Castle-KnightLLC
Defense & Assessments
The Knight
Finds the gaps in your walls before attackers do, then helps you close them.
- Risk assessments
- Security programs
- CMMC readiness
Cybersecurity for Massachusetts small businesses, nonprofits & towns
Big Security.
Big Security.
Small Business Pricing.
We find your weak spots, fix what matters first, and teach your team to keep the castle safe. Plain English. Fixed prices. No vendor kickbacks.
- No signup to use the scorecard
- Nothing leaves your browser
- CISM · CRISC · GISP led
Sample result
62/100
Top fix: turn on MFA for email
30+years in security
4-phaseCIS Controls method
$0vendor commissions, ever
100%documented hand-off
Meet the Guard
Every castle needs defenders
Our team has three jobs. Each one has a guardian. You'll see them all over this site, pointing you to the help you need.
Data & Compliance
The Queen
Guards the crown jewels: your data, your backups, and the rules you must follow.
- Backup & recovery plans
- Policies & compliance
- Incident response plans
Network Health & Your Guide
Pip the Squire
Keeps your network healthy week after week, and walks you through the free scorecard.
- Solo Shield for one-person businesses
- Ongoing watch (retainer)
- MFA, cloud setup & safe AI
What we
stop
Ransomware BugLocks your files and asks for money
Phishing PhantomFake emails that steal passwords
The GlitchBad settings and missed updates
Services
Assess. Build. Watch.
Start anywhere. Most clients begin with an assessment, fix the top risks, then keep us on watch. Every job ends with runbooks your team can use without us. Running solo? Solo Shield is built for you.
01
Assess
Know where you stand.
Security Snapshot
A fast check of the 18 CIS Controls basics, with a one-page "fix this first" plan.
Knightfrom $1,450CIS Controls Assessment & Roadmap
A full review of your people, systems and vendors. You get a risk-ranked, phased roadmap with costs.
Knightfrom $4,350CMMC 2.0 Readiness
For defense suppliers. We map your gaps to CMMC Level 1 or 2 and help you build a plan to close them.
Queenfrom $5,80002
Build
Fix what matters, in the right order.
Security Program Build-Out
We put the controls in place: MFA, backups, updates, safe Wi-Fi, and the policies that hold it together.
Knightfrom $14,500Incident Response Plan
Who to call, what to unplug, what to tell customers. A clear plan for your worst day, written before it comes.
Queenfrom $2,900Tabletop Exercise
A guided "what if" drill for your leaders. We play out a real attack and find the weak links together.
Queenfrom $1,75003
Watch
Stay strong over time.
Solo Shield
Just you? We look after your tech security for you: your laptop, phone, email, and backups. One flat monthly fee, and a real person to call.
Pip$149/moWatchtower Retainer
Monthly check-ins, policy updates, and advice when you need it. We advise and guide. We are not a help desk.
Pipfrom $725/moSafe AI Automation
Use AI to save hours each week without leaking client data. We set it up safely and train your team.
Pipfrom $1,450Talks & Staff Training
Friendly, plain-English sessions for staff, boards, and community groups. Scam spotting, safe habits, and real stories.
Pipfrom $350
How we work
Four phases. No surprises.
Built on the CIS Controls. Each phase stands on its own, so you can move at the pace your budget allows.
Assess & discover
We learn your business, map your systems, and rank your risks.
Quick wins
We close the easiest, biggest gaps first, like MFA, backups, and updates.
Stronger controls
We add deeper protection, matched to your risk and your rules.
Train & hand off
You get runbooks and training, so your team can run it on its own.
Fixed block feesPay by milestone (25% each)Software & hardware at our cost, no markupNo vendor commissionsYou own every document
Free tool
The Castle Scorecard
For a business of one or a team of many. 20 plain-English questions, about 5 minutes. You get a score, a heat map, and a Now / 30-day / 90-day plan. No email needed, and your answers never leave this page.
Pricing
Clear prices. Fixed fees.
Every quote is a fixed block fee, so you know the cost before we start. Running solo? Start with Solo Shield. Have a team? Most teams begin with a Snapshot or Fortify.
Just you? Start here
Solo Shield
No staff to train? No IT person? No problem. We become your security team. We set up your devices and accounts safely, then keep an eye on them every month.
- Setup and lock-down of up to 3 devices plus your email and cloud accounts
- MFA, a password manager, automatic updates, and backups that we test
- Monthly remote health check and a short plain-English report
- Up to 1 hour a month of remote help with tech and security questions
- Priority help if you get hacked, scammed, or locked out
Snapshot
For small teams who want to know where they stand.
$1,450 starting
- CIS Controls basics review
- Interview with your team (remote)
- One-page "fix first" plan
- 30-min results walkthrough
Most popular
Fortify
Full assessment and a roadmap your board can fund.
$4,350 starting
- Everything in Snapshot
- Full CIS Controls assessment
- Risk-ranked, phased roadmap with costs
- Board-ready summary
- 60 days of follow-up questions
Watchtower
Ongoing guidance after your first project.
$725 /month starting
- Monthly security check-in
- Policy and plan updates
- Advice on new tools and vendors
- Priority response for questions
| Other services | Starting at |
|---|---|
| Security Program Build-Out (all 4 phases) | $14,500 |
| CMMC 2.0 Readiness | $5,800 |
| Incident Response Plan | $2,900 |
| Tabletop Exercise | $1,750 |
| Safe AI Automation setup | $1,450 |
| Talks & staff training (per session) | $350 |
Final price depends on size and scope. Software, licenses, and hardware you buy through us are billed at exactly what we pay, with no markup. Our setup and configuration work is part of the quoted fee. On-site work outside western Massachusetts adds travel at cost. Nonprofit and municipal clients: ask about grant-friendly phasing.
About us
Enterprise know-how, built for Main Street
Castle-Knight LLC is a cybersecurity advisory firm in western Massachusetts. We help small businesses, nonprofits, and towns get the kind of protection big companies have, at a price that fits.
Our founder, Gene Kingsley, has spent 30+ years in security. He built and ran a multi-campus Security Operations Center for the University of Massachusetts, and his work there earned a Massachusetts Governor's Citation. Today he leads a small team of vetted specialists, so the right expert works on your job.
CISMCRISCGISPGCFEITIL 4
- We teach as we go. Our goal is a client who doesn't need us.
- We don't take referral fees from vendors. Our advice is ours.
- We speak plain English to owners, boards, and staff.
FAQ
Good questions
We're small. Are we really a target?
Yes. Most attacks are automated and hit whoever is easiest. Small groups are often easier because they have fewer defenses. The good news: a few basic steps stop most attacks.
Is the scorecard really private?
Yes. It runs only in your browser. We don't save, send, or track your answers. If you close the page, they're gone. Print or save the results as a PDF to keep them.
It's just me. Is the scorecard for me?
Yes. Pick "Just me" at the start and the questions change to fit a one-person business. You're the owner, the IT person, and everyone in between, so the plan is written for you.
Is the scorecard an audit?
No. It's a self-check to point you in the right direction. A real assessment looks at evidence and settings, not just answers.
Are you an IT help desk?
For most clients, no. We plan, build, and advise on security, and we work well alongside your IT person or provider. If you're a one-person business with no IT help at all, our Solo Shield plan covers you: we look after your devices and accounts each month and give you a person to call.
Do you mark up software or hardware?
No. If you buy software, licenses, or equipment through us, you pay exactly what we pay. We earn our fee from our work (planning, setup, configuration, and support), which is always included in the price we quote. We also never take referral fees from vendors.
Why fixed fees instead of hourly?
You should know the cost before we start. We scope the work up front, quote one price per phase, and bill by milestone.
Do you work outside Massachusetts?
Most of our work is remote, so yes. On-site work is focused on western Massachusetts and greater Boston.
Contact
Let's guard your castle
Tell us a little about your group. We'll reply within one business day to set up a free 30-minute call. No pressure and no sales pitch.
- [email protected]
- 413-200-9869
- West Springfield, Massachusetts