One complete subscription that seamlessly brings together device management and 24/7 support. With our Bentobox service, your small business can easily manage every iPhone, iPad, Mac, and Apple TV — every step of the way.
Learn MoreChoose from three tiers designed to grow with your business needs.
Configured, secured, supported.
Zero-touch deployment, single sign-on and a hardened baseline on Addigy, set up and run by certified Apple engineers.
per device / year
Minimum 10 devices · from $1,200/yr
Endpoint protection that fights back.
Everything in Essentials, plus SentinelOne EDR and auto-remediating compliance — the managed-service starter for growing teams.
per device / year
Minimum 50 devices · from $13,500/yr
Threats found and handled, 24/7.
Everything in Elevate, plus 24×7 managed detection & response from the Addigy Security Suite, a dedicated team and strategic advisory.
per device / year
Minimum 100 devices · from $36,000/yr
What will it cost us?
Your annual subscription
$13,500
$1,125 per month equivalent · $270 per device / year
Includes platform licences, the full onboarding project, security operations and support. Excludes tax and hardware.
Get this quoted properlyIndicative list pricing in USD. AED, INR and GBP available at the prevailing rate, fixed for the term. The price that binds is the one on your order form.
| EssentialsAddigy | ElevateAddigy + SentinelOne EDR | Enterprise 360Addigy Security Suite | |
| Core platform & security | |||
| Operating systems — macOS, iOS, iPadOS, tvOSApple Vision Pro on request | ✓ | ✓ | ✓ |
| Zero-touch deployment & enrolment | ✓ | ✓ | ✓ |
| Security baseline & hardening | ✓ | ✓ | ✓ |
| Single sign-on to business apps | ✓ | ✓ | Entra / Google / Okta |
| Compliance & auto-remediation | × | ✓ | Real-time, auto-remediating |
| Endpoint Detection & Response (EDR) | × | SentinelOne | SentinelOne |
| Managed Detection & Response – 24×7 | × | × | ✓ |
| Conditional access / Zero TrustRequires your own Microsoft Entra ID entitlement | × | × | Microsoft Entra |
| Support & response | |||
| Support hoursIn your local business time zone | 8 × 5 local | 12 × 5 local | 24 / 7 / 365 |
| P1 (critical) response target | 30 min | 30 min | 30 min |
| Help desk – end userPer month, pooled across the fleet | 10 | 50 | ∞ |
| Enterprise-level support | Add-on | 1 | ∞ |
| Remote monitoring & management (RMM) | |||
| Real-time device monitoring & alerting | ✓ | ✓ | ✓ |
| Remote screen control — Addigy LiveDesktopmacOS · attended, with end-user consent | ✓ | ✓ | ✓ |
| Remote terminal & command execution — Addigy LiveTerminalmacOS | × | ✓ | ✓ |
| Scripted automation & self-healing policiesmacOS | × | ✓ | ✓ |
| Unattended proactive remediationWe fix the drift before the user notices | × | × | ✓ |
| Hardware, warranty & battery telemetry | Basic | ✓ | Advanced |
| Proactive management | |||
| Applications provisioning | 10 | 25 | ∞ |
| Patching | One-time configuration | 25 apps | ∞ |
| Enhanced performance analytics | × | ✓ | ✓ |
| Advanced, customisable dashboards | × | × | ✓ |
| Lifecycle & partnership | |||
| Device health insights | Basic | Included | Advanced |
| Fleet value analytics | × | ✓ | ✓ |
| TCO advisory | × | × | ✓ |
| Customer success management | Shared pool | Personalised | Dedicated |
| Business review cadence | Annual | Quarterly | Monthly + annual strategic |
| Tech enablement and training | 4 hrs (one-time) | 4 hrs (quarterly) | 8 hrs (quarterly) |
| Customer site visitsIndia, UAE, United Kingdom | × | On request, chargeable | Scheduled, included |
| Minimum devices | 10 | 50 | 100 |
Every plan runs on Addigy. Enterprise 360 adds the Addigy Security Suite — SentinelOne Singularity EDR with SentinelOne Vigilance for 24×7 managed detection and response, real-time auto-remediating compliance, and Microsoft Entra conditional access. Licences are included in the per-device fee, or layered onto licences you already own.
A fair question that deserves real numbers, not a sales answer. Put your own figures in below — leave a box blank and we’ll use a conservative industry default. The model runs honestly: if in-house wins at your scale, it will say so.
Your fleet
People
Tooling & operations
Estimated annual cost
Where the in-house cost goes
| Salaries | $0 |
| Recruitment, visa & relocation amortised | $0 |
| Expected rehire cost from attrition | $0 |
| Training & certification | $0 |
| MDM, endpoint security & backup licences | $0 |
| Weekend & out-of-hours cover | $0 |
| Total per year | $0 |
| Per device, per year | $0 |
What this model does not count. It compares cost, not capability. It excludes the three to six months before a new hire is productive, the risk of a single point of failure when that person is on leave or resigns, and the management time spent running all of it. It also excludes anything you would still pay us for either way — hardware, AppleCare and third-party application licences. Note too that the in-house column always carries endpoint security and backup tooling: Essentials does not include EDR, and no BentoBox plan includes backup, so an Essentials comparison is not like-for-like unless you zero those two inputs. Defaults are conservative industry placeholders, not a quote; every figure is yours to overwrite.
And the things a spreadsheet can’t price
| Hire an Apple admin | Break/fix reseller | BentoBox | |
|---|---|---|---|
| Time to a working, hardened fleet | 3–6 months to recruit and build the playbook | Per-project, re-scoped each time | 3 business days |
| Cover for holiday, illness, resignation | None — single point of failure | Best efforts | A team, contractually |
| Out-of-hours & 24×7 threat response | Needs a rota of 4–5 people | Not offered | Included on Enterprise 360 |
| Written response SLA with credits | Not applicable | Rare | 30-min P1, credits payable |
| Executive reporting & TCO advisory | If they have time | No | Monthly reporting in the price; TCO advisory on Enterprise 360 |
| Cost shape | Step changes with every hire | Unpredictable per ticket | One line, per device, per year |
The bit other providers won't put in writing
Most faults that surface on a Mac start somewhere else — a proxy, a Conditional Access policy, a printer, a vendor app. That is the moment a normal support contract goes quiet. Ours is written so it cannot.
Whatever the eventual root cause, we triage it and drive the diagnosis all the way to a determined answer.
Logs, console or packet-level evidence and a reproducible test, then a written root cause analysis in plain language.
We join the call with your network team or vendor, hand them the evidence, and re-test. The ticket is never closed unilaterally.
✓ You are told it is an external dependency the moment we know — not at closure.
✓ Where we can mitigate on the Apple side, we do — at no extra charge, even though it isn’t our fault.
✓ The clock pauses honestly and visibly, and resumes the moment it comes back to us.
✓ Recurring external causes are reported as a trend, so they get fixed once instead of absorbed forever.
Clause 9, BentoBox Terms & Conditions — contractual, not a promise in a slide.
From kickoff to devices in your team’s hands in three business days, not months. A fixed-scope project with no separate fee, no big-bang cutover, and a validated pilot before anything touches your fleet.
Day 1, morning
Requirements, Apple Business Manager and identity setup, success criteria agreed and the design signed off.
Day 1–2
Tenant hardening, FileVault with escrowed keys, security baseline, EDR, configuration profiles and the app catalogue.
Day 2
A representative group taken end to end — unbox, enrol, policy, apps, sign-in, encrypt, report — and the build adjusted.
Day 3
Devices enrolled and in users’ hands. New devices bought through ABM enrol automatically on first boot.
End of day 3
Managed security, support and reporting active, and the Service Commencement Certificate issued for your countersignature.
Three days is the target, and it depends on you as much as on us. The clock starts when we have the prerequisites — an Apple Business Manager tenant with us added as administrator, admin access to your identity provider, and a device inventory. We confirm the date in writing before we begin. A migration from an incumbent platform is included in onboarding at no extra charge, provided it is identified before design sign-off.
A critical incident is a critical incident. Response targets are identical on every plan — what changes as you move up is how many hours a day the window is open.
| Priority | Essentials | Elevate | Enterprise 360 |
| Support windowIn your local business time zone | 8 × 5 local | 12 × 5 local | 24 / 7 / 365 |
| P1 – CriticalFleet-wide outage or active security incident | 30 min | 30 min | 30 min |
| P2 – High | 2 hrs | 2 hrs | 2 hrs |
| P3 – Medium | 8 business hrs | 8 business hrs | 8 business hrs |
| P4 – Low / request | 2 business days | 2 business days | 2 business days |
| Platform availability | 99.9% | 99.9% | 99.9% |
Miss a response target and you claim a credit, not an apology. Service credits attach to the response targets above; platform availability is a measured target rather than a credit-backed metric. Attainment is measured monthly and published in your service report — including every ticket that missed and why. Below 95% attainment, service credits become payable against that month’s fee; below 90%, we owe you a written improvement plan with named owners and dates. Set out in clause 6 of the Terms & Conditions.
Answered here so you don’t have to email for them.
No. Onboarding, configuration and go-live are inside the per-device fee. There is no separate implementation invoice and no professional-services fee.
An annual per-device subscription, invoiced annually in advance, renewing automatically for 12-month terms unless either side gives 60 days’ written notice. Quarterly billing is available on request above 250 devices.
Neither. You can reassign a licence to another device or user at any time.
At your plan’s per-device rate, pro-rated to the remaining term. No bundle penalty. Devices are removed at renewal.
Addigy, on every plan — Apple-native management for macOS, iOS, iPadOS and tvOS. On Mac the Addigy agent gives live device state and real-time remote control rather than check-in-cycle visibility; iPhone, iPad and Apple TV are managed over Apple’s MDM protocol, where remote control and terminal are not available. Enterprise 360 adds the Addigy Security Suite for EDR and 24×7 MDR.
Yes. We layer BentoBox management and support onto your existing licences, and a licence credit applies where you supply the entitlement.
Service credits against that month’s fee, claimable within 30 days, plus a written improvement plan below 90% attainment. Chronic failure gives you a termination right with a pro-rata refund.
You do. On exit you get a full inventory and configuration export, release of your Apple Business Manager and platform tokens, documented runbooks, and up to 20 hours of transition assistance — never withheld over a commercial dispute.
Yes, with cryptographic separation of work and personal data — company data secured, personal data private and untouched.
Secure automated offboarding: remote lock or wipe, Activation Lock release where the device is supervised, profile removal and confirmation that company data is gone.
We coordinate AppleCare+ and warranty repairs as part of the managed service. We do not fund the repair cost itself.
Yes — a Seamless System Switch is included in onboarding at no extra charge, provided it is identified before the Service Design Document is signed off.
A free 45-minute review of your Apple estate. We’ll tell you what we’d change, what it would cost, and whether you actually need us.
Measured monthly and published in your report.
Independently certified controls.
Full export and token release on exit.
Fixed-scope onboarding, no extra fee.
Included in every plan
No deployment fee
Onboarding, configuration and go-live are all included.
Written SLA credits
Miss a response target and you claim a credit.
Licences stay flexible
Reassign to any device or user, any time.
Zero-touch deployment
Enrolment, hardening and managed OS updates on every plan.
All BentoBox plans have transparent pricing and clearly defined entitlements. No hidden charges, no usage caps beyond those stated, and no overage charged without your prior written agreement.