CISO Tribune

Vendor comparison · 2 companies

Sublime Security vs Torq

Sublime Security sells email security software that offers AI-powered protection against modern email threats. Torq sells the Torq AI SOC Platform, which turns alerts into action across a security stack. CISO Tribune files both under AI SOC analysts. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Sublime Security
  • Torq
Sublime Security vs Torq: Products, Customers and Funding Compared
Sublime SecuritySublime Security sells email security software that offers AI-powered protection against modern email threats.sublime.securityTorqTorq sells the Torq AI SOC Platform, which turns alerts into action across a security stack.torq.io
What it sells
  • Tailored Phishing Simulations and Training[7]Creates phishing simulations from attacks detected in the customer's environment and delivers just-in-time training.
  • Torq AI SOC Platform[4][6][9][14]Turns alerts into action across a security stack.
  • Auto Triage[4][6][7]Agentic AI engine that prioritizes threats and separates noise from actual risk.
  • Case Management[4][6][7][10]Native case management with evidence, timelines and case summaries.
  • Torq HyperAgents®[4]A group of autonomous, transparent, and customizable AI Agents.
  • Socrates[4][6][7][10]Natural language-driven agentic AI that autonomously remediates critical threats.
  • Hyperautomation[4][6]Workflow automation using integrations with the security stack.
  • Context Graph[4][7][9]A visual map of the identities, assets, and relationships in an environment.
  • Integrations[4][6]300 pre-built integrations and 4,000+ pre-built steps.
Categories
Headquarters
Not stated on its pagesTel Aviv, Israel[3]
Founded
Not stated on its pages2020[2][9]
Ownership and funding
Privately held[1][4][9][14]Privately held[4][6][9][16]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • July 28, 2026Torq introduced Torq SOC Brain, a new layer of its AI SOC Platform that learns from historical investigations and analyst decisions.[15]
G2 and Gartner Peer Insights
  • G2: listed, seen November 4, 2026[9]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[16]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetFrom its own pages, Torq serves MSSPs and MDRs, which get an omniview across all customer workspaces. MSSPs can extend Torq automation capabilities to customer environments they do not directly manage. Torq offers to provide and sign a HIPAA Business Associate Agreement when engaging with HIPAA covered entities. Torq dashboards can be tailored to roles such as SOC Manager, CISO or customer. Torq customers include a global analytics company that rebuilt its playbooks with the Torq AI SOC Platform.
Last verified
September 27, 2026September 27, 2026

Where they overlap

  • Sublime Security and Torq are both filed under AI SOC analysts.
  • Both are privately held.

Where they differ, field by field

  • Sublime Security's primary category is Email security; Torq's is AI SOC analysts.
  • Sublime Security is also filed under Data loss prevention. Torq is also filed under SOAR and security automation.
  • Sublime Security lists Tailored Phishing Simulations and Training. Torq lists Torq AI SOC Platform, Auto Triage, Case Management, Torq HyperAgents®, Socrates and 3 more.
  • Torq is headquartered in Tel Aviv, Israel.
  • Torq was founded in 2020.

What it sells: Sublime Security

What Tailored Phishing Simulations and Training does[7]
Tailored Phishing Simulations and Training is a Sublime add-on that uses attacks detected in the customer's environment to prioritize and create simulations. When employees click, Sublime delivers immediate, attack-specific training on the email and signals they missed. Teams can track click and report rates and see exposure by attack type.

What it sells: Torq

What Torq AI SOC Platform does[4][6][9][14]
The Torq AI SOC Platform unifies visibility and turns alerts into action across a security stack. The Torq AI SOC Platform includes 300 pre-built integrations and 4,000+ pre-built steps. Torq describes the platform as taking action and closing cases across the complete threat management lifecycle.
What Auto Triage does[4][6][7]
Guidance and Rules for Auto Triage can be created with Socrates Builder. Auto Triage adds graph context directly to alerts.
What Case Management does[4][6][7][10]
Case Management is native to the Torq platform and provides a single source of truth with evidence, timelines, and case summaries. Torq case management is built on the Open Cybersecurity Schema Framework (OCSF) with automation-first, event-driven workflows.
What Torq HyperAgents® does[4]
Torq HyperAgents is a group of autonomous, transparent, and customizable AI Agents. Torq HyperAgents are given access to the existing tools and steps in the SOC to deliver agentic insights and take action. Agentic runbooks access authorized data and tools, and AI Agents cross-reference historical cases, recognize threat patterns and summarize findings.
What Socrates does[4][6][7][10]
Socrates is described as natural language-driven agentic AI that autonomously remediates critical threats. Socrates coordinates specialized AI Agents and manages cases end-to-end. Socrates handles Tier-1 and Tier-2 tickets as a 24×7 on-call teammate.
What Hyperautomation does[4][6]
Torq Hyperautomation uses integrations with the security stack for workflow automation. Torq fuses agentic reasoning and Hyperautomation, from alert through remediation. AI Agents can be used to build new integrations, workflows, and custom use cases.
What Context Graph does[4][7][9]
Context Graph gives a visual map of the identities, assets, and relationships in an environment. Auto Triage adds graph context directly to alerts.
What Integrations does[4][6]
The Torq AI SOC Platform includes 300 pre-built integrations and 4,000+ pre-built steps. AI Agents can be used to build new integrations, workflows, and custom use cases. Torq uses real-time API monitoring so that automations stay connected when third-party data formats change.

Questions about Sublime Security and Torq

What do Sublime Security and Torq sell?
Sublime Security sells Tailored Phishing Simulations and Training. Torq sells Torq AI SOC Platform, Auto Triage, Case Management, Torq HyperAgents®, Socrates and 3 more.
Are Sublime Security and Torq in the same category?
They share AI SOC analysts. Sublime Security's primary category is Email security and Torq's is AI SOC analysts.
Where are Sublime Security and Torq headquartered?
Torq is headquartered in Tel Aviv, Israel.
When were Sublime Security and Torq founded?
Torq was founded in 2020.
Who owns Sublime Security and Torq?
Sublime Security is privately held. Torq is privately held.
Who are Sublime Security and Torq sold to?
From its own pages, Torq serves MSSPs and MDRs, which get an omniview across all customer workspaces.
What have Sublime Security and Torq announced recently?
July 28, 2026: Torq introduced Torq SOC Brain, a new layer of its AI SOC Platform that learns from historical investigations and analyst decisions.

About Sublime Security

Sublime Security sells email security software that offers AI-powered protection against modern email threats. Sublime says legacy security solutions cannot keep up with AI-powered attacks. Sublime says a centralized detection model gives every customer the same blind spots and that updates take weeks or months. Sublime says its platform deploys a team of specialized AI agents that autonomously stop targeted attacks.[2][5]

Sublime names two agents. ASA, the Autonomous Security Analyst, triages, investigates and resolves user-reported emails in seconds. Sublime says ASA clears the queue and provides transparent verdicts with investigation logs. ADÉ, the Autonomous Detection Engineer, generates new org-specific detections, backtests them and deploys coverage in hours. ADÉ creates and backtests org-specific coverage, then proposes it for deployment with approval in a click.[2][10]

Sublime says its distributed detection model adapts coverage to the customer's environment and generates new defenses in hours. Sublime's Distributed Detection Model adapts with every message an organization sends and receives. Detection methods named by Sublime include natural language understanding, computer vision, file explosion and dynamic link analysis. Sublime recursively unpacks files, URLs and images to find hidden payloads, and decodes QR codes, extracts text with OCR and uses computer vision to spot phishing pages. Sublime groups related messages so analysts can investigate once and remediate across all affected mailboxes. Sublime supports threat hunting through historical email data using Sublime's detection language. Sublime can automatically quarantine, delete, or warn users the moment a threat is detected. Sublime finds and remediates malicious calendar invites (ICS phishing).[2][5][11]

Sublime applies the same detection engine that powers inbound protection to catch sensitive data before it leaves the environment. Sublime says built-in DLP detections cover personal, payment, health and credential data. Sublime says ASA investigates each flagged message and blocks confirmed violations before delivery. Sublime says teams can manage inbound and outbound email protection in one platform, with one detection engine and one console.[5][6]

Tailored Phishing Simulations and Training is a Sublime add-on that uses attacks detected in the customer's environment to prioritize and create relevant simulations. Sublime lets customers choose a Sublime-curated template, turn a malicious email detected in their environment into a simulation, or generate one from a scenario they describe. When employees click, Sublime delivers immediate, attack-specific training on the email and signals they missed.[7]

Sublime connects to Microsoft 365 or Google Workspace via API, with no MX record changes. Sublime offers multi-tenant SaaS, single-tenant SaaS, or self-hosted deployment, and self-hosting is available to Enterprise customers. In the Enterprise-only option, Sublime says the software runs in the customer's VPC, and Sublime provides updates but can never access the data. In the other option, Sublime runs the software in its own VPC and operates it like traditional SaaS. Sublime stores and manages detection rules in GitHub, and exposes REST APIs to integrate email security data into existing workflows and tools. Sublime sends enriched telemetry to a SIEM and triggers playbooks in a SOAR. Sublime ingests threat feeds, YARA signatures and indicators of compromise (IOCs). Sublime works alongside Microsoft Defender for Office 365, and works alongside Google Workspace.[5][10][11][12][13]

Sublime offers a plan that is free for individual security practitioners getting started on Sublime Cloud. Sublime sells a plan with the full platform, premium support and advanced controls. Snowflake observed a decrease in false positives and in the time spent managing email security after implementing Sublime. Elastic uses Sublime for email security. Sublime says US Signal strengthens email defense while simplifying operations. Josh spent 10 years in offensive cyber initiatives and red teaming in the private sector, and he started Sublime to build a product that would stop phishing, which was always the fastest way for him to gain access to a network.[2][5][6][7][8][11]

Sublime Security on the record

Sources

Sublime Security full record

  1. [1]Sublime security raises 150m in series c funding as industry first ai agents accelerate growth 302596266Sublime Security via PR Newswire · prnewswire.com · published October 28, 2025 · Tier A
  2. [2]Email Security Software Features | SublimeSublime Security · undated page, accessed September 27, 2026 · Tier A
  3. [3]AboutSublime Security · sublime.security · undated page, accessed September 27, 2026 · Tier A
  4. [4]Sublime Security | Agentic Email SecuritySublime Security · undated page, accessed October 28, 2026 · Tier A
  5. [5]Adaptive Email Security Platform | SublimeSublime Security · undated page, accessed October 28, 2026 · Tier A
  6. [6]Email Data Loss Prevention | SublimeSublime Security · undated page, accessed October 28, 2026 · Tier A
  7. [7]Tailored Phishing Simulations and Training | SublimeSublime Security · undated page, accessed October 28, 2026 · Tier A
  8. [8]Sublime Security | Customer storiesSublime Security · undated page, accessed October 28, 2026 · Tier A
  9. [9]Sublime Email Security Platform Pros and ConsG2 · undated page, accessed October 28, 2026 · Tier C
  10. [10]Email security software for Microsoft Office 365 | SublimeSublime Security · undated page, accessed November 4, 2026 · Tier A
  11. [11]Plans · Sublime SecuritySublime Security · undated page, accessed November 4, 2026 · Tier A
  12. [12]Security at Sublime · Sublime SecuritySublime Security · undated page, accessed November 4, 2026 · Tier A
  13. [13]Email security software for Google Workspace | SublimeSublime Security · undated page, accessed November 4, 2026 · Tier A
  14. [14]Built & Backed by Security Experts · Sublime SecuritySublime Security · undated page, accessed November 4, 2026 · Tier A

Torq full record

  1. [1]Torq seriesdTorq · torq.io · published January 12, 2026 · Tier A
  2. [2]CompanyTorq · torq.io · undated page, accessed September 27, 2026 · Tier A
  3. [3]Security startup torq raises cash at 1 2 billion valuationBloomberg · bloomberg.com · published January 11, 2026 · Tier B
  4. [4]Torq AI SOC Platform | AI Agents and Agentic SecOpsTorq · undated page, accessed October 29, 2026 · Tier A
  5. [5]Torq Skull Hoodie – Torq MerchTorq · undated page, accessed October 29, 2026 · Tier A
  6. [6]The Torq AI SOC PlatformTorq · undated page, accessed November 10, 2026 · Tier A
  7. [7]Product Updates | Torq AI SOC PlatformTorq · undated page, accessed November 10, 2026 · Tier A
  8. [8]Torq Integrations | AI SOC and Security Automation IntegrationsTorq · undated page, accessed November 10, 2026 · Tier A
  9. [9]About Torq | The Leading AI SOC PlatformTorq · undated page, accessed November 10, 2026 · Tier A
  10. [10]Torq for MSSPs and MDRsTorq · undated page, accessed November 10, 2026 · Tier A
  11. [11]Torq Security Hyperautomation vs. Legacy SOAR | TorqTorq · undated page, accessed November 10, 2026 · Tier A
  12. [12]Torq Hyperautomation vs. Security Workflow Automation Software | TorqTorq · undated page, accessed November 10, 2026 · Tier A
  13. [13]Security and Compliance | TorqTorq · undated page, accessed November 10, 2026 · Tier A
  14. [14]AI SOC Customers | TorqTorq · undated page, accessed November 10, 2026 · Tier A
  15. [15]Torq Unveils The SOC Brain: The AI SOC That Learns, Not Just Remembers | TorqTorq · published July 28, 2026 · Tier A
  16. [16]Torq AI SOC Platform Reviews & Product DetailsG2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.