# Bytes Unlimited

> Managed IT services, cybersecurity, and cloud solutions for small and medium businesses. Serving Hudson Valley NY and nationwide.

Managed IT services, cybersecurity, cloud solutions, and WordPress hosting for small and medium businesses. Google Workspace, Microsoft 365, and SonicWall partner serving Hudson Valley NY and nationwide.

Serving Hudson Valley, New York, United States.

## Services

### Managed IT
https://www.bytesunlimited.com/services/managed-it/

Monitoring, patching, helpdesk, and proactive care for your fleet. Predictable monthly billing; no hourly surprises.

### Security & Compliance
https://www.bytesunlimited.com/services/security/

PCI DSS, HIPAA, and general security posture work. Endpoint protection, MFA, awareness training, audit-ready documentation.

### Cloud & AWS
https://www.bytesunlimited.com/services/cloud-aws/

AWS architecture, migration, and ongoing optimization. Right-sized infrastructure that scales with the business.

### WordPress Management
https://www.bytesunlimited.com/services/wordpress/

Updates, security hardening, performance tuning, and uptime monitoring for production WordPress sites.

### Google Workspace
https://www.bytesunlimited.com/services/google-workspace/

Google Workspace Partner. Email, Drive, Meet, and identity setup with the partner-channel pricing and support escalations.

### Microsoft 365
https://www.bytesunlimited.com/services/microsoft-365/

Microsoft Solutions Partner. Microsoft 365 tenant setup, Exchange Online, Intune, and identity hardening.

### SonicWall CSE
https://www.bytesunlimited.com/services/sonicwall/

SonicWall Cloud Secure Edge — zero-trust access, threat protection, and edge security as a managed service.

### Web Design & Development
https://www.bytesunlimited.com/services/web-design/

Custom small-business websites on our own hardened Astro template — fast, accessible, secure, and CI-gated on every deploy. See the live demo.

### AI Search Optimization (GEO)
https://www.bytesunlimited.com/services/ai-search-optimization/

Generative Engine Optimization — get your business retrieved, cited, and represented accurately by ChatGPT, Perplexity, Claude, and Google AI Overviews.

### Duo MFA
https://www.bytesunlimited.com/services/duo-mfa/

Duo multi-factor authentication rollout — app and hardware token enrollment, policy tuning, and end-user training.

### Bitdefender GravityZone
https://www.bytesunlimited.com/services/bitdefender-gravityzone/

Bitdefender GravityZone Cloud MSP Security — endpoint detection and response for SMB fleets, managed centrally.

### Cloudflare
https://www.bytesunlimited.com/services/cloudflare/

Cloudflare DNS, WAF, Turnstile, and Workers configuration. CDN + edge security on top of your origin.

### Dropbox for Business
https://www.bytesunlimited.com/services/dropbox/

Empowered-tier Dropbox Partner. Licensing, migration off personal accounts, secure client file requests, Dropbox Sign, and ongoing admin.

### Google Cloud
https://www.bytesunlimited.com/services/google-cloud/

Google Cloud Platform — Compute Engine, Cloud Storage, IAM, and BigQuery setup for SMBs and dev teams.

## Glossary

### Business Associate Agreement (BAA)
Contract required under HIPAA between a covered entity and any vendor that will handle protected health information on its behalf. Makes the vendor legally liable for HIPAA compliance.

### Business Email Compromise (BEC)
Targeted scam that impersonates an executive, vendor, or trusted contact to redirect wire transfers or invoice payments to attacker-controlled accounts. Among the most expensive cyber-attack categories per incident.

### Content Delivery Network (CDN)
Global network of cache servers that delivers static content (images, CSS, JavaScript, HTML) from the location closest to each user — speeds up page load and absorbs traffic spikes at the edge.

### Cyber Insurance
Insurance product that covers financial losses from cyber incidents — ransomware, breach response, business interruption, regulatory fines. Underwriting requirements have tightened sharply since 2020.

### Endpoint Detection and Response (EDR)
Security tooling that continuously monitors endpoints (laptops, servers, workstations) for malicious behavior, blocks active threats, and gives responders the forensics they need to investigate after the fact.

### Extended Detection and Response (XDR)
Security platform that correlates signals across endpoints, identity, email, network, and cloud — catching attacks that any single layer would miss in isolation.

### Health Insurance Portability and Accountability Act (HIPAA)
U.S. federal law that sets privacy and security rules for protected health information (PHI). Applies to healthcare providers, health plans, clearinghouses, and any vendor handling their data.

### Infrastructure as a Service (IaaS)
Cloud-hosted virtual machines, storage, and networking that you rent by the hour or month — you manage the operating system and applications on top.

### Managed Detection and Response (MDR)
EDR or XDR platform plus a 24/7 security operations center (SOC) that monitors alerts, performs threat hunting, and takes containment actions on your behalf.

### Managed Service Provider (MSP)
A company that proactively manages a client's IT infrastructure and end-user systems for a recurring fee, instead of charging hourly when things break.

### Multi-Factor Authentication (MFA)
Login requirement that combines something you know (password) with something you have (phone, hardware key) or are (biometric). Single most effective control for stopping credential-stuffing and phishing attacks.

### Next-Generation Firewall (NGFW)
Network firewall that does more than port-and-IP filtering — it inspects application traffic, decrypts and re-inspects TLS, identifies the user making each request, and blocks based on threat intelligence.

### Passkeys (WebAuthn)
Phish-resistant authentication that replaces passwords with cryptographic key pairs stored on your device — Face ID or fingerprint unlocks the local key, the website never sees a shared secret to steal.

### Payment Card Industry Data Security Standard (PCI DSS)
Security framework that any business handling credit card data must comply with. Set by the major card brands; enforced through banks and payment processors via contract, not government regulation.

### Phishing
Social-engineering attack that impersonates a trusted party (a colleague, vendor, bank, login page) to trick a target into revealing credentials, clicking a malicious link, or wiring money.

### Protected Health Information (PHI)
Any individually identifiable health information held or transmitted by a HIPAA-covered entity or its business associates. The data category at the heart of HIPAA — defining what triggers the law's full scope.

### Ransomware
Malware that encrypts a victim's files (and increasingly, exfiltrates them) then demands payment for decryption keys and non-disclosure. The financially defining cyber threat to small and medium business since 2017.

### RTO and RPO (RTO/RPO)
The two key metrics for backup and disaster recovery planning. RTO is how long you can be down before the business hurts; RPO is how much data you can afford to lose. They drive every backup design decision.

### Secure Access Service Edge (SASE)
Cloud-delivered networking + security architecture that combines SD-WAN, ZTNA, secure web gateway, CASB, and FWaaS into one platform — designed for remote-first, cloud-heavy businesses.

### Security Information and Event Management (SIEM)
Centralized log-and-event collection platform that aggregates security data from across the environment and lets analysts query, correlate, and alert on patterns of interest. The power tool of a security operations center.

### Service-Level Agreement (SLA)
Contractual commitment from a service provider that specifies response times, resolution targets, uptime guarantees, and the credits or penalties for missing them.

### Single Sign-On (SSO)
One identity, one login, many applications. Users authenticate once with their corporate identity provider and then access every SSO-integrated app without separate logins.

### Software as a Service (SaaS)
Application delivered over the internet on a subscription, with the vendor handling infrastructure, updates, and maintenance. You log in and use it; you don't install or run anything.

### Virtual Private Network (VPN)
Encrypted tunnel that gives a remote user network-level access to internal resources as if they were physically on the office network. Increasingly being supplanted by ZTNA for security reasons.

### Web Application Firewall (WAF)
Filter that sits in front of a web application and inspects every request — blocking known attack patterns (SQL injection, XSS, file inclusion) before they reach your code.

### Zero Trust Network Access (ZTNA)
Access model that verifies every connection request — user, device, application, context — instead of trusting the network it comes from. The successor to "if you're on the VPN, you're trusted".

## Comparisons

### On-Premises Infrastructure vs Cloud Infrastructure
For a 2026 SMB starting from scratch, cloud-first is almost always correct. But "rip and replace" of working on-prem infrastructure rarely pays off until natural refresh windows arrive — the migration cost can exceed the operational savings for years.

- Cost structure: On-Prem — Capital expense up front (hardware, licenses), predictable ongoing cost (power, cooling, maintenance, depreciation). Looks cheaper in spreadsheets, often isn't once you count operational labor.; Cloud — Operational expense — no upfront hardware. Pay for what you use. Looks more expensive on the bill, often cheaper in total when you count operational labor savings.
- Scaling: On-Prem — Requires planning. New capacity means purchasing, racking, configuring — weeks to months. Scaling down is even harder.; Cloud — Elastic. Need 10x capacity for a busy week? Click a button. Don't need it next week? Click the same button. Pay only while it's running.
- Maintenance burden: On-Prem — You patch the hypervisor, the OS, the application. You replace failing hardware. You rotate tapes. The IT layer is ongoing operational work.; Cloud — You patch the OS and the app. The cloud provider handles the hypervisor and below. Failure of physical hardware is invisible to you.
- Reliability: On-Prem — Bounded by your own redundancy investments. Generator? Second internet circuit? Redundant power? Each one adds cost.; Cloud — Three-nines uptime is the table-stakes baseline. Multi-region for higher tiers. The infrastructure investment is amortized across millions of customers.
- Data sovereignty: On-Prem — Data is where you put it. For specific regulatory regimes (some international, some defense-adjacent), this matters.; Cloud — Major providers offer region-specific deployment (US-only, EU-only, etc.). For most SMB regulatory regimes (HIPAA, PCI DSS, SOC 2), commercial cloud is fully compliant.
- Latency: On-Prem — Local users get LAN-speed access to local resources. WAN access to on-prem from remote is the worst case.; Cloud — Cloud-to-cloud is fast. Cloud-to-remote-user is fast. Cloud-to-on-prem requires VPN or direct connect — usually fine but a layer of complexity.
- Disaster recovery: On-Prem — Requires explicit DR investment — second site, replicated systems, tested runbooks. Often theoretical until the first real incident.; Cloud — Multi-region failover is configurable at the platform layer. Backup to a different region is one command.
- Customization: On-Prem — You can do anything physical hardware can do — custom OS, niche drivers, specialized hardware.; Cloud — Constrained to what the provider supports. Edge cases (specific GPUs, custom kernels, specialized hardware) sometimes require IaaS workarounds or hybrid.
- Best-fit workloads: On-Prem — Heavy persistent workloads with predictable usage, regulatory requirements that exclude cloud, specialized hardware needs, locations with poor internet.; Cloud — Anything new, anything with variable load, anything that doesn't require physical-world tethering. Most modern business applications.

### Google Workspace vs Microsoft 365
Both are excellent. The honest choice comes down to what your team actually uses today (the cost of switching is mostly cultural, not technical) and which ecosystem your industry leans into (legal, finance, and large-enterprise vendors target Microsoft; education, startups, and creative shops lean Google).

- Email: Workspace — Gmail web is the gold standard. Search is unbeatable. Power-users miss some Outlook features (rules, advanced classification, integrated calendar in the same pane).; M365 — Outlook desktop is a deeply mature client with rules, conditional formatting, and tight calendar integration. Outlook Web is good but trails the desktop app.
- Documents: Workspace — Docs, Sheets, Slides are web-native and real-time-collaborative by default. Power-users hit ceilings in spreadsheets (Excel still wins for heavy financial modeling).; M365 — Word, Excel, PowerPoint desktop apps are best-in-class for advanced work. Online versions are good and improving. Real-time co-editing works but feels grafted on.
- Collaboration: Workspace — Chat, Meet, shared Drive — clean integration. Threading in Chat lags Slack.; M365 — Teams is the integration center — channels, video, file sharing, third-party apps. More features, more complexity to manage.
- Admin console: Workspace — Cleaner, less to configure, fewer dials to break things with. Newer admins ramp faster.; M365 — Far more granular. Group policy via Intune, conditional access via Entra ID, eDiscovery, retention policies — enterprise tooling at SMB scale.
- Compliance & retention: Workspace — HIPAA BAA available on Business Standard and above. Vault for retention and eDiscovery on Business Plus.; M365 — HIPAA BAA broadly available. Purview gives industry-leading retention, DLP, eDiscovery — particularly important for regulated industries.
- Identity: Workspace — Workspace as identity provider works well, especially for SaaS-heavy environments. SSO to most apps via SAML/OIDC.; M365 — Entra ID is the most widely-supported corporate identity provider on earth. SSO, conditional access, device management integrate deeply.
- Mobile: Workspace — First-class on Android and iOS. The mobile experience feels intentional.; M365 — Excellent on iOS and Android. Outlook mobile is a separate paradigm from desktop Outlook (different UX).
- Pricing (typical SMB tier): Workspace — Business Standard around $14/user/month. Business Plus around $22.; M365 — Business Standard around $12.50/user/month. Business Premium (with Intune + advanced security) around $22.
- Industry fit: Workspace — Education, startups, agencies, creative shops, small healthcare, nonprofits.; M365 — Legal, finance, large-enterprise vendors, government contractors, manufacturing, healthcare-systems.

### Break-Fix IT vs Managed IT Services
Break-fix is reactive and unpredictable; managed IT is proactive and budgetable. The economic incentives are opposite — break-fix firms only make money when something breaks, managed firms only make money when nothing does.

- Billing model: Break-Fix — Hourly rate, only billed for actual work. Zero spend in calm months.; Managed IT — Fixed monthly fee per user or device. Predictable to the dollar.
- When the IT firm makes money: Break-Fix — When things go wrong — outages, breaches, broken hardware.; Managed IT — When things stay quiet. Every emergency they handle eats into the firm's margin.
- Patching & updates: Break-Fix — Only when you ask. Usually neglected because nobody bills for it.; Managed IT — Routine and managed. Patches roll out within a defined SLA after release.
- Monitoring: Break-Fix — None. You discover problems when users do.; Managed IT — 24/7 endpoint and server monitoring with alerting to the IT firm before users notice.
- Cyber-insurance posture: Break-Fix — Hard to satisfy. Underwriters increasingly require MFA, EDR, patching cadence, MSP attestation.; Managed IT — Designed around what underwriters check. Much smoother renewals.
- Compliance work (HIPAA, PCI DSS): Break-Fix — Project-by-project. Compliance state drifts between engagements.; Managed IT — Continuous. Compliance controls are part of the contract.
- Response time: Break-Fix — Depends on the IT firm's queue. Could be hours, could be days.; Managed IT — Contractual SLA. Often 1-2 hours for managed clients.
- Total annual cost: Break-Fix — Wildly variable. Cheap in calm years, ruinous in incident years.; Managed IT — Higher floor, much lower ceiling. Easier to budget.
- Strategic IT input: Break-Fix — Rare. Break-fix firms don't know your environment well enough.; Managed IT — Built in. The MSP touches your environment weekly and notices drift.

### Big-Brand MSP vs Owner-Operated MSP
At the SMB scale we serve, the question is whether you want IT delivered by a senior engineer who knows your environment (owner-operated) or by a tiered system optimized for high client volume (big-brand). The right answer depends on whether your environment is genuinely standard or genuinely particular.

- Who you talk to: Big-Brand — Account manager during business, tier-1 helpdesk for routine tickets, tier-2 for escalation, tier-3 only for genuinely hard problems.; Owner-Operated — The owner. Same person who designed your environment, signed the contract, and knows where the bodies are buried.
- First-response familiarity: Big-Brand — Helpdesk reads from your runbook. Quality varies with which agent picks up the ticket and how recently they touched your account.; Owner-Operated — First response is from someone who already has the context. No "tell me about your setup" preamble.
- Escalation path: Big-Brand — Internal escalation chain, often three or four levels. Fast for common issues, slow for unusual ones.; Owner-Operated — Single escalation step — to a trusted partner or specialist firm when something is genuinely outside scope. Less depth, more directness.
- Bench depth: Big-Brand — Real advantage — a 50-person MSP has someone who has seen every problem before. Specialists for SQL Server, VMware, Cisco, niche industry software.; Owner-Operated — Real limitation — when an engagement needs a specialist outside the owner's expertise, the owner has to bring one in. Usually fine, sometimes a friction point.
- Pricing model: Big-Brand — Tiered packages with feature differentiation. Per-seat / per-device pricing optimized for sales-team forecasting.; Owner-Operated — Scoped per engagement based on what the environment actually needs. Less standardized, more bespoke.
- Account stability: Big-Brand — Account managers and engineers turn over. The person who knows your environment leaves, and onboarding their replacement is your problem.; Owner-Operated — As long as the owner is operating the firm, the relationship is stable. If the owner sells or stops, the relationship ends — that's a real risk to weigh.
- Coverage hours: Big-Brand — 24/7/365 helpdesk is standard at most big-brand MSPs. Real value if you have shifts or true after-hours emergencies.; Owner-Operated — Standard business hours plus exception-basis after-hours coverage. Real-world demand for after-hours service at SMB scale is lower than the marketing suggests, but it's real for some businesses.
- Scope flexibility: Big-Brand — Tightly scoped contracts. Out-of-scope work goes through change orders.; Owner-Operated — Loose scoping; out-of-scope work usually gets folded in informally. Less rigid, harder to predict cost for.
- Documentation: Big-Brand — Mature internal documentation systems with formal change control. Required by their service-delivery model at scale.; Owner-Operated — Variable by firm. Strong owner-operators document well because their business depends on it; weaker ones rely on memory and create continuity risk.
- Best-fit client: Big-Brand — Larger SMBs (75+ users), 24/7 operational needs, standardized stacks that benefit from process maturity.; Owner-Operated — Smaller SMBs (5-75 users), particular or unusual environments, businesses that value relationship continuity over bench depth.

### Shared Hosting vs Managed WordPress Hosting
Shared hosting is a commodity rental of server space; managed WordPress hosting is a complete operational service for keeping WordPress sites fast, secure, and updated. For any WordPress site running business operations, the managed model pays for itself the first time something goes wrong.

- Performance: Shared — Variable. You share CPU and memory with dozens of other sites; a neighbor's traffic spike can slow yours down. Cache is whatever you install.; Managed WP — WordPress-tuned caching at every layer (page cache, object cache, opcode cache), CDN integration, optimized PHP versions. Consistent fast performance.
- WordPress core / plugin updates: Shared — Manual. If you don't log in and click update, your site stays on whatever version it was installed at.; Managed WP — Automatic, with rollback if an update breaks something. Tested updates roll out within days of release.
- Security: Shared — Baseline server-level security. WordPress-specific attacks (brute-force login, plugin vulnerabilities, malware injection) are your problem to defend against.; Managed WP — WordPress-aware WAF, login rate-limiting, malware scanning, hardened file permissions. The most common attack patterns are blocked at the platform layer.
- Backups: Shared — Whatever the host offers (often weekly), with manual restore. Bring your own plugin if you want more.; Managed WP — Daily backups with one-click restore. Off-site retention by default. Tested as part of normal operations.
- Malware response: Shared — Reactive. If something gets compromised, you find a vendor to clean it up and pay for the time. Most shared hosts will restore a clean backup and bill for the rest.; Managed WP — Automated malware scanning included. Cleanup billed at standard engineering rate, but the detection happens before the malware causes real damage.
- Support quality: Shared — Generalist hosting support — they know servers, they don't always know WordPress. "Have you tried disabling all your plugins?" is a common opener.; Managed WP — WordPress-specialist support — they know the platform, the common plugin ecosystem, the typical failure modes.
- Resource limits: Shared — Strict caps on CPU, memory, processes — designed to prevent any one tenant from hurting others. Sites that grow beyond the cap get throttled or asked to upgrade.; Managed WP — Tuned for the workload. Higher headroom for traffic spikes. Resource limits exist but are calibrated to what WordPress actually needs.
- Email hosting: Shared — Usually included — but generic mail server, mediocre deliverability, frequent reputation issues.; Managed WP — Usually separate. Recommendation is to use Google Workspace or Microsoft 365 for email; the hosting is for the website.
- Price: Shared — $5-$20/month per account, often with multiple sites included.; Managed WP — $17-$60/month per site, depending on traffic and complexity. More expensive per site, much cheaper than break-fix recovery.
- Best-fit site: Shared — Hobby blog, personal portfolio, very low-traffic informational site where downtime is a minor inconvenience.; Managed WP — Any WordPress site running business operations — your company site, your e-commerce site, your lead-generation site. The site that, if down, costs you money.

## Locations

### Beacon, NY
Hudson Valley — within 35 min of our base.

### Cornwall-on-Hudson, NY
Hudson Valley — within 28 min of our base.

### Fishkill, NY
Hudson Valley — within 32 min of our base.

### Goshen, NY
Hudson Valley — within 28 min of our base.

### Marlboro, NY
Hudson Valley — within 18 min of our base.

### Middletown, NY
Hudson Valley — within 22 min of our base.

### Montgomery, NY
Hudson Valley — within 10 min of our base.

### New Windsor, NY
Hudson Valley — within 22 min of our base.

### Newburgh, NY
Hudson Valley — within 25 min of our base.

### Walden, NY
Hudson Valley — within 12 min of our base.

### Wallkill, NY
Hudson Valley — within 0 min of our base.

## Key pages

- [About](https://www.bytesunlimited.com/about/)
- [Services](https://www.bytesunlimited.com/services/)
- [Contact](https://www.bytesunlimited.com/contact/)
- [FAQ](https://www.bytesunlimited.com/faq/)