The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Torq raised $70 million in Series C funding on September 24, 2024, in a round led by Evolution Equity Partners. Bessemer Venture Partners, Notable Capital, Greenfield Partners, and Strait Capital also participated. The company said the financing brought its total funding since its 2020 founding to $192 million and would support engineering, research and development, sales, and expansion in Europe, the Middle East and Africa, and Asia-Pacific.
That financing is now historical context rather than Torq’s latest capital raise. On January 12, 2026, Torq announced a $140 million Series D at a reported $1.2 billion valuation, bringing cumulative funding to $332 million. (Torq)
As an Amazon Associate I earn from qualifying purchases.
What happened in Torq’s Series C
The Series C was announced on September 24, 2024. Evolution Equity Partners led the round, with participation from Bessemer Venture Partners, Notable Capital, Greenfield Partners, and Strait Capital. Torq said it raised $112 million across 2024, including an expanded Series B announced earlier that year. (Company announcement)
Recommended Free Tools
Torq is a privately held cybersecurity-software company founded in 2020. Its funding announcements reflect investor confidence in security automation, but the size of a venture round is not proof that the product reduces breaches, false positives, or response times for every customer.
#1 Best Overall
What Torq sells
Torq sells software for security operations teams. Rather than acting as an antivirus product, endpoint detector, SIEM, or standalone threat-detection engine, it primarily coordinates work across the tools a security operations center already uses.
A typical configured workflow may:
- Receive an alert from a security product.
- Collect context from identity, endpoint, cloud, threat-intelligence, or other systems.
- Evaluate the information using a deterministic workflow or AI-assisted process.
- Open, update, or prioritize a case.
- Take an approved action, such as blocking an indicator, disabling an account, quarantining an endpoint, or notifying an analyst.
- Record the activity for review and auditing.
The precise behavior depends on integrations, permissions, customer configuration, and approval gates. Torq describes this broader model as security hyperautomation. The term is largely the company’s market language; the more established category many buyers will recognize is SOAR, or security orchestration, automation, and response. (Torq’s hyperautomation explanation)
How AI fits into the platform
During the 2024 funding announcement, Torq described using large language models to help analysts answer questions about SOC playbooks and support triage, investigation, and response. CEO Ofer Smadari also acknowledged that AI automation can be imperfect and that incorrect or biased decisions can create security risks. (TechCrunch)
By 2026, Torq’s positioning had expanded to an “AI SOC” platform with AI-assisted alert triage, agentic investigation, natural-language workflow creation, automated remediation, and case coordination through a system called “Socrates.” Torq also describes retrieval-augmented generation using an organization’s security data. These are vendor product and marketing claims, not independent evidence that every action can safely operate without human review. (Torq AI SOC Platform)
Rank #2
Reported traction behind the investment
At the time of the Series C, Smadari told TechCrunch that Torq’s annual recurring revenue had exceeded $24 million and that the company had more than 150 direct enterprise customers. He said partners were providing services to nearly 900 enterprises worldwide. That latter figure should not automatically be read as 900 direct Torq customers.
Customers named in the reporting included Procter & Gamble, Chipotle, PepsiCo, and Wiz. Torq was also projecting $100 million in ARR by fiscal 2026. That was a management target announced in 2024, not a confirmed result. The figures were company-reported and were not independently audited in the cited coverage.
Why investors were interested
The investment case is tied to several persistent enterprise-security problems:
- Security teams receive more alerts than analysts can investigate manually.
- Organizations face shortages of experienced security personnel and analyst burnout.
- Security stacks contain numerous disconnected products.
- Companies want to extract more value from existing security investments.
- Generative and agentic AI have created interest in faster investigation and response.
- Torq reported revenue growth, customer growth, and international expansion opportunities.
Torq said the Series C proceeds would fund engineering, research and development, sales, and expansion in EMEA and APAC. Its later Series D announcement indicates that the company continued attracting capital, but it does not independently validate the effectiveness of any particular automation workflow.
Integrations and workflow flexibility
Torq’s integration catalog covers SIEM and log management, endpoint and extended detection and response, cloud security, identity and access management, threat intelligence, vulnerability management, collaboration tools, network security, and data-security platforms.
Named integrations include CrowdStrike, Wiz, Okta, Zscaler, Splunk, Palo Alto Networks Cortex XDR, SentinelOne, ServiceNow, Slack, AWS, Google Cloud, and OpenAI. Torq currently advertises more than 300 pre-built integrations and more than 4,000 pre-built steps. Connector availability does not necessarily mean identical depth or feature coverage across every integration. (Torq integrations)
Product materials describe no-code and low-code workflow building, full-code extensions, and scripting or command-line support involving tools such as Python, PowerShell, SQL, SSH, Kubernetes, and cloud command-line interfaces. Torq also describes connectivity for cloud, on-premises, and hybrid environments. Buyers should confirm these capabilities for the specific edition, contract, and architecture under consideration. (Torq on AWS)
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Risks and governance questions
Automation can amplify mistakes. A poorly configured workflow could block a legitimate user, disable an important account, quarantine the wrong endpoint, or suppress a real incident. An AI agent adds another risk: it may produce a plausible but incorrect interpretation of an alert.
Rank #4
- Book - powershell for sysadmins: workflow automation made easy
- Language: english
- Binding: paperback
A responsible rollout typically starts with read-only enrichment and adds human approval before destructive actions. Buyers should also use allowlists, rollback procedures, historical-incident testing, detailed logging, and an emergency method for disabling workflows.
Integration reliability matters as well. Workflows depend on credentials, permissions, APIs, rate limits, and changing data formats. Torq advertises API monitoring, but prospective customers should ask how connector failures are surfaced and whether a workflow fails open or fails closed.
Before evaluating the platform, security leaders should ask:
- Which actions require human approval?
- Can AI-generated decisions be reviewed and replayed?
- What telemetry, prompts, and case data are sent to external model providers?
- Are customer data or prompts used to train models?
- How are destructive permissions scoped?
- What happens when an agent is uncertain?
- What are the data-retention, residency, export, and audit-log policies?
- How are connector failures and API changes detected?
Who may be a good fit
Torq may be worth evaluating for a large enterprise SOC with a complex, heterogeneous security stack, substantial repetitive enrichment work, and enough engineering capacity to maintain integrations, permissions, testing, and governance.
Best Value
It may be a poor fit for a small organization with only a few security tools, a buyer seeking transparent self-service pricing, a team without resources to maintain playbooks, or an organization that requires fully deterministic behavior and does not want adaptive AI agents. It is also not a substitute for improving detection quality when orchestration is not the primary problem.
Alternatives and market context
Torq overlaps several categories rather than competing with one identical product. Legacy SOAR platforms may appeal to teams focused on deterministic, rule-based processes. SIEM-native automation can be attractive when the existing SIEM is the operational center of the SOC. Endpoint- or XDR-native response may be simpler for organizations standardized on one security vendor. General workflow platforms can offer flexibility for teams willing to build and maintain their own logic, while managed detection and response providers offer outsourced analyst coverage rather than software alone.
Potential comparison candidates include Palo Alto Networks Cortex XSOAR, Splunk SOAR, Microsoft Sentinel automation, Google SecOps playbooks, Swimlane, Tines, and Rapid7 InsightConnect. Current pricing, editions, feature limits, deployment models, and AI capabilities should be verified separately before making a direct comparison.
Pricing and availability
Torq’s reviewed official materials did not disclose public pricing. The buying path is a sales demo, with an enterprise quote likely to depend on deployment, integrations, usage, agents, support, and contract scope. Torq also advertises availability through AWS Marketplace, but buyers should confirm the current listing, region, billing terms, and whether professional services are separate. (Request a Torq demo)
A practical evaluation should begin by documenting three repetitive SOC workflows, the systems they touch, the approvals they require, and the measurable time or risk problem they create. That gives a prospective customer a stronger basis for judging integration depth, governance, implementation effort, and total cost than the funding announcement alone.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
