Torq unveils SOC Brain, a self-learning layer for its AI SOC platform
Security hyperautomation platform company Torq Ltd. today introduced Torq SOC Brain, a new layer of its artificial intelligence security operations center platform that trains on a customer’s own investigation history and analyst decisions instead of treating every alert as a fresh problem.
Torq said most autonomous investigation tools retrieve similar past cases and pass them to a large language model at the point of decision. Its argument is that retrieval is not learning. SOC Brain is built to reason from precedent, absorb the way a given security operations center weighs evidence and revise its judgment after every closed investigation.
Three capabilities sit underneath it.
Torq Recall pulls up relevant historical cases using deterministic matching on observables such as IP addresses, file hashes, URLs and hostnames, then ranks them by relevance and works out how earlier analyst decisions should bear on the verdict at hand. It reads analyst notes, identifies conflicting precedent and adjusts confidence according to how strong the evidence is. Analysts do not have to tag cases or write rules for any of it to work.
Torq Reflex trains dedicated models on a team’s confirmed verdicts and its corrections. Reflex matches analyst-corrected verdicts 85% of the time immediately. Alerts it is confident about are automated. The rest are escalated to a human.
Torq Retrospect deals with the cold start. It imports resolved incidents from a customer’s existing security tools before deployment so Recall and Reflex have organizational history to draw on from the first alert rather than months later.
Every customer gets a private SOC Brain. Torq does not pool customer data, share model parameters or train one customer’s models on another’s incidents, and the company said that isolation is a property of the architecture rather than a setting an administrator switches on.
Torq said decisions are explainable and auditable, with automation gated by confidence thresholds and human oversight. Torq positions that as an answer to the governance and transparency demands security leaders are under, including emerging requirements such as the European Union’s AI Act.
“Every cybersecurity vendor claims their AI is self-learning, but virtually none are,” said Ofer Smadari, co-founder and chief executive of Torq. “What the majority do is simply pass cases and hand them to an LLM at the point of decision. That’s nothing more than executing based on memory. Self-learning means reaching new conclusions from that history, and that’s much harder to build.”
Smadari added that the payoff for analysts is fewer repetitive reviews and more consistent decisions, with growing confidence that the platform “is making decisions the same way their security team would.”
The release caps an active year for the company. Torq acquired application security startup Jit.io Ltd. in May to add context graphs to the platform, and in January it raised $140 million at a $1.2 billion valuation in a Series D round led by Merlin Ventures Ltd. that valued it at $1.2 billion.
Torq will demo SOC Brain at its booth at Black Hat USA in Las Vegas Aug. 3-6.
Image: Torq
Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities.
15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more** 11.4k+ theCUBE alumni**— Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network.
About SiliconANGLE Media
theCUBE AIand theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI.
Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.