- Home
- Runbook Automation Software
- Torq Case Management
Torq Case Management
Tel Aviv, Israel; Denver, Colorado, United States
What it is
Torq Case Management gives security teams a shared workspace to handle incidents from intake through resolution. Torq workflows can create, update, investigate, and resolve cases, and can start when case events occur, such as observable enrichment, severity changes, or state transitions. The Cases view filters backlog by severity, category, assignee, and other criteria. Evidence from autonomous triage can be attached to verified true-positive cases; summaries, timelines, and recommended next steps help with shift handoffs. Custom quick actions support observable enrichment, investigation, cross-team communication, and threat remediation. Other controls include saved views, custom SLA timers, case access restrictions, reviews, runbooks, task assignment, dashboards, and case linking. Torq says its cases are OCSF-compliant and extensible to an organization's needs. It lists over 400 out-of-the-box integrations, supports custom integrations through webhooks and OAuth, and can synchronize cases with ticketing systems such as Jira and ServiceNow. The product is part of Torq's AI SOC platform for security teams and investigators. It is available through web and API; the product page offers a demo request rather than a displayed price.
For and against
For
- Automates case creation through resolution.
- Filters cases by severity, category, and assignee.
- Supports handoffs with summaries and timelines.
- Lists over 400 out-of-the-box integrations.
- Can synchronize cases with Jira and ServiceNow.
Against
- Pricing is not displayed.
- The product page offers a demo request rather than a stated trial or free plan.
The verdict
Torq Case Management combines case tracking, workflow automation, investigation context, and ticketing links for security teams. Buyers will need to request a demo to explore the product and pricing.
Who it suits
Torq Case Management is aimed at security teams and SOC investigators handling security cases. It suits teams looking to coordinate case work and automate lifecycle tasks.
On the record
- Access security
- Torq describes enterprise SSO and MFA integrations, role-based access control, least-privilege permissions, and immutable cloud-based compute infrastructure.torq.io · read 4 Oct 2026
- Additional case features
- The maker lists automated case timelines, observable tracking, lifecycle-triggered workflows, case linking, task assignment, runbooks, SLA timers, saved views, access restrictions, reviews, dashboards, and ticketing-system synchronization.kb.torq.io · read 4 Oct 2026
- Audience
- Torq describes Case Management as part of its AI SOC platform for security teams.torq.io · read 3 Oct 2026
- Automation
- Workflows can trigger on case events such as observable enrichment, severity changes, and state transitions.kb.torq.io · read 3 Oct 2026
- Availability and pricing
- The product page offers a demo request; the opened maker pages did not state a price, free plan, or trial.torq.io · read 3 Oct 2026
- Case controls
- Case settings include reviewer assignment, categories, custom tabs, public notes and comments, resolution reasons, and customizable states.kb.torq.io · read 4 Oct 2026
- Case lifecycle
- Teams can automate creating, updating, investigating, and resolving cases through Torq workflows.kb.torq.io · read 3 Oct 2026
- Case overview
- Teams can view their backlog and filter cases by severity, category, assignee, and other criteria.torq.io · read 4 Oct 2026
- Data standard
- Torq says its cases are OCSF-compliant and extensible to an organization's needs.kb.torq.io · read 3 Oct 2026
- Example integrations
- The integration directory includes CrowdStrike, Wiz, Google Cloud, Okta, Atlassian Jira, and ServiceNow.torq.io · read 4 Oct 2026
- Hosting security
- Torq says it uses GCP and AWS data centers and periodically audits and tests its platform and infrastructure, with penetration test reports available upon request.torq.io · read 4 Oct 2026
- Integrations
- Torq lists over 400 out-of-the-box integrations and says it supports custom integrations, including webhook-triggered and OAuth integrations.kb.torq.io · read 4 Oct 2026
- Intended users
- Torq presents Case Management as part of its AI SOC platform for security teams and SOC investigators handling security cases.torq.io · read 4 Oct 2026
- Investigation
- Evidence from autonomous triage can be added to verified true positive cases, with summaries, timelines, and recommended next steps created for shift handoffs.torq.io · read 3 Oct 2026
- Investigation context
- Evidence from autonomous triage is added to verified true positive cases, while case summaries, timelines, and recommended next steps support shift handoffs.torq.io · read 4 Oct 2026
- Lifecycle automation
- Torq workflows can create, update, investigate, and resolve cases, and Torq cases are OCSF-compliant and extensible.kb.torq.io · read 4 Oct 2026
- Pricing availability
- The Case Management page offers a demo rather than displaying a price.torq.io · read 4 Oct 2026
- Purpose
- Torq Case Management gives security teams a shared workspace to collaborate and move security incidents from creation through investigation and response.torq.io · read 4 Oct 2026
