Key Takeaways
- NaaS separates two decisions: the financial model (CapEx versus OpEx) and the operational model (how much day-two work your team keeps versus sheds to a provider).
- Every NaaS offering bundles four layers - hardware/software, connectivity, operations/monitoring, and lifecycle/security - but scope varies widely between providers.
- Co-managed NaaS lets you shed operational burden while keeping control of policy and direction, unlike fully managed models that transfer both burden and control.
- The unit of consumption (per site, per port, per device) determines how your costs scale, making it more important than the headline price when evaluating proposals.
- Exit terms define your lock-in exposure since the provider owns the hardware - understand buyout options and migration paths before signing.
Why NaaS Is Easy to Misjudge
NaaS gets sold against two different pain points at once - financial and operational - and vendors emphasize whichever one a given buyer feels most. The result is that two organizations can hear the same NaaS pitch and form completely different mental models of what they would be buying.
Some assume it is just leasing with extra steps; others assume it means handing the network to a third party and losing control. Neither is accurate, and both lead to bad scoping.
What is included varies widely
What is included varies widely between providers, so two NaaS quotes can cover very different scopes. One might include connectivity and 24x7 operations; another might cover only hardware refresh with basic monitoring. Without understanding the layers, you cannot compare proposals meaningfully.
The control versus burden separation
Buyers fear losing control of their network, without realizing that control and operational burden can be separated. A well-structured NaaS arrangement can shift the day-to-day operational load while preserving your team's ability to set policy and architectural direction.
The Four Layers of a NaaS Offering
Every NaaS arrangement is a bundle of four layers. Knowing which layers a given offer includes is the only reliable way to compare quotes, because the term itself does not tell you the scope.
These layers can be mixed and matched. A provider might include hardware and operations but leave connectivity to you, or cover everything except lifecycle management. The key is understanding exactly what you are buying versus what remains your responsibility.
Layer 1: Hardware and Software
The switches, routers, access points, and licenses, provided as part of the service rather than purchased outright. The provider owns the lifecycle and the refresh, so equipment does not become a depreciating asset on your books.
This layer shifts the financial model from capital expenditure to operating expense, which can help cash flow and simplify budgeting. It also transfers technology refresh risk to the provider, who must fund and schedule equipment updates as part of the service.
Layer 2: Connectivity
Circuits and transport, sometimes included and sometimes left to you. This is the layer that varies most between providers, so confirm whether connectivity is in scope or a separate contract you still manage.
When connectivity is included, the provider typically handles carrier relationships, circuit provisioning, and transport-layer troubleshooting. When it is excluded, you maintain those relationships and the provider's responsibility begins at the handoff point.
Layer 3: Operations and Monitoring
Day-two work: monitoring, alerting, incident response, configuration changes, and ongoing tuning. This is where NaaS shifts operational load off your team, and where the depth of the service most affects the price.
The scope here ranges from basic monitoring with ticket-based support to full 24x7 operations with proactive management. Understanding exactly what operational tasks transfer to the provider versus what remains with your team is critical for setting expectations and avoiding gaps.
Layer 4: Lifecycle and Security
Patching, firmware, hardware refresh, and the security posture of the managed devices. A mature NaaS offering treats these as continuous, not as projects you have to schedule and fund separately.
This layer includes vulnerability management, compliance reporting, and the security configuration of network devices. The provider should maintain security baselines and handle patching cycles without requiring your team to track and approve every update.
How to Read a NaaS Proposal
Because scope varies so much, the useful skill is reading a proposal against a consistent set of questions rather than against another vendor's marketing. Every proposal should be evaluated on the same four dimensions, regardless of how the vendor positions their offering.
Identify which of the four layers are included
Go line by line. Does the price cover hardware only, or hardware plus operations? Is connectivity bundled or excluded? A cheaper quote often simply covers fewer layers.
Create a matrix with the four layers on one axis and each vendor proposal on the other. Mark what is included, what is optional, and what is explicitly excluded. This reveals the true scope differences that drive pricing variations.
Find the unit of consumption
NaaS is priced per something: per site, per port, per device, per user, or per bandwidth tier. Know the unit, because it determines how your cost scales as you grow or shrink.
Per-site pricing works well for branch networks with predictable locations. Per-port pricing fits environments where port density varies significantly. Per-user pricing aligns with business growth but requires accurate user counting. Understanding the unit helps you model costs under different growth scenarios.
Locate the control boundary
Establish who can make a policy change, how fast, and through what process. This is where you find out whether you are buying a managed service or a co-managed one.
In a co-managed model, your team retains the ability to set security policies, routing decisions, and access controls, while the provider handles implementation and monitoring. In a fully managed model, you set high-level requirements and the provider makes all configuration decisions within those parameters.
Check the exit terms
Since the provider owns the hardware, understand what happens at contract end. Can you buy the equipment out, migrate, or are you starting over? The exit defines how much lock-in you are accepting.
Some providers offer equipment buyout options at fair market value. Others require you to return all hardware and start fresh with new equipment. The exit terms significantly affect your negotiating position for renewals and your ability to change providers.
Operating Model Comparison
The choice between traditional buy-and-manage, co-managed NaaS, and fully managed NaaS is not just about economics - it is about how much operational control and responsibility your team wants to maintain.
Each model fits different organizational capabilities and priorities. The key is matching the model to your team's skills, your appetite for hands-on control, and your capacity for day-to-day network operations.
Traditional CapEx ownership
You purchase the hardware, capitalize it, and run everything in-house. Full ownership of the asset and full responsibility for operations. This model still makes sense when you have a mature, well-staffed network team, predictable growth, and a balance sheet that prefers owning assets.
The tradeoffs include large upfront capital outlay, refresh cycles you fund and schedule, and the full day-two operational burden on your team. Scaling to new sites is slower because each location requires capital approval and equipment procurement.
Co-managed Network as a Service
Consumption-based service where the provider handles operations, monitoring, lifecycle, and security, while your team keeps control of policy and architectural direction. This fits teams with networking skill but not enough headcount for 24x7 operations.
The model requires a clear control boundary so accountability does not blur during incidents. You pay a recurring fee and depend on the provider for execution velocity, but you maintain the ability to set security policies, routing decisions, and access controls.
Fully managed Network as a Service
The provider owns the entire network outcome, from design through day-two, delivered against an SLA. You consume it and set high-level requirements. This fits lean teams or organizations with little in-house networking expertise.
You have the least direct control over configuration and policy. Change velocity depends entirely on the provider, and you are buying an outcome rather than running an asset. Confirm you still get real visibility into network behavior, not just a ticket queue for requests.
When NaaS Fits Versus Buy-and-Manage
The decision between NaaS and traditional ownership depends on three factors: your team's operational capacity, your financial preferences, and your need for direct control. No single model is universally better - each fits different organizational contexts.
NaaS makes the most sense when operational burden is a constraint, when OpEx budgeting helps cash flow, or when you want to shift technology refresh risk to a provider. Traditional ownership still wins when you have the staff and capital, and when the network is stable enough that a consumption model adds cost without adding value.
NaaS fits when
Your team has networking expertise but lacks the headcount for 24x7 operations. When you want predictable OpEx instead of lumpy CapEx cycles. When scaling to new sites quickly matters more than minimizing long-term cost. When you prefer to transfer technology refresh risk to a provider rather than manage it internally.
Buy-and-manage fits when
You have a mature network team with capacity for day-to-day operations. When your balance sheet prefers owning assets and you have capital available for refresh cycles. When the network is stable and predictable enough that operational overhead is manageable. When total cost over a long ownership period matters more than cash flow optimization.
The Economics Breakdown
NaaS economics are not automatically better or worse than buy-and-manage - they are different. The financial case depends on your cost of capital, your operational efficiency, and the term length you are comparing.
NaaS avoids large upfront capital and bundles refresh and operations into a predictable fee, which helps cash flow and lean teams. Over a long ownership period, a well-run in-house network can cost less. The key is comparing total cost over the full term, not just the upfront number, and weighing the operational savings honestly.
Understanding Control Boundaries
The biggest fear about NaaS is losing control of the network, but control and operational burden are separate things. The key is understanding exactly where the control boundary sits in any given arrangement.
In a well-designed co-managed model, your team retains control of security policies, routing decisions, access controls, and architectural direction. The provider handles implementation, monitoring, incident response, and lifecycle management within the policies you set.
What you typically keep control of
Security policies and access controls. Routing and traffic engineering decisions. Integration with applications and business systems. Architectural direction and technology choices. Compliance and audit requirements.
What the provider typically handles
24x7 monitoring and alerting. Incident response and troubleshooting. Configuration implementation and changes. Firmware and security patching. Hardware lifecycle and refresh. Performance optimization and tuning.
Common Misconceptions
Several misconceptions about NaaS persist in the market, often because vendors emphasize different aspects depending on what they think will resonate with a particular buyer.
"NaaS is just equipment leasing"
Equipment leasing transfers the financial model but not the operational burden. NaaS includes operations, monitoring, and lifecycle management as part of the service. You are not just financing equipment differently - you are shifting operational responsibility.
"NaaS means losing control of your network"
Control and operational burden can be separated. A co-managed NaaS model lets you keep control of policy and direction while transferring the day-to-day operational work. You decide how much control to maintain based on your team's capabilities and preferences.
"NaaS is always more cost-effective"
NaaS optimizes for different things than buy-and-manage. It improves cash flow and reduces operational overhead, but over a long term a well-run in-house network can cost less. The value depends on your specific situation, not on the model itself.