CISO Tribune

Vendor comparison · 2 companies

Beacon vs Torq

Beacon is a platform for AI-native security that creates an environment for AI agents and security teams to autonomously prevent, detect, and defend. Torq sells the Torq AI SOC Platform, which turns alerts into action across a security stack. CISO Tribune files both under AI SOC analysts. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Beacon
  • Torq
Beacon vs Torq: Products, Customers and Funding Compared
BeaconBeacon is a platform for AI-native security that creates an environment for AI agents and security teams to autonomously prevent, detect, and defend.beacon.securityTorqTorq sells the Torq AI SOC Platform, which turns alerts into action across a security stack.torq.io
What it sells
  • Agent Lake[1][8]A layer that security teams connect to through APIs and MCP integrations.
  • Data Layer[1][2][6]Fuses telemetry across vendors and routes clean data to external systems.
  • Recipes[5][7]Expert-crafted logic that reduces data volume before ingestion.
  • AI Assistant[7]Lets teams describe custom enrichment and transformation needs in natural language.
  • Beacon Agent[7]Monitors the telemetry estate for new applications and missing sources.
  • Torq AI SOC Platform[4][6][9][14]Turns alerts into action across a security stack.
  • Auto Triage[4][6][7]Agentic AI engine that prioritizes threats and separates noise from actual risk.
  • Case Management[4][6][7][10]Native case management with evidence, timelines and case summaries.
  • Torq HyperAgents®[4]A group of autonomous, transparent, and customizable AI Agents.
  • Socrates[4][6][7][10]Natural language-driven agentic AI that autonomously remediates critical threats.
  • Hyperautomation[4][6]Workflow automation using integrations with the security stack.
  • Context Graph[4][7][9]A visual map of the identities, assets, and relationships in an environment.
  • Integrations[4][6]300 pre-built integrations and 4,000+ pre-built steps.
Categories
Headquarters
Not stated on its pagesTel Aviv, Israel[3]
Founded
Not stated on its pages2020[2][9]
Ownership and funding
Privately held[2][11]Privately held[4][6][9][16]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • July 28, 2026Torq introduced Torq SOC Brain, a new layer of its AI SOC Platform that learns from historical investigations and analyst decisions.[15]
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[11]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[16]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Its pages describe high-growth technology companies and private equity-backed organizations among its adopters, and security teams in critical, highly regulated industries. Beacon is aimed at teams that migrate SIEMs or run multiple SIEMs and data lakes in parallel. The company states multi-cloud, multi-region and bring-your-own-cloud deployment options.From its own pages, Torq serves MSSPs and MDRs, which get an omniview across all customer workspaces. MSSPs can extend Torq automation capabilities to customer environments they do not directly manage. Torq offers to provide and sign a HIPAA Business Associate Agreement when engaging with HIPAA covered entities. Torq dashboards can be tailored to roles such as SOC Manager, CISO or customer. Torq customers include a global analytics company that rebuilt its playbooks with the Torq AI SOC Platform.
Last verified
November 6, 2026September 27, 2026

Where they overlap

  • Beacon and Torq are both filed under AI SOC analysts.
  • Both are privately held.

Where they differ, field by field

  • Beacon's primary category is Security data lakes and pipelines; Torq's is AI SOC analysts.
  • Torq is also filed under SOAR and security automation.
  • Beacon lists Agent Lake, Data Layer, Recipes, AI Assistant and Beacon Agent. Torq lists Torq AI SOC Platform, Auto Triage, Case Management, Torq HyperAgents®, Socrates and 3 more.
  • Torq is headquartered in Tel Aviv, Israel.
  • Torq was founded in 2020.

What it sells: Beacon

What Agent Lake does[1][8]
Security teams can plug into Agent Lake through APIs and MCP integrations. Teams use Skills to power their own agentic workflows.
What Data Layer does[1][2][6]
Beacon's Data Layer fuses telemetry across vendors, routes clean data to external systems, and pre-resolves entities. Data Layer automates normalization and enrichment at scale.
What Recipes does[5][7]
Recipes reduce data volume before ingestion by filtering, aggregating, and optimizing events while preserving detection-relevant fields. Expert-vetted Recipes deliver production-ready logic out of the box.
What AI Assistant does[7]
AI Assistant lets teams describe custom enrichment and transformation needs in natural language. Beacon applies identity, threat intelligence, and asset context in-stream.
What Beacon Agent does[7]
The Beacon Agent continuously monitors the telemetry estate, tracking new applications and flagging missing sources. Beacon Agent alerts when critical data goes quiet and resolves issues before they impact detection or investigation.

What it sells: Torq

What Torq AI SOC Platform does[4][6][9][14]
The Torq AI SOC Platform unifies visibility and turns alerts into action across a security stack. The Torq AI SOC Platform includes 300 pre-built integrations and 4,000+ pre-built steps. Torq describes the platform as taking action and closing cases across the complete threat management lifecycle.
What Auto Triage does[4][6][7]
Guidance and Rules for Auto Triage can be created with Socrates Builder. Auto Triage adds graph context directly to alerts.
What Case Management does[4][6][7][10]
Case Management is native to the Torq platform and provides a single source of truth with evidence, timelines, and case summaries. Torq case management is built on the Open Cybersecurity Schema Framework (OCSF) with automation-first, event-driven workflows.
What Torq HyperAgents® does[4]
Torq HyperAgents is a group of autonomous, transparent, and customizable AI Agents. Torq HyperAgents are given access to the existing tools and steps in the SOC to deliver agentic insights and take action. Agentic runbooks access authorized data and tools, and AI Agents cross-reference historical cases, recognize threat patterns and summarize findings.
What Socrates does[4][6][7][10]
Socrates is described as natural language-driven agentic AI that autonomously remediates critical threats. Socrates coordinates specialized AI Agents and manages cases end-to-end. Socrates handles Tier-1 and Tier-2 tickets as a 24×7 on-call teammate.
What Hyperautomation does[4][6]
Torq Hyperautomation uses integrations with the security stack for workflow automation. Torq fuses agentic reasoning and Hyperautomation, from alert through remediation. AI Agents can be used to build new integrations, workflows, and custom use cases.
What Context Graph does[4][7][9]
Context Graph gives a visual map of the identities, assets, and relationships in an environment. Auto Triage adds graph context directly to alerts.
What Integrations does[4][6]
The Torq AI SOC Platform includes 300 pre-built integrations and 4,000+ pre-built steps. AI Agents can be used to build new integrations, workflows, and custom use cases. Torq uses real-time API monitoring so that automations stay connected when third-party data formats change.

Questions about Beacon and Torq

What do Beacon and Torq sell?
Beacon sells Agent Lake, Data Layer, Recipes, AI Assistant and Beacon Agent. Torq sells Torq AI SOC Platform, Auto Triage, Case Management, Torq HyperAgents®, Socrates and 3 more.
Are Beacon and Torq in the same category?
They share AI SOC analysts. Beacon's primary category is Security data lakes and pipelines and Torq's is AI SOC analysts.
Where are Beacon and Torq headquartered?
Torq is headquartered in Tel Aviv, Israel.
When were Beacon and Torq founded?
Torq was founded in 2020.
Who owns Beacon and Torq?
Beacon is privately held. Torq is privately held.
Who are Beacon and Torq sold to?
Its pages describe high-growth technology companies and private equity-backed organizations among its adopters, and security teams in critical, highly regulated industries. From its own pages, Torq serves MSSPs and MDRs, which get an omniview across all customer workspaces.
What have Beacon and Torq announced recently?
July 28, 2026: Torq introduced Torq SOC Brain, a new layer of its AI SOC Platform that learns from historical investigations and analyst decisions.

About Beacon

Beacon is a platform for AI-native security that creates an environment for AI agents and security teams to autonomously prevent, detect, and defend. Beacon describes itself as a security data management platform built to solve the tradeoff between cost, coverage, and context. Beacon says every extra log raises the SIEM bill, so teams cut coverage and lose the context AI agents need. Beacon automatically discovers coverage gaps, transforms and enriches telemetry with security-driven intelligence, and routes optimized data to any destination.[1][3][4]

Beacon's Data Layer fuses telemetry across vendors, routes clean data to external systems, pre-resolves entities, and automates normalization and enrichment at scale. Beacon provides native collection, integration, monitoring, and schema normalization across 150+ sources. Beacon has 150+ pre-built connectors and skills. Beacon collects security, application, identity, and contextual data via APIs, syslog, webhooks, and cloud storage. Beacon processes, transforms and routes data to destinations in real time using its streaming pipeline. Beacon's coverage and posture monitoring continuously maps sources against threats and compliance and flags gaps.[1][4][5]

Beacon maps data to ECS, OCSF, ASIM, or any custom schema. Beacon applies identity, threat intelligence, and asset context in-stream through expert-vetted Recipes and an AI Assistant. Beacon's expert-crafted recipes reduce data volume before ingestion by filtering, aggregating, and optimizing events while preserving detection-relevant fields. Beacon's AI detects and classifies sensitive data in motion, including PII, financial data, credentials, and secrets. Beacon ingests and routes security data from Claude with security-aware optimization, enrichment and normalization.[5][6][7]

Beacon's platform lets defenders use agents for detection engineering, investigation support, posture, and shadow AI analysis. Beacon supports building and running agents on an open harness with support for MCP, CLI, and API. Beacon includes a growing library of specialized agents built for the work defenders do every day. Beacon lists shadow-AI analysis, alert triage and investigation among the agents coming soon. The Beacon Agent continuously monitors the telemetry estate, tracking new applications, flagging missing sources, alerting when critical data goes quiet, and resolving issues. Security teams can plug into Beacon's Agent Lake through APIs and MCP integrations, using Skills to power their own agentic workflows. Beacon discovers AI tools across an environment and surfaces unsanctioned AI usage. Beacon Fabric has Discovery capabilities that scanned the environment of Lemonade to surface SaaS coverage gaps through agentic workflows.[1][3][4][6][7][8]

Beacon separates the data layer from the analytics layer, collecting, normalizing, and routing data to any destination in the format it expects. Beacon collects telemetry and routes it to a SIEM, data lake, warehouse, or cloud storage. Beacon routes the same data to multiple destinations simultaneously, each normalized to the schema that tool expects. Beacon has pre-built connectors for cloud, SaaS, identity, endpoint, and business applications, plus every major SIEM, data lake, and cloud storage as a destination.[6]

Beacon is SOC 2 Type II and ISO 27001 compliant and offers multi-cloud, multi-region, and bring-your-own-cloud deployment options. Beacon is used by dozens of enterprises across industries from fintech to healthcare to hospitality. Beacon's adopters include high-growth technology companies and private equity-backed organizations. Lemonade is a full-stack insurance company offering consumer insurance products across the U.S. and Europe. Lemonade streams key telemetry sources through Beacon covering cloud infrastructure, business apps, endpoint data, and security tooling.[3][5]

Beacon was founded in 2024 by veterans of elite intelligence, offensive security, and enterprise-scale data infrastructure. Gal Tal-Hochberg, CEO and Co-Founder of Beacon, previously founded HiredScore. Or Mattatia and Iddo Israely are co-founders of Beacon with backgrounds in nation-state cyber defense. Beacon's founders come from Israeli Unit 8200, incident response at Sygnia and Mitiga, national cyber defense, and global technology leadership at Team8. Beacon's team includes incident responders, threat researchers, and offensive security experts. Beacon closed a $13 million seed funding round led by Notable Capital, with participation from Holly Ventures, AlphaDrive Ventures, SVCI, Jefferies Family Office and over 60 founders and CISOs.[1][4][5][9][10]

Beacon on the record

Sources

Beacon full record

  1. [1]beacon.securityBeacon · beacon.security · undated page, accessed November 6, 2026 · Tier A
  2. [2]Beacon SecurityBeacon · published July 16, 2026 · Tier A
  3. [3]Beacon SecurityBeacon · undated page, accessed November 10, 2026 · Tier A
  4. [4]Beacon SecurityBeacon · undated page, accessed November 10, 2026 · Tier A
  5. [5]Beacon for Anthropic Compliance APIBeacon · undated page, accessed November 10, 2026 · Tier A
  6. [6]Security Stack ModernizationBeacon · undated page, accessed November 10, 2026 · Tier A
  7. [7]Beacon SecurityBeacon · undated page, accessed November 10, 2026 · Tier A
  8. [8]Beacon SecurityBeacon · undated page, accessed November 10, 2026 · Tier A
  9. [9]Beacon SecurityBeacon · published May 12, 2026 · Tier A
  10. [10]About UsBeacon · undated page, accessed November 10, 2026 · Tier A
  11. [11]Beacon Bid Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

Torq full record

  1. [1]Torq seriesdTorq · torq.io · published January 12, 2026 · Tier A
  2. [2]CompanyTorq · torq.io · undated page, accessed September 27, 2026 · Tier A
  3. [3]Security startup torq raises cash at 1 2 billion valuationBloomberg · bloomberg.com · published January 11, 2026 · Tier B
  4. [4]Torq AI SOC Platform | AI Agents and Agentic SecOpsTorq · undated page, accessed October 29, 2026 · Tier A
  5. [5]Torq Skull Hoodie – Torq MerchTorq · undated page, accessed October 29, 2026 · Tier A
  6. [6]The Torq AI SOC PlatformTorq · undated page, accessed November 10, 2026 · Tier A
  7. [7]Product Updates | Torq AI SOC PlatformTorq · undated page, accessed November 10, 2026 · Tier A
  8. [8]Torq Integrations | AI SOC and Security Automation IntegrationsTorq · undated page, accessed November 10, 2026 · Tier A
  9. [9]About Torq | The Leading AI SOC PlatformTorq · undated page, accessed November 10, 2026 · Tier A
  10. [10]Torq for MSSPs and MDRsTorq · undated page, accessed November 10, 2026 · Tier A
  11. [11]Torq Security Hyperautomation vs. Legacy SOAR | TorqTorq · undated page, accessed November 10, 2026 · Tier A
  12. [12]Torq Hyperautomation vs. Security Workflow Automation Software | TorqTorq · undated page, accessed November 10, 2026 · Tier A
  13. [13]Security and Compliance | TorqTorq · undated page, accessed November 10, 2026 · Tier A
  14. [14]AI SOC Customers | TorqTorq · undated page, accessed November 10, 2026 · Tier A
  15. [15]Torq Unveils The SOC Brain: The AI SOC That Learns, Not Just Remembers | TorqTorq · published July 28, 2026 · Tier A
  16. [16]Torq AI SOC Platform Reviews & Product DetailsG2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.