What Is Co-Managed IT, and When Does It Make Sense for a Small Business?

What is co-managed IT, and when does it make sense for a small business? Co-managed IT is an arrangement where your own IT person or team works side by side with an outside managed services provider, or MSP, and the two split the work instead of one owning all of it. It tends to make sense when you already have at least one capable IT employee who is stretched thin or missing a skill, and it tends not to when nobody in your company does IT as a real job. This post compares it with the two other ways small businesses run IT, an in-house team and a fully outsourced MSP.

What really matters when you decide how to run IT?

Three things decide it, and none of them is how big your company is.

The rest of this post compares the three models so you can match them to your answers.

What are the three ways a small business can run IT?

Every model answers the same question differently: who is on the hook when something breaks after hours?

In-house. Employees on your payroll do all of it, from password resets to firewall settings.

Fully outsourced MSP. An MSP is an outside company that takes on IT tasks for a recurring fee. ConnectWise, a company that makes software for MSPs, describes managed IT services as IT tasks that are outsourced to a third-party vendor (ConnectWise, August 2025).

Co-managed. You keep your IT person or team, and an MSP shares the load. Level, another MSP software maker, describes it as a service model where an internal IT department works side by side with an external MSP, and says it reinforces the IT team rather than replacing it (Level, March 2025).

One note on bias. Simpatico is an MSP, so we have a stake in how this question gets answered. We have tried to describe all three models the way the industry does, including where an MSP is the wrong answer.

How does in-house IT work, and who is it for?

Hiring your own IT person gives you someone who knows your people, your software, and your quirks. Level’s January 2026 guide says internal IT works best when technology is deeply tied to daily operations, revenue, or regulatory obligations (Level, January 2026).

The cost is more than a salary. The U.S. Bureau of Labor Statistics (BLS) reports 2025 median pay of $62,890 a year for computer support specialists and $99,130 for network and computer systems administrators, who install, configure, and maintain networks and systems. Those are pay figures only, before benefits, tools, and training. One provider’s September 2026 guide estimates about $148,000 a year fully loaded (salary plus benefits, tools and training) for a mid-level administrator (Uprite, September 2026).

The bigger limit is coverage. The same Level guide says one or two people cannot realistically provide round-the-clock support, keep deep expertise across every security area, and keep things running through absences.

Who it fits: a business with enough daily IT work to keep a person busy, and the budget to back that person up.

This might not be for you if you would be hiring one person to carry everything alone, with no backup for vacations, illness, or the day they leave.

How does a fully outsourced MSP work, and who is it for?

With a fully outsourced model, the MSP is your IT department. Help desk, monitoring, patching, backups, and basic security sit with one provider for a recurring fee. For a full buying checklist, see our guide to choosing managed IT services.

Meriplex, an MSP, describes the fit as organizations without internal IT staff, or those who want to offload IT completely (Meriplex).

Who it fits: a business with nobody in-house doing IT, or one that wants to hand the whole function to someone else.

This might not be for you if you already employ an IT lead who owns systems you want to keep in-house. Fully outsourcing then means paying an outside company for work your own person is already doing.

What is co-managed IT in practice, and who is it for?

Co-managed IT sits between the first two. You keep your IT person or team, and the MSP covers what they cannot cover alone: monitoring, security, after-hours coverage, specialist projects, and a backup when someone is out. ConnectWise adds that your internal IT person can then take on larger projects.

A guide written for MSPs describes the target client as a company with one or more dedicated IT people, with a sweet spot of one to five in-house IT staff for smaller MSPs (Technology Marketing Toolkit, January 2023).

How common is it? In a 2015 CompTIA study, about 60 percent of surveyed organizations using managed services said their engagement was a collaborative arrangement with their internal IT departments (MSPinsights, June 2015). That is a decade-old figure, so treat it as history. More recently, 61 percent of executive respondents to Kaseya’s 2025 Global MSP Benchmark Report said their co-managed IT revenue was up year over year (Kaseya, April 2025). That tells you MSPs are selling more of it, not how many small businesses buy it.

Who it fits: a business with one or a few capable IT people who are overstretched or missing a skill, such as security or after-hours coverage.

Who owns what under co-managed IT?

The split is negotiated, not standard. Meriplex gives one example: the MSP takes network monitoring, cybersecurity, and high-level infrastructure management, plus an after-hours help desk, while the internal team keeps handling on-site support. Even two Level guides draw the line differently, so write yours down. A workable split usually looks like this:

What are the warning signs that co-managed IT is the wrong fit?

This might not be for you if any of these sound like your business.

How is co-managed IT usually priced and structured?

Co-managed IT is usually priced per user per month, per device per month, or a mix. We do not publish pricing here, so the figures below come from two providers’ 2026 guides, and Meriplex describes its numbers as mid-market benchmarks. Treat them as ballparks, not quotes, and not Simpatico rates.

Meriplex’s 2026 per-user benchmarks scale with scope:

• Escalation support (your people handle everyday problems and pass the hard ones to the provider) plus basic remote monitoring: $45 to $75 per user per month.
• Escalation plus endpoint detection and response (software that watches each computer for attacks), with automated patching (installing security updates for you): $85 to $130.
• Full stack with a security operations center (a team that watches for attacks around the clock) and SIEM layer: $130 to $175.

SIEM stands for security information and event management, the tooling that collects and analyzes security alerts. As a worked example (our arithmetic on Uprite’s range, not a quote): a 10-person company at $45 to $175 per user per month would pay the outside company roughly $450 to $1,750 a month, on top of what it pays its own IT person. Meriplex also lists per-device pricing at $30 to $55 per workstation per month. Items commonly left out of the monthly rate include project work, vCIO time (virtual chief information officer, meaning IT planning and advice), after-hours response, compliance documentation, and software licensing (Meriplex, 2026).

Uprite’s September 2026 guide lists fully managed IT at $100 to $250 per user per month and co-managed at $45 to $175. The lower co-managed rate is not a discount on the same service. The MSP covers less, and you still pay your own IT staff. For fully managed pricing, see our managed IT services pricing guide for small businesses.

How do you decide between the three?

Start with how many people in your company do IT as a real job, not with your headcount. Nobody: a fully outsourced MSP is usually the cleaner fit. One or a few capable but stretched people: co-managed IT is worth pricing. A full team with deep coverage: in-house may be enough, with an MSP only for a specific gap, such as keeping security checks done on schedule. If nobody in your company does IT as a real job, start with how fully managed IT is priced in our managed IT services pricing guide.

This might not be for you if the person handling IT is an office manager who does it on the side. For this decision, we would count that as zero internal IT.

Why do many businesses bring in an outside expert for IT?

Setting up good IT habits once is the easy part. Keeping them true is what slips: people join and leave, software changes, and the week gets busy. For a stretched in-house person, that is where a second team can share the load, and for a business with nobody in-house, it is where a fully outsourced provider comes in. As an MSP, Simpatico helps make sure its clients are consistently doing these things.

What should you do next?

Count the people in your company who do IT as a real job, then match that number to the three models above. Schedule a strategy session and we will walk through your current setup with you and talk through which of the three models fits, including who makes sure the routine work gets done every month.

If your IT person were out for two weeks, who in your business would pick up the phone when something broke?