CISO Tribune

Vendor comparison · 2 companies

IRONSCALES vs Torq

IRONSCALES sells email security that protects Microsoft 365 and Google Workspace against business email compromise, account takeover, malware and malicious URLs, credential harvesting, generative AI attacks, QR code and image-based phishing, and deepfake impersonation in Microsoft Teams meetings. Torq sells the Torq AI SOC Platform, which turns alerts into action across a security stack. CISO Tribune files both under AI SOC analysts. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • IRONSCALES
  • Torq
IRONSCALES vs Torq: Products, Customers and Funding Compared
IRONSCALESIRONSCALES sells email security that protects Microsoft 365 and Google Workspace against business email compromise, account takeover, malware and malicious URLs, credential harvesting, generative AI attacks, QR code and image-based phishing, and deepfake impersonation in Microsoft Teams meetings.ironscales.comTorqTorq sells the Torq AI SOC Platform, which turns alerts into action across a security stack.torq.io
What it sells
  • Phishing SOC Agent[6][10]Delivers L2-level forensics on suspicious email.
  • Phishing Simulation Agent[6][10]Builds phishing simulations from OSINT gathered on employees.
  • Human Risk Management[11]Phishing simulation, security awareness training, and user risk scoring.
  • Themis[2][9]An agentic AI virtual SOC that classifies, clusters, and remediates threats.
  • Email Incident Management Service (EIMS)[12]IRONSCALES experts handle email threat investigation, remediation, and AI tuning.
  • Torq AI SOC Platform[4][6][9][14]Turns alerts into action across a security stack.
  • Auto Triage[4][6][7]Agentic AI engine that prioritizes threats and separates noise from actual risk.
  • Case Management[4][6][7][10]Native case management with evidence, timelines and case summaries.
  • Torq HyperAgents®[4]A group of autonomous, transparent, and customizable AI Agents.
  • Socrates[4][6][7][10]Natural language-driven agentic AI that autonomously remediates critical threats.
  • Hyperautomation[4][6]Workflow automation using integrations with the security stack.
  • Context Graph[4][7][9]A visual map of the identities, assets, and relationships in an environment.
  • Integrations[4][6]300 pre-built integrations and 4,000+ pre-built steps.
Categories
Headquarters
Atlanta, United States[1][13]Tel Aviv, Israel[3]
Founded
2014[1][13]2020[2][9]
Ownership and funding
Privately held[4][8]Privately held[4][6][9][16]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • July 28, 2026Torq introduced Torq SOC Brain, a new layer of its AI SOC Platform that learns from historical investigations and analyst decisions.[15]
G2 and Gartner Peer Insights
  • G2: listed, seen October 25, 2026[8]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[16]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, the company sells mainly to enterprises and to MSPs and MSSPs. One entry point addresses global companies that are transforming their email security to tackle modern threats. The site also presents a comparison of secure email gateways and API-based solutions for enterprises and MSPs.From its own pages, Torq serves MSSPs and MDRs, which get an omniview across all customer workspaces. MSSPs can extend Torq automation capabilities to customer environments they do not directly manage. Torq offers to provide and sign a HIPAA Business Associate Agreement when engaging with HIPAA covered entities. Torq dashboards can be tailored to roles such as SOC Manager, CISO or customer. Torq customers include a global analytics company that rebuilt its playbooks with the Torq AI SOC Platform.
Last verified
November 2, 2026September 27, 2026

Where they overlap

  • IRONSCALES and Torq are both filed under AI SOC analysts.
  • Both are privately held.

Where they differ, field by field

  • IRONSCALES's primary category is Email security; Torq's is AI SOC analysts.
  • Torq is also filed under SOAR and security automation.
  • IRONSCALES lists Phishing SOC Agent, Phishing Simulation Agent, Human Risk Management, Themis and Email Incident Management Service (EIMS). Torq lists Torq AI SOC Platform, Auto Triage, Case Management, Torq HyperAgents®, Socrates and 3 more.
  • IRONSCALES is headquartered in Atlanta, United States. Torq is headquartered in Tel Aviv, Israel.
  • IRONSCALES was founded in 2014. Torq was founded in 2020.

What it sells: IRONSCALES

What Phishing SOC Agent does[6][10]
Phishing SOC Agent delivers L2-level forensics in minutes and runs five analysis tracks in parallel: sender verification, body analysis for social engineering, link inspection through the full redirect chain, attachment detonation across 100+ engines, and relay path tracing. The agent's output is a Security Assessment with a verdict, key evidence, and a full activity log of every step it took.
What Phishing Simulation Agent does[6][10]
Phishing Simulation Agent gathers OSINT on people, including social media profiles, data breach exposure, and recent job changes, and builds simulations that mirror the tactics targeting the organization. Personalized phishing emails are written in each employee's native language, and one sample per employee cluster is approved by the customer.
What Human Risk Management does[11]
The platform incorporates Human Risk Management: phishing simulation, security awareness training, and user risk scoring modules that automatically tailor simulations to each employee's specific threat profile. IRONSCALES offers a GPT-powered spear phishing module for VIPs and frequently targeted employees.
What Themis does[2][9]
Themis is described as an agentic AI virtual SOC that automatically classifies, clusters, and remediates threats detected by machine learning models or user-reported emails. When a threat is detected, Themis takes autonomous action: quarantining, clustering, or escalating based on automation preferences.

What it sells: Torq

What Torq AI SOC Platform does[4][6][9][14]
The Torq AI SOC Platform unifies visibility and turns alerts into action across a security stack. The Torq AI SOC Platform includes 300 pre-built integrations and 4,000+ pre-built steps. Torq describes the platform as taking action and closing cases across the complete threat management lifecycle.
What Auto Triage does[4][6][7]
Guidance and Rules for Auto Triage can be created with Socrates Builder. Auto Triage adds graph context directly to alerts.
What Case Management does[4][6][7][10]
Case Management is native to the Torq platform and provides a single source of truth with evidence, timelines, and case summaries. Torq case management is built on the Open Cybersecurity Schema Framework (OCSF) with automation-first, event-driven workflows.
What Torq HyperAgents® does[4]
Torq HyperAgents is a group of autonomous, transparent, and customizable AI Agents. Torq HyperAgents are given access to the existing tools and steps in the SOC to deliver agentic insights and take action. Agentic runbooks access authorized data and tools, and AI Agents cross-reference historical cases, recognize threat patterns and summarize findings.
What Socrates does[4][6][7][10]
Socrates is described as natural language-driven agentic AI that autonomously remediates critical threats. Socrates coordinates specialized AI Agents and manages cases end-to-end. Socrates handles Tier-1 and Tier-2 tickets as a 24×7 on-call teammate.
What Hyperautomation does[4][6]
Torq Hyperautomation uses integrations with the security stack for workflow automation. Torq fuses agentic reasoning and Hyperautomation, from alert through remediation. AI Agents can be used to build new integrations, workflows, and custom use cases.
What Context Graph does[4][7][9]
Context Graph gives a visual map of the identities, assets, and relationships in an environment. Auto Triage adds graph context directly to alerts.
What Integrations does[4][6]
The Torq AI SOC Platform includes 300 pre-built integrations and 4,000+ pre-built steps. AI Agents can be used to build new integrations, workflows, and custom use cases. Torq uses real-time API monitoring so that automations stay connected when third-party data formats change.

Questions about IRONSCALES and Torq

What do IRONSCALES and Torq sell?
IRONSCALES sells Phishing SOC Agent, Phishing Simulation Agent, Human Risk Management, Themis and Email Incident Management Service (EIMS). Torq sells Torq AI SOC Platform, Auto Triage, Case Management, Torq HyperAgents®, Socrates and 3 more.
Are IRONSCALES and Torq in the same category?
They share AI SOC analysts. IRONSCALES's primary category is Email security and Torq's is AI SOC analysts.
Where are IRONSCALES and Torq headquartered?
IRONSCALES is headquartered in Atlanta, United States. Torq is headquartered in Tel Aviv, Israel.
When were IRONSCALES and Torq founded?
IRONSCALES was founded in 2014. Torq was founded in 2020.
Who owns IRONSCALES and Torq?
IRONSCALES is privately held. Torq is privately held.
Who are IRONSCALES and Torq sold to?
From its own pages, the company sells mainly to enterprises and to MSPs and MSSPs. From its own pages, Torq serves MSSPs and MDRs, which get an omniview across all customer workspaces.
What have IRONSCALES and Torq announced recently?
July 28, 2026: Torq introduced Torq SOC Brain, a new layer of its AI SOC Platform that learns from historical investigations and analyst decisions.

About IRONSCALES

IRONSCALES sells email security that protects Microsoft 365 and Google Workspace against business email compromise, account takeover, malware and malicious URLs, credential harvesting, generative AI attacks, QR code and image-based phishing, and deepfake impersonation in Microsoft Teams meetings. IRONSCALES connects to Microsoft 365 or Google Workspace through a native API integration, with no MX record changes, no agents, and no mail flow disruption. IRONSCALES can be added behind an existing secure email gateway, and the gateway can be retired later.[7]

Adaptive AI builds a behavioral baseline and social graph using NLP and NLU, learning how users normally communicate. Adaptive AI provides real-time reputation, content, and behavioral analysis to detect malicious threats. Adaptive AI works at the mailbox level and sees internal and external traffic. IRONSCALES combines Adaptive AI with human insight from 36,000+ threat hunters across 18,000+ organizations, so an attack confirmed in one organization is blocked for the rest.[2][7]

Themis is described as an agentic AI virtual SOC that automatically classifies, clusters, and remediates threats detected by machine learning models or user-reported emails. When a threat is detected, Themis takes autonomous action: quarantining, clustering, or escalating based on automation preferences. IRONSCALES automates threat classification, incident clustering, quarantine actions, user notifications, and enrichment with threat intelligence. Admins can configure workflows from alert-only to fully automated remediation and end-user notification. When a user clicks the Report Phishing button, IRONSCALES scans the message, clusters it with similar emails, and evaluates it using Adaptive AI and community insights. The platform integrates with SIEM, SOAR, XDR, and EDR systems to support incident response workflows.[2][9]

Red Teaming Agent runs the same OSINT reconnaissance attackers run, pulling from social media, press releases, job postings, and vendor relationships. Red Teaming Agent generates attack simulations from what it finds. Phishing SOC Agent delivers L2-level forensics in minutes and runs five analysis tracks in parallel: sender verification, body analysis for social engineering, link inspection through the full redirect chain, attachment detonation across 100+ engines, and relay path tracing. Phishing Simulation Agent gathers OSINT on people, including social media profiles, data breach exposure, and recent job changes, and builds simulations that mirror the tactics targeting the organization.[6][10]

The platform incorporates Human Risk Management: phishing simulation, security awareness training, and user risk scoring modules that automatically tailor simulations to each employee's specific threat profile. IRONSCALES offers a GPT-powered spear phishing module for VIPs and frequently targeted employees. IRONSCALES experts handle email threat investigation, remediation, and AI tuning on the customer's behalf.[2][11][12]

Deepfake Protection analyzes voice independently of video, so it catches impersonation even when cameras are off. Protected identity profiles build automatically from normal meeting activity, with no manual uploads and no IT involvement. Outbound email encryption is elective or policy-based, with AES-256 encryption in transit and at rest. Hosted DMARC, SPF, and DKIM come with automated policy enforcement, SPF record flattening, and continuous monitoring with detailed authentication reports. Account takeover protection detects unauthorized access attempts to Microsoft user accounts to prevent data breaches, internal BEC attacks, and ransomware.[10][12]

IRONSCALES was founded in 2014 by alumni of the Israel Defense Forces' Intelligence Technology unit. IRONSCALES is headquartered in Atlanta, Georgia, and Tel Aviv, Israel. Series B funding of $8 million was led by Jump Capital, bringing total financing to $16 million since 2015. Series C funding of $64 million was led by PSG, bringing total financing to $80 million since 2015. Organizations worldwide are served both directly and through a network of more than 3,500 managed service provider (MSP) partners. For schools, the AI trains on actual attacks that target K-12 and higher education environments.[2][3][5][6][7][10][12][14][15][16]

IRONSCALES on the record

Sources

IRONSCALES full record

  1. [1]About usIRONSCALES · ironscales.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Platform | How It WorksIRONSCALES · undated page, accessed September 27, 2026 · Tier A
  3. [3]Ironscales raises series c funding roundIRONSCALES · ironscales.com · published December 7, 2021 · Tier A
  4. [4]Ironscales ipoForge Global · forgeglobal.com · undated page, accessed September 27, 2026 · Tier C
  5. [5]AI Email Security Platform for Phishing & Deepfakes | IronscalesIRONSCALES · undated page, accessed October 25, 2026 · Tier A
  6. [6]Email Security AgentsIRONSCALES · undated page, accessed October 25, 2026 · Tier A
  7. [7]IRONSCALES | Complete Email Security & Training SolutionsIRONSCALES · undated page, accessed October 25, 2026 · Tier A
  8. [8]IRONSCALES Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 25, 2026 · Tier C
  9. [9]SOC Automation SolutionIRONSCALES · undated page, accessed November 10, 2026 · Tier A
  10. [10]Platform | What's NewIRONSCALES · undated page, accessed November 10, 2026 · Tier A
  11. [11]Platform | Human ElementIRONSCALES · undated page, accessed November 10, 2026 · Tier A
  12. [12]Pricing | IronscalesIRONSCALES · undated page, accessed November 10, 2026 · Tier A
  13. [13]IRONSCALES | About Us | Our StoryIRONSCALES · undated page, accessed November 10, 2026 · Tier A
  14. [14]Education Email Security Solutions | IRONSCALESIRONSCALES · undated page, accessed November 10, 2026 · Tier A
  15. [15]Augment your Secure Email Gateway with IRONSCALESIRONSCALES · undated page, accessed November 10, 2026 · Tier A
  16. [16]DMARC Management and MonitoringIRONSCALES · undated page, accessed November 10, 2026 · Tier A

Torq full record

  1. [1]Torq seriesdTorq · torq.io · published January 12, 2026 · Tier A
  2. [2]CompanyTorq · torq.io · undated page, accessed September 27, 2026 · Tier A
  3. [3]Security startup torq raises cash at 1 2 billion valuationBloomberg · bloomberg.com · published January 11, 2026 · Tier B
  4. [4]Torq AI SOC Platform | AI Agents and Agentic SecOpsTorq · undated page, accessed October 29, 2026 · Tier A
  5. [5]Torq Skull Hoodie – Torq MerchTorq · undated page, accessed October 29, 2026 · Tier A
  6. [6]The Torq AI SOC PlatformTorq · undated page, accessed November 10, 2026 · Tier A
  7. [7]Product Updates | Torq AI SOC PlatformTorq · undated page, accessed November 10, 2026 · Tier A
  8. [8]Torq Integrations | AI SOC and Security Automation IntegrationsTorq · undated page, accessed November 10, 2026 · Tier A
  9. [9]About Torq | The Leading AI SOC PlatformTorq · undated page, accessed November 10, 2026 · Tier A
  10. [10]Torq for MSSPs and MDRsTorq · undated page, accessed November 10, 2026 · Tier A
  11. [11]Torq Security Hyperautomation vs. Legacy SOAR | TorqTorq · undated page, accessed November 10, 2026 · Tier A
  12. [12]Torq Hyperautomation vs. Security Workflow Automation Software | TorqTorq · undated page, accessed November 10, 2026 · Tier A
  13. [13]Security and Compliance | TorqTorq · undated page, accessed November 10, 2026 · Tier A
  14. [14]AI SOC Customers | TorqTorq · undated page, accessed November 10, 2026 · Tier A
  15. [15]Torq Unveils The SOC Brain: The AI SOC That Learns, Not Just Remembers | TorqTorq · published July 28, 2026 · Tier A
  16. [16]Torq AI SOC Platform Reviews & Product DetailsG2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.