Torq

Torq is an AI SOC platform whose AI agents triage, investigate and respond to security alerts across an enterprise security stack. Auto Triage classifies incoming alerts with verdicts and severities. HyperAgents investigate and act using the tools and actions a security team approves, and Socrates works inside cases as a co-pilot or progresses assigned cases on auto-pilot. Hyperautomation builds the deterministic workflows the agents call as tools. Torq also runs IT operations workflows such as employee onboarding and offboarding, just-in-time access and self-service requests. Customers with published case studies include FICO, Kenvue, Carvana, Check Point, Agoda and Lennar. Gartner named Torq the Company to Beat in AI SOC Agents for Threat Investigation in its May 2026 AI Vendor Race report, and repeated the placement in an August 2026 update. IDC named Torq a Leader in its IDC MarketScape: Worldwide Standalone AI SOC Platforms 2026 Vendor Assessment, and KuppingerCole named it a Leader in its 2026 Leadership Compass for the Emerging AI SOC.

Torq lists 300 pre-built integrations and more than 4,000 pre-built steps, and its integrations run in both directions. A CrowdStrike trigger integration brings Falcon events into Torq by webhook, while pre-built steps such as Contain Host act back on the endpoint. Torq cases also sync with Jira and ServiceNow tickets. A public REST API manages workflows, cases, users and secrets. Torq AI Agents act as MCP clients and can call tools discovered from connected MCP servers. Torq's April 2025 MCP announcement also described exposing Torq workflows as tools to external MCP hosts such as Claude Desktop. No setup guide for connecting to Torq as an MCP server is published in its knowledge base or API reference. AI models run on Torq's default subscription or on a customer's own OpenAI, Azure OpenAI, Anthropic or GCP Vertex AI account.

Pricing is not published on torq.io, and engagements start with a demo request. Torq also sells through AWS Marketplace on 12-month contracts across three plans, Torq Essential, Torq Enterprise and Torq Elite, billed by units, with the plan and unit count set in the contract. There is no free tier or self-serve trial.

The capability split between the Essential, Enterprise and Elite plans and what one billing unit covers are not published. Torq also offers professional services, including a JumpStart onboarding engagement, and G2 reviewers report an average of one month to implement.

Torq is best for enterprise security operations teams, MSSPs and MDR providers that want AI agents handling triage, investigation and response across an existing SIEM, EDR, identity, cloud and ticketing stack. Teams that want to expose their own workflows to AI clients through a documented MCP server should consider Tines. Teams automating business processes beyond security and IT should consider Workato, an enterprise integration platform, or Make.com, a visual automation builder. Teams that need to self-host an open-source automation platform should consider n8n.

Current state Q4 2026: Torq closed a $140 million Series D at a $1.2 billion valuation in January 2026, bringing total funding to $332 million. It acquired Jit, an agentic security company built on a Security Context Graph, in May 2026. In July 2026 it announced Torq SOC Brain, a memory layer with Recall, Reflex and Retrospect capabilities. Torq holds SOC 2 Type II, ISO 27001, ISO 42001 and BSI C5 certifications, states GDPR and HIPAA compliance, and signs a HIPAA Business Associate Agreement for covered entities. In September 2026 Merlin named Torq a partner for federal SOC modernization, and in October 2026 Torq launched REV, a channel program for resellers, systems integrators, MSSPs and MDR providers. Torq's master subscription agreement bars using customer data to train or fine-tune the AI models behind Torq AI without the customer's written consent. Torq was founded in 2020 and its Americas headquarters is in Denver, Colorado.