Torq
Also known as: Torq, Torq Hyperautomation
Security hyperautomation platform with agentic HyperSOC on top, pairing free agent reasoning with a mature governed workflow action layer, valued at $1.2 billion.
Torq is the security automation platform that grew into agentic SOC operations, and the most highly valued company in this lane. Independent, it raised a $140 million Series D in January 2026 at a $1.2 billion valuation. Where the pure AI SOC analysts started with autonomous investigation and are extending toward action, Torq started as security hyperautomation, a modern successor to SOAR, and extended toward autonomy, meeting the same problem from the orchestration side.
The foundation is a workflow automation fabric with an extensive library of prebuilt integrations and steps across security and IT tools, letting teams build no code and low code automations for phishing response, incident response, case management, and employee onboarding. On top of that fabric sits Torq HyperSOC, which applies agentic AI to autonomous case management: AI agents triage, investigate, and drive response while executing the deterministic, auditable workflows the automation layer defines. That combination is the distinctive bet. Pure AI analysts reason freely but act through whatever integrations they carry; Torq pairs agent reasoning with a mature, governed action layer, so an agent's decision executes as a controlled, repeatable workflow rather than an ad hoc API call, which appeals to teams that want autonomy without surrendering deterministic control over what actually runs in their environment.
Torq publishes no pricing; contracts run through enterprise sales and scale with workflow volume and platform scope. The consideration is orientation: buyers wanting a drop in autonomous L1 analyst may find Torq's automation first surface heavier than a purpose built triage tool, while teams that already think in workflows, or want reasoning and deterministic orchestration in one platform, get a depth of action control the analyst first tools do not match.
Vendor details
Canonical URL
https://torq.io
Category
Security / SOC agent
Subcategory
Security automation
Funding status
Independent, raised a $140 million Series D in January 2026 at a $1.2 billion valuation, making it one of the most valuable companies in the agentic security space. Founded by veterans of the security automation category.
Company status
independent
Use cases & customers
Primary use cases
Target customers
Deployment options
Integrations
AI powered security hyperautomation with a large library of prebuilt integrations and workflow steps across security and IT tools, orchestrating phishing response, incident response, and employee onboarding. Torq HyperSOC layers agentic AI on the automation fabric for autonomous case management, combining no code and low code workflow building with AI agents.
In practice
You want autonomy but cannot let an agent make ad hoc changes in production. Torq pairs agent reasoning with deterministic, auditable workflows, so decisions execute as controlled steps.
Your SOAR playbooks are brittle and hard to maintain. Torq's no code and low code hyperautomation fabric modernizes them, with HyperSOC adding agentic triage on top.
Phishing and incident response eat your team's day. Torq orchestrates the full response across security and IT tools, with agents driving cases autonomously through governed workflows.
Sources & related URLs
Capability coverage
10.0 / 14 capabilities · 71%
| Integrations & Tool CallingExtensive prebuilt integration library across security and IT tools is the foundation of the hyperautomation platform, Torq docs 2026-07-06 | Full |
|---|---|
| Workflow OrchestrationWorkflow orchestration is the core product: no code and low code automation across security and IT with HyperSOC agentic case management on top, Torq docs 2026-07-06 | Full |
| Knowledge Grounding & RAGHyperSOC agents ground case management in connected tool data; scoped to security and IT telemetry, Torq docs 2026-07-06 | Partial |
| Human Oversight & GuardrailsDeterministic auditable workflows plus approval steps let agent decisions execute as governed, controlled actions rather than ad hoc calls, a core differentiator, Torq docs 2026-07-06 | Full |
| Security, Identity & GovernanceEnterprise governance and security posture for a platform executing actions across the security and IT stack, Torq docs 2026-07-06 | Full |
| Observability & AuditabilityDeterministic workflows produce auditable execution logs of every step an agent triggers, strong action level auditability, Torq docs 2026-07-06 | Full |
| Memory & State PersistenceCase state and workflow context persist across automation runs; scoped to case management, Torq docs 2026-07-06 | Partial |
| Deployment & Data ResidencySaaS platform; no self host or VPC residency option documented as standard, Torq docs 2026-07-06 | Partial |
| Prebuilt Agents, Templates & PacksLarge library of prebuilt workflow templates and integration steps for phishing, incident response, and onboarding is a flagship strength, Torq docs 2026-07-06 | Full |
| Triggers & Channel CoverageEvent and alert driven workflow triggers across a broad set of connected security and IT sources, Torq docs 2026-07-06 | Full |
| Model Flexibility & RoutingNo customer facing model choice or routing documented for the agentic layer, Torq docs 2026-07-06 | Unable to verify |
| APIs, SDKs & MCP ExtensibilityExtensible automation platform with custom steps, APIs, and webhooks for building and connecting arbitrary tools into workflows, Torq docs 2026-07-06 | Full |
| Testing, Debugging & OptimizationWorkflow building includes testing and debugging of automations before deployment; scoped to workflow authoring, Torq docs 2026-07-06 | Partial |
| Browser & Computer UseNo browser or computer use capability, Torq docs 2026-07-06 | Unable to verify |
Pricing
Contact sales; enterprise contracts scaling with workflow volume and scope
enterprise contract (workflow volume and scope)
Included quota
Contract covering the hyperautomation platform (workflows, integrations) with HyperSOC agentic case management as an added capability layer; no public tiers.
What is public
Nothing numeric; the platform plus HyperSOC layering is public.
Billing mechanics
Enterprise contracts through sales, scaling with workflow execution volume, connected integrations, and whether HyperSOC agentic capabilities are included.
Cost watchouts
Two layers to price: the core hyperautomation platform and HyperSOC agentic capabilities on top. Workflow volume and connected integrations drive cost, so a broad deployment scales beyond a narrow triage tool.
Variable cost rationale
Hyperautomation pricing typically scales with workflow execution volume and connected integrations, so a growing automation footprint raises cost more than a flat seat license.
Additional watchouts
Automation first surface can be heavier than a drop in analyst for teams that only want L1 triage; the depth pays off for teams that think in workflows and want governed agentic action.
Overage / add-ons
No public metering documented; cost scales with workflow volume and connected tools.
Sales call required
Yes — required for paid access
Free / trial
Enterprise evaluations through sales; community and trial tiers reported historically, not confirmed current
Lowest paid plan
None public; enterprise contract only
Commercial notes
Independent, $140 million Series D January 2026 at a $1.2 billion valuation, the most valuable company in this lane. Security hyperautomation heritage extended into agentic SOC.
Key ambiguities
Nothing numeric is public, and the split between the automation platform and HyperSOC agentic add on is not documented.
Related vendors
- 7AI — Swarming agentic SOC from the Cybereason founders: sixty plus domain…
- Dropzone AI — Production proven AI SOC analyst that investigates every alert in…
- Exaforce — AI SOC platform unifying Exabots agents with an integrated knowledge…
- Prophet Security — AI SOC platform with continuously learning agents, explicit…
- Qevlar AI — European autonomous AI SOC platform using graph based orchestration…
- Radiant Security — Adaptive AI SOC platform triaging every alert type that reaches the…