# WhoodenTech > Managed IT, cybersecurity, and Microsoft 365 for small and midsized businesses in New York. Flat-rate, per-user pricing. Same owner, same techs, same number — since 2012. WhoodenTech is a managed service provider (MSP) headquartered in New York and serving clients nationwide. We replace or augment internal IT for businesses with roughly 10 to 250 users. We charge a flat monthly fee per user, never hourly, so we are paid the same whether your network breaks or not — which is why we work to keep it from breaking. ## Core pages - [Homepage](https://www.whoodentech.com): Overview of services, pricing, and how we work - [All services](https://www.whoodentech.com/services): Hub page listing every service with plain-language summaries - [Managed IT](https://www.whoodentech.com/services/managed-it): Day-to-day IT on a flat per-user fee - [Co-managed IT](https://www.whoodentech.com/services/co-managed-it): Augments an internal IT team with after-hours coverage, projects, and compliance support - [Cybersecurity](https://www.whoodentech.com/services/cybersecurity): EDR, MFA enforcement, phishing simulation, dark-web monitoring, quarterly risk reviews - [Microsoft 365](https://www.whoodentech.com/services/microsoft-365): Tenant setup, license rightsizing, SharePoint, Teams, Intune - [Backup and Disaster Recovery](https://www.whoodentech.com/services/backup-disaster-recovery): Offsite encrypted backups with point-in-time recovery and quarterly restore tests - [Locations](https://www.whoodentech.com/locations): Based in New York. Remote-deliverable nationwide. - [About](https://www.whoodentech.com/about): Why we started, what we believe - [Contact](https://www.whoodentech.com/contact): Start a conversation ## Guides Plain-English explainers written for business owners, each with an FAQ. Dates and deadlines are stated in the opening paragraph. - [Company Devices vs Personal Phones: Your Employee's Phone Has Your Client Files On It](https://www.whoodentech.com/guides/company-devices-personal-phones-microsoft-365): Company laptops and personal phones need different controls. What Business Premium includes for each, and how to wipe work data from a lost phone. - [Vishing and AI Voice Cloning: When the Caller Sounds Exactly Like Your Boss](https://www.whoodentech.com/guides/vishing-ai-voice-scams-business): What vishing is, how AI voice cloning makes phone scams convincing, and the callback and verification procedures that protect your business. - [Your Domain Name Is Your Business Identity: Who Actually Controls It?](https://www.whoodentech.com/guides/domain-names-registrars-dns-records-security): Domain names, registrars, nameservers, and DNS records in plain English, plus the security settings that protect the asset your whole business runs on. - [AI Acceptable Use Policy: A Plain-English Template for Your Business](https://www.whoodentech.com/guides/ai-acceptable-use-policy-template): Does your business have an AI policy? Free copyable AI acceptable use policy template covering ChatGPT, Microsoft Copilot, and the rules that matter. - [Policies vs. Technical Controls: Why Written Rules Alone Do Not Protect You](https://www.whoodentech.com/guides/policy-vs-technical-control): Security policy vs technical control, in plain English: what each one is, why you need both, and which to put in place first. - [The 2026 Microsoft 365 Price Increase: What You Now Pay, and What You Get](https://www.whoodentech.com/guides/microsoft-365-price-increase-2026): Microsoft 365 price increase 2026: what each plan costs now, when your renewal triggers it, and the new features you may already be paying for. - [NIST Password Guidelines Changed: Your Policy Is Probably Outdated](https://www.whoodentech.com/guides/nist-password-guidelines-business): NIST now says longer passwords beat complex ones, forced resets hurt security, and passkeys are the goal. What your business password policy should say. - [Microsoft Is Retiring SMS and Voice MFA: What It Means for Your Business](https://www.whoodentech.com/guides/microsoft-retiring-sms-voice-mfa): Microsoft retires SMS and voice login codes on February 1, 2027, and passkeys become the default in September 2026. What it means and what to do now. - [What Is Microsoft Secure Score and Why It Matters](https://www.whoodentech.com/guides/what-is-microsoft-secure-score): Microsoft Secure Score explained: what the number in your Microsoft 365 tenant measures, what it misses, and how to use it to actually reduce risk. - [What Are SPF, DKIM, and DMARC? Why Email Authentication Is Required](https://www.whoodentech.com/guides/what-is-spf-dkim-dmarc): SPF, DKIM, and DMARC explained in plain English: what each record does, why Google requires them, and how to stop email fraud in your company's name. - [Windows 10 and Server 2016 End of Support: What It Means for Your Business](https://www.whoodentech.com/guides/windows-10-server-2016-end-of-support): Windows 10 support has ended and Windows Server 2016 follows in January 2027. What it means for your business, your options, and a realistic timeline. ## Pricing All plans are flat-rate, billed monthly, per user. No time-and-materials. No hidden tickets. No surprise project fees inside the agreed scope. - Foundation — $175/user/mo. Helpdesk, device management, vendor coordination. Backup and Disaster Recovery available as a $25/user/mo add-on. - Professional — $225/user/mo. Foundation plus cybersecurity (EDR, MFA enforcement, phishing simulation) and Backup and Disaster Recovery included. - Enterprise — $275/user/mo. Professional plus full Microsoft 365 management, Intune device policy, and dedicated account management. ### How users are counted User counting is aligned with Microsoft 365 licensing. - A user is a full-time staff member with up to five computers. - A part-time user (someone sharing a company system) counts at half rate. - A non-user (an employee with no email or technology requirement) does not count at all. ## What every client gets These are not features. They are how we work, included at every tier. - Dedicated techs assigned to your account - Direct phone access. One number, not a ticket queue. - Microsoft 365 tenant management and configuration - MFA, conditional access, and security hygiene - A real point of contact, not a portal - Quarterly business reviews ## Service area - Headquarters: New York, NY - Primary on-site coverage: New York City metro, Long Island, Westchester, Northern New Jersey, Southern Connecticut - Remote-deliverable services: nationwide (United States) ## Who we serve - Professional services firms (legal, accounting, consulting, architecture) - Nonprofits and member associations - Creative and production studios - Healthcare practices needing HIPAA-aligned controls - Family offices and investment firms We are a good fit for businesses that want IT off their plate, value a flat predictable cost, and prefer working with the same people year over year. We are not a fit for businesses looking for hourly break-fix work or the lowest-bid vendor on a per-ticket basis. ## Key facts - Founded: 2012 - Headquartered: New York, NY - Pricing model: Flat-rate, per-user, monthly. No hourly billing. - Minimum engagement: Aligned with Microsoft 365 Business Premium licensing or equivalent - Response model: Direct phone access, assigned techs, no ticket queues - LinkedIn: https://www.linkedin.com/company/whoodentech ## Contact - Website: https://www.whoodentech.com - Email: info@whoodentech.com - Phone: 917-410-3033 - Start an engagement: https://www.whoodentech.com/contact ## Legal - [Privacy Policy](https://www.whoodentech.com/legal/privacy) - [Terms of Service](https://www.whoodentech.com/legal/terms) - [Master Service Agreement](https://www.whoodentech.com/legal/msa) - [Email Disclaimer](https://www.whoodentech.com/legal/email-disclaimer) - [Accessibility Statement](https://www.whoodentech.com/legal/accessibility)