What do you like best about the product?

There are so many things to like, it's hard to figure out which one is the "Best". The UI is easy to navigate with many options for getting as granular as you want within your workflow. For options that aren't available, integrated steps allow you to drop into Bash, Python, etc and perform actions directly on your variables. The Support Team has been amazingly responsive to requests for help, recommendations on more effective ways to conduct an action, and even short-suspense creation of new capabilities for major tasks I was trying to accomplish. After researching and testing several different SOAR platforms, Torq quickly became the obvious answer for our organization. We have already saved thousands of man hours on repeatable tasks, and I've barely scratched the surface. I'm looking forward to all of the amazing automations I will be able to continue doing with the platform.

What do you dislike about the product?

The Torq development team seems to be in my head. This is worrisome. Every time I think of a capability I'd like to see in the platform, they publish that solution in the next feature release. It would be great if they would wait for me to reach out to them and request it, so I would have more time to spend working with their amazing team.

What problems is the product solving and how is that benefiting you?

We receive tens of thousands of alerts on our EDR, and Torq helps out by mitigating and resolving the "low hanging fruit" so our analysts can spend time focusing on the threats that are more serious. We also use the platform to "sync" data between external platforms by using webhooks to trigger when an event occurs. There are also scenarios when we have one platform that won't tie in easily to another platform, but Torq has all the answers, so we use it as a man in the middle to relay information through the vast number of built-in integrations that are so easily implemented.