Torq

Torq bet early and hard on the agentic AI SOC, and in mid-2026 that bet is being validated at the highest level: Gartner named Torq the "company to beat in AI SOC Agents for Threat Investigation" in May 2026, a rare analyst endorsement that reprices a startup's credibility overnight. The architecture is the reason — Torq pairs a deterministic hyperautomation engine (rule-based, auditable workflow execution) with Socrates, an agentic "OmniAgent" that reasons over telemetry, runs deep investigations, collaborates with analysts in natural language, and autonomously remediates complex threats — which threads the needle enterprises actually demand: AI judgment where it helps, deterministic control where it must. The $140M Series D (January 2026, led by Merlin Ventures) at a $1.2B valuation pushed total funding to ~$332M and capitalized aggressive expansion, and the acquisition of Jit added AI-powered security context that deepens the platform's reasoning. The market timing is ideal: SOCs are buried in alerts, analyst burnout is structural, and every CISO is under board pressure to show an AI strategy — Torq sells the compress-MTTR-without-growing-headcount promise directly into that anxiety. With HyperSOC targeting the automation of tier-1 work at enterprise scale and an analyst-anointed lead in the hottest sub-category in security, Torq is positioned as a definitional winner of the agentic-SOC transition.

Torq is a $332M-raised, 201–500-person company staking a $1.2B valuation on being the winner of a category that every giant in security has simultaneously decided to own. Palo Alto's Cortex XSIAM, Microsoft Sentinel with Security Copilot, Google SecOps, and CrowdStrike are all racing to fold agentic AI-SOC capability into platforms that enterprises already run their security operations on — and the incumbent that owns the SIEM and the endpoint has a structural advantage in the AI SOC, because the agents are only as good as the telemetry they sit on, and Torq owns none of that data layer natively. Tines contests the same automation buyer from the accessibility angle, so Torq is squeezed between a well-funded peer below and platform giants above. "Agentic AI SOC" is also the most hyped phrase in the industry, which means expectations are inflated and the gap between demo and production reliability is where these deployments stall — autonomous remediation that acts on a false positive is a career-ending outcome for a CISO, so trust must be earned slowly against a fast-moving valuation. The Jit acquisition signals Torq must buy capabilities to keep pace. Analyst leadership in a nascent category is a snapshot, not a moat, and the same report that crowns a "company to beat" invites every better-capitalized rival to beat it.