Five plans, priced per user per month, ex GST, month to month.
For teams who must prove their security
Ultimate
Most popularUltimate is Proven
Security you can prove on paper the day an insurer, auditor or tender asks.
Every renewal, audit or tender asks you to prove your security in writing.
SMB1001 Gold and Essential Eight evidence kept current and on file, unlimited support for the whole team, and the answers ready before anyone asks.
- 01Compliance and reporting management
- 02Zero trust network access (ZTNA)
- 03Application whitelisting, DLP and AI enablement
- 04Named key account manager and quarterly reviews
Advantage buys you committed hours at a reduced rate. Ultimate makes support unlimited for the whole team and keeps your evidence on file. Compare with Advantage
Everything, plan by plan
All 30 rows
| Flex$150/user/mo$150/mo for 1Includes 16 of 30 rowsSee Flex | Advantage$250/user/mo$250/mo for 1Includes 20 of 30 rowsSee Advantage | RealBytes One$450/mo flat$450 flatIncludes 23 of 30 rowsSee RealBytes One | Ultimate$500/user/mo$500/mo for 1Includes 26 of 30 rowsSee Ultimate | CustomQuotedScoped with youScoped with youTalk to us |
|---|---|---|---|---|---|
| Eleven domains of protectionEvery domain, in every plan, including the cheapest. Plus two enhancements | |||||
| Included | Included | Included | Included | Included | |
| Included | Included | Included | Included | Included | |
| Included | Included | Included | Included | ScopedScoped to your environment | |
| Add-onNot included in the monthly price, available as a paid add-on | Included | Included | Included | ScopedScoped to your environment | |
| Included | Included | Included | Included | Included | |
| Add-onNot included in the monthly price, available as a paid add-on | Add-onNot included in the monthly price, available as a paid add-on | Add-onNot included in the monthly price, available as a paid add-on | Add-onNot included in the monthly price, available as a paid add-on | Add-onNot included in the monthly price, available as a paid add-on | |
| Included | Included | Included | Included | Included | |
| Included | Included | Included | Included | Included | |
| Included | Included | Included | Included | Included | |
| Not included | Not included | Not included | Included | Included | |
| Included | Included | Included | Included | Included | |
| Included | Included | Included | Included | Included | |
| Included | Included | Included | Included | Included | |
| Included | Included | Included | Included | ScopedScoped to your environment | |
| Included | Included | Included | Included | ScopedScoped to your environment | |
| Added from AdvantageThe first uplift over Flex, plus the unlimited upgrade | |||||
| Not included | Included | Included | Included | ScopedScoped to your environment | |
| Not included | Included | Included | Included | ScopedScoped to your environment | |
| Not included | Not included | Included | Included | ScopedScoped to your environment | |
| Not included | Included | Included | Included | ScopedScoped to your environment | |
| Not included | Included | Not included | Included | ScopedScoped to your environment | |
| Not included | Included | Included | Included | ScopedScoped to your environment | |
| Added from RealBytes One and UltimateThe compliance and control tier | |||||
| Not included | Not included | Included | Included | ScopedScoped to your environment | |
| Not included | Not included | Included | Included | ScopedScoped to your environment | |
| Not included | Not included | Included | Included | ScopedScoped to your environment | |
| Plan-specific arrangementsWhat changes by plan, how Flex bills, and what Custom adds | |||||
| Included | Included | Included | Included | Included | |
| Included | Included | Included | Included | Included | |
| Not included | Not included | Not included | Included | Included | |
| Included | Not included | Not included | Not included | ScopedScoped to your environment | |
| Included | Not included | Not included | Not included | ScopedScoped to your environment | |
| Not included | Not included | Not included | Not included | Included | |
| Tick, included. Dash, not included. Add-on, not in the monthly price and quoted on top. Scoped, priced against your environment. | See Flex | See Advantage | See RealBytes One | See Ultimate | Talk to us |
Scroll sideways on a phone. Tap any row for the outcome, what it actually is, and the data behind it.
In practice
What each plan looks like in a real business
Five common shapes of business and the plan that usually fits. Illustrative, not client case studies.
The sole operator
A consultant working from a laptop and a phone. One flat monthly price covers the full security stack, unlimited remote help and the website, so a broken laptop does not become a lost week.
RealBytes One2 to 8 peopleThe small, self-sufficient team
A studio that rarely raises a ticket but still holds client data. Every person gets the same twelve security services as the top plan, and support is billed by the hour only when it is used.
Flex10 to 25 peopleThe growing office
Tickets most weeks, new starters most months. Committed hours at a reduced rate make the support spend forecastable, and written response times replace chasing for an answer.
Advantage25 to 80 peopleThe business that must prove it
A firm answering insurer questionnaires and client tenders. SMB1001 Gold and Essential Eight evidence is kept current and on file, support is unlimited, and a named account manager owns the roadmap.
UltimateMulti-site or co-managedThe odd-shaped team
Several sites, a regulated industry, or a small office headcount alongside a floor of frontline staff on shared devices. Same stack and same engineers, scoped and priced to the mix you actually run.
CustomWhat changes the price
- Headcount. Every plan except RealBytes One is billed per user, per month. Add a person, the figure moves by one seat. Remove one, it moves back. We bill in arrears, so the invoice reflects the seats you actually had, not a guess made at the start of the month.
- Support model. Flex bills by the hour. Advantage prepays block hours at a reduced rate. Ultimate and RealBytes One include unlimited remote support in business hours.
- Compliance modules. SMB1001 Gold and Essential Eight modules, zero trust network access and application whitelisting start at RealBytes One. If nobody is asking you to prove your posture yet, you probably do not need them.
- Anything scoped. Projects, on-site work, hardware and the add-ons below are quoted on their own, never bundled into the monthly figure. The monthly figure stays predictable.
- One-off onboarding. Charged once at cost recovery, from $500 for a simple environment to $5,000 or more for a complex framework-driven build, with most landing around $1,000. Always quoted before you commit. Offboarding runs the same way: free where we can make it free, cost recovery where we cannot, always quoted first.
Add-ons, quoted separately
Available on any plan, unless it is already included. Priced on scope, not per seat. Website management is bundled into RealBytes One.
- SIEM log collection, retention and correlation on top of managed detection and response
- Full workstation and server image backup, to cloud or local storage
- Domains, SSL and website hosting
- Website management and maintenance
- Advanced end user monitoring, tracking and reporting
- Penetration testing
- Business Central and ERP or CRM integration
- App development and automation builds
- Hardware procurement and project work
- Specialised on-site support, including scheduled and resident engineer days
- Specialised backup, including bespoke retention, offsite copies and non-standard workloads
- Azure, AWS and cloud services, including migration, hosting and ongoing management
- Business internet and hosted voice
- Physical security, CCTV and cabling
- Managed Google Workspace, where you run Google instead of Microsoft 365
- Device enrolment and management with Intune, Apple Business Manager and Android Enterprise
- Virtual CISO, security leadership and governance on a retainer
- Managed print, including fleet management and secure release
What you get that a typical MSP will not give you
Not a swipe at other providers. Month to month with no exit fees, and managed IT and managed cyber security run by the same engineering team. The rows below are the honest differences. Open any of them for the full story.
Managed IT contracts and commercial terms
Month to month after a three month minimum term. Walk away any time with 30 days notice. No exit fees, no auto-renewal traps, no break costs calculated to make leaving feel more expensive than staying. If we are not earning the renewal every month, we do not deserve it.
Often one to three year terms with break fees and auto-renewal clauses that quietly roll you over for another year. Some providers count on the friction of leaving being worse than the cost of staying.
Cost plus our standard margin, shown on the quote. You see the buy price and the sell price side by side, on every device, every time. No bundled device fees that hide the gear cost behind a monthly number.
Markup is often bundled into a managed device fee, so the actual gear cost is hidden and hard to compare. The device looks free until you add up three years of the fee.
Day-to-day starters and leavers are included on Ultimate: device enrolment, account creation, licensing, access revocation and device wipe, with no per-move, add or change charges. If you ever leave, a standard handover is free where we can make it free. Complex offboards, whole teams or multiple systems, are charged at cost recovery and quoted before any work starts. Access is closed everywhere, your data, licences and documentation go with you, and anything we still hold is securely destroyed once you confirm the handover. New client onboarding is charged once at cost recovery and quoted before you commit, because we set your environment up aligned to the standards we hold ourselves to, not inherited as-is and called done.
Often billed per move, add and change, so every new starter and every leaver adds another line to the invoice. Or onboarding is free because nothing is actually set up: the old misconfigurations come along for the ride and surface as incidents later.
How IT support and helpdesk actually works
An engineer who can actually fix it, not an account manager running interference or a triage desk reading a script. If it needs escalating, the person who took the call is the one who hands it off, with context.
Usually a triage desk that logs the call and routes it to a queue, so the first person you speak to is rarely the one who solves it. You repeat yourself at every handoff.
Senior Brisbane engineers who know your environment by name. The same team picks up every ticket, so you are not re-explaining your setup to someone new each time. No offshore call centres, no scripts read from a screen.
Often a Tier 1 helpdesk, sometimes offshore, with rotating staff who may be seeing your environment for the first time. Complex issues get escalated up a chain you never see, and each handoff costs you time.
From Advantage onwards you get a published priority grid, not a vibe. P0 emergencies are responded to within 1 hour and P1 outages within 2, on 24/7 best-effort escalation, with P2 urgent issues within 4 business hours. One honest distinction most providers blur: those response times are the SLA, the commitment. Triage and resolution carry SLO targets, published objectives we work to rather than guarantees, because fix times depend on the problem and pretending otherwise is how you get lied to. Flex deliberately carries no service levels at all, which is part of why it is cheap. The full grid, including what sits outside it, is in the service agreement you sign.
Varies widely. SLAs may exist on paper but are not always tracked or shared with you, and response time is often presented as if it were fix time. You find out the difference when a server is down at 4pm on a Friday.
A named technical contact who sits with you each quarter to plan the next 12 months: budget, lifecycle replacement, security uplift, and the projects that actually move the needle. Not a salesperson with a quota, an engineer with a roadmap.
Often no planning at all until something breaks, or an annual account review that is really a renewal conversation. Lifecycle replacement becomes a surprise invoice instead of a planned line item.
Brisbane headquartered, Australian helpdesk, on-site attendance across South East Queensland and partner coverage in every other state. When you need hands on a cabinet or a server room, someone actually shows up.
Often fully remote, or on-site only in a single capital city with third-party contractors everywhere else. On-site visits are billed as projects and scheduled weeks out.
We own the whole stack: Microsoft, cyber security, backup, network, cloud. Four practices, one engineering team. When something breaks, there is one number to call and no vendor ping-pong while everyone argues over whose side of the fence it fell on.
Multiple vendors in the mix, which means finger-pointing when something falls between the cracks and nobody wants to own the problem. You become the project manager coordinating your own IT.
Cyber security, compliance and evidence
MFA, EDR, immutable backup and Essential Eight alignment are built into every plan from day one. We are a CyberCert Gold MSSP, so the same standard we sell is the one we hold ourselves to. Security is not a premium tier you pay extra for, it is the floor.
Security is commonly sold as an add-on stack, or handed to a separate vendor you have to coordinate yourself. When something falls between your MSP and your security provider, neither wants to own it.
Windows, Microsoft 365 and third-party patching is managed on a tested monthly cycle, with emergency patching for critical vulnerabilities the moment a vendor drops it. We document what was patched and when, because insurers and auditors now ask.
Patching is often left to Windows Update defaults or a scheduled task nobody checks. Out-of-hours patching for zero-days is either not offered or billed as a project each time it happens.
Immutable cloud backup for Microsoft 365, Exchange, OneDrive, SharePoint and Teams, tested on a schedule so we know it works before you actually need it. Restore testing is not an optional extra, it is how we sleep at night.
Backups may be listed as included but restore testing is commonly skipped. Native Microsoft retention is often mistaken for backup. You only find out it was broken when you go to recover and the data is gone.
Documented and on file, mapped to SMB1001 and Essential Eight controls, ready for your next insurance renewal, audit or tender without a last-minute scramble. We hand the assessor what they ask for in the format they expect.
Often scattered across ticketing, emails and individual knowledge. Hard to pull together on short notice when a broker or assessor asks, and the scramble usually costs you in premium or lost work.
Quarterly business reviews with real data: tickets, response times, security posture, patch coverage and what is coming next. You do not have to chase us for visibility into your own environment. If a number is worth tracking, it is worth showing you.
Reactive reporting, if any. You usually have to ask to find out what is actually happening in your environment, and the numbers you get are often the flattering ones.
Pricing questions
What is the minimum term?
Three months. After that you are month to month, and you can leave with 30 days notice, with no exit fees, no auto-renewal clause and no break costs, aside from any service sitting on a committed vendor term.***** We would rather earn the renewal every month than hold you to a multi-year agreement.*
*There is a one-off onboarding fee, quoted before you commit. Offboarding is free wherever we can make it free. Both are covered in full further down this list.
What is included in every plan?
Twelve services across eleven domains of protection: managed M365, managed endpoint protection, OS and third-party patching, 24/7 managed detection and response, identity threat detection and response, an email security gateway, managed email authentication, immutable cloud backup, vulnerability scanning, dark web monitoring, security awareness training and managed phishing simulations. All twelve are in Flex, the cheapest plan.
Does unlimited support really mean unlimited?*
It means day-to-day help, fixes and questions for your team, delivered remotely during business hours, Monday to Friday, 8am to 5pm AEST. After-hours and 24/7 support is available when you need it. Projects and on-site work are quoted separately and fair use applies. On Advantage you commit to a block of hours instead; unlimited starts at RealBytes One.
What is not covered by the monthly fee?*********
Projects, on-site work, hardware procurement and everything in the add-ons list. Those are scoped and quoted on their own so the monthly figure stays predictable. You see the buy price and the sell price side by side on every hardware quote.
How fast do you actually respond?
In practice we aim to put eyes on a new ticket within about 15 minutes on average during business hours. If it is urgent, ring us on 07 3114 2808 rather than waiting on an email. Flex is best-effort in business hours, which is part of why it is cheap. From Advantage onwards you get a written priority grid: P0 emergencies within 1 hour, P1 outages within 2 hours, P2 urgent issues within 4 business hours. Those response times are SLA commitments. Triage and resolution are published SLO targets, because a response is not a fix.
Can I change plans later?****
Yes, just tell us. We bill in arrears, so any change, up a plan, down a plan, or a headcount move, is simply reflected on your next invoice. No mid-cycle adjustments, no credit note dance, no penalty for changing your mind. Leaving altogether is the same 30 days notice as always.
Is there an onboarding fee?**
Yes, quoted up front and charged once. Simple environments start at $500, most land around $1,000, and a complex Essential Eight or framework-driven build can run past $5,000. It covers setting your environment up properly the first time: identity, security baseline and documentation. It is cost recovery, not a profit line, and you see your figure before you commit.
What about offboarding if I leave?**
Where we can, we do not charge for it. A standard handover is part of doing this properly: your data, your licences and your documentation go with you. If it turns into major engineering work, such as migrating whole teams or untangling multiple systems, we quote it at cost recovery before any work starts. No hostages, no surprise exit bill.
The fine print
*Unlimited support means day-to-day help, fixes and questions for your team, delivered remotely during business hours, Monday to Friday, 8am to 5pm AEST. After-hours and 24/7 support is available when you need it. Projects and on-site work are quoted separately. Fair use applies. See the fine print on each plan page for full detail.
**Onboarding is charged once at cost recovery, quoted before you commit, and covers setting your environment up properly. Most onboards land around $1,000, from $500 for simple environments to $5,000 or more for complex framework-driven builds. A standard offboarding handover is free wherever possible. Complex offboards, such as whole teams or multiple systems, are quoted at cost recovery before any work starts. Your data, licences and documentation leave with you, and anything we still hold is securely destroyed once you confirm the handover. Day-to-day starters and leavers are included on plans with unlimited support.
***Custom agreements cover multi-site and enterprise environments, regulated industries, specialised or legacy software, teams with a small office headcount and a large frontline or shift workforce on shared devices, and co-managed arrangements with your internal IT team. Same stack, same engineers, scoped to your actual environment.
****Billing is in arrears, so an invoice can include pro-rata amounts. Vendors such as Microsoft charge us from the moment a licence is added to your tenant, so a mid-month starter, licence change or new service appears as a part-month line on the next invoice rather than being backdated or held over.
*****Some services in the stack sit on a committed vendor term rather than month to month. Managed DMARC and email authentication is one example. Where a committed service is still inside its term when you leave, the remainder is either paid out or transferred to you or your incoming provider, whichever you prefer. Any service on a committed term is identified in your agreement before you sign, with the term length and the remaining commitment shown.
******Per-user pricing is scoped one to one: one person, one primary computer, one mobile device. Extra devices, additional mailboxes, shared or frontline devices and extra licensed services sit outside that scope and can be added. Where a vendor charges us for the additional device or service, that overage is passed through at cost plus our standard margin, and we will work through the scope and the figure with you before anything is added.
*****All prices exclude GST. Real Bytes Pty Ltd, Brisbane, Queensland. Call 07 3114 2808 or email helpdesk@realbytes.com.au.
Not sure which plan fits?
Fifteen minutes on the phone. We look at your environment, work out your user count, and tell you which plan makes sense. If Flex is all you need, that is exactly what we will tell you. If you are still benchmarking, read how much managed IT costs in Australia first.

Remote Support