Co Managed IT Services: What They Are, What They Cost, and How to Make Them Work
Quick answer: Co managed IT services are a partnership where your internal IT staff and an outside managed service provider (MSP) share responsibility for your technology. Your team keeps control of strategy and daily priorities, while the provider adds tools, specialist skills, and coverage your team can’t supply alone, such as 24/7 monitoring, security operations, or overflow help desk support. Published provider pricing for co managed plans commonly falls between roughly $40 and $175 per user per month, depending on how much the provider handles.
Key points
- Co managed IT supports your IT staff; it doesn’t replace them.
- A written responsibility split matters more than the price.
- You can share almost any IT function, from help desk tiers to security monitoring.
- Shared admin access is the biggest risk, so it needs firm controls.
- Companies with one to five IT staff tend to benefit most.
What does co managed IT services mean?
Co managed IT services means your business and an outside provider run IT together under a defined agreement. Your internal team owns the relationship with employees, knows the business, and makes decisions. The provider brings depth: security analysts, network engineers, monitoring software, and people available nights and weekends.
The reason the model exists is simple math. A small internal team can’t be experts in networking, cloud, security, and help desk support at once, or be awake around the clock. Hiring that range of skills costs far more than renting them from a provider who spreads the expense across many clients.
Co managed IT is different from staff augmentation. With staff augmentation, you rent people who follow your instructions. With co managed IT, the provider takes responsibility for specific outcomes, such as patch compliance or after hours incident response, under a service agreement.
Show Image Internal IT keeps control while the provider fills skill and coverage gaps. Photo: Unsplash
How does co managed IT work? Who does what
Co managed IT works best when every task has a clear owner. Most partnerships document this in a responsibility matrix, often called a RACI chart, before work starts.
| Area | Internal IT team | Co managed provider |
|---|---|---|
| IT strategy and budget | Owns | Advises |
| Everyday user requests (tier 1) | Often owns | Covers overflow and after hours |
| Complex escalations (tier 2 and 3) | Shares | Often owns |
| Patching and monitoring | Reviews | Runs tools and reports |
| Security monitoring and response | Approves actions | Watches 24/7 and responds |
| Backups | Verifies | Manages and tests |
| Projects | Leads | Delivers specialist pieces |
| Vendor relationships | Owns | Supports |
Your split will differ. A company with one IT generalist might hand most technical work to the provider, while a team of five might only outsource security monitoring and after hours coverage.
Co managed IT services list: what can you share?
Almost any IT function can be co managed. These are the most common services businesses share with a provider:
- Help desk overflow and after hours support: A help desk support team catches tickets when your staff are busy or off duty.
- Remote monitoring and patching: The provider runs remote monitoring and management tools that flag failing hardware and push updates.
- Security operations: Endpoint detection and response (EDR), email filtering, and 24/7 threat monitoring.
- Backup and disaster recovery: Managed backups with scheduled test restores.
- Network and cloud management: Firewalls, Microsoft 365, and cloud platforms.
- Compliance support: Documentation for HIPAA, PCI DSS, or cyber insurance through compliance management.
- Projects: Migrations, office moves, and rollouts handled through IT project management.
What most articles miss is that the best starting point is usually the work your team hates or can’t get to: after hours alerts, patch reports, and security monitoring. Offloading those first frees your staff fastest.
Co managed vs fully managed vs in house IT
The right model depends on whether you already have IT staff and how much you want them to own.
| Factor | In house only | Co managed IT | Fully managed IT |
|---|---|---|---|
| Who runs IT | Your staff | Your staff plus provider | Provider |
| Control | Full | Shared, you lead | Provider leads |
| Coverage | Business hours unless staffed | Often 24/7 | Often 24/7 |
| Specialist skills | Limited to your hires | Provider’s bench | Provider’s bench |
| Best for | Large teams with deep skills | Firms with 1 to 5 IT staff | Firms with no IT staff |
How much do co managed IT services cost?
Co managed IT usually costs less per user than fully managed IT, because your staff still handle part of the work. Published provider ranges in 2026 look roughly like this, though pricing varies by provider and region:
| Scope | Typical price per user per month |
|---|---|
| Escalation support and basic monitoring | About $45 to $75 |
| Escalation plus EDR and automated patching | About $85 to $130 |
| Full co managed stack with 24/7 security monitoring | About $130 to $175 |
Some providers price by device instead, or combine per user and per device rates. Project work typically bills separately, often at $150 to $275 an hour. These figures come from providers’ own published pricing guides rather than an independent survey, so treat them as a starting range.
Show Image Industries with lean IT teams often use co managed support to cover gaps. Photo: Unsplash
Benefits and trade offs of co managed IT
The biggest benefit of co managed IT is coverage without losing control. Your staff keep their knowledge of the business, and the provider adds the tools and hours they lack.
Other benefits include:
- Less burnout: Internal staff stop carrying every alert and late night outage.
- Enterprise tools: You use the provider’s monitoring and security platforms without buying them outright.
- Continuity: If an IT employee leaves, documentation and the provider’s team keep things running.
The trade offs are real. Two teams can blame each other when something falls through the cracks, which is why the responsibility matrix matters. Tool overlap can create friction if the provider insists on its platforms. And sharing administrator access with a third party adds risk. CISA’s guidance for MSP customers recommends applying least privilege to provider accounts and monitoring their activity, advice that applies directly to co managed arrangements.
Is co managed IT right for your business?
Co managed IT is usually a good fit if you have at least one IT employee and any of these sound familiar:
- Your IT staff spend their days on tickets and never reach projects.
- Nobody watches alerts at night or on weekends.
- Security work like patch reporting and threat monitoring keeps slipping.
- You need specialist skills, such as cloud or security, only occasionally.
- An IT employee is leaving, and you need cover during the transition.
If you have no IT staff at all, fully managed IT is usually simpler. If your internal team already covers security and 24/7 support well, you may only need occasional project help.
Show Image Firms with sensitive data often add co managed security monitoring. Photo: Unsplash
How to set up a co managed IT partnership
A co managed partnership succeeds or fails in its first month. These steps keep it on track:
- Write the responsibility matrix. List every recurring task and its owner before signing.
- Agree on tools. Decide whose ticketing, monitoring, and documentation systems you’ll use, and make sure both teams can see shared tickets.
- Set access rules. Give provider accounts only the permissions they need, require multifactor authentication, and log their activity.
- Define escalation. Spell out who gets called, in what order, for each type of incident.
- Schedule reviews. Hold monthly check ins at first, then quarterly reviews of tickets, security, and costs.
In practice, the partnerships that struggle are the ones that skipped step 1 and relied on goodwill.
Finding co managed IT support near you
Much co managed IT work, such as monitoring, patching, and security operations, is delivered remotely, so a provider doesn’t need to be in your city. Searches for co managed IT services in Chicago, or even near Lahore for international teams, return many local options, but the deciding factor is fit, not distance.
Location matters mainly for onsite work: hardware swaps, cabling, and new office setups. Ask every provider how quickly they can get a technician onsite, and whether that time is included or billed separately.
Show Image Remote delivery lets small internal teams get specialist help from anywhere. Photo: Unsplash
Frequently asked questions
What is the difference between co managed and managed IT?
Managed IT means the provider runs your entire IT function. Co managed IT means the provider works alongside your existing IT staff, who stay in charge.
Who is co managed IT best for?
It suits businesses with one to a few IT employees who need more coverage, security depth, or specialist skills than their team can provide alone.
Does co managed IT include onsite support?
Sometimes. Remote support is standard, while onsite visits may be included or billed separately, so confirm the terms in your contract.
What are examples of IT managed services?
Common examples include help desk support, remote monitoring, patch management, security operations, backup and recovery, network management, and cloud administration.
What does “managed solution” mean in IT?
A managed solution is a technology service that a provider runs and maintains for you, such as managed backup or managed security, under an ongoing agreement.
Can co managed IT work with our existing tools?
Often, yes. Many providers can work within your ticketing and documentation systems, though some require their own monitoring and security platforms.
How do you split responsibilities in co managed IT?
Most partnerships use a responsibility matrix that assigns each task, such as patching or after hours support, to either the internal team or the provider.
Is co managed IT more secure?
It can be, because it adds monitoring and specialist expertise. However, provider access must be limited, protected with multifactor authentication, and reviewed regularly.
How long does it take to start co managed IT?
Many partnerships begin within a few weeks, after agreeing on responsibilities, setting up access, and connecting monitoring tools.
Is there a book about co managed IT services?
Yes. The MSP’s Survival Guide to Co Managed IT Services by Bob Coppedge, published in 2019, covers the model from a provider’s perspective.
Can a company switch from co managed to fully managed IT?
Yes. Many companies move to fully managed IT if an internal IT employee leaves, or shift the other way as their internal team grows.
What should a co managed IT contract include?
It should include the responsibility split, response times, access controls, tools used, reporting frequency, pricing, exclusions, and exit terms.
Conclusion
Before you share admin access with any provider, read CISA’s risk considerations for MSP customers, and if you’re weighing a new hire instead, compare salaries in the BLS Occupational Outlook for computer support specialists.
