Transitioning to MSP tiered pricing is often the single most important decision an owner makes when moving from a reactive "break-fix" model to a scalable, high-valuation business. It is the bridge between selling hours and selling outcomes. When done correctly, tiered pricing simplifies the sales process, ensures your technical team is focused on standardised stacks, and provides a clear roadmap for increasing a client’s security posture over time.
At its core, MSP tiered pricing is a strategic model where services are bundled into distinct levels—typically labeled as Good, Better, and Best. Instead of negotiating individual line items, you present the client with pre-defined packages that align with their business risk, compliance needs, and budget. This approach protects your margins by preventing "scope creep" and makes the value of your higher-end security offerings immediately apparent.
- Standardisation: It forces your MSP to support a specific set of tools, reducing operational complexity.
- Commercial Clarity: Clients understand exactly what they are paying for and, more importantly, what they are missing at lower levels.
- Upsell Path: Provides a natural framework for QBRs and Security Reviews to move clients toward more comprehensive protection.
- Predictable Revenue: Stabilizes monthly recurring revenue (MRR) by decoupling income from the number of tickets raised.
The Fundamental Shift: Why Hours Don't Matter
In the early days of building an MSP, it’s tempting to charge by the hour. It feels fair. But as you scale, billing for time creates a conflict of interest: the more efficient your team becomes at solving problems, the less money you make. MSP tiered pricing solves this by selling availability, stability, and security.
Luis Navarro, who built Totality Services into a highly profitable MSP, often emphasises that clients don't want to buy "hours." They want to buy the peace of mind that their business won't go dark. If you can solve a problem in five minutes because you’ve invested in the right tools, you should be rewarded for that efficiency, not penalized with a smaller invoice.
By moving to a tiered model, you are effectively productizing your expertise. You are telling the market: "We have three ways of protecting a business like yours. Here is how they differ, and here is why the top tier is the most responsible choice for a growing company."
Structuring Your Tiers: The "Good, Better, Best" Framework
Most successful MSPs land on a three-tier structure. While the names vary—Bronze, Silver, Gold; or Protect, Manage, Advance—the logic remains the same. Each level should offer a significant and logical step up in value, primarily focused on risk mitigation.
| Feature | Essential (Tier 1) | Professional (Tier 2) | Ultimate (Tier 3) |
|---|---|---|---|
| Helpdesk Support | Remote Only | Remote & On-site | 24/7 Premium Support |
| Core Security | Antivirus & Patching | EDR & MFA Management | MDR/SOC & Advanced Threat Hunting |
| Data Protection | File-level Backup | Full Image Backup & BDR | Cloud-to-Cloud & Disaster Recovery |
| Strategic Consulting | Annual Review | Quarterly Business Reviews | VCISO & Compliance Auditing |
Tier 1: The "Foundation" Tier
This is your entry point. It is designed for clients who are price-sensitive but still need professional management. It usually includes remote monitoring and management (RMM), basic antivirus, and patch management. The goal here is to keep the lights on.
The Catch: This tier should be minimally profitable. It exists to get your foot in the door, but your goal should always be to move these clients to Tier 2 within the first year.
Tier 2: The "Standard" Tier
This is where 60-70% of your clients should sit. It includes everything in Tier 1, plus on-site support, more robust security like Endpoint Detection and Response (EDR), and managed backups.
Commercial Strategy: Price this tier to be your "sweet spot." It provides enough margin to cover high-quality technical talent while delivering the proactive care most businesses need to stay secure.
Tier 3: The "Premium/Compliance" Tier
This tier is for clients with high regulatory requirements (like HIPAA or CMMC) or those who simply cannot afford a minute of downtime. It includes 24/7 Security Operations Centre (SOC) monitoring, advanced encryption, and frequent strategic consulting.
High Margin Opportunity: This is where you include services that have high perceived value but are delivered through automated platforms or specialised partners. This is the tier that drives enterprise value when you eventually look to sell your MSP.
The Role of Security in Tiered Pricing
A common mistake MSPs make is differentiating tiers based on "response time." Promising a 1-hour response instead of a 4-hour response is a race to the bottom. It stresses your team and often doesn't matter to the client as much as they think it does.
Instead, differentiate based on Security and Risk.
Security is the greatest driver of recurring revenue today. By placing advanced tools—like dark web monitoring, phishing simulation, or Zero Trust architecture—exclusively in your top tiers, you make the decision about money a decision about safety. When a client chooses a lower tier, they are explicitly choosing to accept more risk. That is a powerful commercial lever.
This is exactly why Luis Navarro founded MSP Agenda. After 15 years in the trenches, he realised that the hardest part of the MSP model isn't the technology—it’s the conversation. If you can’t show a client why they need Tier 3 security, they will stay on Tier 1 until they get breached. MSP Agenda standardises that process, making it easy to show the gap between where a client is and where they need to be.
Pricing Each Tier: The Math Behind the Margin
How much should you actually charge? In the US market, per-user pricing is the dominant standard. While per-device is still used, per-user is easier for the client to understand and scales better as employees use multiple devices (laptop, tablet, phone).
- Tier 1: Often ranges from $80 to $125 per user/month.
- Tier 2: Often ranges from $150 to $200 per user/month.
- Tier 3: Often starts at $250+ per user/month.
To ensure profitability, you must work backward from your desired Gross Margin. A healthy MSP should aim for a 60% to 70% gross margin on managed services. If your "cost of goods sold" (COGS)—which includes your tool stack (RMM, AV, Backup) and the labour cost of your engineers—is $50 per user, you cannot afford to sell that seat for $100 and expect to grow a scalable business.
Formula for Target Price: (Total Cost of Tools + Labour Cost per User) / (1 - Desired Margin %) = Target Price Example: ($35 tools + $25 labour) / (1 - 0.65) = $171.42 per user
Overcoming the "All-You-Can-Eat" Trap
Many MSPs fall into the trap of offering a single "All-You-Can-Eat" (AYCE) plan. While simple, it leaves money on the table. If you only have one price, you are either too expensive for small prospects or too cheap for high-risk clients. MSP tiered pricing allows you to capture both ends of the market.
Furthermore, an AYCE model without tiers often results in the MSP taking on more and more security work without a corresponding increase in fee. As the threat landscape evolves, you add more tools to protect the client, but if your price is fixed, your margin shrinks. With tiers, you can introduce a new "Advanced Security" tier and move clients into it as the market changes.
Psychological Anchoring and the Power of Three
Why three tiers? Because human psychology is wired for it. When presented with two options, people usually pick the cheapest. When presented with three, they tend to avoid the extremes and pick the middle option. This is known as "Goldilocks pricing."
By making your top tier highly comprehensive (and expensive), you make the middle tier look like a bargain. You aren't "selling" the middle tier; the client is choosing it as the most sensible balance of cost and protection. This shift in perspective—from being sold to making a choice—is vital for long-term client retention.
Implementing Tiered Pricing in Existing Accounts
Moving a legacy client from an old flat-rate plan to a new MSP tiered pricing structure is one of the most stressful tasks for an account manager. The key is not to lead with the price increase, but to lead with the Security Review.
Luis Navarro’s experience at Totality Services showed that when you present a client with a clear report of their current vulnerabilities, the conversation naturally shifts to: "How do we fix this?" At that point, you introduce your tiers. You aren't raising their price; you are offering them a package that solves the problems you just identified. If they choose to stay on a lower tier, you have successfully created accountability. They have formally acknowledged the risk they are taking by not upgrading.
Steps for a Successful Transition:
- Audit your current stack: Determine what tools are in each tier and what they actually cost you.
- Pick a "Standard": Decide which tier represents your "ideal" client and build your internal processes around it.
- Run the numbers: Ensure your highest tier is profitable even if the client is high-touch.
- Communicate early: Give legacy clients 90 days' notice, framed as an "Infrastructure and Security Alignment."
- Use a tool: Use a platform to visualize the gaps in their current coverage compared to your new standards.
Common Pitfalls to Avoid
Even seasoned MSP owners make mistakes when rolling out new pricing. Here are the most frequent errors seen in the US market:
1. Too many options: If you have five or six tiers, you will confuse the client. Confusion leads to indecision, and indecision leads to a "no" or a delayed sale. Stick to three.
2. Negotiating the bundle: Once you set your tiers, do not let clients pick and choose items from different levels. "I want Tier 2, but without the backup" is a recipe for operational disaster. The whole point of tiers is standardisation.
3. Forgetting the "Human" cost: MSPs often account for the cost of the software license but forget the cost of the engineer managing it. If a tool requires two hours of configuration a month, that labour must be reflected in the tier's price.
The Commercial Impact on Valuation
If your goal is to eventually sell your MSP, MSP tiered pricing is your best friend. Private equity firms and strategic acquirers look for consistency. They want to see that 90% of your clients are on the same stack and paying similar margins. A business with 50 clients on 50 different custom contracts is much harder to integrate and, therefore, less valuable.
Luis Navarro’s journey to an eight-figure acquisition was built on this foundation of commercial clarity. When your pricing is structured, your revenue is predictable. When your revenue is predictable, your business is a high-value asset, not just a job for the owner.
Advanced Strategy: Vertical-Specific Tiers
For MSPs that specialise in specific industries, your tiers should reflect those needs. A law firm has different requirements than a construction company. You might offer a "Legal Compliance" tier that includes specific document management security and e-discovery support. This allows you to charge a premium for specialised knowledge that a generalist MSP cannot provide.