Cost Estimates, Worked Examples and Best-Fit Checklists
Managed security renewals: price uplifts, endpoint and log growth, and USD exchange-rate buffers
Why managed security bills rise at renewal, how endpoint, log and USD effects add up, and how to budget an uplift and FX buffer.
A managed security bill usually rises at renewal for four reasons: the provider raises unit prices or repackages tiers, your counts grow (more users, endpoints, servers or sites), your log volume crosses a band, and the providers' own tool costs are passed on, often from US-dollar licences. If part of your bill is in US dollars, the Canadian-dollar cost also moves with the exchange rate and the foreign-exchange fee your bank or card adds. To budget, separate price, volume and currency effects, add a buffer for each, and negotiate a written renewal cap and CAD pricing before you sign.
This guide is part of how to choose a managed security provider. Percentages and prices are illustrative.
Where renewal increases come from in security services
| Source | How it shows up | What you can do |
|---|---|---|
| Unit price increase | New per-user or per-endpoint rate at renewal | Cap increases in the order form |
| Introductory discount ends | Year-one price was promotional | Ask for the year-two price in writing |
| Tier repackaging | A feature moves to a higher tier | Grandfather current features for the term |
| Endpoint and user growth | Added staff, devices, servers | Agree the unit price for additions; remove retired devices |
| Log volume growth | New sources, verbose logging | Volume alerts at 80% of band; quarterly review; see SIEM pricing |
| Tool licence pass-through | EDR, SIEM or email-security licences priced in USD | Ask for fixed CAD pricing or a cap on pass-through |
| New services | A pen test, IR retainer or vCISO time added | Budget separately |
Separating price, volume and currency
Illustrative example. A 50-person Regina insurance brokerage pays $36,000 a year for managed security: $30,000 for a per-user bundle (50 × $50 × 12) and $6,000 for an EDR licence billed in USD and converted.
| Effect | Assumption | Calculation | Increase |
|---|---|---|---|
| Price | 5% increase on the bundle | $30,000 × 5% | $1,500 |
| Volume | 6 new staff at the new rate ($52.50) | 6 × $52.50 × 12 | $3,780 |
| Currency | EDR licence, CAD 5% weaker | $6,000 × 5% | $300 |
| Total | $5,580 |
Budgeted renewal: $36,000 + $5,580 = $41,580, an increase of 15.5%, of which only $1,500 is a price increase. Explaining the three effects separately helps management see which ones the business controls.
Using the renewal and FX buffer calculator
The renewal uplift and FX buffer calculator uses a simpler structure: current cost × percentage + fixed extras.
- Current yearly cost, before tax: $36,000.
- Uplift plus FX buffer: for example 7% expected increase + 5% currency buffer = 12%.
- Fixed extras: known growth, for example 20 new endpoints at an illustrative $10 a month = $2,400.
Extra = $36,000 × 12% + $2,400 = $4,320 + $2,400 = $6,720. Budgeted renewal = $42,720 before tax. Note that the 12% here applies the currency buffer to the whole bill; if only part of the bill is in USD, the separated method above is more precise.
USD pricing: three layers
- The USD price, which the provider or its tool vendor may change.
- The exchange rate on the charge date. The Bank of Canada publishes indicative daily rates each business day; they show how far the rate has moved but are not the rate your bank or card will apply.
- The FX fee or spread your card issuer or bank adds, often a few percent; check your agreement.
Illustrative example. A tool licence of US$400 a month at 1.36 CAD per USD with a 2.5% card fee costs 400 × 1.36 × 1.025 = $557.60. At 1.43 it costs 400 × 1.43 × 1.025 = $586.30, $28.70 more a month or $344.40 a year with no change in the vendor's price. The rate can also move in your favour; a buffer is a planning allowance, not a forecast.
Sales tax is calculated on the Canadian-dollar value; see GST/HST and QST.
Negotiating before you sign
- Renewal cap: a maximum percentage increase at each renewal, for example tied to a published inflation index or a fixed percentage.
- CAD pricing for the whole contract, with the provider carrying the currency risk.
- Price for additions: the same unit price for added users or endpoints during the term.
- Reduction allowance: the right to reduce counts by a set percentage at renewal.
- Notice of changes: written notice of new prices at least 90 days before the non-renewal deadline.
- Multi-year price schedule: years one, two and three in the order form.
120-day renewal checklist
- Find the renewal date and the non-renewal notice deadline; put both in the calendar.
- Reconcile billed counts with your actual users and devices; remove retired devices.
- Review log volume trends and noisy sources.
- Review SLA performance from monthly reports; see SLA questions.
- Ask for the renewal quote in writing.
- Re-run the cost estimator and compare with the worked examples.
- Decide whether to renew, renegotiate or prepare an exit.
Frequently asked questions
What renewal increase should I budget?
There is no standard. Use the cap in your contract if there is one; otherwise ask the provider and budget a buffer you can live with.
Can I lock in prices for three years?
Often, in exchange for a longer term. Weigh the price certainty against the cost of being locked in if the service disappoints.
Is a currency buffer needed if the provider bills in CAD?
Usually not for the bill itself, but a provider facing higher USD costs may raise its CAD prices at renewal.
Does a renewal reset the onboarding fee?
It should not. Check that one-time fees are not repeated.
Sources
- Bank of Canada — indicative daily exchange rates
- Financial Consumer Agency of Canada — credit card fees and foreign-exchange charges
- Canada Revenue Agency — GST/HST on imported and domestic services
