Skip to content
SPECIFICTION
Get listed

Torq Case Management

torq.io

WebAPI
Visit torq.io
Spec score 7.0 #16 of 24 in Runbook Automation Software

What it is

Torq Case Management gives security teams a shared workspace for handling cases from creation through resolution. Torq workflows can create, update, investigate, and resolve cases, with triggers for observable enrichment, severity changes, and state transitions. The Cases view filters backlogs by severity, category, assignee, and other criteria. Investigation evidence from autonomous triage can be attached to verified true positive cases, alongside summaries, timelines, and recommended next steps for shift handoffs. Custom quick actions support observable enrichment, investigation, cross-team communication, and threat remediation. Listed controls include saved views, SLA timers, access restrictions, reviews, runbooks, task assignment, dashboards, case linking, approval steps, and audit logs. Torq says cases are OCSF-compliant and extensible. More than 400 integrations are listed, with custom webhooks and OAuth options, plus synchronization with Jira and ServiceNow. The product is available through web and API as part of Torq’s AI SOC platform.

Spec sheet

Purpose
Torq Case Management gives security teams a shared workspace to collaborate and move security incidents from creation through investigation and response.Read 4 Oct 2026 · torq.io
Intended users
Torq presents Case Management as part of its AI SOC platform for security teams and SOC investigators handling security cases.Read 4 Oct 2026 · torq.io
Audience
Torq describes Case Management as part of its AI SOC platform for security teams.Read 3 Oct 2026 · torq.io
Integrations
Torq lists over 400 out-of-the-box integrations and says it supports custom integrations, including webhook-triggered and OAuth integrations.Read 4 Oct 2026 · kb.torq.io
Support
Customers can open a support ticket through the Knowledge Hub widget or email [email protected].Read 4 Oct 2026 · kb.torq.io
Headquarters
Tel Aviv, Israel; Denver, Colorado, United StatesRead 28 Sep 2026 · torq.io
Founded
2020Read 28 Sep 2026 · torq.io
Access security
Torq describes enterprise SSO and MFA integrations, role-based access control, least-privilege permissions, and immutable cloud-based compute infrastructure.Read 4 Oct 2026 · torq.io
Additional case features
The maker lists automated case timelines, observable tracking, lifecycle-triggered workflows, case linking, task assignment, runbooks, SLA timers, saved views, access restrictions, reviews, dashboards, and ticketing-system synchronization.Read 4 Oct 2026 · kb.torq.io
Automation
Workflows can trigger on case events such as observable enrichment, severity changes, and state transitions.Read 3 Oct 2026 · kb.torq.io
Availability and pricing
The product page offers a demo request; the opened maker pages did not state a price, free plan, or trial.Read 3 Oct 2026 · torq.io
Case controls
Case settings include reviewer assignment, categories, custom tabs, public notes and comments, resolution reasons, and customizable states.Read 4 Oct 2026 · kb.torq.io
Case lifecycle
Teams can automate creating, updating, investigating, and resolving cases through Torq workflows.Read 3 Oct 2026 · kb.torq.io
Case overview
Teams can view their backlog and filter cases by severity, category, assignee, and other criteria.Read 4 Oct 2026 · torq.io
Data standard
Torq says its cases are OCSF-compliant and extensible to an organization's needs.Read 3 Oct 2026 · kb.torq.io
Example integrations
The integration directory includes CrowdStrike, Wiz, Google Cloud, Okta, Atlassian Jira, and ServiceNow.Read 4 Oct 2026 · torq.io
Hosting security
Torq says it uses GCP and AWS data centers and periodically audits and tests its platform and infrastructure, with penetration test reports available upon request.Read 4 Oct 2026 · torq.io
Investigation
Evidence from autonomous triage can be added to verified true positive cases, with summaries, timelines, and recommended next steps created for shift handoffs.Read 3 Oct 2026 · torq.io
Investigation context
Evidence from autonomous triage is added to verified true positive cases, while case summaries, timelines, and recommended next steps support shift handoffs.Read 4 Oct 2026 · torq.io
Lifecycle automation
Torq workflows can create, update, investigate, and resolve cases, and Torq cases are OCSF-compliant and extensible.Read 4 Oct 2026 · kb.torq.io
Pricing availability
The Case Management page offers a demo rather than displaying a price.Read 4 Oct 2026 · torq.io
Response actions
Custom quick action buttons can enrich observables, investigate cases, communicate across teams, and remediate threats.Read 4 Oct 2026 · torq.io
Security and compliance
Torq states that it is SOC 2 Type II, HIPAA, GDPR, and BSI C5 compliant or certified, and says external compliance reports are available upon request.Read 4 Oct 2026 · torq.io
Ticketing links
Cases can be synchronized with external ticketing systems such as Jira and ServiceNow.Read 3 Oct 2026 · kb.torq.io
Triage
The Cases view filters the backlog by severity, category, assignee, and other criteria.Read 3 Oct 2026 · torq.io

Strong points and limits

Strong points

  • Automated case lifecycle workflows
  • Backlog filtering by severity and assignee
  • Over 400 listed integrations
  • OCSF-compliant and extensible cases
  • Jira and ServiceNow synchronization

Limits

  • Pricing is available only on request
  • No free plan or trial is stated
  • Focused on security teams and SOC investigators

Who it suits

It is aimed at security teams and SOC investigators managing security cases and incident workflows. Teams needing integrations, ticket synchronization, and structured handoffs may fit the listed capabilities.

Verdict

Torq Case Management organizes investigation and response work with workflow triggers, case controls, and extensive integrations. The maker offers a demo request rather than publishing a price or trial.

Where Specifiction places it

Alternatives to Torq Case ManagementAll alternatives →