What's New?

Where SecOps skills move from theory to real-world practice.
Hands-on courses, role-based certifications, and guided Playgrounds to help you build real expertise and get more out of Torq.
​Explore the Academy

You can now generate Actionplans from runbooks associated with Socrates-assigned cases.

Actionplans provide a transparent and structured set of Actions for Socrates to ensure reliability and reduce errors.

Organization Managers can now create an allowlist of service API keys for automatic sharing across workspaces. When enabled, keys are shared instantly without manual approval, and all actions are logged for transparency.

Configuring SSO in Torq is now easier, safer, and more reliable with the new SSO Configuration Wizard. The guided setup streamlines configuration, prevents account lockouts, and ensures accurate claims mapping before activation.

We've introduced new steps and improvements for new and existing integrations. For full details, check out the complete digest.

You can now filter your runbook list by Lock status, Created at, Updated at, and Source name.

You can now resend events that triggered workflow executions that ended from the Activity Log page.

This enhances incident response by enabling efficient recovery from multiple simultaneous workflow execution failures.

You can now use workflows to add the source of automatically synced runbooks, allowing better runbook traceability.

You can also lock a runbook's content to prevent unauthorized edits.

We've introduced new steps and improvements for existing integrations, as well as new templates. For full details, check out the complete digest.

You can now enhance your RBAC capabilities with the new Roles Management page (Settings > Security > Roles).

The page allows you to create, edit, delete, and assign custom roles to users.

You can now delete unnecessary observables from your workspace to reduce clutter and streamline case investigations.

Observables can be removed manually from the Observables page, or automatically.

When an observable is deleted, it's also removed from any associated cases. If the same observable is re-added later, its data and associations are restored.

We've introduced new steps and improvements for existing integrations, as well as new templates. For full details, check out the complete digest.

You can now trigger a Workflow whenever a Step Runner's health status changes. Both Healthy to Unhealthy and Unhealthy to Healthy state changes are logged as System Events.

You can now send Interaction Flow notifications directly to users in the Torq app. The destination users will receive a sidebar notification with direct access to the Interaction, making urgent tasks or follow-ups easier to notice and act on.
​

We’ve added three enhancements to Torq Interact to make building and debugging smoother and simpler:

• Dynamic Timeouts: Set Interaction Flow timeouts dynamically for workflows, tailoring them to each use case. No need to create multiple Flows to manage different timeouts. (Tip: Use the correct time format, e.g., 12m, 1h.)
• Evaluate Expressions: Instantly check context references inside Interactions with one click, making debugging and fine-tuning your Flows easier.
• Reassign Trigger Interaction Flows: With just a few clicks, you can change the Interaction Flow for a Torq Interact trigger to any Flow in the workflow or create a new one.

We've introduced new steps and improvements for existing integrations, as well as new templates. For full details, check out the complete digest.

Manage Runbooks efficiently with the new Runbooks page. Enjoy complete visibility and control of all Runbooks in your workspace, add new Runbooks, and edit existing ones.

The new Observables page gives you complete visibility and control. You can now search, sort, filter, and manage all observables in one place, for enhanced threat tracking and traceability.

Add new observables and edit observable attributes, including metadata and enrichment data.

You can now pin your preferred mode, keeping the navigation bar expanded or collapsed. Right-click to open pages in new browser tabs.

The Builderbox is a more intuitive way to access everything you need to build powerful workflows.

Navigate through the different Steps and Operators, and choose to view only Steps from integrations configured in your workspace, or all available Steps.