Security in this metro is rarely bought on its own. It arrives as a line on an IT support proposal, usually after a client sends a security questionnaire or an insurer asks for an attestation, and the line has a price with no unit and a name with no scope. The record behind this page can say exactly how little the trade publishes about it, and what has to be asked for in its place.
What IT services New York City providers actually publish
Of the 29 IT providers read for this record, two run their own New York page, Power Consulting and Dataprise, and CMIT Solutions runs one for Brooklyn. One number in the metro is published: Power Consulting's $100-$220 per user per month for managed IT services in NYC. Read the unit carefully, because it is managed IT, not security. Across the whole record, security is never given a rate of its own: every published figure is the managed IT one, security folded inside it or left to a form, so there is no metro band to check a New York proposal against and the comparable figure has to come out of the conversation.
The questionnaire and the insurance attestation are the real trigger
Financial services firms, law firms and accountancies in this city push their security requirements down to everyone who holds their data, which is why a twenty seat business in Midtown starts shopping in the first place. The buying question is therefore narrower than the brochure: can this provider complete the specific questionnaire a named client sent, and will it stand behind the control statements on the insurance renewal form. Bring the actual document to the call. A provider that will answer the questionnaire line by line, and say which lines it cannot answer yet, is telling you more about its service than any capability list.
One IT support company New York runs the estate, another watches it
The split worth understanding before signing is that running IT and watching it for attack are separate jobs. Where one firm holds the administrative control of the estate and another holds the watching duty, an alert at three in the morning arrives at a firm with no authority to touch anything, and the first minutes go on reaching somebody who has it. Whichever way a New York buyer ends up arranging this, the thing to get in writing is who is permitted to isolate a machine or disable an account without waiting for a call back, and the phone number that authority sits behind at the weekend.
Cybersecurity services, NYC: monitoring is priced, response is described
Collecting alerts, triaging them into a defined action, and putting the estate back afterwards are three service levels at three prices, and a proposal will commonly carry the fee for the first while the surrounding prose describes the second. Ask which of the three the monthly figure buys, what the named actions are, and what rate applies when an incident runs into a second week of engineer time. In the New York market this matters more than the platform brand on the cover page, because the after hours labour is the part that is genuinely expensive to staff here.
Ask what is being watched, then ask in what unit
Coverage is whatever is feeding the monitoring, so ask for the list of sources it currently ingests rather than the list the platform is able to ingest. Identity, laptops and the firewall are usually in; a case management or trading application sitting outside the identity provider usually is not. Then fix the unit, because security is quoted per user, per endpoint or per log source, and a New Jersey back office of a firm whose head office is across the river often has a seat count and a device count that disagree. One figure in a named unit, against a written source list, is the only thing that compares between two proposals.
Cyber security companies NJ: IT managed services New Jersey from a cheaper base
The firms bidding for an office in Newark, Jersey City or Princeton are, more often than not, the ones bidding in Manhattan too, and the security line is the part most likely to be identical on both sides of the river because the watching is done from wherever the provider's operations desk is. Lower rent does not have to reach the quote. It is a reasonable thing to ask outright whether the per user figure offered is the one quoted in the city, and where the people watching the estate actually sit, because a New Jersey buyer whose parent company already has a security team will need the two arrangements to agree on who acts first.
Questions people ask about cyber security companies New York
Does any New York provider publish a price for managed security?
No. Of the 29 providers read for this record, not one prints a security price on its own: where a figure exists it is the managed IT one. In this metro that is Power Consulting's $100-$220 per user per month for managed IT services in NYC.
Which IT provider New York firms run their own page?
Two, Power Consulting and Dataprise, with CMIT Solutions running a Brooklyn page. Others sell into the metro through national pages rather than a local one, which is not the same as having people here.
What unit should a security quote be in?
A named one: per user, per endpoint or per log source. Ask which, and what the fee does when that count doubles. Two proposals in different units cannot be compared at all.
What is the single question to ask about an out of hours alert?
Who is permitted to isolate a machine or disable an account without waiting for authorisation, and on what number that person is reachable at the weekend.
Is security cheaper on the New Jersey side?
The record holds no figure either way. The watching is usually done from the provider's own operations desk rather than near the client, so ask whether the per user rate differs from the one quoted in the city.
Do IT consulting New York City firms sell security as well?
Most sell both out of the same office and price them apart. Ask which of monitoring, response and the annual questionnaire the monthly fee covers before treating one proposal as two services.