Live · enterprise-class · DMV coverage

The network behind the mission.

Infrastructure for mission-driven organizations and small businesses that need their technology foundation to simply work. We install and manage enterprise networking, cybersecurity basics, device fleets, and productivity-suite administration — and the same team that runs your network rolls out Rooted OS on top. One partner. One bill. One person who picks up the phone.

· What "managed" actually means at ORT ·

A strategic technology partner — not a vendor.

Most MSPs hand you a contract and a ticket portal. Olive Root Tech delivers six things — implementation through innovation — so adopting technology stops feeling like a project you survive and starts feeling like a partnership you grow with.

🛠
Implementation
We set the whole stack up with you — onsite if you're in the DMV, remote if you're further. No DIY landing pad.
🎨
Customization
We adapt the network, devices, and Rooted OS to your vocabulary, your processes, and your brand — not the other way around.
Automation buildout
We build the workflows that automate your busywork · backups, monitoring alerts, patch cycles, and the operational flows your team actually runs.
🎓
Training
Your team learns at their own pace — short video walkthroughs plus live sessions for the bigger moments. We meet people where they are.
🤝
Support
Direct line to ORT. Not a ticket queue you wait in — a partnership. When you call, we already know your network, your team, and your priorities.
🚀
Continuous innovation
We ship improvements monthly. Your network, your security posture, and your platform get better while you sleep — without renegotiating a contract.

And the network we build is the foundation Rooted OS runs on. Same team installs your switches, your firewall, your devices — and rolls out the operational platform your team uses every day. See Rooted OS →

· Reference topology · single-site deployment ·
What we install at a typical childcare center, church, or community office
STAFF NETWORK GUEST WI-FI CAMERAS DEVICES & CONTROLS INTERNET Gateway / Firewall CENTRAL CONTROL PLANE routing · VPN · intrusion detection Network Switch SMART NETWORK DISTRIBUTION Access point staff coverage Staff devices remote device management-enrolled Guest Wi-Fi isolated · captive Parents / visitors throttled · logged Cameras indoor / outdoor On-prem on-site video recorder 30-day default Printer no internet IoT devices mgmt-net only Secure remote management Olive Root Tech office
Staff network Guests & parents Security cameras Devices & controls
· Philosophy ·

One vendor.
One controller.
One place that fixes it.

We standardized on one enterprise-class network vendor because the alternative — a consumer router from a big-box store, a no-name switch from an online marketplace, a cloud-dependent camera from a hardware brand, and an unmanaged printer — all running on the same flat network — is the actual reason most community institutions get hacked, lose data, or wait three weeks for "the IT guy" to call back. We share the specific vendor under NDA on the founding call.

01

One screen that shows everything.

Network, Wi-Fi, cameras, access control, and VPN all live in the central management screen we manage from our operations office. No logging into four different websites every time something breaks.

02

Hardware you actually own.

No leased equipment, no proprietary cloud lock-in tax, no monthly licensing per AP. You own the boxes; we manage them. If you ever leave us, your network keeps running.

03

Big-company-grade separation, small-shop simplicity.

Staff, guests, cameras, and building devices each get their own separate network by default. If a parents laptop on guest Wi-Fi gets infected, it cannot reach your CACFP records on the staff network.

04

Remote-first, onsite when it matters.

A secure remote connection lets us fix problems, push changes, and rebuild Wi-Fi units from our office. We come to you for installs, hardware replacements, and training — not to reboot a router.

What we actually install at your site.

In plain English · so you know what you're paying for
Internet gateway & firewallWhere the internet enters your building
One business-grade gateway box sized to your site
The first box your internet connection meets. It blocks bad traffic before it reaches your computers, gives us a secure way to help you remotely, and is the single "brain" of your network. We pick a smaller one for a single site, a larger one for multi-site organizations.
Wired connectionsSwitches that share power + data over one cable
Smart network switches port count matched to your devices
Every wired device — desktop, printer, security camera, IP phone, Wi-Fi unit — plugs in here. A single network cable can carry both data and electricity, so there are no clunky wall-adapters under desks or in ceilings. We label every port and document what's connected where.
Wi-Fi coverageMeasured for your actual building
Business-grade Wi-Fi units current generation
Before we quote you, we walk your building and measure signal strength in every classroom, office, and sanctuary. Classrooms typically get in-wall units (no drilling into ceiling tiles). Outdoor spots get weatherproof hardware. The goal: no dead zones, no "wait, can you hear me now?"
Security camerasRecordings stay on-site, not in the cloud
Indoor, outdoor, & entry cameras mixed for the spaces you need watched
Cameras for inside, outside, and the front door. Video recordings stay on a recorder at your site — not in someone else's cloud where you can't reach it. By default, the last 30 days of footage are kept; we can keep more if your insurance or licensing requires it. No monthly per-camera cloud subscription.
Email, calendar & staff devicesAccounts, MacBooks, iPads, PCs — all managed
Email + calendar + shared files set up for every staff member
Remote device management for Macs, iPads, and PCs
Every staff person gets a work email account, a shared calendar, and shared file space. Their work device (laptop, iPad, phone) is set up so we can manage it from our office — including erasing it if it ever gets lost or stolen. Directors and admins log in with two-step sign-in. When a staff member leaves, their access is shut off the same day.
Backups & disaster recoveryThree copies · two storage types · one offsite
Daily backups of everything important tested every quarter
Three copies of every record you can't afford to lose — emails, files, camera footage, staff records. Stored on two different types of storage. One copy is always offsite (different building). Every quarter we test actually restoring from a backup, because backups that have never been restored aren't really backups.

· Specific brand names, models, & network design shared on the founding call (we keep them off the public site so competitors can't blueprint our setup) ·

· What we do for you each month ·

Four things, every month.
One flat bill.

Pricing is per-organization, quoted after a free remote check of your current setup. There are no confusing tiers to pick from — we scope the right amount of work for your site and that's what you pay for, monthly, flat.

▸ 01 · WE BUILD IT

Install & set up your network

  • Walk your building and map every space
  • Order the right equipment for your site
  • Install everything cleanly & label what's where
  • Separate staff, guest, & camera networks
  • Train your team on day one
▸ 02 · WE WATCH IT

Keep an eye on things 24/7

  • Alerted the moment your internet goes down
  • Detect & block suspicious activity
  • Keep every device updated against new threats
  • Verify every camera is recording correctly
  • Confirm backups completed each night
▸ 03 · WE MANAGE IT

People, devices, & help when you need it

  • Email & calendar administration
  • Set up new staff devices & close out departing staff
  • Same-day shutoff when someone leaves
  • A real person answers when staff have a question
  • We come to you monthly — or sooner if needed
▸ 04 · WE EXTEND IT

Compliance & custom work when you need more

  • Help align your operations with FERPA / HIPAA
  • Find & fix security gaps before an auditor does
  • Connect your Rooted OS data into your network
  • Plan for what to do if something major fails
  • Add new locations without starting over
· Walk the management dashboard ·

What it looks like
when we run the foundation.

Eight tabs · one real Ward 7 deployment · click through and see the infrastructure beneath the operation.

rootedos.com/managed-it · dashboard
Live · founding deployment
Site assessment Walking room-by-room · what we found at the founding center
Assessment complete
Front office · Wi-Fi signal: weak
Consumer router under desk, 6 years old, default admin password. Signal drops in classrooms. Recommend: replacement with business-grade unit.
Replace
Network closet
Unmanaged switch in storage closet with extension cord. Cables unlabeled. Recommend: rack-mounted managed switch, proper labeling.
Replace
Front door + parking lot
No camera coverage at entry. Insurance requires entry + parking lot cameras. Recommend: 2 outdoor + 1 entry camera.
Add
Backups
No backups of anything. Director's documents live on one MacBook only. Recommend: automatic daily backups, restore drills.
Critical
Staff email + passwords
Director uses personal Gmail for business. Staff share one login for the parent platform. Recommend: business email per staff, two-step sign-in for admins.
Improve
Network installed Live status of every box we put in
All healthy
▸ Gateway
Internet gateway & firewall
Rack-mounted · locked closet
Uptime 99.97% · Last threat blocked: 12 min ago
▸ Switch
Main network switch
24-port · 18 active
All ports labeled · power: normal
▸ Wi-Fi · Office
Front office access point
In-wall · 18 connected devices
Signal strength: excellent
▸ Wi-Fi · Classrooms
Classroom access points (3)
Ceiling-mount · 6 devices each
All 3 reporting healthy
▸ Wi-Fi · Outdoor
Playground access point
Weatherproof · 0 devices
Firmware update queued (Sat 2 AM)
▸ Cameras
Indoor + entry cameras (4)
All recording · 30-day retention
Footage storage: 41% used
▸ Cameras · Outdoor
Parking lot cameras (2)
Night-vision enabled
Motion alerts overnight: 2 · all benign
▸ Recorder
On-site video recorder
2 TB · 40% used
All cameras recording · no gaps
Guest Wi-Fi Separate from staff & cameras · throttled · logged
Active
7
Connected now
42
Today total
12Mbps
Per-user cap
0
Threats blocked
Connected device
Joined
Bytes
Status
iPhone (parent · Amari J. family)
12:14 PM
34 MB
on
Android (visitor)
11:42 AM
18 MB
on
iPad (state inspector)
10:05 AM
122 MB
on
Laptop (delivery driver)
9:32 AM
4 MB
left

Guest devices cannot reach the staff network, the camera system, or any business records. They get internet — that's it.

Staff devices Office-managed · two-step sign-in · same-day shut-off when staff leave
8 devices · all healthy
Device
Assigned to
Last seen
Status
MacBook Air · Director
Mrs. T.
Today 5:22 PM · on-site
healthy
iPad · Lead teacher
Ms. Tanya
Today 5:30 PM · on-site
healthy
iPad · Lead teacher
Ms. Renee
Today 5:28 PM · on-site
healthy
iPad · Front kiosk
Front door
Today 5:31 PM · in use
healthy
iPad · Kitchen kiosk
Mr. James
Today 3:14 PM · idle
update queued
iPhone · Director (work)
Mrs. T.
Today 5:48 PM · on-site
healthy

If any device leaves the site or is lost, we can erase it remotely. Same-day shut-off is the standard for departing staff.

Backups Three copies · two storage types · one offsite · tested every quarter
Last run · today 2:14 AM ✓
Today
Mon
Sun
Sat
Fri
Thu
Wed
Tue
Mon
Sun
!
Sat
Fri
Thu
Wed
14/14
This week
93days
Since last restore drill
3
Locations
847GB
Protected data
Note · Sat May 18 backup failed. Auto-retried Sunday morning successfully. Root cause: short power outage during run window. We adjusted the schedule to avoid the building's HVAC startup spike.
Security posture What's protecting your data right now
All controls active

Two-step sign-in

on

Required for Director, Admin, & all kiosk admin accounts. 5 staff accounts protected.

Threat blocking

on

Suspicious traffic blocked at the gateway. Last 24 hr: 142 attempts blocked. None reached staff network.

Patches up to date

98%

One iPad firmware update queued for Saturday 2 AM (auto). All other devices current.

Separate networks

on

Staff · Guest · Cameras · Devices each on isolated networks. No cross-talk.

Per-person access

on

Each staff has their own login, scoped to their role. No shared passwords.

Activity log

on

Every sign-in, every record change is logged. Inspector-exportable.

Support & tickets What we've handled this month
3 open · 18 closed
#247
Office Wi-Fi dropped for 4 minutes during morning drop-off
Auto-detected · investigation: short ISP hiccup · staff didn't notice · resolved 9:18 AM
Resolved
#246
Outdoor camera flagged firmware update available
Auto-scheduled for Saturday 2 AM maintenance window · no action needed from staff
Scheduled
#245
New staff request: set up Ms. Renee's email + iPad
Created · email account live · iPad shipped & enrolled · estimated 2 hr remaining
In progress
#244
Kitchen kiosk iPad showing "storage full" warning
Cleared cache · added auto-cleanup rule · closed
Closed
#243
Parent asked about guest Wi-Fi password
QR code printed and posted by front entrance
Closed
Monthly health report May 2026 · auto-generated · we send this to you
Ready

Uptime

99.97%
Network up 30 of 30 days. 2 brief ISP hiccups handled automatically.

Threats blocked

3,847
All blocked at the gateway. None reached staff devices.

Tickets closed

18
Avg time-to-close: 2.4 business hours. 0 escalated to emergency.

Patches deployed

12
All staff devices updated. No downtime during business hours.

Daily uptime · last 30 days

One brief outage on May 18 (Saturday, 2:08 AM) — short ISP interruption during scheduled backup run, no impact on operations.

You get this report in your inbox every month · no surprises

· Real data shape · illustrative numbers · request a free remote check of your current setup ·

· Coverage area ·

Primary DMV.
Remote support beyond.

Primary in-person service area: DC, Maryland, and Northern Virginia. We come to you for installs, hardware swaps, and training across the Washington–Baltimore corridor.

For organizations outside the DMV, remote support, monitoring, and digital systems may be available depending on project scope — ask on the founding call.

OnsiteWashington DC · Northern VA · Prince George's & Montgomery MD · Baltimore
RemoteAll US time zones · secure management tunnel to your stack
ResponseSame-day remote, M–F 9–6 ET · 4-hr emergency outside hours
Onsite SLAScheduled monthly · same-week for emergencies inside coverage
Washington DC Baltimore Northern VA Prince George's Montgomery ~ 50 MI ONSITE RADIUS
· Common questions ·

Before you book.

If the answer to your question isn't here, ask it on the founding call — we'll add it.

Do I have to use Rooted OS to hire you for managed IT?
No. Managed IT is a standalone service line. Many of our IT clients don't run Rooted OS at all — they just need real networking and someone to call. Our software clients get a discount when they bundle.
What if I already own different network gear?
We'll audit it. If it's recent enterprise-class hardware from a major vendor, we can sometimes manage it as-is. If it's consumer-grade or end-of-life, we'll quote a phased migration so you're not eating a $15K hardware bill in one month.
Do you do 24/7 network monitoring?
No — and we'll tell you up front. We're office-hours (9–6 ET, M–F) plus a 4-hour emergency response window outside that. If you need true 24/7 security and monitoring, we'll refer you to a larger MSP partner. We'd rather under-promise than fake it.
Are you FERPA / HIPAA / CACFP compliant?
Our stack is designed to support FERPA and HIPAA workflows (separated networks for staff/guests/cameras, two-step sign-in, full activity log, encrypted backups). We don't claim "fully compliant" because compliance is a posture of the whole organization, not a checkbox on a vendor. We help you build the posture.
What does setup actually cost?
Hardware + install runs $1,500–$8,000 depending on site size and existing cabling. Monthly management runs $200–$800 depending on device count and support tier. We quote both after a free remote check — no surprise bills.
What if I want to leave?
You own all the hardware. We hand off the central management screen credentials, all configs, and a network documentation packet. 30-day notice, no exit fees, no held-hostage data. The whole point is you're not locked in.
Can you work with my existing IT person?
Often yes — we can be the network and infrastructure specialists while they handle apps, helpdesk, or program-specific tools. We'll define the boundary clearly in writing so nothing falls between the cracks.
· Step one · Free network audit ·

Find out what's
actually under your desk.

A 30-minute call, a remote scan of your current network, and a written audit you keep — whether you hire us or not. Most orgs find at least one thing they didn't know was a problem.

Book a Founding Call →