CIO Influence
CIO Influence News IT services Machine Learning Security

Torq Expands Agentic AI Capabilities With Powerful New Autonomous, Collaborative Multi-Agent Framework For Security Operations

Torq Expands Agentic AI Capabilities With Powerful New Autonomous, Collaborative Multi-Agent Framework For Security Operations

Carvana Joins Fortune 500 Customer Base Using Torq Agentic AI To Dramatically Boost SOC Productivity Through Autonomous Incident Response and Escalation

Torq, the AI-native autonomous SOC and hyperautomation leader, today announced it has significantly expanded its Agentic AI capabilities with a new, autonomous multi-agent system for security operations. This new framework builds on the capabilities of Torq Socrates, cybersecurity’s first Tier-1 analysis AI Agent.

Also Read: Ivanti Research Finds Phishing Tops List of Growing Cyber Threats, Fueled by GenAI

“Torq has transformed user verification and incident response, dramatically freeing up time for our SOC analysts to focus on the most impactful and pressing alerts with significant potential organizational impact.”

The Torq Agentic AI multi-agent system delivers on the promise of the autonomous SOC. The system is designed to unburden today’s overwhelmed security operations teams facing an exponentially-increasing number of high-volume, low-complexity attacks. These attacks are decimating the productivity of security operations with mind-numbing busywork, creating existential organizational crises. Torq Agentic AI extends the capabilities of SOC teams across all organization sizes from large enterprises to SMBs, by handling the majority of everyday attacks and alerts, while alleviating common SOC challenges such as alert fatigue, false positives, and staff burnout. The result is a 70% decrease in manual security case investigations, a 70% increase in SOC analyst resource utilization, and an 80% decrease in workflow errors.

Advanced AI In-Context Learning, Planning, and Reasoning

Torq Agentic AI takes a cutting-edge multi-agent approach, in that its agents autonomously analyze security incidents, and then assess what other agents are required to successfully achieve mitigation. Torq agents are capable of breaking down tasks and sequentially coordinating and assigning elements to other specialized agents. These processes emulate human-driven team collaboration at exponential multiples. Torq’s agents also learn from each other, and every incident engagement further informs future actions to better solve novel problems as they emerge.

Torq Agentic AI is a crucial part of Torq HyperSOC, the purpose-built Torq solution that harnesses the power of the AI-driven Torq Hyperautomation Platform to automate, manage, and monitor critical SOC responses at machine speed.

Also Read: CIO Influence Interview with Doug Recker, President and Founder of Duos Edge AI

Carvana Drives SOC Success with Torq Agentic AI

Carvana, the automotive industry pioneer for buying and selling used cars online, has experienced extraordinary outcomes with Torq Agentic AI and Torq HyperSOC.

“Torq Agentic AI and Torq HyperSOC now handle 100% of Carvana’s Tier-1 security alerts and have automated 41 different runbooks within just one month of deployment,” said Kevin Murrietta, Team Lead, Security Operations Center, Carvana. “Torq has transformed user verification and incident response, dramatically freeing up time for our SOC analysts to focus on the most impactful and pressing alerts with significant potential organizational impact.”

Carvana join the ranks of Torq’s existing customer base, including Abnormal Security, Armis, Blackstone, Check Point Security, Chipotle, Lemonade, Lennar, Nubank, Rivian, Telefonica, Wiz, Zara, and ZoomInfo, as well as Fortune 100 consumer packaged goods, fashion, financial, hospitality, and sports apparel companies.

A Truly Collaborative Agentic AI Framework

The Torq Agentic AI framework involves multiple collaborative agents that are experts in specific tasks, and then work with one another to address related, complementary actions. They are all opinionated and autonomous, and interact to ensure their processes seamlessly mesh. In fact, they are capable of debating with one another about how to solve problems, which usually occurs within one or two cycles that happen within seconds.

Key Torq agents include:

  • Socrates Agent: Functions as a virtual Tier-1 SOC analyst, complementing current staff, and acting as a force multiplier for team output. Socrates Agentic AI hyperautomates key activities, including: alert triage, validation, and classification; contextual data enrichment; incident investigation; and escalation and response.
  • Builder Agent: Empowers SOC analysts and architects to rapidly create custom security automation workflows. It uses natural language input, leveraging LLMs and Torq’s extensive library of actions and integrations to generate simple to complex workflows, significantly reducing implementation time effort, and troubleshooting.
  • Scripting Agent: Acting as a step completion assistant, non-developers are empowered to effortlessly create sophisticated automation steps with expert coding logic and syntax, by receiving intelligent suggestions for scripting, variables, and technical elements.

Validated by Abnormal Security and GigaOm

“I believe the successful use of Torq Agentic AI in SOC operations shows up in practical outcomes,” said Mick Leach, Field CISO, Abnormal Security. “With Torq Agentic AI, the answer is yes to questions such as: Are analysts happier? Are they sticking around? Do they have time to focus on more interesting and complex investigations? Are MTTM and MTTR lower? Torq Agentic AI extends and enhances our team so it can make better decisions more quickly — resulting in stronger security all around.”

GigaOm validated the Torq Agentic AI approach when it declared Torq the Autonomous SOC Leader, in its new Autonomous SOC Radar report.

“Torq addresses common SOC challenges such as alert fatigue, false positives, and staff burnout,” states GigaOm in the October 2024 Autonomous SOC Radar. “Torq offers autonomous operations features for both workflow design and runtime security event processing. Design-time capabilities consist of assistive development of automated processes, such as summarization for successful collaboration, improvement, and development co-pilots. Runtime capabilities consist of data enrichment and data-driven suggestions to assign specific teams or analysts based on their profile, ownership, and history. It can also suggest investigative steps to help understand the issue and recommend containment actions to stop the negative effect and facilitate complete remediation.”

To share your insights with us as part of editorial or sponsored content, please write to psen@itechseries.com]

Related posts

Moveworks and Carahsoft Partner to Bring Conversational AI to the Public Sector

Business Wire

IoT Automation Pioneer KINEXON Raises $130Million in Funding Round Led by Thomas H. Lee Partners

News From INVL Technology Managed Companies: “Andmevara Services” Becomes “Novian Eesti” With a Focus on Integrated IT Services

CIO Influence News Desk