The IT Partner For Regulated Industries That Makes Your Compliance Audits Boring

When regulators, cyber insurers, and board members stop asking tough questions about your technology security, you know you’ve found the right IT partner.

TorchLight’s Secured & Managed IT turns regulatory compliance from your biggest risk into your competitive advantage.

“TorchLight has been more than a vendor to our multi-branch Credit Union, they are more like our partner. Our relationship with TorchLight dates back to 2007 when we were one of their very first clients who worked with them on a security assessment and gap analysis. TorchLight has worked with us ever since to help us achieve success for its employees and members through technology. They continue to strategically align with us to provide a full suite of services and have continued to delivery for almost 20 years.”

– Annettee, CEO

  • Strengthening Your Security Posture with EDR & ITDR

    Strengthening Your Security Posture with EDR & ITDR

    Cyber attackers aren’t just targeting networks anymore—they’re going after identities and endpoints at scale. In fact, over 80% of breaches involve compromised credentials or exploited devices. In this month’s service spotlight, we break down two critical layers of modern cyber defense—Endpoint Detection and Response (EDR) and Identity Threat Detection and Response (ITDR)—and show how they work together to keep your organization safer.

  • Washington State Expands Sales Tax to IT Services

    Washington State Expands Sales Tax to IT Services

    A new Washington State law—Senate Bill 5814—goes into effect on October 1, 2025, and it will significantly impact customers located in Washington who receive IT, digital, and tech-related services. This change will apply regardless of where the service provider is located, and may affect how your organization is billed by vendors like MSSPs, cloud providers, and software consultants.

  • The Windows 10 to Windows 11 Transition

    The Windows 10 to Windows 11 Transition

    Another large milestone looms in the Microsoft ecosystem as Windows 10 is (mostly) officially sunsetted on October 14, 2025. Meaning, no new security updates will be produced by Microsoft, unless you purchase an ESU/Extended Security Update license for up to three years that will allow Windows 10 to continue receiving security updates on a regular and emergency basis. You also have the option of upgrading your existing computer if it meets certain conditions.

  • Tech Talk – What is DMARC, DKIM, SPF & Why Do I Want To Know?

    Tech Talk – What is DMARC, DKIM, SPF & Why Do I Want To Know?

    DMARC, DKIM and SPF are three separate email authentication protocols that build layers of security around email delivery and integrity. Used in conjunction with each other, they provide a durable layer of protection for inbound emails and brand protection to prevent bad actors from sending emails using your business domain name. These tools provide domain owners control over how email is handled if the email fails the authentication checks.

  • Beware of the ClickFix Scam!

    Beware of the ClickFix Scam!

    TorchLight’s Threat Intelligence team has uncovered a resurgence of a phishing scam called ‘ClickFix,’ initially identified in late 2024 but now widely used by cybercriminals in 2025.

  • Microsoft Teams Phishing Attacks

    Microsoft Teams Phishing Attacks

    TorchLight Security Operations Center continues to hear about Microsoft Teams as the vector to social engineering, phishing and spearphishing attempts by hackers. Given the volume of noise, we thought we’d publish what we know and how to defend against these attacks.