How do businesses choose an IT provider, and who signs?
Managed IT has three traits that change how you prospect. It is sticky: agreements often run one to three years, and switching means handing over passwords, documentation and admin rights, so most businesses you contact are not shopping today. It is often local or regional, because on-site visits, hardware swaps and office moves still happen; a perfect lead 900 miles away may be worthless to you. And the buyer is frequently not technical. In a 30-person firm the decision sits with the owner, the office manager or the controller, who judges you on responsiveness and trust rather than on your tooling.
Together, these traits mean a large static list of "companies with 20 to 200 employees in our state" produces mostly polite silence. What works is a smaller list of businesses inside your radius where something just changed, and an email written for a non-technical reader about that change. The right reader depends on company size:
| Company size | IT today | Who decides | What they care about |
|---|---|---|---|
| 10 to 50 employees | A staff member who is "good with computers", a freelancer or the owner | Owner, managing partner or office manager | Things working, fast answers, a predictable monthly bill |
| 50 to 200 employees | One internal IT generalist, or an MSP they are unhappy with | COO, CFO or controller, with the IT generalist consulted | Security questions from customers and insurers, cost control |
| 200 to 1,000 employees | A small IT team led by an IT manager or director | IT director, with finance approving | Help desk depth, security tooling, projects the team cannot staff |
| Regulated practices (medical, legal, financial) | Often an outside provider already | Practice administrator, managing partner or compliance lead | Meeting a specific rule without disrupting the practice |
Terms used on this page
- MSP (managed service provider): a firm that runs a client's IT for a recurring fee, usually priced per user or per device per month.
- Co-managed IT: the client keeps an internal IT person or team, and the MSP adds help desk depth, security tools or project capacity.
- vCIO: a virtual chief information officer, the advisory role an MSP plays when it plans budgets and roadmaps with a client.
- QBR: a quarterly business review, the meeting where you show a client what was done and what comes next.
Which events make a business look for IT help?
Each trigger below leaves a trace you can find. The table pairs it with the person to write to and a first offer that matches the moment.
| Trigger | Where it shows up | Write to | First offer |
|---|---|---|---|
| The IT person leaves | A job ad for an IT manager or systems administrator, especially one open for weeks | COO, CFO or owner | Interim coverage while they hire, plus documentation of what the previous person managed |
| Fast hiring | Many open roles at once; see hiring signals | Operations or HR lead | A standard onboarding and offboarding process: laptops, accounts, access removed on the last day |
| New office or location | Press releases, lease news, a new address; see business expansion signals | Owner or COO | An office move plan: network, internet circuits, printers, a cutover weekend |
| Insurance or customer security questionnaire | Public questions about how to answer an insurer's MFA or backup questions | CFO or owner | A questionnaire prep session and a priced list of gaps |
| A compliance obligation | Defense suppliers facing CMMC, tax preparers who need a written information security plan, clinics handling health data | Owner or compliance lead | A scoped readiness review for that one rule |
| Aging systems | Machines still on Windows 10 after support ended in October 2025, old on-premises servers; see tech stack changes | Owner or IT manager | A replacement plan with the budget spread over quarters |
| Unhappy with the current provider | Public complaints about slow tickets or surprise invoices; see competitor complaints | The person who posted, then the decision-maker | A transition plan that shows how onboarding works and how long it takes |
A word on incidents
When a local company discloses a breach or a long outage, resist the urge to email them about it. They are busy, often with an incident response firm already, and a pitch tied to their worst week reads as opportunistic. If you use incidents at all, use them as context when writing to peers in the same industry, without naming the victim.
How do you build a prospect list inside your service area?
For a regional MSP, geography belongs in the ideal customer profile from the start, not as a filter applied at the end. A practical way to build the list:
Draw the radius
Decide how far you will drive for an on-site visit and list the cities, counties or ZIP codes inside it. Remote-only providers can skip this, but most small clients still like knowing someone can show up.
Pick two or three verticals
Choose industries where you already have clients and know the line-of-business software: accounting firms, law firms, engineering and architecture firms, construction, dental or medical groups, manufacturers. Vertical focus makes your emails sound informed and your references relevant.
Search the niche, then classify
Run searches such as "CPA firm" or "architecture firm" with each town name and collect the company websites. Classify each one: staff count on the team page, number of offices, open roles, an IT partner's logo in the footer, a client portal. This is the niche search approach from how to find B2B leads.
Layer the signals
Mark the companies with a fresh trigger from the table above. They get the first wave of outreach; the rest go into a slower, quarterly sequence.
Find the decision-maker and verify
Owner, managing partner, COO or office manager, depending on size. Write only to verified business addresses, with an honest sender and subject line, a postal address and a working opt-out.
List sources that suit IT services
- State license lookups for professions such as CPAs, attorneys, engineers and architects, which show the firms operating in your area.
- Industry association member directories and local chamber of commerce member lists.
- Local business journal lists of fast-growing companies and of the largest employers by sector.
- Commercial real estate news about new leases, office moves and build-outs.
- Federal contractor registrations, if you support defense or public-sector suppliers.
Outside-in checks you can make without permission
Some facts are public by design. Whether a domain publishes SPF and DMARC records is visible in DNS and says something about how carefully email is managed, so it is a fair, specific observation to mention. Scanning a prospect's network or probing their systems is not: do not do it without written permission, even to make a point.
What should an IT provider offer in the first email?
The free network assessment is the default MSP offer, and owners know it is a sales meeting with a scanner attached. Offers that work better are narrow, tied to the trigger and useful even if the prospect never signs:
- Security questionnaire prep. An hour with the CFO to answer an insurer's or customer's questionnaire honestly, followed by a priced list of gaps.
- Microsoft 365 or Google Workspace review. Admin accounts, MFA coverage, external sharing, mailbox forwarding rules, licenses paid for but unused.
- Backup restore test. Pick one critical system and prove it can be restored. Plenty of owners have never watched a restore.
- Onboarding and offboarding checklist. For companies hiring fast: who creates accounts, who removes them, what happens to the laptop.
- Interim coverage. For companies whose IT person just left: a short agreement to keep things running while they decide.
- Co-managed overflow. For a solo IT manager: after-hours help desk and patching, so they can get to their projects.
Reach companies with a reason to buy this week
Startories finds the buying signal, verifies the decision-maker and runs the outreach until they book a call.
A sample sequence: an MSP writing to an accounting firm
A fictional 12-person MSP supports professional firms within 50 miles of its office. The signal: a 28-person CPA firm in its radius has had an ad for an "IT administrator" open for six weeks. The sequence goes to the managing partner, and it starts in late May, after tax season, because nobody at an accounting firm reads vendor email in March.
Email 1. Subject: your IT administrator opening
"Hi Laura, I saw the IT administrator role at Fenwick & Hale has been posted since April. That hire takes time, and the gap tends to show up as password resets piling up and updates waiting. We cover firms your size during the search: help desk, patching and a written inventory of everything your systems depend on, so whoever you hire starts with documentation. Would 15 minutes next week be useful?"
Why it works: it names the event, describes the risk in the partner's terms and offers something temporary, which is easier to accept than a three-year agreement.
Email 2, four days later. Subject: your WISP
"One more thing that often sits with the IT person: the written information security plan tax preparers are expected to keep under the FTC Safeguards Rule. If yours was last updated by the person who left, we can review it with you in an hour."
Why it works: it raises a real obligation specific to the industry, without fear language.
Email 3, ten days later. Subject: after the hire
"If you would rather fill the role and be done, that is reasonable. Some firms keep an outside partner behind their in-house person for after-hours tickets and security tools. Happy to describe how that split works whenever it is useful."
Email 4, three weeks later. Subject: closing the loop
"I will leave it here. If the search runs into extension season, reply and we can start with interim coverage."
What is a managed IT client worth, and when do businesses buy?
Managed IT revenue is recurring, which changes how much you can invest to win a client. A worked example with stated assumptions: a 35-person firm on a per-user plan at $140 per user per month pays $4,900 a month, or $58,800 a year. Add a one-time onboarding fee and, later, hardware and project work. If the client stays three years, the agreement alone is worth about $176,000 in revenue; at an assumed 45% gross margin, roughly $79,000 of gross profit.
Against that, a year of Startories Growth costs $5,988 ($499 a month). Budget is not the constraint. Conversation quality is: each discovery meeting costs a senior person half a day with travel, so a poorly targeted list is expensive even when the leads themselves are cheap.
Timing through the year
- September and October: many businesses set next year's budget and decide whether to renew agreements that end on December 31. Reach them before the decision, not after.
- Contract anniversaries: when a prospect mentions their renewal date, note it and write 90 days before.
- Insurance renewals: cyber policy renewals come with questionnaires. A business that struggled with last year's questions is a strong prospect a few months before the next renewal.
- Vertical busy seasons: avoid accounting firms from February to mid-April and retailers in November and December.
- Lease ends and office moves: they are planned months ahead, which makes them one of the few IT projects you can prospect before it starts.
Which objections do business owners raise?
"We have a guy."
Often a part-time contractor, sometimes a relative of the owner, and often good. Ask what happens when he is on vacation and whether anyone else has the admin passwords. Offer to document the environment so the business does not depend on one person, whether or not they hire you.
"We're locked into a contract."
Ask when it ends and what notice it requires, then put a reminder 90 days before that date. Offer a transition plan now, so they can compare calmly when the time comes instead of scrambling.
"Nothing is broken."
Maybe true. Shift to what stays invisible until it matters: a restore nobody has tested, former employees with active accounts, an insurer's questionnaire. One concrete check beats a general warning.
"You cost more than our current provider."
Compare scope, not price: response times, after-hours coverage, security tools included, onboarding effort, what counts as a billable project. Put both side by side in a table and let them decide.
"You're too far away."
Answer with your on-site policy and the real drive time, or disqualify yourself. Being honest about coverage earns more trust than stretching your radius.
How can Startories prospect for an MSP?
Startories finds the trigger and the person, then runs the outreach. It reads public sources (search results built for your niche, industry and startup directories, Reddit, X and Product Hunt) for hiring, expansion, stack changes, complaints about providers and pain-point posts. Each signal is resolved to a company, compared with your ideal customer profile (for an MSP, include your service area) and given a score with the reasons written out, so you see why a firm qualified before anyone is contacted.
For each qualified company it identifies the owner, managing partner or operations lead, verifies the business address and drafts an email around the event, which you can edit and approve. You know better than most why outreach should never leave from the domain your clients' tickets come from: Startories sends from separate, warmed-up domains with capped daily volume, pauses when bounces rise and stops each sequence on reply (background in our cold email deliverability guide). Replies are sorted into positive, interested, neutral, negative, out of office and unsubscribe, with a suggested answer, and unsubscribes are suppressed across every campaign. This is AI lead generation with a person able to check each step.
A sensible first funnel for most MSPs is the one in the sample above: companies in your radius with an open IT role. Starter ($99 a month, first project $1 for a 3-day trial) covers one funnel and one profile; Growth ($499) runs three, such as IT job ads, office moves and provider complaints side by side. If you would rather not manage it, the done-for-you lead generation service sets up domains, inboxes, targeting and copy for a one-time fee, or runs everything from $1,999 a month. Compare plans. If your firm also builds software, see lead generation for software development companies.
Frequently asked questions
How do MSPs get new clients?
Through referrals, local networking, vendor relationships and outbound. Outbound works best when it is tied to an event: an IT role left open, a new office, an insurer's security questionnaire or a complaint about the current provider. Reach the owner or COO about that event with a narrow first offer.
Is cold email effective for managed service providers?
It can be, if the list is local, the trigger is real and the email is written for a non-technical owner. Generic security scare emails are everywhere and easy to ignore. Track booked meetings per trigger, not opens, and drop the triggers that do not produce conversations.
Should an MSP offer a free network assessment?
It is the most common MSP offer, so it rarely stands out. Narrow offers read better: a security questionnaire prep session, a Microsoft 365 review, a backup restore test or interim coverage while a company hires. Each one answers a specific moment.
Can I build an MSP prospect list from search results?
Yes. Startories runs niche searches you define, for example a profession plus the towns in your area, classifies the websites it finds, identifies the owner or manager and verifies the business email. Every lead shows why it was scored the way it was.
What is the best time of year for MSP prospecting?
September and October are strong because many businesses plan budgets and renewals for January. Beyond that, follow each prospect's own calendar: contract end dates, cyber insurance renewals, lease ends and their industry's busy season, which you should avoid.
Will outbound hurt my company's email reputation?
It can if you send from your main domain. Startories sends from separate, warmed-up domains with daily caps, pauses when bounces rise and suppresses unsubscribes everywhere, so the domain your clients rely on for support email stays clean.