MSP pricing: what a Resolved Ticket really costs. Dave Sobel Published on November 3, 2026 The Agent Is in the Ticket AI agents are now working tickets inside the tools MSPs already run, and the vendors are publishing the scorecard. Start with ConnectWise, which made its RMM Agent generally available. ConnectWise calls it a market first. The agent investigates the device behind a ticket, tests what's wrong, and stages a fix from a vetted catalog, all without leaving the PSA ticket. It runs read-only diagnostics while it investigates. Any change to the device needs a technician's explicit approval. Alongside it, ConnectWise released Voice, Teams and Email agents that collect missing details from the customer before a ticket reaches a technician. All four are generally available. The proof ConnectWise offers comes from its partners, quoted in its own announcement. Blake Bath, general manager at RealBytes, says ConnectWise's agents evaluated 99 percent of more than 7,000 tickets in 30 days and handed his team back 178 hours. His team then ran the new RMM Agent across more than 500 live tickets. It produced a useful diagnosis on 91 percent, each in about a minute. The announcement also credits RealBytes with cutting first-touch time from an hour to five minutes, and says another partner, Fusion Computing, cut escalations by 86 percent. Then Bath adds the line that matters most here. "With ConnectWise," he says, "our breakeven on our AI spend is about 16 minutes per tech per day." Hear what that says. The AI is a cost line of its own, and the partner is weighing it against technician time. The announcement doesn't say what that spend is, or how it's billed. Chief executive Manny Rivelo frames the goal this way: the next phase of AI in managed services will be "measured by the work it moves forward." So look at what the announcement actually measures. Tickets evaluated. Hours handed back. Diagnoses judged useful. First-touch time. Escalations. Those are real gains. None of them is the thing a client pays you for, which is a ticket that's closed and stays closed. In plain terms, the agent is in the ticket, a technician still approves the fix, and the meter running underneath it hasn't been published. So who's counting, and what? The answer starts with how AI gets billed in the first place. Billed for the Try, Not the Fix Underneath that missing meter is one dynamic. AI vendors get paid for activity, and agents generate a lot of it. Start with the unit the industry bills in. Speaking with Stripe president John Collison on the Cheeky Pint podcast, OpenAI chief executive Sam Altman said the company almost made what he called a bad call. OpenAI considered dropping token pricing for its next model: you'd hand over a prompt and get back a price for the job. Customers hated it. They told OpenAI, "I need to know what I'm paying for somehow." Some said they'd rather OpenAI inflate the tokens and charge more, because then they knew there was a real thing there. Altman himself calls tokens a kind of fake unit. They're still the unit. So the bill tracks activity, not results, and agents produce far more activity. Gartner forecasts that inference costs per agentic workflow will rise more than fivefold through 2028, even as token economics improve. Its analyst Will Sommer told VentureBeat that agents need five to thirty times more tokens per task than a basic chatbot doing the same job. The tokens get cheaper and the bill gets bigger. The MSP version looks the same. SuperIT, an Australian startup, made its agent platform generally available in North America. The free tier comes with unlimited ticket triage and monthly credits for other AI features. Paid plans run from 99 dollars to 9,900 dollars a month. When SuperIT reports its growth, it reports monthly autonomous agent runs, which more than doubled between July and September, and monthly recurring revenue, which grew more than sixfold from August to September. Chief executive Christopher Sale says MSPs should judge it on their own tickets. That's a fair invitation. It's also a clear view of what a vendor counts. Whether it's a token, a credit, a plan tier or an AI line item next to the seat, the vendor's bill is built on activity and access, not on resolved tickets. The MSP is paid a flat fee for the result. When an agent's attempt fails, the vendor is still paid for it. The MSP pays for that failure twice: once in the bill, and again in the technician who checks the work and finishes it. In plain terms, the meter runs on effort, and your contract runs on results. It's like quoting a client a flat fare and then hailing a cab with the meter running. Every wrong turn is on you. The only way to see the gap between them is to count it yourself. Here's what that count looks like when someone actually runs it. What a Resolved Ticket Costs For the MSP, that gap lands on a number no vendor hands you: what a resolved ticket actually costs. Start with Shield Technology Partners. It runs its own AI platform, Forge, across the IT providers it partners with, and says Forge now handles more than half of their actionable tickets. Shield took 52 hard tickets its own agent had gotten wrong and ran the leading models against them. The best, OpenAI's GPT-6 Astra at its highest reasoning setting, passed 32 of the 52. Raising that model's effort from low to extra high bought two more passes, while the cost per ticket rose from 5 dollars 10 to 7 dollars 60. Across 52 tickets, those two extra passes cost about 65 dollars apiece. One budget model passed 25 for pennies a ticket. Shield notes that those costs and times leave out human verification, correction and follow-through. And some failures weren't technical at all. In one case a customer asked for a phone call, and the model tried to schedule remote maintenance by email instead. Do the division and the picture changes. At 7 dollars 60 a try and a 61.5 percent pass rate, the best model costs about 12 dollars for every ticket it gets right, before anyone checks it. The budget model looks like a bargain until you count the 27 tickets a technician still has to finish. These were deliberately hard tickets, so neither figure is your figure. That's the point. Yours has to come from your tickets. Most organizations can't produce that number. Cloudera, which sells data and AI platforms, surveyed enterprises for its State of Enterprise AI report. Only 27 percent can measure their AI spending very accurately, and only 23 percent say AI delivers more value than it costs. So here's the choice. Take a sample of your own closed tickets and run each agent against them. Count what a resolved ticket costs, including the technician minutes to review and finish the ones it misses. Then decide category by category. Turn the agent on where it beats a technician on that number. Where it wins but the work is how your juniors learn, run it with approval on. On this show, I've argued you should keep some of those tickets back for training, and this is where that happens. Leave it off everywhere else, and measure again every quarter. Or turn it on across the whole queue because it came with the platform, and let the failed attempts, the review minutes and the missing skills land on your margin. That choice gets settled where every MSP cost eventually lands: in the price. Why Do Business of Care? Because your client agreement is priced per user or per device, and the agent's cost isn't. Once you know what a resolved ticket costs in each category, you know which ones your flat fee can carry and which ones quietly eat margin every time the agent tries and misses. That number belongs in your next price review, before it shows up in your vendor's. What to Consider * Build cost per resolved ticket into your price model. Take what the agent costs you for a category, divide it by the tickets it actually resolved, and add the technician minutes spent reviewing and finishing the rest at your loaded labor rate. Shield's figures left verification out, so that last piece is yours to add. * Track AI spend against closed tickets, not activity. Gartner's advice is to track every AI feature's spend against a clear outcome metric, such as cases successfully closed, and improve or retire the workflows that underperform. Apply that to your own queue: if a category's AI spend rises while its closed tickets don't, that category is costing you margin under a flat fee. * Price the training tickets as an investment. The categories you keep back for juniors will cost more per ticket than the agent would. Put that difference in your model as the cost of growing your own people, so it's a decision you priced rather than an inefficiency you discover later. If this trend continues: By the end of 2027, MSPs that know their cost per resolved ticket by category will set flat fees the agent can actually carry, and the rest will learn their margins from the AI line on the invoice. This content is made possible by community-minded viewers like you. Join the Small Biz Thoughts Community to support independent journalism and get the raw Business of Tech interviews, Channel Intelligence briefs, monthly member calls and more. Member support is one way Business of sustain the costs of investigative work - from court filings to video editing - while keeping the core reporting open to all.

Your RMM now investigates its own tickets: connectwise launches industry's first Agentic RMM. Early access partners report first-touch times reduced from one hour to five minutes, 86% reduction in escalations, and 120% revenue growth. Additional Voice, Teams, and Email Agents gather the context technicians need before work starts, so service requests move from first contact to resolution in record time. TAMPA, Fla. - October 29, 2026 - ConnectWise, the leading software company dedicated to the success of managed service providers (MSPs) and IT teams, today announced ConnectWise Agentic RMM. A market-first, RMM Agent investigates the device behind a ticket, tests what is wrong, and stages a fix from a vetted catalog for a technician to approve, all without leaving the PSA ticket. The company also announced Voice, Teams, and Email Agents that collect missing details from customers before a ticket reaches a technician. All four agents are generally available today. The launch expands AI across two critical areas of the MSP operating model: Intelligent Service Intake and Agentic Operations. The capabilities bring better-prepared service requests, AI-powered endpoint investigation and governed remediation into the workflows MSP teams already use. Early reports from ConnectWise partners show measurable gains in service delivery and business performance: first-touch times reduced from one hour to five minutes at RealBytes, an 86% reduction in escalations at Fusion Computing and 120% revenue growth at Worldband. "ConnectWise Agentic knows our devices, our scripts, our clients and our SLAs, so it does the work instead of guessing or merely suggesting. In 30 days, our CW Agents evaluated 99% of 7,074 tickets and handed my team back 178 hours. Then we ran the new ConnectWise RMM Agent across over 500 live tickets and got a useful diagnosis on 91%, each in about a minute, saving us about 120 hours. With ConnectWise, our breakeven on our AI spend is about 16 minutes per tech per day. ConnectWise Agentic has unlocked significant capacity for my team and we're just getting started." - Blake Bath, General Manager, RealBytes "The next phase of AI in managed services will be measured by the work it moves forward, not just the answers it generates. With these agents, we're bringing that next step to our partners, connecting better service intake with intelligence and governed action deeper in IT operations. This is how we make AI real for MSPs: less repetitive work, more capacity to serve customers and technicians in control of changes to the environments they manage." - Manny Rivelo, CEO of ConnectWise The ticket becomes the console. An alert becoming a ticket has traditionally marked the beginning - not the end - of a technician's investigation. ConnectWise Agentic RMM brings that investigation into the ticket itself, combining service context with live information from the linked endpoint. The agent performs read-only diagnostics, develops and tests hypotheses, and proposes remediation from a vetted catalog. When a proposed action involves a change to the device, the technician must explicitly approve it. The ticket becomes the console - bringing service context, endpoint intelligence and governed action together in the technician's workflow. The approach is designed to reduce repetitive investigation work while keeping people in control of device changes. "Agentic RMM turns the PSA ticket into a command center for investigation and action. It connects live endpoint intelligence with vetted remediation, requiring technician approval for every device change. That's a concrete step toward Predictive IT - with control built in." - David Raissipour, Chief Product and Technology Officer at ConnectWise Better-Prepared work across Voice, Teams and Email. ConnectWise is also expanding Intelligent Service Intake across the channels MSP customers use to request support. Voice Agent answers inbound support calls, gathers relevant context and creates structured PSA work. Teams Agent asks focused questions to collect missing information before creating a ticket. Email Agent identifies information gaps in emailed requests and can follow up with customers for the specific context needed. Together, these capabilities help reduce the documentation, clarification and back-and-forth that can delay meaningful service work, allowing technicians to begin with better-prepared requests. "A technician shouldn't have to spend the first part of every service request chasing the information needed to get started. Whether a request comes through a call, a Teams conversation or an email, our AI Agents help capture the right context and structure the work. That means less manual follow-up and more time focused on delivering service." - Lee Silverstone, Senior Vice President of AI Platform at ConnectWise Making AI Operational for MSPs and IT Teams. Together, Intelligent Service Intake and Agentic Operations extend ConnectWise AI across more of the service lifecycle - from capturing and preparing requests to investigating issues and taking approved action. These capabilities represent another step toward an operating model in which intelligence is embedded in service delivery, rather than added as a separate layer of work. By bringing AI into PSA, RMM and service workflows, ConnectWise is helping MSPs and IT teams reduce repetitive tasks, unlock operational capacity and maintain oversight as AI takes on a greater role in their businesses. ConnectWise Agentic RMM, Voice Agent, Teams Agent and Email Agent are generally available today. For more information about ConnectWise AI Agents, visit www.connectwise.com/platform/ai-agents. ConnectWise will share more about its agentic Platform and next quarter's AI Agents at IT Nation Connect(TM) Global 2026, November 4-6. About ConnectWise Trusted by 100K+ IT providers worldwide, The ConnectWise Platform brings together PSA, RMM, cybersecurity, and data protection with predictive intelligence woven throughout to help partners operate more efficiently and respond to complexity at scale. By combining intelligent automation with an open ecosystem of integrations, ConnectWise enables providers to proactively manage, secure, and support their clients with greater speed, accuracy, and confidence. With a relentless focus on innovation and partner success for more than 40 years, ConnectWise has helped partners sustain and grow their businesses by simplifying operations, enhancing service delivery, and enabling scalable business models. Learn more at connectwise.com. Media Contact Welcome to the ConnectWise newsroom. Access the latest ConnectWise press releases, media coverage & more. For all media inquiries, please email [email protected]. About ConnectWise: ConnectWise is the world's leading software company dedicated to the success of IT solution providers (TSPs) through unmatched software, services, community, and marketplace of integrations. The ConnectWise Platform is an innovative, integrated, and security-centric platform which provides unmatched flexibility that fuels profitable, long-term growth for partners. ConnectWise enables TSPs to drive business efficiency with automation, IT documentation, and data management capabilities and increase revenue with remote monitoring, cybersecurity, and backup and disaster recovery technologies. For more information, visit connectwise.com.

Chinese state-linked hackers deploy agentic AI to compromise Connectwise in massive supply chain attack. A Chinese state-aligned threat actor tracked as Storm-0940 used an open-source agentic AI framework and compromised application credentials from IT management provider ConnectWise to carry out a high-speed, automated supply chain attack. According to a threat intelligence disclosure from Microsoft, the hackers turned stolen ConnectWise Cloud Backup (formerly SkyKick) credentials against more than 2,250 downstream Microsoft 365 customer tenants globally, attempting to achieve persistent cloud access at machine speed. The campaign demonstrates a significant escalation in how nation-state actors integrate autonomous AI agents into offensive operations to scale supply chain intrusions faster than human security teams can react. Weaponizing the ARTEX AI Framework at Machine Speed Central to the operation was Storm-0940's deployment of ARTEX, an open-source agentic AI penetration-testing framework. Rather than relying on manual operator intervention, the threat actor tasked autonomous AI agents to continuously perform reconnaissance, execute password spraying, and abuse OAuth applications across targeted cloud environments. The agents generated up to 2,900 sign-in attempts per minute across targeted systems. On October 11 alone, Microsoft recorded over 111,000 failed authentication attempts. In multiple compromises, the agentic AI workflow enabled the hackers to move from initial target selection to obtaining privileged cloud access in under three hours. The campaign targeted hundreds of enterprise networks across high-value sectors, including aerospace, defense, financial services, energy, government, semiconductor, and legal organizations. ConnectWise Response and Cloud Tenant Isolation ConnectWise confirmed that the breach specifically impacted its Cloud Backup integration connections, forcing the firm to isolate affected application endpoints and begin a phased restoration process following security audits. However, both ConnectWise and Microsoft warned that severing the compromised backup connection does not automatically clear unauthorized access or persistent OAuth tokens established inside individual customer Microsoft 365 tenants. ConnectWise urged affected organizations to keep their connections disabled until formal remediation protocols are completed and to conduct independent forensic sweeps inside their tenant environments. The Emergence of Agentic AI in Nation-State Cyber Warfare The attack marks one of the most prominent documented cases of a state-backed actor using autonomous agentic AI to execute a complex supply chain compromise. Security researchers noted that while automated password spraying and credential stuffing generated significant log noise, the sheer speed of agentic AI workflows drastically compresses the window for security operations center (SOC) analysts to detect, isolate, and remediate unauthorized cloud access.