

Find out in this report how the two AI-SOC solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
We're taking these things that executives see on the news, cyber threats falling from the sky, and we're taking the timeline that would take weeks or sometimes even months to address, depending on what's required for the detection, and bringing that timeline down to hours and days.
We rolled out approximately 1,500 Armory alerts in three months, which would not have been possible with Splunk.
If we were not doing more and did not have Anvilogic, we would need one dedicated person to do this detection engineering.
Since we started working with Torq, I am handling much fewer alerts. It is becoming really easy for me to handle an alert.
We have seen a return on investment, targeting a $600,000 ROI for the year.
By the time we officially bought Torq, we already had two workflows that were very helpful to us.
The product management and the product engineering team are available to us if we need to review something with them.
One of the best things about Anvilogic is the partnership, their knowledge, the depth of technical understanding, and the speed at which they respond.
I would evaluate their customer service and tech support as fantastic.
My impression of their technical support during the initial setup was that they were helpful, responded within a reasonable timeframe, and provided exactly what we needed.
The speed and quality of their answers have been pretty good, as I usually get a response within 24 hours, and they follow up well.
We can always get an answer, and the support team are experts in their own system.
We started with about 55 detections and scaled up to about 980 odd detections so far.
Anvilogic scales effectively with the growing needs of my organization.
Anvilogic is helping us identify what the needs of the business are, where in many cases, business processes just run off on their own.
Our case management is super scalable.
In terms of scalability, you can do as long as you can build it, and they can support it.
Regarding the ability of the solution to grow in your work environment, if it is scalable, if it fits your business requirements, and if there is room to scale up, the answer is yes, for sure.
I have never experienced a serious outage.
I would assess the stability and reliability of Anvilogic as very good.
The biggest instability has been with the AI agent, which the team is not using fully due to inconsistent results.
We have been using Torq for one and a half years, but we have experienced no downtime.
Most of the time, the system is stable as long as the components that they integrate with are stable.
I have never faced any downtime or issues.
Flexibility is key for any enterprise platform to meet our unique business requirements.
It lacked a robust CI/CD pipeline, which is crucial for comprehensive testing before changes go into production.
It seems that it requires more growth in how you can navigate through it and see the overall maturity of it clearly for a specific actor versus the enterprise-wide visibility of the whole maturity of the program.
Torq should offer default templates that can directly scan firewall data and automate actions.
The AI value depends on maturity. Real value depends heavily on telemetry, integration depth, and workflow design, all of which rely on how mature customers are in their SOC department.
It was able to capture data but was unable to differentiate between the agent hostname we are using and the hostname that resides on the back end of the Internet.
Because they do not completely replace a SIEM, their pricing is slowly edging towards being a little too much for a smaller organization like ours.
Licensing is reasonably affordable and should be evaluated over time concerning the platform's value.
They provide estimates because obviously every business is different, but they provided reasonable estimates that were fairly accurate based on other customers from a similar type of background or size.
When they bring more and more value into the platform, it makes more sense to pay that price, but still, it is expensive.
Before deciding to implement Torq, I considered that compared to our old case management platform, Torq was a much better price and had a lot better value for what you get out of the platform, which was a key consideration for the company.
It is an expensive solution, not an inexpensive solution, but we get through the flexibility.
Detection insights help us easily identify the most noisy ones, the effective ones, and what needs to be fixed to move the noisy ones to effective ones.
The learning curve is not steep, allowing even those with basic knowledge in writing detection rules to adapt quickly.
Anvilogic plus Snowflake has vastly improved our total cost of ownership for the SIM platform; we went from a pretty expensive platform in Splunk that was not vertically scalable due to budget limitations to a platform now that is far more efficient per terabyte of data ingested and processed per day.
Torq's unified platform approach to AI SOC automation and case management has significantly benefited us by integrating the case management platform with the automation, which saves time compared to managing multiple point solutions across our security stack.
The fact that I can build whatever I want within my own imagination and skills without relying on code is the best thing about Torq.
You can copy and paste a cURL command. If you have documentation or APIs, you usually have an example on the side. You basically have all the information on how the API call should be. You can just copy that and paste it into a step, and it will just build the step for you.
| Product | Mindshare (%) |
|---|---|
| Torq | 7.9% |
| Anvilogic | 3.0% |
| Other | 89.1% |
| Company Size | Count |
|---|---|
| Small Business | 2 |
| Large Enterprise | 12 |
| Company Size | Count |
|---|---|
| Small Business | 2 |
| Midsize Enterprise | 5 |
| Large Enterprise | 5 |
Anvilogic offers a no-code platform that enhances SOC efficiency by leveraging AI capabilities, providing detection coverage and industry-specific insights while integrating seamlessly with platforms like Snowflake.
Providing advanced visibility into detection coverage, Anvilogic delivers industry-specific insights through a powerful AI-driven, no-code environment. Users benefit from features like log normalization, the Armory for pre-built detections, and integration flexibility with platforms such as Snowflake. The platform significantly enhances SOC efficiency by reducing false positives and delivering quick insights. With integration into the MITRE framework and customizable alerts, Anvilogic improves detection logic and facilitates effective threat management, ensuring efficient detection across diverse environments.
What Are Anvilogic's Key Features?Anvilogic specializes in detection engineering for SOC teams, integrating data from tools like SentinelOne and Splunk. Its AI-driven capabilities streamline detection processes, reduce false positives, and extend to log ingestion, detection logic versioning, and threat prioritization. Industries use Anvilogic to enhance security operations through advanced detection scenarios and coordinated alert efforts, enabling efficient detection of behavioral patterns and management of security incidents.
Torq is the enterprise AI SOC solution that effectively combines adaptive insights and automation to handle critical threats efficiently. It manages threat lifecycles, swiftly moving from triage to response, ensuring effective risk management.
Torq is designed to streamline security operations by aggregating telemetry across your security stack. It investigates significant risks and manages threats from triage to containment and remediation. This AI-driven tool enhances the capabilities of your SecOps team, allowing them to achieve more impactful results without introducing complicated processes.
What are the key features of Torq?In industries like finance and healthcare, Torq shows effectiveness by adapting to specific risk scenarios often encountered in these fields. Its integration with existing infrastructures makes it a valuable asset for maintaining stringent security standards, essential for protecting critical data and operations in diverse high-stakes environments.
We monitor all AI-SOC reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.