G2

Sarfaraz Z.

Network Engineer

Computer & Network Security

Mid-Market (51-1000 emp.)

10/16/2026

"Torq AI SOC Streamlines Incident Investigations with AI-Driven Automation"

4.5/5

What do you like best about Torq AI SOC Platform?

The automated incident investigation workflow is the most useful part of the Torq AI SOC platform for me. In network security, manually correlating suspicious IP traffic with firewall alerts and IDS events can be very time-consuming, especially when you’re trying to keep the investigation organized. Torq’s AI-driven approach helps bring these pieces together into a more structured workflow. For example, when I’m investigating suspicious inbound traffic, it’s very convenient to track the source IP, relevant network logs, and firewall findings within a single case view. Runbook automation, along with real-time incident updates, also helps keep the investigation moving in a clear, consistent direction. Overall, this workflow feels practical for cutting down on repetitive tasks while staying focused on the security incidents that matter most. Review collected by and hosted on G2.com.

What do you dislike about Torq AI SOC Platform?

There can be a bit of a learning curve when setting up complex workflows, especially when multiple security tools and conditional actions are involved. When a workflow runs into an error, it may take extra time to pinpoint the exact step that failed and then troubleshoot it. For beginners in particular, more ready-made network security templates, along with clearer and more detailed debugging information, would make the configuration process easier. Review collected by and hosted on G2.com.

What problems is Torq AI SOC Platform solving and how is that benefiting you?

Torq helps streamline repetitive network security investigation tasks. Activities like checking suspicious IP addresses, correlating firewall and IDS alerts, documenting incident findings, and coordinating remediation steps can be brought into a single, organized workflow. This makes it easier to maintain context across different security events and can potentially reduce the time spent on manual investigation. I find the automated runbook approach especially useful because it supports a consistent response process while keeping key incident details accessible in one place. Review collected by and hosted on G2.com.