee and which are billed separately. The gaps are where budgets break.
- Unlimited remote helpdesk, with defined hours
- Onsite visits, and how many are included
- 24/7 monitoring and alerting
- Patch management for operating systems and third party software
- Antivirus, endpoint detection and response
- Email security and filtering
- Backup, plus regular tested restores, not just backup monitoring
- Microsoft 365 or Google Workspace administration and licence management
- User onboarding and offboarding
- Asset register and documentation
- Quarterly or annual IT strategy reviews
- Out of hours and emergency cover
Backup deserves a special mention. “Backup monitoring” and “tested restores” are not the same service. A backup nobody has ever restored from is a hypothesis, not a safety net.
What the official data says about breach costs, and why it matters to your quote
Here is where a lot of IT support pricing content goes wrong, and it is worth being straight with you about it.
You will see providers quote figures like “the average cyber attack costs a UK business £195,000”. That number does not come from the UK government’s research. The actual Cyber Security Breaches Survey 2025/2026, published by DSIT and the Home Office on 30 April 2026 and based on interviews with 2,112 UK businesses, reports something far less dramatic:
The median perceived cost of the most disruptive breach or attack was £0 for businesses, rising to £30 for medium and large businesses. The range where most fell (25th to 75th percentile) was £0 to £200.
So most breaches cost most businesses nothing measurable. That is the honest headline, and any provider who tells you otherwise is selling through fear.
But read the next line of the same survey and the real argument for spending money appears:
In the top 5% of cases (95th percentile), organisations faced costs of £4,000 for all businesses and micro/small businesses, rising to £10,000 for medium/large businesses.
And for cyber crime other than phishing, the median cost among those who actually incurred one was £750, with the top 10% of cases reaching £7,500.
This is the correct way to think about IT support pricing. You are not buying down the median, you are buying down the tail. The median business has a quiet year. The unlucky 5% do not, and the survey notes that high-cost incidents are “rare, highly variable in nature and often organisation-specific, which makes them persistently difficult to measure robustly”. Rare and hard to measure is not the same as harmless.
The other numbers worth knowing from the same survey:
- 43% of UK businesses identified a breach or attack in the last 12 months, roughly 612,000 organisations
- Broken down by size: micro 42%, small 46%, medium 65%, large 69%
- Phishing is 38% of all business breaches and was the most disruptive type for 69% of those affected
- Ransomware has actually fallen to 1%, down from 3% in each of the previous two years
- Only 24% of businesses have basic technical controls in all five Cyber Essentials areas
That last statistic is the one to hold your provider to. If three quarters of UK businesses lack the five basic controls, “we’ll keep you secure” is not a specification. Ask which of the five controls they will implement and maintain.
What do compliance and certification add to the cost?
If you handle personal data, or you sell to government or larger corporates, compliance is a line item rather than an afterthought.
Cyber Essentials is the baseline, and unlike managed IT, it has a genuinely published price. The IASME assessment fees are tiered by organisation size:
| Organisation size | Employees | IASME assessment fee |
|---|---|---|
| Micro | 0 to 9 | £320 + VAT |
| Small | 10 to 49 | £440 + VAT |
| Medium | 50 to 249 | £500 + VAT |
| Large | 250+ | £600 + VAT |
That fee covers the assessment only, is renewable annually, and includes cyber liability insurance for UK organisations turning over under £20 million. Cyber Essentials Plus, which adds a third party technical audit and vulnerability scan, is quoted individually because it depends on network complexity. Budget separately for the remediation work needed to pass, which is usually the larger cost of the two.
Worth knowing: only 5% of UK businesses currently hold Cyber Essentials, though that is up from 3% last year, and just 17% are even aware of it. For a small business bidding for contracts, that makes certification a cheap competitive differentiator as much as a security control.
GDPR compliance is the other cost that tends to surface late. A GDPR and cyber security audit establishes what personal data you hold, where it lives, who can reach it and what happens if it leaks. Retrofitting that after an incident, under an ICO deadline, costs considerably more than doing it deliberately.
Seven questions to ask before you sign
Most bad IT contracts are not badly priced. They are badly scoped. These questions surface the difference:
- What is explicitly excluded from the monthly fee, and what is your hourly rate for work that falls outside it?
- What are your response and resolution targets, and what happens if you miss them? A target with no remedy is a marketing claim.
- Is helpdesk support genuinely unlimited, or is there a fair use cap?
- Are onsite visits included? How many, and how quickly can you get to us?
- Who owns the licences, domains and backups? If we leave, what do we take, and what do you charge to hand over?
- What is the contract term and notice period? Three year terms with 90 day notice are common; negotiate.
- How are security and compliance handled? Are they in the fee, or an upsell?
Question five is the one people forget, and it is the one that hurts most. Exit terms are far easier to negotiate before you sign than after you have decided to leave.
What does IT support cost in Kent?
Kent pricing tracks the national range closely, sitting a little below central London rates but above much of the country. For most Kent SMEs, £45 to £90 per user per month buys a properly proactive, security-led service.
What genuinely varies locally is onsite response. A provider based in Maidstone or Medway can reach most of the county inside an hour. A provider quoting from London may be cheaper on paper and considerably slower when a server room needs a physical pair of hands. If your business cannot run remotely, weight travel time as heavily as the per-user rate.
Gray IT supports businesses across Kent, including Medway, Maidstone, Rochester and Chatham, on transparent IT support contracts with no hidden add-ons.
Not sure whether you are overpaying, or under-protected? Book a free, no-obligation IT and security review. We will benchmark your current contract against the market, tell you plainly which of the five Cyber Essentials controls you are missing, and give you a fixed quote. No pressure, no jargon. Get in touch with Gray IT.
Frequently asked questions
How much does IT support cost per user in the UK? Between £30 and £120 per user per month in 2026, depending on scope. Basic remote helpdesk is £30 to £50, standard managed IT with monitoring and patching is £50 to £80, and security-led support is £80 to £120. Most UK SMEs land between £40 and £80.
How much does IT support cost for a small business? A 10 user business typically pays £300 to £1,200 per month, and a 25 user business £750 to £3,000. Many providers apply a minimum monthly fee equivalent to around 10 users, so very small businesses may pay a higher effective rate per user.
Is outsourced IT support cheaper than hiring in-house? For most SMEs, yes. A single IT hire in the South East costs £35,000 or more per year once salary, pension, cover and training are included, and gives you one person’s skills and no cover during holiday or sickness. A managed contract for 25 users typically costs £9,000 to £36,000 a year and provides a whole team. In-house tends to win once you are past roughly 75 to 100 users, or where systems are highly specialised.
What is a fair price for IT support? Fair depends entirely on scope. Compare quotes on what is included, response targets, whether security and backup are inside the fee, and exit terms. A £45 quote that excludes security, backup and onsite visits is more expensive than a £75 quote that includes all three.
Why is some IT support only £10 per user? Because it is remote-only helpdesk with almost everything else billed separately. Providers publishing UK pricing guides consistently flag sub-£25 pricing as a signal of limited scope or hidden add-ons. It is not necessarily a scam, but it is not comparable to a managed contract.
How much does Cyber Essentials cost? The IASME assessment fee is £320 + VAT for micro organisations (0 to 9 employees), £440 + VAT for small (10 to 49), £500 + VAT for medium (50 to 249) and £600 + VAT for large (250+). It renews annually. Cyber Essentials Plus is quoted individually. Remediation work needed to pass is a separate and usually larger cost.
Do IT support costs include Microsoft 365 licences? Usually not. Microsoft 365 licences are normally billed on top, at cost or with a small management margin. Always ask whether the quoted per-user price is inclusive or exclusive of licensing, as this alone can shift a comparison by £10 to £20 per user per month.