Infrastructure engineering for East Africa's operators, platforms and regulators See the work →
CloudSpinx · Managed IT Support

Managed IT Support in Kenya

CloudSpinx runs the helpdesk, the servers, the backups and the monitoring for businesses in Kenya and across East Africa, either as your whole IT function or alongside the team you already have. Managed IT support starts around KES 15,000 a month and is quoted as one figure that holds for the term.

Free 30-min consultation No lock-in contracts Local on-site engineers

Who we build for

  • 14organizations, from ISPs and payment platforms to a national regulator
  • 6flagship engagements published in full, with the numbers counted
  • 4thof all contributors to the open-source payment switch national systems run on
See the engineering record →
Certified engineers 24/7 support
< 1hr P1 response target
2 copies Backups, one offsite
24/7 Monitoring and on-call
What's Included

Everything in Our Managed IT Support Service

Every engagement covers the full scope: no hidden extras, no upselling.

Helpdesk support

Unlimited tickets by phone, email, WhatsApp or the portal. A system-down incident gets a response inside the hour, and someone on-site in Nairobi the same day if it needs hands.

Server and VM management

Patching, monitoring and performance work across physical and virtual estates: VMware vSphere, Proxmox VE, Hyper-V and plain KVM.

Microsoft 365 administration

User provisioning and offboarding, license right-sizing, Teams, SharePoint and OneDrive policy. Mail platform migrations run as their own project.

Backup and recovery

Automated backups with Veeam or Acronis, an offsite copy, and restore rehearsals on the calendar rather than a backup job nobody has ever tested.

Monitoring and alerting

Zabbix, Grafana or PRTG across servers, hypervisors, network kit and cloud resources, with alerts routed to people rather than to an unread inbox.

Endpoint and patch management

Patch rings with a real test group, endpoint protection, disk encryption and a monthly compliance report you can hand to an auditor.

Asset and license tracking

Hardware and software inventory, warranty and lifecycle dates, and replacement planned before the machine dies rather than after.

Joiners, movers and leavers

One documented process for onboarding and offboarding covering accounts, mailbox, licenses, devices and access revocation. The gap here is how a lot of breaches start.

Vendor management

One point of contact for the ISP, the hardware supplier and the software vendors. We chase the circuit fault so your office manager does not have to.

Technologies we use

Microsoft 365Microsoft Entra IDIntuneVMware vSphereProxmox VEKVMHyper-VNinjaOneConnectWiseTeamViewerZabbixGrafanaPRTGVeeamAcronisFortinetMikroTik

What managed IT support costs in Kenya

Managed IT support starts at around KES 15,000 a month for a small office on business-hours cover, and a business of about thirty people with cloud infrastructure and a monthly security review typically lands nearer KES 35,000. There is no tier to fit into. What moves the figure is endpoint count, the hours you need us awake, how many sites we attend, the state of the estate when we inherit it, and any compliance obligation attached to the output. You get one monthly figure agreed in writing before you sign, and it holds for the term. The full model is set out in how we scope and price an engagement.

The two things that move the price most

Cover hours and estate condition, in that order. Business hours against round-the-clock on-call is close to a doubling, because it is the difference between a rota and a roster. Estate condition is the one nobody budgets for: inheriting servers three years behind on patches, a backup that has never been restored and no documentation means the first two months are remediation rather than support. We price that as a separate one-off piece of work so it does not hide inside the monthly figure and surprise you later.

What a per-user price hides

Plenty of providers quote a flat per-seat rate. It reads simply and it works fine for an office of laptops and a hosted mail suite. It stops being honest the moment there is a server, a line-of-business application or a compliance obligation, because those cost the same to look after whether you have twenty staff or sixty. Where a per-seat number genuinely fits your shape we will quote one. Where it does not, we say so rather than quoting low and recovering it in out-of-scope charges.

What is actually covered, and what is not

A managed IT contract is worth exactly as much as its scope document. Ours names the systems, the hours, the response targets and the exclusions before anyone signs, because the arguments in this industry are almost never about quality and almost always about whether something was in scope.

Helpdesk and end-user support

Unlimited tickets by phone, email, WhatsApp or portal. A system-down incident gets a response inside the hour and someone on-site in Nairobi the same day where it needs hands, with degraded service on a two-hour target. Staff get a named team rather than whoever picks up, which matters more than any SLA number: the second call about the same problem should not start from the beginning.

Servers, hypervisors and cloud

We manage the full estate, physical and virtual. VMware vSphere and ESXi, Proxmox VE clusters, KVM on bare metal, Hyper-V and Windows Server, plus whatever you run in AWS, Azure or Google Cloud. Provisioning, snapshots, live migration, capacity review and the upgrade work that keeps a platform supported.

  • Hypervisor patching with rolling reboots so guests stay up
  • Storage pool and datastore capacity monitoring, with headroom alerts before they matter
  • VM provisioning from templates rather than by hand
  • Cloud cost review, because unused resources are the most common finding
  • Certificate and domain expiry tracking, the most common self-inflicted outage there is

Monitoring that pages a person

Monitoring is only useful if somebody is on the other end of it. We watch servers, VMs, network devices and cloud resources around the clock, and alerts route to an on-call engineer. A dashboard nobody is looking at during the night is not monitoring, it is decoration, and a surprising number of estates we inherit have exactly that. Monitoring tells you something broke; a tested recovery plan is what decides how long it stays broken.

What we exclude by default

Application development and ERP customization sit outside a support contract and are quoted separately, and so does managed database work, because replication, restore testing and slow queries are a practice rather than a ticket queue. So does a full platform migration or a new build. Hardware and license purchases are passed through at cost with the supplier invoice attached. We would rather name the boundary than blur it.

Co-managed IT, when you already have someone

The common case in Kenya is not an organization with no IT. It is one with a capable IT manager who cannot be awake at 03:00, cannot be an expert in virtualization and firewalls and Microsoft 365 at once, and cannot take leave without something slipping. Co-managed support puts us behind that person rather than in front of them. We take the out-of-hours rota, the infrastructure layer and the specialist work; they keep the relationships, the priorities and the budget. It usually costs less than a full outsource and it keeps the institutional knowledge in the building, which is where it belongs.

Kenyan realities a support contract has to survive

Estates here fail on the same short list, and none of it is exotic. Grid power drops and the UPS carries eight minutes against a generator nobody load-tested this quarter. The comms room shares an air conditioner with a meeting room that gets switched off at night, so the switch is running hot by Friday. The fibre link has no second path, so a contractor with a backhoe takes the office offline for a day. Staff approve payments over WhatsApp and share one password for the accounting system. We design against all of it: dual links with automatic failover on the network side, generator and UPS runtime sized to reality, and offsite backups that do not assume the building is still standing.

When we tell clients not to sign a support contract

A managed contract is not always the right purchase, and the ones that go wrong were usually mis-sold at the start.

  • Under about ten staff on laptops and a hosted mail suite, you may not need a monthly contract at all. Pay-as-you-go support and a properly configured Microsoft 365 tenant will cost less over a year. We will set it up and then leave you alone.
  • If the real problem is one broken thing, fix that thing. An estate with one failing server does not need an agreement wrapped around it, it needs the server replaced. Buying a contract to solve a project is how people end up paying monthly for a problem that never goes away.
  • If you have a strong in-house team and only need cover, take co-managed rather than full outsource. Paying us to duplicate work your own people already do well is waste, and we will point it out.
  • If nobody internally owns IT decisions, a support contract will not fix that. Somebody on your side has to be able to approve a change and set a priority, or every ticket stalls waiting for an answer. Worth sorting out before you sign anything.

Switching provider, and what you keep

Changing IT provider feels risky because the outgoing one holds the keys, and that is exactly the trap. We start by taking a full inventory and getting every credential into your own password manager, in your ownership, before anything else happens. Documentation, network diagrams, license records and monitoring configuration are yours from day one and stay yours. If you leave us in three years, you leave with a working estate you can hand to anyone. A consultancy you cannot leave is charging you for the trap, and that is a worse deal than a higher monthly figure. Before you pick the next one, ask to see five things in the first meeting.

Scope Your Support

Tell us what you are running today

The questions we would ask on a first call, so the number you get back is real rather than a placeholder. Every field has an escape hatch. Answer what you know and leave the rest.

Free, and it commits you to nothing. If a monthly contract is not what you need, we will tell you that instead.

Next step

Ready to discuss Managed IT Support?

A 30-minute scoping call, free, and it commits you to nothing.

Our Process

How Every Managed IT Support Engagement Starts

01

Audit before we quote

A short discovery across servers, endpoints, network, backups and licenses. It is how we find the remediation work, and it stops the monthly figure from being a guess.

02

Scope and price it

A written scope naming systems, cover hours, response targets and exclusions, with one monthly figure and any remediation priced separately.

03

Onboard and stabilize

Credentials into your vault, monitoring and backup agents deployed, documentation written, and the worst of the inherited debt cleared in the first weeks.

04

Run it, and report

Named engineers, scheduled maintenance, monthly reporting on tickets, patch compliance and backup success, and a quarterly review of what should change.

FAQ

Common Questions

How much does managed IT support cost in Kenya?
From around KES 15,000 a month for a small office on business-hours cover. A thirty-person business with cloud infrastructure and security auditing typically lands near KES 35,000. The number moves with endpoint count, cover hours, number of sites, the condition of the estate you already have, and compliance scope. We quote one monthly figure in writing before you sign, and it does not change for the term.
What is included in managed IT support?
Unlimited helpdesk tickets, round-the-clock infrastructure monitoring, patch management, backup monitoring and restore testing, Microsoft 365 administration, asset and license tracking, vendor coordination and a named account engineer. The scope document names the exact systems and the exclusions before you sign, because that is where disputes actually come from.
What is your response SLA?
Critical incidents where systems are down: one hour, around the clock. Degraded service with significant impact: two hours. Standard requests: next business day. On-site in Nairobi the same day where an incident needs hands on the hardware. Round-the-clock on-call is available for business-critical systems and is the single biggest driver of the monthly figure.
Do you provide on-site support outside Nairobi?
Yes, on a scheduled basis for Mombasa, Kisumu and Eldoret, and by arrangement elsewhere in Kenya and East Africa. Most work is remote regardless of location. Where a site genuinely needs regular hands, we would rather help you train someone local for the physical tasks than bill you for travel that adds nothing.
Can you work alongside our existing IT manager?
That is usually what we would recommend if you have one. Co-managed support puts us behind your IT manager for out-of-hours cover, the infrastructure layer and specialist work, while they keep priorities, relationships and budget. It normally costs less than a full outsource and it keeps the knowledge of your business inside your business.
Can you support a mix of Windows, Mac and Linux?
Yes. Mixed estates are the norm rather than the exception: Windows Server and Active Directory in the server room, macOS on the design team, Ubuntu on the developers' machines and workloads in a public cloud. We support all of it, and we will tell you where the mix is costing more than it needs to.
What happens to our data and passwords if we leave?
They were never ours. Credentials live in your password manager under your ownership from the first week of onboarding, and documentation, diagrams, license records and monitoring configuration are handed over as we produce them rather than at the end. If you leave, you leave with a working, documented estate that any competent provider can pick up.
How quickly can you take over from our current provider?
Discovery takes a few days, and the practical constraint is almost always how fast the outgoing provider hands over credentials and documentation. We run onboarding in parallel so monitoring, backups and the helpdesk are live before the old contract ends. Where handover is being obstructed, we can rebuild access from your own administrative accounts, which is slower but does not depend on their cooperation.
Do you handle hardware and software purchasing?
Yes, and it is passed through at cost with the supplier invoice attached. We take no margin on hardware, because a provider who profits from selling you boxes has a quiet incentive to recommend more of them. Our advice on whether you need the box is worth more to you than a markup is to us.
What if we only need help with one project, not ongoing support?
Then take the project. We do plenty of one-off work: a migration, an audit, a network rebuild, a backup that finally works. There is no requirement to attach a monthly contract to it, and if a project is all you need, signing a support agreement is money you should not be spending.
WhatsApp