CISO Tribune

Vendor comparison · 2 companies

Anomali vs Torq

Anomali is a cybersecurity platform that combines a unified security data lake, threat intelligence, and agentic AI for security operations. Torq sells the Torq AI SOC Platform, which turns alerts into action across a security stack. CISO Tribune files both under AI SOC analysts. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Anomali
  • Torq
Anomali vs Torq: Products, Customers and Funding Compared
AnomaliAnomali is a cybersecurity platform that combines a unified security data lake, threat intelligence, and agentic AI for security operations.anomali.comTorqTorq sells the Torq AI SOC Platform, which turns alerts into action across a security stack.torq.io
What it sells
  • Anomali IntegratorEnriches and automatically distributes threat intelligence across a security ecosystem.
  • Torq AI SOC Platform[4][6][9][14]Turns alerts into action across a security stack.
  • Auto Triage[4][6][7]Agentic AI engine that prioritizes threats and separates noise from actual risk.
  • Case Management[4][6][7][10]Native case management with evidence, timelines and case summaries.
  • Torq HyperAgents®[4]A group of autonomous, transparent, and customizable AI Agents.
  • Socrates[4][6][7][10]Natural language-driven agentic AI that autonomously remediates critical threats.
  • Hyperautomation[4][6]Workflow automation using integrations with the security stack.
  • Context Graph[4][7][9]A visual map of the identities, assets, and relationships in an environment.
  • Integrations[4][6]300 pre-built integrations and 4,000+ pre-built steps.
Categories
Headquarters
Redwood City, United States[2]Tel Aviv, Israel[3]
Founded
Not stated on its pages2020[2][9]
Ownership and funding
Not stated on its pagesPrivately held[4][6][9][16]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • May 5, 2026Anomali announced ThreatStream Next-Gen, available as a standalone intelligence solution and embedded within the Anomali Unified Security Data Lake.[2]
  • July 28, 2026Torq introduced Torq SOC Brain, a new layer of its AI SOC Platform that learns from historical investigations and analyst decisions.[15]
G2 and Gartner Peer Insights
  • G2: listed, seen November 4, 2026[4]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[16]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Anomali sells mainly to enterprise security teams and public-sector organizations. Anomali says its 400+ enterprise customers span financial services, critical infrastructure, government, and national defense. Anomali also says its platform works alongside the SIEM, EDR, and SOC tools customers already own, and the data lake can optimize existing SIEMs or replace them. Anomali's threat intelligence sharing is aimed at ISACs and partners.From its own pages, Torq serves MSSPs and MDRs, which get an omniview across all customer workspaces. MSSPs can extend Torq automation capabilities to customer environments they do not directly manage. Torq offers to provide and sign a HIPAA Business Associate Agreement when engaging with HIPAA covered entities. Torq dashboards can be tailored to roles such as SOC Manager, CISO or customer. Torq customers include a global analytics company that rebuilt its playbooks with the Torq AI SOC Platform.
Last verified
September 27, 2026September 27, 2026

Where they overlap

  • AI SOC analysts is the primary category of both Anomali and Torq.

Where they differ, field by field

  • Anomali is also filed under Threat intelligence and Security data lakes and pipelines. Torq is also filed under SOAR and security automation.
  • Anomali lists Anomali Integrator. Torq lists Torq AI SOC Platform, Auto Triage, Case Management, Torq HyperAgents®, Socrates and 3 more.
  • Anomali is headquartered in Redwood City, United States. Torq is headquartered in Tel Aviv, Israel.
  • Torq was founded in 2020.
  • Torq is privately held.

How they differ

CISO Tribune files both Anomali and Torq under AI SOC analysts as the primary category, but their other categories differ: Anomali also sits under Threat intelligence and Security data lakes and pipelines, while Torq also sits under SOAR and security automation. Anomali describes a platform that combines a unified security data lake, threat intelligence, and agentic AI for security operations. Torq sells the Torq AI SOC Platform, which turns alerts into action across a security stack, along with products such as Auto Triage, Case Management, Socrates, and Context Graph.

On the Anomali side, ThreatStream Next-Gen supports sharing intelligence with ISACs and partners through Trusted Circles and STIX/TAXII, and Anomali Integrator distributes threat intelligence across a security ecosystem. Anomali says its data lake can optimize existing SIEMs or replace them. Torq describes taking action and closing cases across the complete threat management lifecycle, and its platform includes 300 pre-built integrations and 4,000+ pre-built steps. Torq says agentic response runs either completely autonomously or with human-on-the-loop oversight, while Anomali says consequential actions await human approval by default.

Anomali is headquartered in Redwood City, United States, and says it is backed by Google Ventures, General Catalyst, and IVP. Torq is headquartered in Tel Aviv, Israel, was founded in 2020, and is privately held. Anomali states it has 400+ enterprise customers across financial services, critical infrastructure, government, and national defense. Torq serves MSSPs and MDRs, and its named customers include Carvana and Check Point. Anomali announced ThreatStream Next-Gen on May 5, 2026, and Torq introduced Torq SOC Brain on July 28, 2026.

What it sells: Torq

What Torq AI SOC Platform does[4][6][9][14]
The Torq AI SOC Platform unifies visibility and turns alerts into action across a security stack. The Torq AI SOC Platform includes 300 pre-built integrations and 4,000+ pre-built steps. Torq describes the platform as taking action and closing cases across the complete threat management lifecycle.
What Auto Triage does[4][6][7]
Guidance and Rules for Auto Triage can be created with Socrates Builder. Auto Triage adds graph context directly to alerts.
What Case Management does[4][6][7][10]
Case Management is native to the Torq platform and provides a single source of truth with evidence, timelines, and case summaries. Torq case management is built on the Open Cybersecurity Schema Framework (OCSF) with automation-first, event-driven workflows.
What Torq HyperAgents® does[4]
Torq HyperAgents is a group of autonomous, transparent, and customizable AI Agents. Torq HyperAgents are given access to the existing tools and steps in the SOC to deliver agentic insights and take action. Agentic runbooks access authorized data and tools, and AI Agents cross-reference historical cases, recognize threat patterns and summarize findings.
What Socrates does[4][6][7][10]
Socrates is described as natural language-driven agentic AI that autonomously remediates critical threats. Socrates coordinates specialized AI Agents and manages cases end-to-end. Socrates handles Tier-1 and Tier-2 tickets as a 24×7 on-call teammate.
What Hyperautomation does[4][6]
Torq Hyperautomation uses integrations with the security stack for workflow automation. Torq fuses agentic reasoning and Hyperautomation, from alert through remediation. AI Agents can be used to build new integrations, workflows, and custom use cases.
What Context Graph does[4][7][9]
Context Graph gives a visual map of the identities, assets, and relationships in an environment. Auto Triage adds graph context directly to alerts.
What Integrations does[4][6]
The Torq AI SOC Platform includes 300 pre-built integrations and 4,000+ pre-built steps. AI Agents can be used to build new integrations, workflows, and custom use cases. Torq uses real-time API monitoring so that automations stay connected when third-party data formats change.

Questions about Anomali and Torq

What do Anomali and Torq sell?
Anomali sells Anomali Integrator. Torq sells Torq AI SOC Platform, Auto Triage, Case Management, Torq HyperAgents®, Socrates and 3 more.
Are Anomali and Torq in the same category?
Yes. AI SOC analysts is the primary category of both on CISO Tribune.
Where are Anomali and Torq headquartered?
Anomali is headquartered in Redwood City, United States. Torq is headquartered in Tel Aviv, Israel.
When were Anomali and Torq founded?
Torq was founded in 2020.
Who owns Anomali and Torq?
Torq is privately held.
Who are Anomali and Torq sold to?
From its own pages, Anomali sells mainly to enterprise security teams and public-sector organizations. From its own pages, Torq serves MSSPs and MDRs, which get an omniview across all customer workspaces.
What have Anomali and Torq announced recently?
May 5, 2026: Anomali announced ThreatStream Next-Gen, available as a standalone intelligence solution and embedded within the Anomali Unified Security Data Lake. July 28, 2026: Torq introduced Torq SOC Brain, a new layer of its AI SOC Platform that learns from historical investigations and analyst decisions.

About Anomali

Anomali is a cybersecurity platform that combines a unified security data lake, threat intelligence, and agentic AI for security operations. Anomali says the platform is designed to help security teams centralize data, enrich it with threat context, and improve detection, investigation, and response.[6]

Anomali describes the problem it addresses as security teams having more telemetry, tools, and AI initiatives than ever while the underlying data remains fragmented, noisy, and disconnected from the intelligence needed to act. Anomali cites 69% of enterprises running 10 or more detection and response tools, and says analysts face 174 alerts per day, of which only 22% are worth a real investigation.

Anomali says it normalizes everything into OCSF, one common schema, so a detection is written once and works everywhere. Native threat intelligence enrichment is applied at ingest and search time through native integration with ThreatStream Next-Gen. Anomali says the data lake can be used to optimize existing SIEMs or replace them entirely.[7][12]

Anomali says it aggregates intelligence from hundreds of open, commercial, and community sources, backed by over a decade of continuously curated threat graph. That intelligence is fused with the customer's assets, users, event logs, and incident history, and can be pushed to detection tools, response playbooks, and AI agents. ThreatStream Next-Gen also supports sharing intelligence with ISACs, partners, and internal teams via Trusted Circles and STIX/TAXII.[8]

AURA, the Anomali Unified Response Agent, triages, investigates, and recommends, with approval thresholds, rollback, and an audit trail. Anomali says that by default, consequential actions await human approval. The Anomali Autonomy Model moves each workflow from Recommend to Approve to Act, one step at a time.

Anomali Integrator enriches and automatically distributes threat intelligence across a customer's security ecosystem. It includes out-of-the-box integrations with common endpoints, SIEMs, firewalls, proxies, DNS, ISACs, and more.[9][10]

Anomali states that it has 400+ enterprise customers across financial services, critical infrastructure, government, and national defense, and says it is backed by Google Ventures, General Catalyst, and IVP. Anomali says its platform works with the SIEM, EDR, cloud, identity, email, and SOC tools customers already own.

Anomali names its founder as Hugh Njemanze and its CTO as Wei Huang.[1][6][7][9][10][11]

Anomali on the record

Sources

Anomali full record

  1. [1]anomali.comAnomali · anomali.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Anomali launches ThreatStream Next-Gen to turn intelligence into action — at the speed threats demandAnomali · published May 5, 2026 · Tier A
  3. [3]Anomali | Agentic SOC Platform for Governed Security ActionAnomali · undated page, accessed October 23, 2026 · Tier A
  4. [4]Anomali Security Analytics Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 23, 2026 · Tier C
  5. [5]Anomali Reviews, Ratings & Features 2026 | Gartner Peer InsightsGartner Peer Insights · undated page, accessed October 23, 2026 · Tier C
  6. [6]About Anomali | AI-Powered Security and IT OperationsAnomali · undated page, accessed November 4, 2026 · Tier A
  7. [7]Unified Security Data Lake | AnomaliAnomali · undated page, accessed November 4, 2026 · Tier A
  8. [8]ThreatStream Next-Gen - Managed Threat Intelligence | AnomaliAnomali · undated page, accessed November 4, 2026 · Tier A
  9. [9]Anomali Integrator | Security Automation and OrchestrationAnomali · undated page, accessed November 4, 2026 · Tier A
  10. [10]Customer Success for Security Operations Teams | AnomaliAnomali · undated page, accessed November 4, 2026 · Tier A
  11. [11]Cybersecurity Training | Anomali UniversityAnomali · undated page, accessed November 4, 2026 · Tier A
  12. [12]AI-Powered Cybersecurity & Agentic SOC Platform | AnomaliAnomali · undated page, accessed November 4, 2026 · Tier A

Torq full record

  1. [1]Torq seriesdTorq · torq.io · published January 12, 2026 · Tier A
  2. [2]CompanyTorq · torq.io · undated page, accessed September 27, 2026 · Tier A
  3. [3]Security startup torq raises cash at 1 2 billion valuationBloomberg · bloomberg.com · published January 11, 2026 · Tier B
  4. [4]Torq AI SOC Platform | AI Agents and Agentic SecOpsTorq · undated page, accessed October 29, 2026 · Tier A
  5. [5]Torq Skull Hoodie – Torq MerchTorq · undated page, accessed October 29, 2026 · Tier A
  6. [6]The Torq AI SOC PlatformTorq · undated page, accessed November 10, 2026 · Tier A
  7. [7]Product Updates | Torq AI SOC PlatformTorq · undated page, accessed November 10, 2026 · Tier A
  8. [8]Torq Integrations | AI SOC and Security Automation IntegrationsTorq · undated page, accessed November 10, 2026 · Tier A
  9. [9]About Torq | The Leading AI SOC PlatformTorq · undated page, accessed November 10, 2026 · Tier A
  10. [10]Torq for MSSPs and MDRsTorq · undated page, accessed November 10, 2026 · Tier A
  11. [11]Torq Security Hyperautomation vs. Legacy SOAR | TorqTorq · undated page, accessed November 10, 2026 · Tier A
  12. [12]Torq Hyperautomation vs. Security Workflow Automation Software | TorqTorq · undated page, accessed November 10, 2026 · Tier A
  13. [13]Security and Compliance | TorqTorq · undated page, accessed November 10, 2026 · Tier A
  14. [14]AI SOC Customers | TorqTorq · undated page, accessed November 10, 2026 · Tier A
  15. [15]Torq Unveils The SOC Brain: The AI SOC That Learns, Not Just Remembers | TorqTorq · published July 28, 2026 · Tier A
  16. [16]Torq AI SOC Platform Reviews & Product DetailsG2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.