Torq AI SOC Platform

What do you like best about the product?

One thing I really enjoy about Torq is the automation it enables. It lets you connect many different tools and bring them together into a single workflow. In Security, we spend a large amount of time reviewing alerts and gathering information. Being able to create workflows that handle these routine tasks helps our team work more efficiently, so we can focus our time on higher-level security work.

What do you dislike about the product?

It can be a bit time-consuming to create workflows. Depending on which tools you’re trying to use with Torq, it may take longer to set up and get everything working the way you want. More guidance on how to build workflows, along with some pre-made workflows to start from, would be really helpful.

What problems is the product solving and how is that benefiting you?

We constantly get duplicate alerts coming through our security tools, and it often takes extra digging to find the details we need. With Torq, you can build workflows that handle a lot of those repetitive tasks and help surface the right information faster. That frees up more time for analysts to focus on their actual security work.

What do you like best about the product?

I think it has the potential to be a good security tool. The quick response times could help reduce the time between a threat and when it’s detected, which is really important to us. I also think it would help reduce the overall workload for employees. Its ability to integrate with other tools is a strong point as well.

What do you dislike about the product?

The implementation of this could take some time, since the AI needs to be properly trained to detect the right risks so the appropriate responses are triggered. It’s also a bit of a downside that it isn’t a replacement for all security tools, and would still need to be integrated with others to provide appropriate coverage.

What problems is the product solving and how is that benefiting you?

Torq primarily serves the purpose of responding to cybersecurity threats quickly, without requiring employees to handle every alert manually. It can also coordinate steps across connected security tools, gather relevant information, and automate approved responses.

What do you like best about the product?

Automatic AI-based cybersecurity and connects multiple security systems

What do you dislike about the product?

Complicated workflows which take too much time for learning and handling

What problems is the product solving and how is that benefiting you?

Cybersecurity for an enterprise is handled smoothly after the workflows and automation are all set up

What do you like best about the product?

The automated incident investigation workflow is the most useful part of the Torq AI SOC platform for me. In network security, manually correlating suspicious IP traffic with firewall alerts and IDS events can be very time-consuming, especially when you’re trying to keep the investigation organized. Torq’s AI-driven approach helps bring these pieces together into a more structured workflow. For example, when I’m investigating suspicious inbound traffic, it’s very convenient to track the source IP, relevant network logs, and firewall findings within a single case view. Runbook automation, along with real-time incident updates, also helps keep the investigation moving in a clear, consistent direction. Overall, this workflow feels practical for cutting down on repetitive tasks while staying focused on the security incidents that matter most.

What do you dislike about the product?

There can be a bit of a learning curve when setting up complex workflows, especially when multiple security tools and conditional actions are involved. When a workflow runs into an error, it may take extra time to pinpoint the exact step that failed and then troubleshoot it. For beginners in particular, more ready-made network security templates, along with clearer and more detailed debugging information, would make the configuration process easier.

What problems is the product solving and how is that benefiting you?

Torq helps streamline repetitive network security investigation tasks. Activities like checking suspicious IP addresses, correlating firewall and IDS alerts, documenting incident findings, and coordinating remediation steps can be brought into a single, organized workflow. This makes it easier to maintain context across different security events and can potentially reduce the time spent on manual investigation. I find the automated runbook approach especially useful because it supports a consistent response process while keeping key incident details accessible in one place.

What do you like best about the product?

I’m exploring how the Torq AI SOC Platform can help automate security operations, reduce alert fatigue, and strengthen incident investigation and response. Its AI-driven workflows and integration capabilities are especially interesting to me as potential ways to improve SOC efficiency and cut down on manual effort. I’d like to better understand how it can complement my existing SIEM and EDR tools, and where it fits into the overall workflow alongside them.

What do you dislike about the product?

One potential challenge with Torq AI SOC Platform is that configuring automation workflows and integrating multiple security tools may require initial technical expertise. Complex workflows can also take time to design, test, and troubleshoot. Additionally, teams may need time to understand how to customize automation to their specific SOC requirements. Improved documentation and beginner-friendly workflow templates could make the onboarding process easier.

What problems is the product solving and how is that benefiting you?

Torq AI SOC Platform addresses challenges such as alert fatigue, repetitive manual investigations, and time-consuming incident response workflows. Its automation capabilities help streamline security operations, improve incident triage, and coordinate response activities across security tools. This can help SOC teams reduce manual effort, improve operational efficiency, and focus more on investigating high-priority threats rather than repetitive tasks.

What do you like best about the product?

What I like best about Torq is how much time it saves my team. We used to spend hours manually triaging repetitive alerts, but Torq's automation has completely changed that. It takes away the boring, busy work so we can actually focus on real threats. Our response time has dropped significantly, and the platform is just really easy to work with.

What do you dislike about the product?

The only real downside is the cost. It can be a bit heavy on the budget, especially if you have a smaller team. However, considering the time it saves us, it still feels worth the investment.

What problems is the product solving and how is that benefiting you?

Before Torq, our team was drowning in alert fatigue. We spent hours manually triaging repetitive, low-level alerts, which left us exhausted and slow to react to real threats. Torq solves this by automating the entire triage process. The biggest benefit for me is that I can finally focus on actual threat hunting and complex investigations instead of doing boring, repetitive busy work.

What do you like best about the product?

Manual triage is our primary bottleneck. Torq AI is an exceptional hyper-automation platform that seamlessly bridges our security stack. By leveraging its intuitive no-code/low-code workflow builder combined with embedded AI capabilities, we can instantly orchestrate complex incident response playbooks. When an alert fires from our SIEM or endpoint detection tools, Torq automatically queries threat intelligence APIs, extracts IOCs, sandboxes suspicious attachments, and enriches the incident ticket within seconds. The platform's flexibility allows us to build custom human-in-the-loop approval steps directly into Slack, ensuring we maintain oversight without slowing down initial containment.

What do you dislike about the product?

While the visual workflow designer is powerful, managing complex conditional branching and error-handling loops across dozens of integrated SaaS tools can become cluttered. If an upstream API provider changes their schema or rate-limits our requests unexpectedly, debugging the exact execution step inside a large, nested workflow requires digging through granular execution logs. Additionally, onboarding junior analysts to write and maintain these automations requires a solid understanding of JSON path filtering and API payload structures.

What problems is the product solving and how is that benefiting you?

Torq AI eliminates the tedious, repetitive manual tasks that lead to analyst burnout and sluggish response times. Before integrating Torq, our tier-1 team spent valuable minutes copying and pasting hashes into threat-intel portals and manually closing false positives. Now, routine triage and enrichment happen instantaneously in the background. This drastically reduces our Mean Time to Respond (MTTR) and allows our security team to focus entirely on advanced threat hunting and proactive defense rather than drowning in alert noise.

What do you like best about the product?

I like that Torq AI SOC Platform makes it very easy to build complex workflows and handle multi-step actions. I use it to speed up incident response and eliminate slow, manual tasks. The initial setup was very easy and friendly.

What do you dislike about the product?

Nothing to be honest

What problems is the product solving and how is that benefiting you?

I use Torq AI SOC Platform to eliminate slow, manual tasks.

What do you like best about the product?

What I like most about the torq AI SOC platform is how it automates repetitive security tasks and helps streamline incident response. It reduces manual effort, speeds up threat detection and investigation, and makes things easier for our monitoring team.

What do you dislike about the product?

What I dislike about the torq AI SOC platform is building and troubleshooting complex workflows, which can be difficult at times. The initial setup and overall learning curve could also be improved to make it easier to get started and work efficiently.

What problems is the product solving and how is that benefiting you?

The main problem this tool solves is reducing repetitive, manual tasks in security operations.

What do you like best about the product?

As an integration specialist in a large enterprise environment, the best part about Torq is its truly API-first approach combined with an intuitive no-code/low-code workflow builder. The AI-assisted features significantly speed up the creation of complex security playbooks. It seamlessly connects with our existing infrastructure (including AWS and our identity management tools) without requiring weeks of custom scripting. This flexibility has massively reduced alert fatigue for our SOC team by completely automating our responses to tier-1 threats

What do you dislike about the product?

While the no-code builder is fantastic for standard workflows, debugging highly complex, custom API integrations within the platform can sometimes be opaque and requires a steeper learning curve. Additionally, when deploying at a massive enterprise scale with tens of thousands of endpoints, the licensing and pricing model can become quite expensive and a bit difficult to forecast accurately. Lastly, the documentation for very specific, edge-case integrations could be more detailed.

What problems is the product solving and how is that benefiting you?

As an enterprise with over 10,000 employees, our SOC (Security Operations Center) was previously drowning in 'alert fatigue'—handling thousands of low-level security events, phishing reports, and false positives daily. The core problem Torq is solving for us is the disconnected nature of our security stack. It acts as the central orchestration layer, automating responses across our SIEM, endpoint protection, and identity management systems.

The biggest benefit to me as an integration specialist is the massive reduction in manual API scripting. I can deploy complex automation playbooks in hours instead of weeks. For the wider business, the benefit is a drastically reduced MTTR (Mean Time to Respond) for tier-1 threats, which frees up our security analysts to focus on actual, complex investigations rather than manual data gathering