Custom Email Infrastructure, Dual-Layer EDR, and Field-Ready IT Built for a Silverado Canyon Tree Care Operation
How Specialized Tree Care & Landscape replaced unmanaged endpoints with dual-layer SentinelOne + Huntress EDR, rebuilt Arborgold email delivery on SMTP2Go and Cloudflare, and brought enterprise-grade security discipline to a family-run field service business.
Managed by Soaring Towers
Hear it from Andrew Naranjo at Specialized Tree Care & Landscape
Coming soon...
A family-run tree care and landscape firm operating across Orange County's foothill canyons — dispatching crews, estimating jobs, and protecting customer data.
Specialized Tree Care & Landscape is a family-run arboriculture and landscape management firm based in Silverado, California, in the foothills of Orange County. Led by CEO Natalie Naranjo and President Andrew Naranjo, the company provides professional tree trimming, removal, arborist services, and landscape maintenance to residential and commercial customers across the OC foothills and inland Southern California.
Field-service businesses live or die on dispatch and email reliability — estimates, schedule confirmations, and invoices all flow through email tied to Arborgold, their industry-specific field service management platform. As the firm grew, Specialized Tree Care & Landscape came to Soaring Towers for managed IT that could deliver dual-layer endpoint security, a rebuilt email delivery infrastructure, and the kind of proactive monitoring a small family-run team can't operate alone.
A family-run tree care firm running dispatch on unmanaged endpoints, with Arborgold emails failing and no security baseline across the fleet.
Endpoints came in without any managed EDR. Arborgold's outbound email was breaking mid-job. Three of five workstations were running on Dell warranties expired in 2021. And there was no Microsoft 365 sign-in monitoring or phishing awareness in place. The same pattern we see across small field-service operations that grew faster than their IT did.
-
No managed EDR or endpoint security baselineEndpoints onboarded without any EDR agent — SentinelOne had to be enrolled fresh across the fleet, starting with one device in August 2023 and extending across all five workstations by mid-2025.
-
Arborgold email delivery failing for estimates and confirmationsOutbound email from Arborgold — the platform handling job estimates, dispatch, and invoicing — was repeatedly failing, with `info@specializedtcl.com` hitting SMTP 550 errors and customer confirmations not making it out the door.
-
No patch management discipline on aging hardwareThree of five workstations on Dell warranties expired in 2021, with no patch cadence and OS update failures across the fleet — exactly the hardware-and-software exposure a field-service business can't afford during dispatch hours.
-
No Microsoft 365 sign-in monitoring or phishing awarenessNo location-based sign-in alerts, no phishing simulation, no phish alert button — leaving an email-dependent firm exposed to the payroll and remittance phishing campaigns that targeted the team throughout the engagement.
Dual-layer EDR, a custom-built email relay, and field-service-grade managed IT.
Soaring Towers designed and is operating an end-to-end managed environment for Specialized Tree Care & Landscape — SentinelOne + Huntress dual-layer EDR across every endpoint, a custom SMTP2Go and Cloudflare-built email infrastructure that keeps Arborgold reliable, Microsoft 365 with SaaS backup and sign-in monitoring, and ConnectWise RMM patching the fleet automatically.
Today's field-service businesses need IT that runs invisibly in the background — and never stops a crew from going out.
A family-run tree care firm dispatching crews from the OC foothills can't afford the IT friction that an unmanaged environment creates — Arborgold breaking mid-estimate, endpoints without EDR coverage, sign-ins from suspicious locations going unnoticed. Every interruption costs a job.
At Soaring Towers, we specialize in managed IT for field-service and trades businesses — bringing the enterprise-grade endpoint security, custom integration work, and proactive monitoring of a much larger operation, sized for a tight family-run team.
Four foundations of a modern field-service IT environment.
Every layer below was selected and configured specifically for the realities of a family-run tree care operation — endpoint security that holds up across remote workers and field supervisors, an email infrastructure that keeps Arborgold reliable, and proactive monitoring that catches issues before a crew gets stranded.
Microsoft 365 + CW SaaS Backup
Microsoft 365 administration with Exchange, Teams, OneDrive, and Microsoft Authenticator MFA — plus CW SaaS Backup protecting M365 data (Exchange, Teams, OneDrive) and an active phishing simulation program with the phish alert button used by leadership.
- Microsoft 365 (Exchange, Teams, OneDrive)
- CW SaaS Backup for M365 data
- Phishing simulation with phish alert button
SentinelOne + Huntress EDR
SentinelOne in full protect mode on every endpoint with application encryption, network quarantine, and firewall enforcement, paired with Huntress managed detection and response — tamper protection enforced, zero active threats across the fleet today.
- SentinelOne EDR (full protect mode)
- Huntress managed detection & response
- Zero active threats fleet-wide
SMTP2Go relay + Cloudflare DNS
A bespoke outbound email infrastructure rebuilt for Specialized Tree Care & Landscape — SMTP2Go relay paired with Cloudflare DNS managing SPF, DKIM, and DMARC — keeping Arborgold estimates and the `info@` mailbox deliverable end-to-end.
- SMTP2Go outbound relay
- Cloudflare SPF / DKIM / DMARC
- Arborgold email delivery stabilized
ConnectWise RMM + ScreenConnect
CW RMM agent across every managed workstation — automated OS patching, Priority 1 disk-storage alerts on critical drives, device inventory tracking, and ConnectWise ScreenConnect layered in for remote support and elevation requests.
- Automated OS patching
- Priority 1 disk-storage alerting
- ScreenConnect remote support
Ready to put enterprise IT behind your crews?
If your field-service business is wrestling with unmanaged endpoints, broken email delivery, no patch cadence, or zero security awareness — we can help.
Get practical guidance for evaluating your endpoint security, email infrastructure, and dispatch IT posture. No commitment, no sales pressure.
Measurable outcomes for Specialized Tree Care & Landscape.
A family-run tree care firm operating on dual-layer endpoint protection, a custom-built email relay keeping Arborgold reliable, and proactive monitoring quietly resolving security signals before they reach the office. Quiet, structured operations — not the firefighting that often comes with break/fix IT.
A family-run tree care firm running on enterprise-grade security and a custom email backbone.
After partnering with Soaring Towers, Specialized Tree Care & Landscape operates on the IT footprint of a much larger field-service business — dual-layer EDR, custom Arborgold email infrastructure, proactive endpoint monitoring, and active phishing awareness — all sized for a tight family-run team and built to keep crews dispatching every day.
-
Fleet-wide dual-layer EDR with zero active threatsSentinelOne in full protect mode across every workstation — application encryption, network quarantine, firewall enforcement — with Huntress managed detection and response layered on top. Zero infected machines today.
-
Arborgold email delivery rebuilt on SMTP2Go + CloudflareA bespoke outbound relay engineered by Soaring Towers' development team — SMTP2Go paired with Cloudflare-managed SPF, DKIM, and DMARC — resolved recurring Arborgold delivery failures and the `info@` SMTP 550 errors that were blocking estimates and confirmations.
-
CEO actively engaged in phishing simulationNatalie Naranjo (CEO) regularly uses the phish alert button to report simulated phishing emails — payroll, remittance, and deposit-themed campaigns surfaced and cleared. Security culture built from the top of the org, not just policy on paper.
-
Automated patch & disk monitoring catching issues proactivelyConnectWise RMM driving automated OS patching across the fleet, plus Priority 1 disk-storage alerts catching capacity issues on critical drives — multiple recurring near-misses on Andrew's desktop remediated before any user-facing downtime.
-
Structured user lifecycle & M365 SaaS BackupDocumented employee onboarding and offboarding (new hire setup, account removal with proper access revocation), plus CW SaaS Backup protecting M365 data — backup job failures detected and remediated by Soaring Towers, not noticed by the firm.
Coming soon...
The Field-Service IT & Email Reliability Checklist
Before making your next technology decision, evaluate whether your endpoint security, email delivery, and field-service app integration can keep crews dispatching reliably every day. Our free checklist surfaces:
- Endpoint security & EDR gaps
- Email delivery & relay reliability
- Field-service app integration risks
- Patch discipline & hardware exposure
- M365 sign-in monitoring gaps
- Backup & dispatch continuity
- 40+ field-service IT checkpoints
- Dual-layer EDR best practices
- Email delivery & SPF/DKIM/DMARC guidance
- Field-service app integration patterns
- M365 sign-in monitoring & phishing simulation
- Dispatch & continuity planning
A partner that protects your crews, your customers, and your email backbone.
Field-service and trades businesses need more than reactive helpdesk. Our business-first approach combines dual-layer endpoint security, custom integration work, proactive monitoring, and an MSP-level dev team — sized for a family-run operation and built to keep every dispatch going out clean.
Answers for tree care, landscape, and field-service leaders.
Don't see your question? Reach out for a discovery call.
It includes dual-layer endpoint security (SentinelOne in full protect mode plus Huntress managed detection), automated patching via ConnectWise RMM, custom integration work for field-service platforms like Arborgold (SMTP2Go relay, Cloudflare DNS), Microsoft 365 administration with SaaS Backup, M365 sign-in monitoring, phishing simulation with the phish alert button, and structured employee lifecycle handling.
Estimates, schedule confirmations, dispatch updates, and invoices all flow through email — usually tied into a field-service platform like Arborgold. When outbound delivery fails, jobs don't get booked, customers don't get confirmations, and revenue stalls. A bespoke SMTP relay (SMTP2Go) paired with correctly configured Cloudflare DNS (SPF, DKIM, DMARC) makes that pipeline reliable end-to-end.
The heavy lifting is built into the stack, not into the user experience. Dual-layer EDR runs silently in the background. Patch management is automated. M365 sign-in alerting only surfaces real anomalies. The one piece of active engagement we ask for — the phish alert button — takes one click. When the CEO is using it weekly without complaint, the design is right-sized.
Real experience with field-service platforms (Arborgold, similar dispatch tools), willingness to do custom integration work — not just resell software, fluency with email infrastructure (SMTP relays, SPF/DKIM/DMARC), comfort operating dual-layer EDR (SentinelOne + Huntress) and ConnectWise RMM, proactive monitoring that catches recurring issues before they become user complaints, and a strategic review cadence that surfaces hardware refresh and tier decisions before they become emergencies.
The stack we deployed for Specialized Tree Care & Landscape.
