---
title: "Managed server pricing, licences included | Wardio"
description: "One monthly price per machine, with kernel patching, intrusion detection, monitoring and backup licences included. Shown in EUR, DKK or USD. No setup fee."
source: "https://wardio.net/pricing/"
---

**Pricing**

# One price per machine. Licences included.

Most managed-server quotes are hourly labour with the tooling billed separately, or a low headline number that covers very little. This page prices the whole stack on one line.

**First machine**

€100/mo

Covers everything below on one server, including setup, hardening and migration from an existing provider.

[Start with a free review](/contact/)

**Each additional machine**

€50/mo

The same stack and coverage as the first machine, with shared monitoring and one point of contact across all of them.

[Ask about multiple machines](/contact/)

## Everything the price covers

| Capability | Details | Tooling |
| --- | --- | --- |
| Rebootless kernel patching | Most serious kernel security fixes go onto the running kernel, so they do not wait for a reboot window. Reboots still happen, but on a plan instead of in a hurry. | KernelCare |
| Intrusion detection & log analysis | Host-based detection, log collection and retention, and file integrity monitoring on the paths that matter. | Wazuh |
| Real-time monitoring & alerting | Per-second metrics on CPU, memory, disk, network and services, with alerts that reach a person. | Netdata |
| Zero-trust private access | Your machines and your people share a private mesh, and SSH and admin interfaces come off the public internet. | Tailscale |
| Off-site backups + integrity checks | Encrypted, deduplicated backups to S3-compatible object storage in a different failure domain, with scheduled integrity checks on the data itself. | restic + resticprofile |
| Patching, hardening & upkeep | OS and package updates, firewall and access reviews, and the routine maintenance that prevents incidents. | Internal tooling |

The monthly fee includes the licence costs for the commercial components. There is no separate bill, and you do not need your own subscriptions.

## Not included

I list these up front to save us both a conversation later.

-   **The server itself.** You keep your own hosting account and pay your provider directly. You own the machine and I manage it.
-   **Contractual response times.** Alerting is continuous and I respond as fast as I reasonably can. A guaranteed out-of-hours SLA is a separate agreement. See below.
-   **Application development.** I keep the platform healthy. Building or debugging your application is quoted separately.
-   **True immutability.** Backups are not write-once. They sit in a different failure domain from the server, but the storage key on the server can delete backup data. An attacker with full control of the server could destroy the repository, and so could anyone holding the storage account credentials. restic runs on a bucket with Object Lock, but it cannot set or extend locks itself, so it does not give snapshot-level write-once retention. If a compliance requirement demands real WORM retention, you need a different backup tool, and I will say so instead of selling you this one.
-   **Scheduled restore rehearsals.** Automated integrity checks run on the backup repositories, and I perform a restore when you need one. A full application-level rehearsal of a multi-terabyte dataset, meaning bringing the database up and verifying game or application state, is scoped and quoted separately. Anyone promising it inside a flat monthly fee has not priced it.
-   **Compliance certification.** I implement and evidence the technical controls. I am not an auditor and cannot certify you. [More on that distinction.](/compliance/)

## Backups as a standalone service

If you do not want full management, you can buy off-site backups on their own for €50/mo. If I already manage the machine, backups are **included in the monthly fee** and not billed on top. The storage account is yours. You open it with Backblaze B2 or any S3-compatible provider and pay them directly at their rates. I set it up and show you how it works, so nothing is locked to me.

-   resticprofile backs up to S3-compatible object storage, either Backblaze B2 or your own, or to a restic REST host such as BorgBase. Backups are encrypted, compressed and deduplicated. On B2 that setup needs a cleanup step most guides omit. See [why the repository grows anyway](/guides/restic-backblaze-storage-growth/).
-   Retention, schedule and resource limits configured per client
-   I monitor the backups, and you get a self-service restore guide if you would rather not wait for me

## One-off work

Some jobs do not need a monthly arrangement. I quote these individually: server setup and hardening, a security review, a migration, or recovering a machine that is already in trouble. [Describe what you need](/contact/) and you get a fixed number before any work starts.

As a rough guide, one-off work generally starts at €50.