Meet GuidePoint Security. GuidePoint Security works with organizations of every size, from a few hundred employees up through Fortune 100 companies. Its approach is deliberately vendor-objective: the firm evaluates a wide range of security technologies so it can recommend what best fits a customer's environment and goals. That work is backed by a team of certified engineers, architects, and consultants. GuidePoint and Torq bring complementary strengths to the table. GuidePoint provides advisory and services expertise to help customers assess, deploy, and operationalize security technology, and the Torq AI SOC Platform gives them agentic AI and automation across the threat lifecycle, from triage through investigation and response, with analysts in the loop for decisions that require human judgment. Working together, the focus is the same: helping customers reach the security outcomes they're after. That partnership mindset is what Mateo Gutierrez, Senior Account Executive at Guidepoint, keeps coming back to. "It's not just here you go, see you later," Gutierrez said. "It's much more of a true partnership with our customers: step by step, how is this going to impact your roadmap over the next three to five years, and how do we help you get there?" Gutierrez is candid that customers face a lot of complexity, and they lean on GuidePoint for the expertise to work through it. Focused on customer outcomes. Many security teams are fielding more alerts than they can clear and running more tools than they have the headcount to operate. Working together, GuidePoint and Torq help customers operationalize their existing resources so their teams can respond faster and focus on the work that matters most. "Security teams have been underwater for a long time," Gutierrez said. "When you can accelerate and automate the threat detection, investigation, and response lifecycle, organizations reach the outcomes they're after without exhausting their resources." For GuidePoint, much of the value is in helping customers get more out of what they've already invested in. "So much of our job is helping customers operationalize what they've already bought," Gutierrez said, "and get mean time to respond and mean time to resolve down from days to, hopefully, minutes." That time-to-outcome is what customers care about most. "What customers really care about is the ROI from a time perspective," Gutierrez said. "How much investigation and containment can happen before a human even has to step in?" As an example of what that can look like, a Torq live demo resolved an incident that would normally take two to three days start to finish in 15 minutes or less, with several integrations handling containment automatically. Support that continues after go-live. GuidePoint doesn't hand customers a platform and walk away. They back the partnership with a technical bench that keeps tuning the deployment after go-live. "We have people who can support it from a services standpoint and continuously fine-tune it to reach those outcomes," Gutierrez said. Because GuidePoint often helped the customer select the tools involved, it's well positioned to bring everything together for them. "It's lockstep," he said. Customers are modernizing their security operations, whether their partner leads that conversation or not, and GuidePoint is choosing to lead it. "I only see this partnership [with Torq] growing," Gutierrez added. "It comes up in more and more of our customer conversations." Interested in partnering with Torq to solve customer challenges?

Merlin names Torq a key partner for federal AI SOC Modernization. Sep 08, 2026, 08:00 ET Partnership brings agentic AI-powered security operations to federal agencies while accelerating Torq's path to FedRAMP authorization TYSONS CORNER, VA, Sept. 8, 2026 /PRNewswire/ - Merlin, a trusted technology partner known for deep government expertise and mission-ready solutions, today announced that Torq, the established agentic security operations leader, will serve as a key technology partner in Merlin's SOC Modernization architecture for federal agencies. The partnership combines Torq's AI SOC Platform capabilities with Merlin's validated architecture, federal market expertise, and compliance infrastructure to help agencies accelerate detection, investigation, and response. Merlin is also supporting Torq's path to FedRAMP authorization through Constellation GovCloud (CGC). Bringing the Agentic SOC to Federal Agencies SOC Modernization is part of Merlin Validated Solutions (MVS), a portfolio of pre-tested, mission-ready architectures. MVS integrates existing independent security technologies into a unified, end-to-end detection-to-response workflow that is automated but governed: actions are validated through a human-in-the-loop authorization model rather than left to run unchecked. Rather than replacing agencies' current investments, MVS unifies disconnected tools into a single coordinated workflow that can identify threats, analyze security data, validate automated actions, and respond at machine speed and scale to give federal agencies and critical infrastructure sectors pre-tested, compliant, mission-ready architectures. The Torq AI SOC Platform will give federal agencies a fundamentally different way to defend mission-critical environments - using agentic AI to continuously ingest and contextualize alerts across the existing security stack, automatically triage threats, investigate the highest-risk incidents, and execute response and remediation within agency-defined guardrails. Rather than adding another point tool, Torq connects the full incident lifecycle so agencies can expand SOC capacity without proportionally expanding headcount, respond at machine speed to increasingly sophisticated threats, and keep human analysts focused on the incidents that require judgment. Every agentic action can remain transparent, governed, and auditable, providing the oversight and accountability federal environments require while each confirmation or correction improves the systems' accuracy over time, enabling agencies to progressively move from human-in-the-loop to human-on-the-loop operations as confidence grows. "Federal agencies don't need another promise of what AI could do for security - they need proven technology that can operate at mission scale, with the governance and controls government demands," said Ofer Smadari, CEO of Torq. "The Torq AI SOC Platform was built for this moment. It brings agentic AI to the full security operations lifecycle, enabling teams to investigate and respond at machine speed while keeping humans in control. With an enterprise-proven platform and a clear path to FedRAMP authorization, Torq is ready to bring the power of the AI SOC to the federal market. Merlin knows how to turn breakthrough technology into mission-ready capability, and we're excited to work together to make agentic security operations a reality across government." The Emerging Government Imperative for the SOC The partnership addresses a growing gap federal agencies are being pushed to close. In March 2026, the White House released President Trump's Cyber Strategy for America, directing federal agencies to adopt AI-powered cybersecurity solutions to defend federal networks and deter intrusions at scale. In June 2026, CISA's Binding Operational Directive 26-04 compressed remediation windows for the highest-risk vulnerabilities to as little as three days, a response to how far AI has narrowed the gap between vulnerability disclosure and exploitation. Legacy SIEM and SOAR tools, and the shrinking pool of analysts who operate them, were not built for that pace. Agentic AI has already moved past pilot stage in the commercial sector; the federal government now needs the same capability delivered through a compliant path. "AI is accelerating vulnerability discovery and rapidly compressing the time from discovery to exploitation. Federal security teams need to operate at the same speed," said Robert Costello, Chief Digital and Information Officer at Merlin. "Torq significantly closes that gap by automating triage, investigation, and response action, helping defenders act faster across increasingly complex environments. Merlin is supporting Torq through its FedRAMP journey, and I'm equally excited to bring the platform into our own SOC and experience it firsthand." The partnership builds on Merlin Ventures' investment in Torq, announced as part of the company's $140 million Series D round earlier this year, and will help Torq rapidly scale the Torq AI SOC Platform to protect the nation's most critical infrastructure. Merlin and Torq will both be exhibiting at the Billington Cybersecurity Summit in Washington, D.C., September 8-10, 2026. Visit Merlin at Booth #308 and Torq at Booth #317 to learn more about their partnership and see a demo in-person. Want to see Torq in action? Contact the Merlin Labs team here to learn more: https://www.merlincyber.com/soc-modernization. About Merlin For nearly 30 years, Merlin has accelerated pathways for leading technology providers into mission-critical public sector markets. Combining deep government expertise with technical validation, compliance acceleration, and market access, Merlin transforms promising technologies into mission-ready solutions that help government agencies identify and address their most critical security challenges. Learn more at www.merlincyber.com. About Torq Torq is transforming cybersecurity with the Torq AI SOC Platform. Torq empowers enterprises to instantly and precisely triage, investigate, and respond to security events at scale. Torq's customer base includes major multinational enterprises such as Chipotle Mexican Grill, Lego, Lowe's, Macy's, Marriott, Procter & Gamble, Prudential, Siemens, Telefónica, Uber, Valvoline, Virgin Atlantic, and Wiz. SOURCE Merlin Group

Torq named a leading innovator in SACR 2026 AI SOC Market Report. By Rick Bosworth, Sr. Director of Product Marketing July 31, 2026 Get a personalized demo. See how Torq harnesses AI in your SOC to investigate, prioritize, and respond to threats faster. Software Analyst Cyber Research (SACR) just published its 2026 AI SOC Market Report, offering an independent assessment of vendors competing in what has rapidly become the most consequential category in enterprise security. Torq features prominently, and the report's framing is worth unpacking because it illuminates what makes the AI SOC category hard to evaluate and why Torq's approach is consequential. Torq's AI SOC: from alert triage through remediation. SACR's most pointed observation about Torq is definitional. The firm writes: "Torq is best understood less as a conventional SOAR vendor with AI features and more as an AI SOC operating layer that can ingest alerts, classify triage outcomes, construct cases, assign work to Socrates, and route remediation through deterministic or agentic workflows depending on the use case." That distinction matters. Much of what gets marketed as AI SOC today amounts to copilot functionality that surfaces recommendations and draft summaries, and stops at basic triage that simply moves the bottleneck down the SOC line by an increment. SACR cuts through that framing: "Torq is trying to own high-volume alert triage and response closure, not simply accelerate analyst review." Owning closure requires a different architecture than assisting analysts. It requires accurate alert classification at scale, a context layer deep enough to support trustworthy, autonomous verdicts, case management that carries investigations forward, and response automation that can act, not just advise. But let's circle back and dwell a bit on the first phase: autonomous alert triage. Auto Triage: context is the differentiator. Torq Auto Triage classifies incoming alerts as false positive, benign, or malicious, enriches them with threat intelligence and business context, and routes them accordingly, all before a human analyst is involved. True positives become cases automatically. False positives are fed back into the per-tenant AI model. SACR called out the quality of Torq's context layer directly: "Torq is not treating alerts as isolated artifacts. It is building a context pipeline around entities, access history, business role, device state, SaaS activity, and related evidence before determining whether an alert should be closed, escalated, or remediated." Three underlying capabilities power that context pipeline. * Torq Reflex is a per-tenant ML model trained continuously on your team's confirmed verdicts. * Torq Recall retrieves the most relevant prior cases from your environment's history and applies an LLM to determine how those precedents apply to the current alert. * Torq Context Graph provides the unified substrate both depend on: a continuously updated map of identities, assets, networks, policies, and analyst decisions, normalized across your entire security stack. The results speak volumes. On average, large enterprises achieve a mean time to triage (MTTT) of 1 minute, a 60x improvement over manual triage. A global biotech titan cites a 97% reduction in noise entering the SOC; imagine how much better their security analysts can focus. A well-known financial services enterprise achieved 99% faster threat triage after deploying Torq. Case Management: the operating unit. When Auto Triage surfaces a true positive, it flows directly into Torq Case Management, where analysts inherit the full verdict, enrichment context, and proposed next steps. They do not reconstruct context from scratch. From within the case interface, analysts collaborate with Torq Socrates(TM), trigger automated response actions, and track investigation continuity across shift handoffs. Each confirmed verdict and analyst correction flows back into Reflex as a training signal, compounding accuracy over time. This is the mechanism behind what SACR identifies as Torq's stronger-than-expected investigation story: the platform captures and encodes analyst judgment, rather than relying on individual expertise to repeat the same reasoning shift after shift. The machine clears the noise. The analysts focus on the highest priority items. Socrates: reasoning and orchestration. Torq Socrates is the agentic reasoning and orchestration layer at the center of the platform. It can be used interactively by analysts, embedded in investigation templates, or assigned cases autonomously. Once on a case, Socrates plans investigations, delegates tasks to specialized Torq HyperAgents(TM), and coordinates response actions across the security stack. SACR characterizes Socrates as "the reasoning and planning layer that decides how much work should be agentic, how much should be deterministic, and where the human should approve or intervene." As SACR notes, "autonomy is a dial, not a binary switch," and Torq's model lets security organizations operationalize that dial gradually: starting with triage and recommendation, moving into human-approved action, and eventually automating higher-confidence alert classes. One Torq customer on PeerSpot describes the cumulative impact: Torq handles a large volume of their alerts autonomously, fundamentally changing the burden placed on their security team. Hyperautomation: execution depth. Torq Hyperautomation is the execution layer that connects AI decisions to real action, supporting both agentic and deterministic workflows across the full security stack. SACR identifies this automation heritage as a structural advantage: "Compared with AI SOC point solutions, Torq's advantage is the ability to connect AI decisioning to actual workflow execution." That advantage compounds. The same platform that classifies an alert, builds the case, and assigns it to Socrates is the platform that executes containment and remediation at machine speed. Customers have measured a 94% reduction in mean time to respond (MTTR), a metric that requires the full chain, not just faster triage at the front end. What SACR's assessment means for buyers. SACR closes its Torq vendor profile with a synthesis that applies beyond Torq specifically: "Autonomous SOC value will be measured by closed-loop operating capability rather than AI summarization." Verdict quality matters. But a verdict quality that does not connect to case construction, investigation, response, and organizational learning is an incomplete story. Torq's architecture is designed around that full loop.