Torq
6.77 of 10 on the nine published rows. 2nd of 12 covered, 2nd of 14 scored. SOAR with agents. Scores read 3 November 2026.
Torq is an independent AI SOC and workflow platform with a low-code and full-code builder, a Manage module for cases and agents for triage, investigation and response. It publishes no price and no integration count on its own pages, exports workflows as YAML, and announced a USD 140M Series D at USD 1.2B on 2026-01-12.
What it is
Torq lists Auto Triage, HyperAgents, Socrates, Case Management and Hyperautomation as products, plus an Agentic Builder launched in March 2026 and a self-learning layer called SOC Brain, launched in July 2026 per its news index (read 2026-11-03). Torq announced a USD 140M Series D at a USD 1.2B valuation on 2026-01-12, and acquired Jit, a context graph company, on 2026-05-19 for an undisclosed price. The home page says agents run on a context model that records verdicts, exceptions and overrides, and does not state the limits of the agents.
The playbook artefact is a workflow YAML file. It holds structure, description, tags and section, can be edited by hand, and includes the custom steps and integrations the workflow uses. Import offers three conflict options: Keep original, Override original and Duplicate. The public API imports workflows too. A Python script step runs scripts with extra packages by requirements. Torq documents no native git sync and no importer from another vendor. Its migration blog of 2025-03-24 advises redesign over lift and shift and names no converter.
The vendor describes itself this way: AI SOC platform that uses agentic AI to triage, investigate and respond to threats. Products include Auto Triage, HyperAgents, Socrates, Case Management and Hyperautomation. torq.io, read 2026-11-03 (vendor claim)
How Torq scores
Nine rows, weights summing to 100, each scored 0 to 10 from pages read on 2026-11-03. The part is score times weight divided by 100. How the scoring works.
| Row | Score | Weight | Part | Reason and source |
|---|---|---|---|---|
| Playbook authoring model | 8.0 | 14 | 1.12 | Low-code and full-code workflow builder; natural-language workflow creation and agentic runbooks for hunting. torq.io, read 2026-11-03 (vendor claim) (search summary only) |
| Integration count and depth documented | 5.0 | 14 | 0.70 | The torq.io home page read states no count. A third party reading Torq pages reports 300 integrations and 4,000+ pre-built steps; confirm on Torq's own page before publishing. Re-read pending. torq.io, read 2026-11-03 |
| Case management and collaboration | 8.0 | 8 | 0.64 | A 'Manage' module creates, assigns and manages cases from one record, per the vendor page. torq.io, read 2026-11-03 (vendor claim) |
| Approvals and human-in-the-loop controls | 8.0 | 12 | 0.96 | Vendor page: response can run completely autonomously or with human-on-the-loop oversight, with a manual override and transparent audit logs. Per-action gating detail not read. torq.io, read 2026-11-03 (vendor claim) |
| Agentic or AI features that are documented | 8.5 | 12 | 1.02 | Agents for triage, investigation, response, hunting and reporting on a continuously updated context model that records verdicts, exceptions and overrides. Limits of the agents are not stated. 'Over 90 percent of cases closed autonomously' is a vendor claim reported by third parties; not on the page read. torq.io, read 2026-11-03 (vendor claim) |
| Hosting and data residency options | 5.0 | 8 | 0.40 | Described as cloud-native with SOC 2, HIPAA and ISO certifications per third-party reading; no regions or self-hosted option read. Re-read pending. torq.io, read 2026-11-03 |
| Pricing model and transparency | 3.0 | 8 | 0.24 | No price on the home page; its pricing URL returned 404. Review sites report demo-only pricing and no free trial. torq.io, read 2026-11-03 |
| Migration tooling and import or export formats | 6.0 | 14 | 0.84 | Workflows export and import as YAML including custom steps, nested workflows and tags. No converter from XSOAR or Splunk SOAR found; a 'Kill Your SOAR' guide is behind a form. kb.torq.io, read 2026-11-03 |
| Ownership stability | 8.5 | 10 | 0.85 | Independent. USD 140M Series D at USD 1.2B valuation announced 2026-01-12; USD 332M raised in total per press. businesswire.com, read 2026-11-03 |
| Total | 6.77 | 100 | 6.77 | Band 2 on the card; totals within 0.25 are a band, not a ladder. |
Where Torq is strong
- A Manage module creates, assigns and manages cases from one record, per the vendor page. Case management scores 8.0. torq.io, read 2026-11-03
- Torq is independent. The USD 140M Series D at a USD 1.2B valuation was announced on 2026-01-12, and the Jit acquisition on 2026-05-19 adds a context graph. Ownership scores 8.5. businesswire.com, read 2026-11-03
- Workflow export and import are documented: YAML that includes custom steps and integrations, three conflict options on import, and API import, all suited to version control by file. kb.torq.io, read 2026-11-03
Where Torq is behind
- No price is published and the pricing path returned 404 on 2026-11-03. Torq is described as cloud-native with SOC 2, HIPAA and ISO certifications by a third party, and no regions or self-hosted option were read. torq.io, read 2026-11-03
- The integrations page states no count. A third party reports 300 integrations and 4,000+ pre-built steps, and that figure was not confirmed on a Torq page. torq.io, read 2026-11-03
- No converter from XSOAR or Splunk SOAR was found. The Kill Your SOAR migration guide is behind a form and was not read. torq.io, read 2026-11-03
A fact only Torq has
Torq treats the workflow YAML file as the unit for import and export between workspaces, allows hand edits, and says an import failure is usually a broken manual edit. learn.torq.io, read 2026-11-03
Pricing as published
No public price list. The /pricing path returns 404 on the read date. torq.io, read 2026-11-03
Ownership and funding
Torq is the acquirer of Jit (Boston, AI context graph). Announced 2026-05-19; price not disclosed. businesswire.com, read 2026-11-03 (vendor claim)
Named customers
- Valvoline source, read 2026-11-03 (vendor claim)
- FICO source, read 2026-11-03 (vendor claim)
- Check Point source, read 2026-11-03 (vendor claim)
- RSM source, read 2026-11-03 (vendor claim)
- Lennar source, read 2026-11-03 (vendor claim)
- BigID source, read 2026-11-03 (vendor claim)
- Deepwatch source, read 2026-11-03 (vendor claim)
- Kenvue source, read 2026-11-03 (vendor claim)
- HWG Sababa source, read 2026-11-03 (vendor claim)
Recent releases
- 2026-10 Torq REV channel programme. Channel partner programme announced. Date from the news index (October 8 to 9, 2026). torq.io, read 2026-11-03 (vendor claim)
- 2026-09 Merlin partnership for federal AI SOC modernisation. Named partner in the Merlin federal AI SOC modernisation programme. Date from the news index (September 8 to 10, 2026). torq.io, read 2026-11-03 (vendor claim)
- 2026-07 Criminal IP threat intelligence partnership. Threat intelligence partnership with Criminal IP. Date from the news index (July 13, 2026). torq.io, read 2026-11-03 (vendor claim)
- 2026-07 SOC Brain self-learning layer. Launch of SOC Brain, a self-learning layer that learns from analyst decisions. Date from the news index (July 27 to 28, 2026). torq.io, read 2026-11-03 (vendor claim)
- 2026-06 Britive joins Torq AMP. Partner joins the Torq AMP agentic SecOps programme. Date from the news index (June 29, 2026). torq.io, read 2026-11-03 (vendor claim)
- 2026-05-19 Torq acquires Jit, AI context graph company. Torq acquired Jit (Boston) to add an AI context graph that informs investigations with identities, roles, privileges and data sensitivity. Price not disclosed. torq.io, read 2026-11-03 (vendor claim)
Claims Torq makes about itself
These are vendor claims. They are not scored. Each carries an evidence grade: C means a vendor figure with no published method.
| Claim | Grade | Source |
|---|---|---|
| Valvoline saves 7 analyst hours a day | C | torq.io, read 2026-11-03 (vendor claim) |
| Global pharma customer cuts MTTR by 92 percent (unnamed) | C | torq.io, read 2026-11-03 (vendor claim) |
| RSM automates 82 percent of global MSSP customer cases | C | torq.io, read 2026-11-03 (vendor claim) |
| FICO builds automations 99.4 percent faster with Torq | C | torq.io, read 2026-11-03 (vendor claim) |
| BigID increases SecOps efficiency by 10 times | C | torq.io, read 2026-11-03 (vendor claim) |
| Unnamed real estate firm saves 1,000 hours and $120,000 in Q1 | C | torq.io, read 2026-11-03 (vendor claim) |
| Unnamed money transfer platform gets 30 percent time savings through auto-remediation | C | torq.io, read 2026-11-03 (vendor claim) |
What the public pages did not say
- No public pricing: /pricing returns 404 on torq.io on 2026-11-03.
- No integrations count stated on the integrations page. The 30 names come from its first screen; the full list was not read.
- Customer logos without text (such as Blackstone, Carvana, Chipotle, Hard Rock, Lowe's, NerdWallet, Macy's, Rocket Companies, Scotts, Telefonica, Thomson Reuters, T-Mobile, Zara) are not confirmed in text and are not recorded as customers.
- All customer metrics are vendor-published case-study headlines with no method. None is independently verified.
- Headquarters conflicts: the Business Wire dateline says New York; the footer lists an Americas HQ in Denver, Colorado.
- The news index dates the Jit announcement between May 18 and June 8, 2026. The Business Wire release dateline of 2026-05-19 is used here.
Gaps recorded on 3 November 2026. A gap is an absence on the pages read, and it is scored that way.
Who should shortlist Torq
- You want a case record, workflows and agents in one product from a vendor that is not owned by a larger company and has fresh funding.
- You plan to keep automation content as files you can read, diff and re-import through the API.
- You are ready to run a proof of concept without a published price or a converter.
Verdict. Torq is second of 14 scored at 6.77, in a band with Splunk SOAR (6.68) and D3 Security (6.67); it leads on cases and ownership and publishes nothing on price.
Moving playbooks out of Torq
Torq is a source row in the portability matrix: 0 of 70 cells have a documented path. Source format: workflow YAML (kb.torq.io, read 2026-11-03).
Torq against the other eleven
- BlinkOps v Torq
- Cyware v Torq
- D3 Security v Torq
- Google Security Operations v Torq
- Mate Security v Torq
- Microsoft Sentinel v Torq
- Palo Alto Cortex XSOAR v Torq
- ServiceNow Security Operations v Torq
- Splunk SOAR (Cisco) v Torq
- Swimlane (Turbine) v Torq
- Tines v Torq
Alternatives to Torq, ordered by the rubric.