Torq Case Management
Torq Case Management gives security teams a shared workspace for moving incidents through investigation and resolution.
What Torq Case Management is
Torq Case Management gives security teams a shared workspace for moving incidents through investigation and resolution. Torq workflows can create, update, investigate, and resolve cases, and can run when case events occur, such as observable enrichment, severity changes, or state transitions. The Cases view filters the backlog by severity, category, assignee, and other criteria. Teams can add autonomous-triage evidence to verified true-positive cases, with summaries, timelines, and recommended next steps supporting shift handoffs. Custom quick actions help users enrich observables, investigate cases, communicate across teams, and remediate threats. Other controls include saved views, SLA timers, access restrictions, reviews, runbooks, task assignment, dashboards, and case linking. Torq says cases are OCSF-compliant and extensible. It lists over 400 integrations, supports custom connections through webhooks and OAuth, and can synchronize cases with external ticketing systems such as Jira and ServiceNow. The product is part of Torq's AI SOC platform and is offered on web and API. Pricing is available on request; the product page offers a demo request rather than a displayed price.
Good
- Workflows cover case creation through resolution.
- Backlogs can be filtered by several criteria.
- More than 400 integrations are listed.
- Cases can synchronize with Jira and ServiceNow.
Watch out
- Pricing is available only on request.
- The product page offers a demo request rather than a listed price.
Who it suits
Torq Case Management is aimed at security teams and SOC investigators handling security cases. It may suit teams that need workflow automation, investigation context, and ticketing-system synchronization.
Verdict
Torq Case Management combines case workflows, investigation context, and controls for security operations. Teams considering it will need to request pricing and a demo.
The facts
Each one read from Torq Case Management's own pages, with the date it was checked.
What it does
- Access security
- Torq describes enterprise SSO and MFA integrations, role-based access control, least-privilege permissions, and immutable cloud-based compute infrastructure.checked 4 Oct 2026
- Additional case features
- The maker lists automated case timelines, observable tracking, lifecycle-triggered workflows, case linking, task assignment, runbooks, SLA timers, saved views, access restrictions, reviews, dashboards, and ticketing-system synchronization.checked 4 Oct 2026
- Audience
- Torq describes Case Management as part of its AI SOC platform for security teams.checked 3 Oct 2026
- Automation
- Workflows can trigger on case events such as observable enrichment, severity changes, and state transitions.checked 3 Oct 2026
- Availability and pricing
- The product page offers a demo request; the opened maker pages did not state a price, free plan, or trial.checked 3 Oct 2026
- Case controls
- Case settings include reviewer assignment, categories, custom tabs, public notes and comments, resolution reasons, and customizable states.checked 4 Oct 2026
- Case lifecycle
- Teams can automate creating, updating, investigating, and resolving cases through Torq workflows.checked 3 Oct 2026
- Case overview
- Teams can view their backlog and filter cases by severity, category, assignee, and other criteria.checked 4 Oct 2026
- Data standard
- Torq says its cases are OCSF-compliant and extensible to an organization's needs.checked 3 Oct 2026
- Example integrations
- The integration directory includes CrowdStrike, Wiz, Google Cloud, Okta, Atlassian Jira, and ServiceNow.checked 4 Oct 2026
- Hosting security
- Torq says it uses GCP and AWS data centers and periodically audits and tests its platform and infrastructure, with penetration test reports available upon request.checked 4 Oct 2026
- Integrations
- Torq lists over 400 out-of-the-box integrations and says it supports custom integrations, including webhook-triggered and OAuth integrations.checked 4 Oct 2026
- Intended users
- Torq presents Case Management as part of its AI SOC platform for security teams and SOC investigators handling security cases.checked 4 Oct 2026
- Investigation
- Evidence from autonomous triage can be added to verified true positive cases, with summaries, timelines, and recommended next steps created for shift handoffs.checked 3 Oct 2026
- Investigation context
- Evidence from autonomous triage is added to verified true positive cases, while case summaries, timelines, and recommended next steps support shift handoffs.checked 4 Oct 2026
- Lifecycle automation
- Torq workflows can create, update, investigate, and resolve cases, and Torq cases are OCSF-compliant and extensible.checked 4 Oct 2026
- Pricing availability
- The Case Management page offers a demo rather than displaying a price.checked 4 Oct 2026
- Purpose
- Torq Case Management gives security teams a shared workspace to collaborate and move security incidents from creation through investigation and response.checked 4 Oct 2026
- Response actions
- Custom quick action buttons can enrich observables, investigate cases, communicate across teams, and remediate threats.checked 4 Oct 2026
- Security and compliance
- Torq states that it is SOC 2 Type II, HIPAA, GDPR, and BSI C5 compliant or certified, and says external compliance reports are available upon request.checked 4 Oct 2026
- Support
- Customers can open a support ticket through the Knowledge Hub widget or email [email protected].checked 4 Oct 2026
- Ticketing links
- Cases can be synchronized with external ticketing systems such as Jira and ServiceNow.checked 3 Oct 2026
The company
- Founded
- 2020checked 28 Sep 2026
- Headquarters
- Tel Aviv, Israel; Denver, Colorado, United Stateschecked 28 Sep 2026
Alternatives to Torq Case Management
- 1
7.2Free plan - 2

Tines
Free planWebAPILinuxSelf-hosted7.2Free plan - 3

Rundeck
Free planWebAPILinuxmacOS6.8Free plan - 4

StackStorm
Free planWebAPILinuxSelf-hosted6.4Free plan - 5
Parachute
WebAPI6.3From $49 a month - 6
Shuffle
Free planWebAPILinuxSelf-hosted6.3Free plan
