No more typing reviews! Try our Samantha, our new voice AI agent.

Purple AI vs Torq comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
4.6
Purple AI delivers positive ROI for large enterprises, aids threat detection, and requires manual checks for critical issues.
Sentiment score
5.6
Torq users reported reduced alert management time with automation, enhancing productivity and showing potential for $600,000 annual ROI.
It provides us with a summary of the alert and suggests what suspicious activities have occurred, along with guidance on what to look for next.
IT Security Analyst at a tech consulting company with 11-50 employees
We have achieved good ROI with Purple AI.
Security Engineer at a tech vendor with 11-50 employees
Since we started working with Torq, I am handling much fewer alerts. It is becoming really easy for me to handle an alert.
SOC Analyst at AppsFlyer
We have seen a return on investment, targeting a $600,000 ROI for the year.
Cyber Security Engineer at a real estate/law firm with 5,001-10,000 employees
By the time we officially bought Torq, we already had two workflows that were very helpful to us.
CyberSecurity Engineer at a real estate/law firm with 10,001+ employees
 

Customer Service

Sentiment score
6.1
Purple AI's customer service is highly rated, providing swift, direct access to experts for efficient and smooth assistance.
Sentiment score
7.3
Torq offers highly rated customer service, known for quick, effective responses and knowledgeable support, though feature requests may delay.
We just directly get connected to the technical person.
Security Engineer at a tech vendor with 11-50 employees
I would rate the technical support for Purple AI an eight out of ten.
IT Security Analyst at a tech consulting company with 11-50 employees
My impression of their technical support during the initial setup was that they were helpful, responded within a reasonable timeframe, and provided exactly what we needed.
Security Consultant at Integrity360
The speed and quality of their answers have been pretty good, as I usually get a response within 24 hours, and they follow up well.
CyberSecurity Engineer at a real estate/law firm with 10,001+ employees
We can always get an answer, and the support team are experts in their own system.
Director Of Cyber Security at a tech vendor with 501-1,000 employees
 

Scalability Issues

Sentiment score
6.0
Purple AI is a scalable option with unique Flexi-license, though its full autonomous capabilities are still developing.
Sentiment score
6.4
Torq is praised for impressive scalability, adaptability, and effective workflow management, though requires careful management with large workflows.
If we scale and add any two to three pieces within our existing plan, based on the endpoint, it gives the next term and when we pay the money, it adds that amount in the billing and it's quite easy.
Security Engineer at a tech vendor with 11-50 employees
Purple AI has very high chances of scalability.
Soc Analyst at a tech consulting company with 11-50 employees
Purple AI works well for all types of alerts across various data sources and environments; hence, I find it good for scalability.
IT Security Analyst at a tech consulting company with 11-50 employees
Our case management is super scalable.
CyberSecurity Engineer at a real estate/law firm with 10,001+ employees
In terms of scalability, you can do as long as you can build it, and they can support it.
Director Of Cyber Security at a tech vendor with 501-1,000 employees
Regarding the ability of the solution to grow in your work environment, if it is scalable, if it fits your business requirements, and if there is room to scale up, the answer is yes, for sure.
Global IT Director at OpenWeb
 

Stability Issues

Sentiment score
7.3
Purple AI is stable and reliable but may require precise prompts and relies on SentinelOne's performance, causing occasional delays.
Sentiment score
6.7
Torq offers high stability and reliability with minimal downtime, quickly resolved issues, and significant improvements over other solutions.
The only concern is the prompting requirement, as we have to provide prompts in a proper manner, otherwise it will not work correctly.
Associate Vice President at Novac Technology Solutions
I have not faced any challenges when implementing Purple AI.
IT Security Consultant at Systemhaus for you GmbH
Sometimes it lacks performance and may take a while to load, or it may not show alerts at all, requiring us to log out and log back in.
IT Security Analyst at a tech consulting company with 11-50 employees
We have been using Torq for one and a half years, but we have experienced no downtime.
Angular Developer at Flourish Software
Most of the time, the system is stable as long as the components that they integrate with are stable.
Director Of Cyber Security at a tech vendor with 501-1,000 employees
I have never faced any downtime or issues.
Senior Information Technology Security Consultant at Mideast Data Systems
 

Room For Improvement

Purple AI should improve threat analysis, UI, and customization to enhance threat detection and match CrowdStrike's capabilities.
Torq users request improved AI integration, search functionalities, dashboards, transparency, templates, data manipulation, bulk editing, and playbooks.
AI combined with automation is a very powerful tool, and combining these could reduce both time and work because automation saves time for everyone.
Soc Analyst at a tech consulting company with 11-50 employees
As an improvement, if SentinelOne could focus on IOA similar to what CrowdStrike is giving, that would be a good point.
Senior Technical Engineer at Safezone Secure Solutions Private Limited
The only concern related to pricing is the ingestion-based pricing model, which is higher at scale.
Associate Vice President at Novac Technology Solutions
Torq should offer default templates that can directly scan firewall data and automate actions.
Senior Information Technology Security Consultant at Mideast Data Systems
The AI value depends on maturity. Real value depends heavily on telemetry, integration depth, and workflow design, all of which rely on how mature customers are in their SOC department.
Security Consultant at Integrity360
It was able to capture data but was unable to differentiate between the agent hostname we are using and the hostname that resides on the back end of the Internet.
Senior Consultant at a university with 10,001+ employees
 

Setup Cost

Torq's pricing is seen as affordable by some, costly by others, but enterprises value its modern features.
Providing SentinelOne solution for small scale enterprise, if they could offer better prices, it would be more useful.
Security Engineer at a tech vendor with 11-50 employees
I would say the solution is a little expensive.
Associate Vice President at Novac Technology Solutions
When they bring more and more value into the platform, it makes more sense to pay that price, but still, it is expensive.
Senior Cyber Architect at a manufacturing company with 10,001+ employees
Before deciding to implement Torq, I considered that compared to our old case management platform, Torq was a much better price and had a lot better value for what you get out of the platform, which was a key consideration for the company.
CyberSecurity Engineer at a real estate/law firm with 10,001+ employees
It is an expensive solution, not an inexpensive solution, but we get through the flexibility.
Director Of Cyber Security at a tech vendor with 501-1,000 employees
 

Valuable Features

Purple AI enhances threat detection and response with accurate predictions, deep visibility, and multi-language support for efficient analysis.
Torq enhances efficiency by streamlining workflows with AI, automation, and seamless integrations, offering user-friendly customization and scalability.
In today's world, the time to respond to an attack is key.
Senior Technical Engineer at Safezone Secure Solutions Private Limited
The best feature is that the summary is very precise, crisp, and presented in layman's language while still including all the technical aspects required for analysis.
Soc Analyst at a tech consulting company with 11-50 employees
Purple AI provides availability and ensures that all threat detection and response are available in a single platform.
Associate Vice President at Novac Technology Solutions
Torq's unified platform approach to AI SOC automation and case management has significantly benefited us by integrating the case management platform with the automation, which saves time compared to managing multiple point solutions across our security stack.
CyberSecurity Engineer at a real estate/law firm with 10,001+ employees
The fact that I can build whatever I want within my own imagination and skills without relying on code is the best thing about Torq.
Director Of Cyber Security at a tech vendor with 501-1,000 employees
You can copy and paste a cURL command. If you have documentation or APIs, you usually have an example on the side. You basically have all the information on how the API call should be. You can just copy that and paste it into a step, and it will just build the step for you.
Global IT Director at OpenWeb
 

Categories and Ranking

Purple AI
Ranking in AI-SOC
4th
Average Rating
8.4
Reviews Sentiment
5.9
Number of Reviews
6
Ranking in other categories
No ranking in other categories
Torq
Ranking in AI-SOC
1st
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
12
Ranking in other categories
Security Orchestration Automation and Response (SOAR) (4th), AI-Powered Security Automation (1st)
 

Mindshare comparison

As of June 2026, in the AI-SOC category, the mindshare of Purple AI is 2.4%, down from 9.3% compared to the previous year. The mindshare of Torq is 7.9%, up from 6.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
AI-SOC Mindshare Distribution
ProductMindshare (%)
Torq7.9%
Purple AI2.4%
Other89.7%
AI-SOC
 

Featured Reviews

GANESAN K - PeerSpot reviewer
Senior Technical Engineer at Safezone Secure Solutions Private Limited
Automated threat hunting has reduced investigation time and now improves incident visibility
We have not tested in that manner because when comparing with the competition product CrowdStrike, Purple AI and CrowdStrike are pretty good and more or less equal in the way of responding to a query. On the technical side, I can compare Purple AI with CrowdStrike's threat intelligence. CrowdStrike was initially a breach investigation company and was in the Indian market well before SentinelOne, acquiring more significant ground. We have used Charlotte AI, which is provided by CrowdStrike, the direct competitor of SentinelOne. These two have key differences. Charlotte AI focuses more on IOAs and IOCs, whereas Purple AI helps us query the logs and hunt threats. As an improvement, if SentinelOne could focus on IOA similar to what CrowdStrike is giving, that would be a good point. They could feed information on IOA, such as based on attackers, what different attack groups are performing the attacks, and provide those insights. Compared to its competition, for doing DFIR (Digital Forensics and Incident Response), not only IOCs are needed but also IOAs. Information about the indication of the attacker, who is attacking, and the attacker group history would be better if Purple AI could incorporate that. We can build some queries and automated responses for any suspicious or malicious conditions. It would be better if there were workflows in place for giving alerts. The way alerts are handled could be improved because when compared to other competing products, I am able to handle the technique of the threat and categorize it based on severity. If it has a major impact on the environment, I can contain the system. I have numerous options to create various kinds of alerts.
AD
Solutions Architect at Swimlane
Automation has streamlined multi-tenant SOC workflows and improves alert handling efficiency
Although the reporting within Torq is not that great, we did ask for many features regarding reporting in Torq, but due to some platform constraints, they could not make the whole dataset available for us to be used in reporting. Except for that, we used some basic reporting. When I used Torq, it was indeed in the early stages of AI capabilities. Only a few customers were allowed to use it, and we were among them. It functioned well as long as we summarized the data properly. If you input garbage, you would get garbage out. Thus, we had to do significant fine-tuning regarding what data context we provided to the AI orchestrator to get meaningful results. In terms of Torq's unified platform approach to AI SOC automation and case management compared to managing multiple point solutions across my security stack, I find it case-centric. The unified view in case management is good since it provides clarity, although there are limitations regarding how many items in case management can be modified at once. Bulk operations are very limited, potentially due to their back-end database or data retrieval processes that can be improved. Regarding improvements for Torq, when we were onboarded, there were aspects we were uncertain about, such as the number of cases that could be generated, what data we could bring in, how many clients we could onboard, and similar concerns. Initially, we also lacked clarity about the number of playbooks or workflows we could build. Different triggers like system triggers, case-based triggers, and others can be employed without restrictions, but when it comes to on-demand and scheduled jobs, there is a limitation based on the subscription and pricing tier that notably caps the number of workflows we can create. No bulk editing across cases was one issue, along with limited filtering related to single grouping constraints. Additionally, the out-of-the-box case templates provided require substantial modifications before they become usable. There is also a feature in the cases for notes that cannot be searched. They are only visible through the UI, which is another area for improvement. The workflow and execution-based charges seem misleading as this was not discussed initially. I am not sure if new customers are made aware of this. It seems that workflows revolving around cases hinder functionality outside of case management, as we have many use cases needing on-demand triggers and schedules for functions like reporting or polling devices. Creating additional workflows to achieve basic functionalities raises costs significantly, which disadvantages customers. While they facilitate optimization and scaling, the support received tends to be very basic. Improvements can be made in that area as well.
report
Use our free recommendation engine to learn which AI-SOC solutions are best for your needs.
900,747 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Real Estate/Law Firm
9%
Manufacturing Company
8%
Healthcare Company
8%
Comms Service Provider
8%
Financial Services Firm
13%
Construction Company
11%
Manufacturing Company
10%
Comms Service Provider
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business5
Large Enterprise2
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise5
Large Enterprise5
 

Questions from the Community

What needs improvement with Purple AI?
AI-assisted summary is good, but if we get it in the exact threat module where we investigate all the threats, it would be more helpful for the AI part. For next step suggestions, if they simply ad...
What is your primary use case for Purple AI?
The main use cases I use Purple AI for are building queries, alerts, and Star custom policies. Mostly I use Purple AI for building alerts, queries, and Star custom policies. Sometimes it doesn't gi...
What advice do you have for others considering Purple AI?
I notice a difference in speed using Purple AI compared to legacy SIEMs such as Sumo Logic; it is fast, taking only a few seconds to respond. Sumo Logic has an AI assistant called Sumo Copilot, but...
What needs improvement with Torq?
I do not dislike anything about Torq because it has satisfied all of our use cases and requirements. We contacted support as well, and support is very good. I believe everything is good now. Howeve...
What is your primary use case for Torq?
Initially, we were using Slack for small automations, such as creating pipelines or shutting down servers. For example, I could shut down one of our Angular services on one of our servers through a...
What advice do you have for others considering Torq?
I have been working for five years with experience in the IT field. Torq is very good. It manages everything. I would rate this product 10 out of 10.
 

Comparisons

 

Overview

Find out what your peers are saying about Purple AI vs. Torq and other solutions. Updated: April 2026.
900,747 professionals have used our research since 2012.