Thursday, October 22, 202672°F Knoxville
Mon–Fri 9–5 ETAnswered by a human
Managed IT · Knoxville, Tennessee

Managed ITfor Knoxville.With receipts.

Limehawk runs the technology behind East Tennessee businesses, and publishes a detailed report on every problem we solve. 90 and counting. Read exactly how we work before you ever pick up the phone.

90 published reportsHQ Knoxville, TennesseeAuthor Corey Watson, Managing Member
Advertisement, ours, permanently
Your IT problem could be our next report.

Fifteen minutes with Corey. No sales deck, no junior rep. Just the person who writes these reports, on your actual problem.

01Guides

Windows 10 Extended Security Updates: What Businesses Get, and When to Stop Paying

Windows 10 support ended Oct 14, 2025. Business ESU buys up to three years of security-only patches, one year at a time, and Year 1 ends Oct 13, 2026.Corey WatsonUpdated Oct 20267 min
02Guides

What Is MDM? Mobile Device Management for Regulated Small Firms

MDM is software that enrolls your laptops and phones so IT can push settings, require encryption, control apps, and lock or wipe a lost device remotely.Corey WatsonUpdated Oct 20267 min
03Guides

What Is FCI? Federal Contract Information for Small DoD Suppliers

FCI is non-public information provided by or generated for the government under a contract. If your systems hold it, FAR 52.204-21 and CMMC Level 1 apply.Corey WatsonUpdated Oct 20266 min
04Guides

What Is DMARC? SPF, DKIM, and DMARC Explained for Small Firms

DMARC is a DNS record that tells receiving mail servers what to do with mail that fails SPF and DKIM checks for your domain, and sends you reports on it.Corey WatsonUpdated Oct 20266 min
05Guides

What Is CUI? Controlled Unclassified Information for Machine Shops

CUI is government information that a law or policy says must be protected, like DoD drawings marked CUI//SP-CTI. Holding it puts you under NIST 800-171.Corey WatsonUpdated Oct 20267 min
06Guides

What Is CMMC? The DoD Cybersecurity Rule, Explained for Small Shops

CMMC is the DoD's program for proving contractors protect FCI and CUI. Three levels, phased in from November 10, 2025, and paused in Phase 1 since July 2026.Corey WatsonUpdated Oct 20267 min
07Guides

What Is a Managed Service Provider? What an MSP Actually Does

A managed service provider (MSP) runs your IT for a flat monthly fee: monitoring, patching, security, help desk. It's paid to prevent problems, not fix them.Corey WatsonUpdated Oct 20266 min
08Guides

System Security Plan Template: What a CMMC Level 2 SSP Has to Say

An SSP describes your CUI system's boundary, environment, how each NIST 800-171 requirement is met, and its connections. CMMC Level 2 needs one.Corey WatsonUpdated Oct 20266 min
09Guides

SPRS Score: How the DoD Scores Your NIST 800-171 Work, and How to Calculate Yours

Your SPRS score starts at 110 and loses 1, 3, or 5 points for each NIST SP 800-171 requirement you haven't met. It can go as low as -203.Corey WatsonUpdated Oct 20267 min
10Guides

SocGholish Fake Browser Update: What to Do If Someone Clicked It

SocGholish shows a fake browser update on a real, hacked website. If someone ran the file, unplug that PC and call IT. It's an entry point for ransomware.Corey WatsonUpdated Oct 20267 min
Corey Watson
The author

Every report is signed.

Corey Watson runs Limehawk and writes every report on this site under his own name. If we cut a corner, it’s in print where any client can read it.

Corey Watson · Managing Member, Limehawk · Knoxville, TN

Built in Knoxville. Serving East Tennessee.

We answer the phone from here, drive to your office from here, and put our name on the work, because around here, reputation is the whole business.

Straight answers

Questions we actually get

Straight answers about fit, scope, and how we work.

Book a call →

What does managed IT from Limehawk cost?

Base managed IT is month-to-month with a 3-user minimum: unlimited user support plus the core security suite (endpoint detection and response, email filtering, and password management). Add-ons like managed firewalls, hosted phones, and server management are scoped on a call.

Why do you publish your incident reports?

Because every IT company says they're proactive and responsive, and none of them show their work. Each report documents a real problem, what we did, and what it cost the client in downtime. You can read exactly how we operate before you ever talk to us.

Who actually does the work?

Limehawk is a Knoxville managed service provider led by Corey Watson, who writes every report on this site. When you call, you reach the team that does the work, not an offshore call center and not a sales rep.

What areas do you serve?

We're headquartered in Knoxville and serve businesses across East Tennessee. Most of our work (monitoring, patching, security response, Microsoft 365 administration) is delivered remotely, with on-site visits when the problem calls for it.

What kinds of businesses do you work with?

Small and mid-sized businesses that depend on their technology: title companies, law firms, accounting firms, medical practices, insurance agencies, and manufacturers. If a computer problem costs you billable hours or a closing, we're built for you.

How do we get started?

Book a call. You'll talk to Corey. Fifteen minutes, no sales deck. If we're a fit, onboarding typically means deploying our management agent, a security baseline pass, and documenting your environment in the first two weeks.

One CTA, no popups

Talk to the person who writes the reports.

Fifteen minutes. Bring your worst IT problem. If we’ve solved it before, we’ll send you the report.