The Difference Is Who Shows Up.
TorchLight is a security-first managed IT and cybersecurity partner for regulated organizations.
Since 2007, TorchLight has helped organizations build safer, more stable, and more accountable technology environments. We combine real-world cybersecurity experience, leadership-level guidance, and a team that shows up when the stakes are real.
Security Is the Starting Point.
TorchLight does not treat cybersecurity as a product that gets bolted onto managed IT after the environment is already built.
Security influences how we think about identity, infrastructure, endpoints, cloud systems, vendors, recovery, and the everyday decisions that keep an organization running.
The result is an operating model where stability and security reinforce each other instead of competing for attention, ownership, or budget.
- Security considered in everyday technology decisions, not added after the fact
- IT stability and cybersecurity managed as connected disciplines
- Business risk weighed alongside usability, performance, and cost
- Resilience and recovery planned before an incident becomes an emergency
Clarity Before Complexity.
Technical expertise should make leadership more confident, not more dependent on technical language. Our job is to translate technology, cybersecurity, compliance, cost, and risk into decisions executives and boards can understand and act on.
You should not need to become an engineer to know whether your environment is healthy. You need clear priorities, honest answers, and enough visibility to make informed decisions about what comes next.
- Technical findings translated into plain business language
- Risk communicated in terms leadership and boards can evaluate
- Clear priorities instead of endless lists of tools, alerts, and recommendations
- Better visibility into progress, cost, exposure, and next decisions
We Own the Outcome.
A closed ticket is not the same thing as a solved problem.
When something matters, our responsibility is to understand it, communicate it, own it, and see it through.
That standard applies whether the issue is a user problem, a security alert, a failed control, an executive concern, or a technology decision with consequences far beyond the IT department.
- Problems followed through resolution instead of measured only by response
- Proactive communication when the stakes are high or circumstances change
- Escalation based on organizational impact, not simply ticket category
- One accountable team connecting IT, cybersecurity, compliance, and strategy
Partnership Over Transactions.
Strong technology environments are not built through disconnected projects, constantly changing vendors, or a new strategy every time something breaks.
They come from institutional knowledge, disciplined improvement, and people who understand where the organization has been as well as where it needs to go.
TorchLight was built for relationships that compound over time. The better we understand the organization, its people, its risk, and its goals, the better the technology decisions become.
- Long-term technology and cybersecurity roadmaps instead of reactive purchasing
- Institutional knowledge retained instead of repeatedly rediscovered
- Relationships centered on measurable improvement rather than project volume
- Strategy that evolves with the organization, its risks, and its opportunities
Predictability always costs less than reaction.
Nolan Garrett
Founder & CEO · TorchLight Secured & Managed ITNolan Garrett has spent more than two decades working at the intersection of technology, cybersecurity, business risk, and regulation. His background includes experience as an IT regulatory examiner, giving him a perspective few technology providers bring to the table: understanding both how technology works and how leadership, auditors, regulators, and boards evaluate whether it is working well enough.
He founded TorchLight in 2007 around a simple idea: organizations responsible for protecting sensitive information deserve more than reactive IT support. They need clarity, accountability, disciplined cybersecurity, and a technology partner capable of helping leadership make better decisions.
Jack of all information technology, master of security.
Gary Blosser
Executive Consultant & Principal Security Architect · TorchLightGary Blosser brings an unusually broad security background to TorchLight, spanning executive security leadership, architecture, offensive security, penetration testing, incident response, digital forensics, threat intelligence, and enterprise consulting. Today, he applies that technical depth in an executive consulting role focused on moving complex organizations toward stronger, more defensible security programs.
His experience includes serving in CISO and vCISO-style leadership capacities for large public-sector and higher-education environments, helping improve information security and combat digital fraud across more than one hundred academic entities. Earlier in his career, Gary led penetration testing and red-team work, managed incident response and security architecture functions, and supported offensive security engagements for Fortune 500 organizations.
The IT Survival Playbook
By TorchLight CEO: Nolan GarrettHow Small Businesses Stay Safe, Stable, and Sane in a Rapidly Changing Digital World
Business leaders are accountable for technology decisions that can affect operations, security, finances, customers, and reputation, even when technology was never their area of expertise. Nolan Garrett wrote The IT Survival Playbook to close that gap.
The goal is not to turn executives into technicians. It is to give them a framework for recognizing healthy IT, asking better questions, evaluating risk, and making technology decisions with greater confidence.
This is a Playbook, Not a Pitch.
Nolan's premise is simple: useful guidance should still be useful even if the reader never becomes a TorchLight client. The objective is clarity first.
From 8 Findings to Zero.
A credit union needed to move from recurring compliance gaps to a cleaner, more defensible security posture. TorchLight helped harden the environment and establish continuous compliance evidence instead of rebuilding proof at exam time.
Result: Zero findings in four months and a clean regulatory exam.3:30 A.M. In 12°F Weather.
When a potential breach triggered alerts during a freezing winter night, the TorchLight team responded before dawn and waited on-site for the client team to arrive so work could begin immediately.
Result: The incident was contained with zero reported data loss and zero downtime.A Partnership That Started in 2007.
PrimeSource Credit Union first worked with TorchLight on a security assessment and gap analysis in 2007. That engagement grew into a long-term strategic technology and cybersecurity relationship.
In their words: “They are more like our partner.”What Trust Looks Like
Technology partnerships are easy to describe. The real measure is what happens during an exam, during an incident, and after years of decisions made together.
See More Client Stories