Making identity governance universal.

Torch is building the universal identity governance platform — extending continuous governance to every application in the enterprise, not just the ones with modern APIs.

Vision

Every identity decision in the enterprise should be governed — not only the ones made inside applications with modern APIs. The systems that fall outside existing IAM tooling — mainframes, home-grown apps, Windows clients, the long tail of SaaS — represent the majority of an organization's identity surface, and most of its risk. Treating them as out of scope is no longer defensible.

Mission

Torch makes universal identity governance practical. Our connector framework lets identity teams extend their existing program — SailPoint, Saviynt, or Torch's own platform — to any application in their estate, without the months-long integration projects that used to be the only path. Identity has become the enterprise's primary attack surface. Governance can no longer depend on APIs that don't exist or connectors that never get built.

Founders

Building together since 2013.

From securing Google Cloud to co-leading the OWASP Machine Identity Top 10 — Gal and Roni have been shipping security products together for over a decade. Torch is their answer to a problem they've watched get worse every year.

Think you're a Torchian?

We're hiring engineers and operators who'd rather solve a hard problem than ship a fast one. If one of the roles below fits — or if none does and you still want in — write us.

Let's connect the unconnectable.

See how Torch governs every app in your stack.

See Torch in action