GreyCastle Security Auditor Profile

GreyCastle Security is a cybersecurity services firm headquartered in Troy, New York. Founded in 2011 by Reg Harnish and Michael Stamas, the firm built its practice around risk assessments, virtual CISO services, incident response, and security awareness programs. In December 2023, GreyCastle Security was acquired by DeepSeas, a managed detection and response provider, and now operates as part of the DeepSeas platform.

The firm's compliance work centers on risk assessments and advisory aligned to ISO 27001, HIPAA, and NIST CSF. GreyCastle does not issue certifications; it helps organizations identify gaps, prioritize remediation, and prepare for formal audits.

GreyCastle has historically served healthcare, higher education, financial services, and government organizations across the Northeast. With roughly 69 employees, it suits small and mid-sized organizations looking for practical, people-driven security risk management.