Light-RMM · Light-EDR

Quiet endpoint control for modern MSPs.

Cloud Castle is an AI-first remote management platform with optional Light-EDR. Remediations run as background maintenance. The operator console is private — only authenticated technicians can manage devices.

Built for MSP operators

Fleet visibility, silent playbooks, remote access, and Light-Defender protection — behind a locked console.

  • Session auth + CSRF on every admin API
  • Invite-only team access (no open signup)
  • Device JWT for agents — no anonymous control
  • Optional Light-EDR install from the console

What you get

Everything an MSP needs to monitor, remediate, and protect endpoints — without exposing controls to the public internet.

RM

Light-RMM

Assets, tickets, monitoring, scripts, schedules, software, and unattended remote — multi-tenant MSP workspace.

AI

Silent AI technician

Autonomous Class A/B fixes with evidence journals. End users never see AI branding or bot chat.

ED

Light-EDR

Optional Light-Defender on endpoints. Deploy from Protection view, track posture, and review detections.

Security by default

The marketing site is public. Device control is not. Production runs with required authentication and invite-only operators.

AUTH_MODE=required Human APIs reject unauthenticated calls with 401.
Hidden console chrome Admin UI shows login only until a valid session exists.
Seed admin + invites No open registration once the first operator exists.
TLS + hardened headers HTTPS via Caddy, HSTS, frame deny, nosniff.