Torq

Roadmap & Position in Security Automation

AI SOC platform automating security triage, investigation, and response.

Company Overview

Torq is an AI SOC platform that automates alert triage, investigation, case management, and remediation. It serves enterprise SOCs, MSSPs, and security teams at customers including Blackstone, Chipotle, HashiCorp, PepsiCo, Telefónica, Wiz, and Valvoline.

What They're Building

The company's public product roadmap & what they're committed to building.

AI Agent Expansion

Torq is building customizable HyperAgents and Socrates orchestration for triage, investigation, remediation, threat hunting, reporting, and case work.

Workflow Execution Hardening

Recent product updates added non-root Step Runners, Podman deployment support, labels for runner jobs and pods, and workflow Test Pads.

Enterprise Administration

Updates added an Organization Viewer role, cross-workspace dashboards, enhanced case search, and case dashboard text blocks.

Connector Growth

Torq continues to add native security connectors and maintains a catalog of roughly 300 integrations and more than 4,000 prebuilt steps.

Federal and Public Sector Push

The Series D announcement said funding will support U.S. federal and public-sector expansion, with Merlin Ventures helping government-market access.

Latest Intelligence

Zeitgeist tracks private signals to determine where the company is heading strategically.

No Signals Yet

Founder and Key Execs

Ofer Smadari

CEO and Co-Founder (serial cybersecurity founder, previously connected to Luminate)

Leonid Belkind

CTO and Co-Founder (serial cybersecurity founder, previously connected to Luminate)

Eldad Livni

CINO and Co-Founder (serial cybersecurity founder)

Uri Landau

SVP Engineering (senior engineering leader)

Founder Force Multiplier

The founding team brings repeat cybersecurity company-building experience, which matters in a market where buyer trust, integrations, and incident-response credibility set the sales ceiling. Their Luminate background gives Torq a strong base for selling security workflow infrastructure to enterprises.

Funding History

2020 | Torq was founded.
2024 | Torq raised a $70M Series C and said it had raised $112M during 2024.
2025 | Torq acquired Revrod and incorporated multi-agent RAG capabilities into HyperSOC-2o.
2026 | Torq announced a $140M Series D at a $1.2B valuation, bringing total funding to $332M.

Notable Open Roles

Product Manager, Agentic AI

Signals active investment in agent behavior, user-facing AI workflows, and productizing autonomous SOC capabilities.

GRC Specialist

Supports the enterprise and public-sector trust layer needed for regulated security buyers.

Regional Sales Manager, Federal Civilian

Points to federal expansion after the Series D and a push into longer-cycle government security budgets.

Competitors

Palo Alto Networks Cortex XSOAR

Incumbent SOAR platform tied to a broader security suite.

Splunk SOAR

Automation platform connected to Splunk’s SIEM and observability footprint.

Swimlane

Security automation vendor with a workflow-heavy enterprise motion.

Tines

No-code security automation vendor with strong practitioner adoption.

D3 Security

SOAR and incident-response automation platform for security operations teams.

Torq

's Moat:

Switching costs can build through integrations, runbooks, permissions, and case history, but the moat depends on safe agent execution at enterprise scale.

How They're Leveraging AI

AI SOC Investigation
Socrates and HyperAgents triage alerts, gather evidence, reason through investigations, and produce case summaries so SOC teams can reduce manual Tier-1 work.
Agentic Remediation
Torq connects AI agents to deterministic Hyperautomation workflows, allowing approved actions across EDR, SIEM, identity, cloud, ticketing, and collaboration tools.
Security Context Retrieval
The Revrod acquisition added multi-agent RAG capabilities, giving Torq a stronger path to retrieve and reason over case context, historical outcomes, and security evidence.

AI Use Overview:

Torq uses agentic workflows and multi-agent RAG to investigate security alerts, coordinate case work, and trigger response actions across enterprise security tools.

Defense, Aerospace, and Public Safety

AxionOrbital Space

Makes Earth visible 24/7 by converting radar satellite data into clear imagery through clouds.

SAR satellites see through clouds and darkness, but the data is unusable without expert interpretation. AxionOrbital's foundation model converts raw SAR into optical-quality imagery at 1/100th the cost of tasking an optical satellite, making 24/7 earth observation accessible to any buyer.

Beyond Reach Labs

Builds space solar arrays that launch small and expand to football-field scale in orbit.

Space power demand is expected to grow 500x by 2030 (orbital datacenters, stations, lunar outposts), and no one can launch enough solar arrays to meet it. Beyond Reach's deployable structures expand from a dining table to a football field in orbit, with $175M+ in LOIs already signed.

Constellation Space

Predicts satellite link failures 3-5 minutes ahead and reroutes automatically in under 2 seconds.

Satellite operators fight link failures reactively. ConstellationOS predicts failures 3-5 minutes ahead with over 90% accuracy and reroutes in under 2 seconds, and the founding team managed Starlink constellation health at SpaceX.

DroneTector

Detects, tracks, and classifies hostile drones in real time using radar, cameras, and acoustics.

Hostile drone incidents at airports and critical infrastructure are increasing faster than detection capabilities. DroneTector's millimeter-wave radar is purpose-built for the hardest targets, with partnerships across UK MoD, NATO DIANA, and the Royal Academy of Engineering.

Back To All Companies >