Choosing an IT provider is one of the highest-stakes decisions a UK business makes. The right Managed Service Provider keeps you secure, productive and recoverable; the wrong one quietly becomes a liability you only notice during an outage or a breach.
The problem is that most comparison directories sell the top spots — you’re not seeing a ranking, you’re seeing an advertising auction. WhatMSP is built the other way round: every vetted provider is independently scored out of 50 from verified evidence, and we don’t sell rankings — the score is earned. This guide shows you how to compare properly, whether you use our register or not.
The five criteria that actually matter
- 1. Security & compliance — Cyber Essentials (ideally Plus), ISO 27001, ICO registration, professional indemnity and cyber insurance. Their security is your security.
- 2. Capability & technical fit — Microsoft partner status, real cloud expertise, RMM tooling, a proper security stack.
- 3. Trust & reputation — independent reviews, verifiable references and real case studies.
- 4. Service quality & SLAs — documented response/resolution times, account management, a real ticketing portal.
- 5. Reliability & financial stability — transparent pricing, a visible team, fair terms and a healthy balance sheet.
These are exactly the five categories behind every WhatMSP score.
Red flags to watch for
- No security certifications, or vague “we take security seriously” claims with nothing behind them.
- Pricing hidden behind a sales call; long lock-ins with punishing exit terms.
- No named team or address; reviews only on their own website.
- Pressure tactics — “this price is only valid today.”
UK support vs offshore
Many cheaper firms route their helpdesk offshore. That isn’t automatically bad — but make it a deliberate choice. Weigh response times in your timezone, GDPR and data residency, and the availability of on-site engineers when something physical breaks. A UK-based or hybrid helpdesk usually costs more but resolves faster and keeps your data under UK jurisdiction. WhatMSP lets you filter for UK-based support so you compare like with like.
Your IT provider comparison checklist
- Cyber Essentials / Cyber Essentials Plus held and in date
- ISO 27001 and ICO registration
- Professional indemnity and cyber insurance confirmed
- Independent reviews (Google/Trustpilot), 4★+ with real volume
- Two contactable client references at your size
- Written SLAs with response and resolution targets
- UK-based or clearly disclosed offshore support
- Transparent, like-for-like pricing (same scope across quotes)
- Fair contract length, notice period and data-exit terms
- Healthy Companies House financials
- Named, visible team and a real UK address
Compare the honest way
Stop comparing marketing budgets and start comparing evidence. Every provider on WhatMSP is independently scored out of 50, with the methodology published in full.
Frequently asked questions
How do I compare IT support companies fairly?
Score them against the same criteria — security certifications, capability, independent reviews, written SLAs, pricing and financial stability — rather than comparing marketing. WhatMSP does this for you with an independent score out of 50.
Are IT provider comparison sites trustworthy?
Many aren't: they're pay-to-rank, so the top providers are simply the highest bidders. WhatMSP is independent — providers can't buy a higher score or a better ranking.
What certifications should a good IT provider have?
At minimum Cyber Essentials and ICO registration; ideally Cyber Essentials Plus and ISO 27001, plus relevant Microsoft partner status and proper insurance.
Is offshore IT support a problem?
Not inherently, but consider response times, GDPR and data residency, and on-site availability. Decide deliberately, and filter for UK-based support if it matters to you.
How much should IT support cost in the UK?
Most MSPs charge per user or per device per month, but scope varies hugely. Always compare quotes on identical scope, and weigh price against response times and security.