Managed IT pricing
Catharsis managed IT is priced per user per month, ex GST. Every managed IT plan (Essentials, Business and Secure+) includes a security baseline of endpoint detection and response, email security, MFA enforcement, monitoring, patching and awareness training, run by our cyber security team. Managed Security only suits teams that already have IT staff.
01Plans
Simple per-user pricing in Australian dollars, ex GST. The same security baseline is in every managed IT plan.
A remote helpdesk and our security baseline for lean teams.
Starting from$99per user / month, ex GST
Security baseline included
Add-ons
Recommended
Full managed IT with a hardened security baseline.
Starting from$119per user / month, ex GST
Security baseline included
Add-ons
Unlimited priority helpdesk, continuous vulnerability management and regular security reviews.
Starting from$169per user / month, ex GST
Security baseline included
Add-ons
For in-house IT teams
Already have IT staff? Our cyber team runs your security stack alongside them. No helpdesk.
Starting from$79per user / month, ex GST
Cyber security only
Add-ons
* Hardware is not included in any plan. Where your environment needs hardware, we quote it separately.
* No security service can guarantee complete protection against every threat. See our terms.
A named user with a mailbox who uses one or more managed devices.
The key differences first. Open the full comparison for every feature, grouped by area.
| Feature | Essentials | Business | Secure+ |
|---|---|---|---|
| Support | |||
| SupportHelpdesk (remote) | 3 hours a month | 5 hours a month | Unlimited, priority queue |
| Service level (SLA) | Written SLA, agreed with you | Written SLA, agreed with you | Written SLA with priority handling |
| Onsite support | Starting from $195 an hour, 2-hour minimum | Starting from $195 an hour, 2-hour minimum | One visit a month included if required, then starting from $195 an hour · Sydney and Greater Sydney |
| Identity & Microsoft 365 | |||
| User onboarding and offboarding | Included | Included | Included |
| Microsoft 365 or Google Workspace administration and support | Included | Included | Included |
| MFA enforcement and conditional access | Included | Included | Included |
| Identity & Microsoft 365Access reviews | Not included | Quarterly | Monthly |
| Microsoft 365 security baseline (Secure Score uplift) | Set at onboarding | Maintained | Maintained |
| Security baseline | |||
| Endpoint security (EDR) | Included | Included | Included |
| Email security (anti-phishing, business email compromise) | Included | Included | Included |
| Patching: operating systems and third-party apps | Included | Included | Included |
| Security awareness training and phishing simulation | Included | Included | Included |
| Security baselineEmail authentication (SPF, DKIM, DMARC) | Set up | Managed | Managed |
| Backup & network | |||
| Backup & networkMicrosoft 365 backup | Add-on | Add-on | Included |
| Endpoint and server backup | Add-on | Add-on | Included |
| Network management (firewall, switching, Wi-Fi, VPN) | Add-on | Included (additional sites are an add-on) | Included |
| Assurance | |||
| AssuranceVulnerability management (scanning and remediation) | Not included | Quarterly scanning | Continuous, risk-based |
| ASD-prioritised controls | Baseline mapping | Mapped and tracked | Written roadmap, reviewed with you |
| Reporting | Summary reporting | Detailed reporting | Detailed reporting and regular security review with a consultant |
| Penetration testing | Quoted | Quoted | One external network penetration test (one IP address) each term; application testing quoted |
Managed IT plans compared: Essentials, Business and Secure+
02Estimate
Choose a plan and the number of users for a monthly estimate, ex GST. Essentials, Business and Secure+ carry the same security baseline.
| Users | Essentials | Business | Secure+ | Managed Security only |
|---|---|---|---|---|
| 10 users | $990.00 | $1,190.00 | $1,690.00 | $790.00 |
| 25 users | $2,475.00 | $2,975.00 | $4,225.00 | $1,975.00 |
| 50 users | $4,950.00 | $5,950.00 | $8,450.00 | $3,950.00 |
| 100 users | $9,900.00 | $11,900.00 | $16,900.00 | $7,900.00 |
| 200 users | $19,800.00 | $23,800.00 | $33,800.00 | $15,800.00 |
10 users
25 users
50 users
100 users
200 users
Monthly totals exclude GST and one-off onboarding. Your quote depends on your sites, servers and devices.
* All prices and estimates are indicative only and may change. Your final price is confirmed in a written quote. See our terms.
03What's covered
Service levels, the ASD-prioritised controls in each plan, how we bring you on board, and what is priced separately.
Service levels, including response targets, coverage and any extended cover, are discussed with you based on your requirements and set out in a written service level agreement (SLA).
Every plan works on the strategies ASD prioritises, aligned with ASD Essentials, and the table shows what each plan does for each one. Higher plans check, review and report on them more closely. Application control and, below Secure+, backups are add-ons. A managed plan is not a compliance certificate: formal assessment is a separate, quoted service.
| Strategy | Essentials | Business | Secure+ |
|---|---|---|---|
| Patch applications | Automated patching | Automated, confirmed by quarterly vulnerability scans | Risk-prioritised, with continuous vulnerability management |
| Patch operating systems | Automated patching | Automated, confirmed by quarterly vulnerability scans | Risk-prioritised, with continuous vulnerability management |
| Multi-factor authentication | Enforced for every user | Enforced, checked in quarterly access reviews | Enforced, checked in monthly access reviews |
| Restrict administrative privileges | Admin rights removed from everyday accounts | Plus quarterly access reviews | Plus monthly access reviews |
| Application control | Add-on, starting from $15 per device | Add-on, starting from $15 per device | Add-on, starting from $15 per device |
| Restrict Microsoft Office macros | Macros from the internet blocked | Blocked, with approved exceptions recorded | Blocked, with approved exceptions recorded |
| User application hardening | Set at onboarding | Maintained | Maintained |
| Regular backups | Add-on | Add-on | Microsoft 365, endpoint and server backup, with restore testing |
ASD-prioritised strategies operated in each plan
ASD has released the ASD Essentials series, which will replace the Essential Eight. The transition timeline has not been set, and organisations are still assessed against the current maturity model in the meantime. Read more about ASD Essentials readiness and uplift, which starts from a baseline against the current model.
Onboarding is a deliverable, not just a set-up fee: you finish with a documented, hardened environment.
We document your users, devices, Microsoft 365 or Google Workspace tenant, network and line-of-business apps.
We roll out the security baseline across every user and device, including Microsoft 365 hardening.
You get written documentation of your environment and a gap snapshot against the controls ASD prioritises.
After the switch we watch closely, fix teething issues and tune alerts before normal service starts.
Priced separately, so you only pay for the infrastructure and services you have.
Starting from $99 per site / month
Starting from $149 per server / month
Starting from $15 (servers starting from $149) per device / month
Starting from $195 per hour, 2-hour minimum, beyond any visit included in your plan
Starting from $79 per user / month
Quoted for your team
Quoted for in-house developments or compliance requirements
Starting from $999 ex GST for one IP address
Starting from $15 per device / month
Quoted after scoping
No surprises: here is what sits outside the monthly plans.
04Questions
A user is a named person with a mailbox who uses one or more managed devices. Pricing per user, not per device, keeps your bill predictable and matches how modern security works: identity first. Shared or kiosk devices start from $35 per device per month.
Plans have a minimum of 5 users and a 12-month term. If you need something more flexible, contact us and we will talk through the options. At the end of the term, the agreement continues month to month with 30 days' notice. Prices are fixed for the 12-month term, then reviewed once a year with 30 days' written notice. If you have more than 200 users, or you buy through a government panel, we prepare a tailored proposal instead.
All prices on this page are in Australian dollars and exclude GST. GST is added on your invoice. The seat calculator shows the GST amount separately, so you can see the monthly total both ex GST and inc GST before you talk to us.
Response targets and coverage are discussed with you based on your requirements, such as how critical your systems are and when your organisation operates, and set out in a written service level agreement (SLA) before you sign. Our own team runs the helpdesk, and alerts from your endpoint and email security are reviewed by our cyber security team.
Essentials, Business and Secure+ include the same security baseline: endpoint detection and response, email security, MFA enforcement with conditional access, device monitoring, operating system and application patching, security awareness training with phishing simulation, and a Microsoft 365 security baseline. Higher plans add services such as access reviews and vulnerability management on top, but the baseline itself is the same in every managed IT plan. Managed Security only covers endpoint detection and response, email security, Microsoft 365 sign-in monitoring, patch oversight, and firewall and VPN management.
Each plan operates a set of the strategies ASD prioritises, shown in the ASD-prioritised controls table above. Business maps and tracks those controls for you, and Secure+ adds a written roadmap that we review with you. We do not certify or claim a maturity level; a formal maturity assessment is a separate service, listed under add-ons.
Onboarding runs in four steps, from discovery to a hypercare period after go-live, as set out in the onboarding section above. The fee starts from $99 per user, once-off, and is waived on a 36-month agreement. You finish with written documentation of your environment and a gap snapshot against the controls ASD prioritises, not just a set-up invoice.
Yes. The Managed Security only plan gives you endpoint detection and response, email security, Microsoft 365 sign-in monitoring, patch oversight, firewall and VPN management, and reporting with security reviews, run by our cyber team alongside your IT staff. Security awareness training and phishing simulation are available as an add-on, and hardware is quoted separately. There is no helpdesk in this plan. See our managed security service for details, or ask us how we would split responsibilities with your team.
Talk to our team
Talk directly to a subject-matter expert, not a call centre. Enquiries usually get a reply within 3 business days.
