The fractional security leader who speaks cloud.
Black Castle helps growing companies earn the trust of their customers with security programs that are practical, audit-ready and fit how their engineers work.
Security that helps you sell
Help growing companies earn the trust of their customers by building security programs that are practical, audit-ready and fit how their engineers work.
Our vision: become the trusted security partner for cloud-native companies in North America, known for technical depth and plain-language leadership.
Led by a practitioner, not an auditor
Most compliance consultants come from audit and policy work. Black Castle is led by an engineer who has built and secured the platforms your auditors will ask about.
William is a security engineer with over 20 years in IT, cloud and Kubernetes. He has built secure platforms for SaaS, AI and healthcare companies in Canada and the US, from least-privilege cloud access and policy as code to threat detection and audit evidence for SOC 2 and HIPAA.
You work directly with the founder, from the first call to the audit.
What you can expect
Plain language
Clear priorities and short reports. No jargon for its own sake.
Fit for your size
Controls sized for a team of 10 to 200, not a bank.
Clear packages
Fixed-price projects and simple monthly plans. No surprises.
Honest scope
We prepare you for audits. CPA firms perform them. We will tell you what you need and what you do not.
- SOC 2
- HIPAA
- ISO 27001
- NIST CSF
- PIPEDA
- Quebec Law 25
- AWS
- Google Cloud
- Kubernetes
- Terraform
- Vanta
- Drata
- Secureframe
Find out how far you are from audit-ready
A free 30-minute call. No sales pitch. You leave with your top three gaps.