TorchLight

What TorchLight does

TorchLight is a privately-held managed IT and cybersecurity services provider headquartered in Liberty Lake (Spokane metro), Washington, operating since approximately 2006–2007. The company delivers outsourced IT, 24/7/365 managed security, and compliance advisory as a single integrated engagement, primarily to regulated industries including credit unions, community banks, RIAs and family offices, healthcare organizations, manufacturing firms, government entities, and compliance-sensitive small and mid-sized businesses.

The core technology stack, branded as the Vigilance managed security services program, combines a 24/7 Security Operations Center with endpoint detection and response (EDR), identity threat detection and response (ITDR), security information and event management (SIEM), vulnerability management, and DMARC email authentication monitoring. These are delivered alongside the Stability managed IT services line and the Zero-Cost IT Model™, a trademarked five-stage maturity framework (Stability Foundation → Security Layer → Compliance Accelerator → Proof Point → Competitive Peak) that converts security and compliance improvements into measurable cost offsets, including a claimed 30–35% reduction in cyber insurance premiums.

The business model is multi-stream: recurring managed IT and managed security subscriptions priced per user per month, subscription vCISO/vCIO advisory ranging from roughly $2,000 to $15,000+ per month, project-based penetration testing engagements from about $3,000 to $100,000+, and ancillary cyber warranty and Microsoft 365/Azure support. GTM is sales-led, with direct enterprise and inside-sales motions targeting regulated buyers, augmented by cooperative purchasing approvals (FoundationCCC and Washington Learning Source) that bypass bid processes for public-sector and educational buyers.

Name

TorchLight

Legal name

TorchLight

Website

https://torchlight.io

Company type

Private

Founded year

2006

Operating status

Operating

Headcount range

11–50 employees

Short description

TorchLight is a privately-held managed IT and cybersecurity services provider in Liberty Lake, Washington, delivering integrated 24/7 SOC monitoring, managed IT, vCISO advisory, and penetration testing to regulated industries including credit unions, banks, healthcare, and government.

Ownership category

akta.pro rank

Product category

Managed IT and Cybersecurity Services

NAICS

Computer Systems Design and Related Services (54151)

SIC

Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Security Operations Center (SOC) as a Service (BPAEADAB)

Keywords

• Managed IT services
• Managed security services
• Cybersecurity consulting
• Regulatory compliance support
• Penetration testing

Headquarters

HQ city

Spokane

HQ country

United States

HQ region

North America

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Managed IT Services: Managed IT services bundling security, compliance, and strategic advisory into every engagement. Includes 24/7 monitoring, helpdesk support, network management, and cloud support for Microsoft 365 and Azure environments.
2. Managed Security Services: 24/7 SOC monitoring, EDR, ITDR, SIEM, vulnerability management, and DMARC monitoring delivered as comprehensive managed cybersecurity services stack for regulated environments. Includes Vigilance branded security operations services.
3. Professional Consulting & Advisory: vCISO and vCIO services providing strategic cybersecurity leadership, risk management, compliance support, and security program development on flexible engagement models. Also includes audits, assessments, and compliance services.
4. Penetration Testing: Independent validation of security controls through external and internal network penetration testing, web application testing, social engineering tests, and compliance-scoped tests for HIPAA, NCUA, and other regulatory requirements.
5. Cloud & Microsoft 365/Azure Support: Managed services for cloud infrastructure including Microsoft 365 and Azure environment management, security hardening, and identity protection.
6. Cyber Warranty / Risk Transfer: Cyber insurance alignment services and risk transfer solutions that help organizations demonstrate controls to carriers, improve insurance outcomes, and reduce premiums through documented evidence packages.
7. Co-Managed IT Services: Partnership model allowing internal IT teams to retain certain functions while TorchLight provides specialized capabilities including 24/7 SOC coverage, SIEM management, compliance reporting, and penetration testing.
8. AI & Workflow Automation: AI workflow automation services and AI governance solutions for organizations adopting AI technologies and needing governance frameworks for accountability and compliance.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels4 records

Core offering

TorchLight is a managed IT and cybersecurity services provider that delivers outsourced IT services, IT support, and compliance-driven solutions in one unified system. Its core offerings are Vigilance (Managed Security Services) with 24/7 SOC monitoring, EDR, ITDR, SIEM, vulnerability management, and DMARC monitoring, and Stability (Managed IT Services) bundling security, compliance, and strategic advisory. Services are packaged under the proprietary Zero-Cost IT Model, a five-stage framework that converts operational and security improvements into measurable cost offsets for regulated businesses.

Product overview

TorchLight is a managed IT and cybersecurity services company that operates as a unified system combining outsourced IT services, IT support services, and compliance-driven solutions. The core offerings center on two branded programs: Vigilance (Managed Security Services) providing 24/7 SOC monitoring, EDR, ITDR, SIEM, vulnerability management, and DMARC; and Stability (Managed IT Services) bundling security, compliance, and strategic advisory. These are delivered through the Zero-Cost IT Model, a five-stage framework designed to reduce operational leakage and achieve cost offsets through improved security and compliance outcomes. Additional services include AI & Workflow Automation, AI Governance, vCISO/vCIO consulting, penetration testing, audits & assessments, co-managed services, and cloud/Microsoft 365/Azure support. TorchLight specializes in serving regulated industries including credit unions, community banks, healthcare organizations, government entities, and compliance-sensitive small businesses, with demonstrated outcomes including 100% regulatory exam pass rates and 30-35% cyber insurance premium reductions.

Differentiator

Problem solved

Functional benefit

Brands

• Zero-Cost IT Model: A five-stage cybersecurity services framework designed to pay for itself through cost offsets from improved stability, security, compliance, and performance.
• Vigilance
• Stability

Products and services

• Vigilance (Managed Security Services) Comprehensive managed security services offering providing 24/7 SOC monitoring, endpoint detection and response (EDR), identity threat detection and response (ITDR), SIEM, vulnerability management, and DMARC email authentication monitoring for regulated organizations.
• Stability (Managed IT Services)

Quantifiable outcome

• 100% regulatory exam pass rate for clients at Stage 3+ of the Zero-Cost IT Model
• +5 more outcomes

Named customers3 records

Segments8 records

Ideal customer profiles6 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature8 records

Partnerships

Two partnerships are on record, tiered core.

• Foundation for California Community Colleges (FoundationCCC)coreChannel Partner/ Reseller/ Distributor · 5 March 2026TorchLight approved as authorized vendor through FoundationCCC cooperative purchasing program in California, positioning cybersecurity services in front of educational institutions across the state with streamlined procurement path for schools and colleges.
• Washington Learning Source (WLS)coreChannel Partner/ Reseller/ Distributor · 5 March 2026TorchLight approved as authorized vendor through Washington Learning Source cooperative purchasing program in Washington State, providing enterprise-grade cybersecurity services to educational and public institutions without requiring independent solicitations.

Scale indicators8 records

Recent moves8 records

Expansion highlights5 records

Direct peers

• Blackpoint Cyber: Blackpoint Cyber provides managed security services for MSPs serving SMBs, including 24/7 SOC, EDR, and compliance enablement. Comparable to TorchLight in MSP-channel GTM motion and regulated SMB customer profile.
• Arctic Wolf: Arctic Wolf is a leading managed detection and response (MDR) and security operations provider offering 24/7 SOC monitoring, similar to TorchLight's Vigilance service. It competes directly for regulated mid-market and enterprise customers with subscription-based managed security.
• Huntress: Huntress provides managed cybersecurity for SMBs and the managed service provider (MSP) channel, including EDR, identity threat detection, and SIEM-like operations. Overlaps directly with TorchLight's EDR/ITDR/SIEM/Vigilance stack and regulated SMB focus.
• eSentire: eSentire delivers 24/7 managed detection and response with a global SOC and serves financial services, healthcare, and other regulated industries. Directly comparable to TorchLight in target verticals, SOC-led delivery model, and regulated compliance positioning.
• Expel: Expel is a managed detection and response provider with transparent, technology-agnostic SOC operations serving mid-market and enterprise customers in regulated industries. Directly comparable to TorchLight's Vigilance SOC and managed security services.
• Pondurance: Pondurance delivers managed detection and response and compliance services to financial services, healthcare, and public sector organizations. Closely comparable to TorchLight in vertical mix (financial services, healthcare), 24/7 SOC operations, and compliance-led positioning.
• Cybereason: Cybereason delivers endpoint detection and response plus managed detection and response services through its own SOC and partner channel. Comparable to TorchLight's EDR-led Vigilance stack and mid-market regulated focus.

Broad incumbents

• Sophos (Managed Detection and Response): Sophos offers a broad cybersecurity portfolio including a managed detection and response service with 24/7 SOC monitoring. Comparable as an incumbent offering overlapping managed security capabilities to similar mid-market regulated buyers.
• Rapid7: Rapid7 is a broad cybersecurity incumbent offering managed detection and response, SIEM, vulnerability management, and penetration testing — overlapping substantially with TorchLight's Vigilance stack and audit/assessment services for regulated customers.
• Secureworks: Secureworks provides managed detection and response, vulnerability management, and compliance services to financial services and other regulated industries. Comparable to TorchLight as a larger incumbent offering overlapping managed security and compliance capabilities.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/TorchLightcyber

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about TorchLight