No more typing reviews! Try our Samantha, our new voice AI agent.

Cyware Cyber Fusion vs Mandiant Advantage comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Torq
Sponsored
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
12
Ranking in other categories
Security Orchestration Automation and Response (SOAR) (4th), AI-SOC (1st), AI-Powered Security Automation (1st)
Cyware Cyber Fusion
Average Rating
7.0
Reviews Sentiment
6.8
Number of Reviews
2
Ranking in other categories
Threat Intelligence Platforms (TIP) (29th), Security Orchestration Automation and Response (SOAR) (22nd)
Mandiant Advantage
Average Rating
8.4
Reviews Sentiment
6.7
Number of Reviews
7
Ranking in other categories
Extended Detection and Response (XDR) (26th), Attack Surface Management (ASM) (8th)
 

Mindshare comparison

Security Orchestration Automation and Response (SOAR) Mindshare Distribution
ProductMindshare (%)
Cyware Cyber Fusion1.7%
Microsoft Sentinel9.8%
Palo Alto Networks Cortex XSOAR8.7%
Other79.8%
Security Orchestration Automation and Response (SOAR)
Extended Detection and Response (XDR) Mindshare Distribution
ProductMindshare (%)
Mandiant Advantage1.2%
CrowdStrike Falcon9.2%
SentinelOne Singularity Endpoint6.0%
Other83.6%
Extended Detection and Response (XDR)
 

Featured Reviews

AD
Solutions Architect at Swimlane
Automation has streamlined multi-tenant SOC workflows and improves alert handling efficiency
Although the reporting within Torq is not that great, we did ask for many features regarding reporting in Torq, but due to some platform constraints, they could not make the whole dataset available for us to be used in reporting. Except for that, we used some basic reporting. When I used Torq, it was indeed in the early stages of AI capabilities. Only a few customers were allowed to use it, and we were among them. It functioned well as long as we summarized the data properly. If you input garbage, you would get garbage out. Thus, we had to do significant fine-tuning regarding what data context we provided to the AI orchestrator to get meaningful results. In terms of Torq's unified platform approach to AI SOC automation and case management compared to managing multiple point solutions across my security stack, I find it case-centric. The unified view in case management is good since it provides clarity, although there are limitations regarding how many items in case management can be modified at once. Bulk operations are very limited, potentially due to their back-end database or data retrieval processes that can be improved. Regarding improvements for Torq, when we were onboarded, there were aspects we were uncertain about, such as the number of cases that could be generated, what data we could bring in, how many clients we could onboard, and similar concerns. Initially, we also lacked clarity about the number of playbooks or workflows we could build. Different triggers like system triggers, case-based triggers, and others can be employed without restrictions, but when it comes to on-demand and scheduled jobs, there is a limitation based on the subscription and pricing tier that notably caps the number of workflows we can create. No bulk editing across cases was one issue, along with limited filtering related to single grouping constraints. Additionally, the out-of-the-box case templates provided require substantial modifications before they become usable. There is also a feature in the cases for notes that cannot be searched. They are only visible through the UI, which is another area for improvement. The workflow and execution-based charges seem misleading as this was not discussed initially. I am not sure if new customers are made aware of this. It seems that workflows revolving around cases hinder functionality outside of case management, as we have many use cases needing on-demand triggers and schedules for functions like reporting or polling devices. Creating additional workflows to achieve basic functionalities raises costs significantly, which disadvantages customers. While they facilitate optimization and scaling, the support received tends to be very basic. Improvements can be made in that area as well.
AhmedKonsowa - PeerSpot reviewer
Senior Pre-Sales Engineer (Commercial Sector) at Cyber Knight
A stable solution with excellent features and a helpful technical support team
We use the solution for cyber fusion centers The product has a lot of strong points compared to other tools. The prices must be reduced. I have been using the solution for one year. I am using the latest version of the solution. I rate the tool’s stability a nine out of ten. In my company,…
LF
Head Of Cyber Threat Intelligence at Discount Bank
Brand threats have been monitored proactively and intelligence now drives daily security decisions
I am an end user of Mandiant Advantage. Mandiant Advantage's intelligence is good, and their service is good, but the price they charge is just too high. It's not that they're not supplying what they're selling; it's simply that the price is high, and putting a tag on that cost is somewhat problematic. I would rate Mandiant Advantage an 8 out of 10. I do not consider Mandiant Advantage an affordable solution at all. The prices are very high and very expensive. The price of Mandiant Advantage is not justified. It's really expensive, and it's so expensive that I'm not sure I will continue next year with their service.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"What I liked the most about Torq is the actual workflow builder, which is really great because they offer a lot of features and convenience features that are useful for any automation engineer."
"Under one SOC tool in Torq, analysts get to know everything within the context of an alert or incident they are working on, and this ability to view the whole picture within Torq is one of the major breakthroughs and best offerings of Torq."
"Once I started to use the system and I saw the potential, it changed all of our work in IT."
"Almost four or five hours of work is now completed in four or five minutes."
"What I appreciate most about Torq is that it is an essential part of our system."
"Using that one piece of AI, we auto-closed 511 cases in quarter four alone."
"As an analyst, it has demonstrated potential to reduce workforce requirements and time needed for related activities."
"Torq has exceeded expectations by delivering workflows in a timely and lower effort manner than XSOAR, and it meets all my needs while saving a ton of time and targeting $600,000 saved this year, which is a substantial amount of money."
"The technical support team is helpful."
"The product is stable."
"Mandiant Advantage is excellent at providing the full context and all the information, where the information was found, and the full data, including the raw data that was uploaded onto the Internet."
"The advantage of the solution is being able to go look up threat actors and get a lot of detailed information about different attacks and different tactics and general information about threats."
"I have never faced stability issues."
"The live IOC feed identifies the type, technique, and tactics used."
"It is so valuable to have someone performing these functions outside of our business hours when we don't have staff in the building. We've seen a lot of solid metrics on the amount of malware that it's detecting and resolving. We're pleased with it so far."
"Mandiant Advantage has helped me enhance operational efficiency overall because it enriched our SIEM, which is Splunk, and the YARA rules I wrote within the platform help me understand better what my threat landscape is."
"The scalability of Mandiant Advantage deserves a ten out of ten."
"The feature I have found most valuable is directory monitoring. We experienced an instance of threat actors trying to ensure a complex and massive attack against our customer's infrastructure on the forum. That is, they were animating people on a formum. The solution alerted us to this two days ahead of the attack, which gave us plenty of time to prepare for it."
 

Cons

"Additionally, the documentation for Torq is not very clear. Most of the information is presented in videos, which are not ideal for reading; there are mostly paragraphs and other text-based content."
"We have MCP that we are working with our cloud security platform, and we wanted to connect this MCP to the case management."
"Regarding the pricing of Torq, I would say it is expensive."
"The workflow and execution-based charges seem misleading as this was not discussed initially, and creating additional workflows to achieve basic functionalities raises costs significantly, which disadvantages customers."
"I wish Torq's AI assistant for building templated workflows from scratch worked better; when you start with a blank slate, asking AI to help you build or template the workflow out does not go well."
"Regarding stability, I have noticed some lagging, crashing, and downtime, which is one of my largest gripes."
"The initial deployment of Torq was not easy."
"Even now, we have workflows that are in production that use AI steps and I get different results, making it unusable to some degree."
"The tool doesn't integrate well with ServiceNow."
"The prices must be reduced."
"I have already given them feedback that their UI needs improvement since sometimes there is a lag. The side-by-side depiction of request response and action clogs the screen."
"Sometimes Mandiant Advantage becomes noisy when dealing with widely recognized companies due to false positives."
"They could have better support. Now that they've merged, they are moving towards a portal system, which isn't very helpful."
"Collaboration of data in my view becomes a bit clogged, requiring effort to understand visually."
"Mandiant Advantage's platform itself is not good yet. They have many bugs because they changed the platform, so from time to time it's simply not working at all."
"I think that the data query that is used for data cloud language should be improved. It's really hard to query actual data from the platform."
"Mandiant's on-prem client is too processor-intensive, so it's putting a strain on the local device's CPU. When a scan is running on the device, the other processing tasks slow to a crawl. We're still trying to figure out the correct settings for the client."
report
Use our free recommendation engine to learn which Security Orchestration Automation and Response (SOAR) solutions are best for your needs.
899,917 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Manufacturing Company
10%
Construction Company
10%
Comms Service Provider
10%
Comms Service Provider
19%
Healthcare Company
11%
Manufacturing Company
9%
Financial Services Firm
9%
Financial Services Firm
16%
Computer Software Company
8%
Construction Company
6%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise5
Large Enterprise5
No data available
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise2
Large Enterprise3
 

Questions from the Community

What needs improvement with Torq?
I do not dislike anything about Torq because it has satisfied all of our use cases and requirements. We contacted sup...
What is your primary use case for Torq?
Initially, we were using Slack for small automations, such as creating pipelines or shutting down servers. For exampl...
What advice do you have for others considering Torq?
I have been working for five years with experience in the IT field. Torq is very good. It manages everything. I would...
Ask a question
Earn 20 points
What needs improvement with Mandiant Advantage?
I think Mandiant Advantage could be improved regarding their intelligence on fraud and cybercrime. Additionally, thei...
What is your primary use case for Mandiant Advantage?
I'm using Mandiant Advantage for digital monitoring of our brand protection and our digital entities, in addition to ...
What advice do you have for others considering Mandiant Advantage?
I am an end user of Mandiant Advantage. Mandiant Advantage's intelligence is good, and their service is good, but the...
 

Also Known As

No data available
CSOL, Fusion and Threat Response, Threat Intelligence eXchange, Security Orchestration and Automation (SOAR)
Mandiant Threat Intelligence
 

Overview

 

Sample Customers

Information Not Available
Information Not Available
Stater Bros. Markets, Rush Copley, Blackboat, CapWealth
Find out what your peers are saying about Splunk, Microsoft, Palo Alto Networks and others in Security Orchestration Automation and Response (SOAR). Updated: May 2026.
899,917 professionals have used our research since 2012.