The free branded scan
Start a security conversation with a scorecard under your brand. Your prospect gets a grade, a modeled exposure estimate, and three priorities to address.
For IT providers
Sell security. We deliver it.
Add a security practice behind your brand without building a new team. You own the client relationship and set the price. Castile handles security delivery.
That call is also where the 10 free branded scans start.
3.6xcybersecurity revenue growth for one partner, in twelve months.
42clients placed on Castile services since that partner started.
10/10would recommend, by that partner's own written review.
You have heard yourself say at least one of these
- "We can't keep a security person. They leave for a bigger shop within a year."
- "We own good tools and use about a fifth of what they do."
- "When security works, nothing happens, and I can't show the client what nothing cost."
- "Security proposals go quiet. The client hears 'you already do our IT, so aren't we covered?'"
- "Two of my clients just got CMMC language in a contract and I don't have an answer."
We help you turn those questions into a clear service offering and a practical next step.
We sit behind you, not in front of your client
Your brand
Castile delivery
Client outcome
| You | Castile | |
|---|---|---|
| Client relationship | You contract with the client and own the relationship | Never contacts your client directly; a client who calls us gets sent back to you |
| Pricing and invoicing | You set the client price and invoice them | Invoices you at a wholesale rate; no revenue split, no shared client list |
| Delivery | Your logo on every report; your technicians briefed to speak to it | Runs the assessments, monitoring, response, and compliance work |
| Tools | Keep what you already own | Runs your existing tools properly, or brings ours if you have none |
| Paperwork | Sign the partner agreement once | An engagement statement per client, a client access consent per end client; non-circumvention runs both ways |
Five ways we support your practice
The 3D DeepDive Assessment
Take the next step with a paid assessment of users, data, and devices. Get an executive report and a prioritized roadmap for your client.
Managed security
Deliver ongoing protection under your brand: 24/7 automated monitoring, a two-hour response to critical issues, email and device protection, backups, policies, and monthly reporting.
CMMC and compliance readiness
Help clients understand their scope, close gaps, and prepare evidence. Castile advises, an independent assessor handles certification, and you remain the IT provider.
Incident response
When a client faces an incident, call us for support. We work alongside your team so you can lead the client relationship.
Supporting a defense contractor? Your own systems and services may carry CMMC obligations. We help you identify what applies.
See what your prospect sees
This is a real branded scan result, under a sample partner's name instead of ours. Your logo and colors go where Vantage Technology Group's are here.
Open the live sample scorecard →Fictitious partner and prospect. No real client data appears anywhere in this sample.
Built so you can prove it
- A partner portal with your logo, colors, and booking link, where you run scans and route the leads to your salesperson.
- Reports your clients can read. Plain English first, technical detail behind it.
- Numbers with context. Explain what happened, the estimated exposure, and what changed this month, so renewal conversations have substance.
- Joint client reviews. Show clients what the security work is achieving, together with your team.
- Technician briefings so your team can speak to security on every account.
- A direct line to the people doing the work, and a shared ticket queue so nothing stalls between us.
One partner's first twelve months
| Cybersecurity revenue, twelve months in | Up 3.6x |
| Clients put on Castile services | 42 |
| Prospect meetings where Castile helped | "All" |
| Times Castile fell short and the partner had to handle it | Zero |
| Would recommend | 10 out of 10 |
An Idaho Falls IT provider, from their written partner review. See the full story.
What we put in writing
Delivery
If the scans included in your plan are not delivered in the stated turnaround, we add the same number to your next month at no charge.
Scope
On a CMMC engagement, if an assessor raises an in-scope requirement we did not assess, we assess it, document it, and advise on it at no charge.
Schedule
A missed milestone within our control earns your client a credit.
Findings
On a first CMMC snapshot, if we find nothing material your client did not already know, they do not pay for it.
We will never guarantee a certification outcome or a score. Anyone who does is guaranteeing something they do not control.
A small first cohort, on purpose
Founding partner access includes three monthly plans, sized by scan volume. Each includes white-label delivery, onboarding, and a clear path from scan to assessment to remediation.
Setup is included for founding partners in exchange for feedback after the first month.
Pricing is shared on the fit call, not on the page. It is simple, and it is monthly.
Questions
Will you ever go around us to our client?
No. It is in the agreement both ways, and it is also just how we work. If your client calls us, we call you.
Do we have to change tools?
No. We work with what you have and fill gaps only where there are gaps.
Who sets the price to my client?
You do. We give you a wholesale rate and a client-facing sheet with the price fields blank.
What if we only want the scan?
That is fine. Many partners start there. The rest is available when a client asks for it.
Do you work in Spanish?
Yes, and so do several of our partners’ clients.
How do we start?
A 30-minute fit call, then ten free branded scans on prospects you choose. If those open conversations, we talk about a plan. If they do not, you have lost thirty minutes.
Your clients are already asking. Have an answer.
That call is also where the 10 free branded scans start.