How Torq Is Rewiring SOCs With Autonomous Cyber Brokers

Embedding Revrod deep into Torq’s platform permits the corporate to conduct investigations from begin to end with minimal human involvement, mentioned CEO Ofer Smadari.

See Additionally: On Demand | From Patch to Prevention: Modernizing Remediation Throughout Hybrid Environments

AI brokers comply with natural-language runbooks written in English and execute duties historically dealt with by human analysts together with alert triage, decision-making and case decision, Smadari mentioned. An 80-step automation course of can now be condensed to simply three steps utilizing Torq’s brokers with out compromising high quality or final result, permitting safety groups to construct shortly and cut back upkeep (see: Torq Acquires Startup Revrod to Improve AI SOC Capabilities).

“We’re implementing the Revrod expertise all around the platform, from the way in which that we’re constructing our AI brokers on the workflow aspect and on the investigation aspect by way of our AI pushed case administration,” Smadari mentioned. “So, we’re implementing that expertise in like nearly every bit of the platform in the present day.”

On this video interview with Data Safety Media Group, Smadari additionally mentioned:

• Why AI use by attackers has resulted in an elevated alert quantity;
• Why triage and false-positive decision is such a ache level for safety groups;
• How Torq plans to proceed its push for agent-driven full automation.

Smadari based Torq in 2020. He beforehand based Luminate – later acquired by Symantec – which enabled safety and IT groups to create zero belief utility entry structure with out conventional VPN home equipment. He additionally managed the gross sales and enterprise operations at cloud entry safety dealer Adallom, which was acquired by Microsoft.