From SOC to IT: How Bloomreach Scales Automation Enterprise-Wide with Torq



Case Study Contents
![]()
Extending AI-First Thinking to Security Operations
Bloomreach isn’t new to AI. As a company built on AI-driven personalization and automation across digital commerce, intelligence and scale are core to its culture. That mindset also extends to security operations — where efficiency, adaptability, and machine-speed decisions are just as critical.
When Bloomreach’s 24×7 global SOC relied on traditional SOAR, the limitations were clear. The platform demanded developer-level expertise for every workflow, leaving automation siloed in the hands of just a couple of specialists. Adoption lagged, workflows bottlenecked, and the SOC couldn’t scale its automation culture beyond a few power users.
Moving to Torq HyperSOC™ was the easy next step. With a platform designed for both seasoned developers and junior analysts, Bloomreach could extend its automation-first philosophy into the SOC — democratizing workflow building, unlocking AI-driven case management, and expanding automation well beyond security into Business Intelligence and Help Desk teams.
“We wanted everybody on the team, including junior analysts, to be able to build automations — not just developers. With traditional SOAR, that wasn’t possible.”
Chris Talevi, Deputy CISO at Bloomreach
![]()
User-Friendly, Scalable Automation with Torq
Bloomreach evaluated multiple platforms before choosing Torq HyperSOC. What stood out was the balance of ease of use for junior analysts and depth for advanced automation developers.
Automation everyone can use
From the very first day of the proof of concept, Talevi’s team of a dozen analysts were excited about Torq. Unlike traditional SOAR, which required developer-level expertise to build or maintain workflows, Torq empowered every team member — even junior analysts — to participate in automation. The intuitive interface and no-code options removed barriers and gave the SOC immediate traction. Torq Academy provided an excellent resource for learning and development.
Breadth of integrations
Torq’s extensive integration library made a major difference. The team quickly connected core tools: messaging platforms, endpoint protection systems, CRM applications, and their ticketing system, enabling workflows that aligned with how the SOC already operated day to day. Flexible licensing also made expanding usage across additional tools and teams easier without worrying about hidden costs or restrictions.
AI that elevates the SOC
Torq Socrates, the AI SOC Analyst, was a standout differentiator. Socrates added intelligence to every step of the process. From triage and enrichment to suggested actions, the AI brought speed and consistency that helped Bloomreach’s SOC reduce repetitive work and improve decision-making.
Beyond security operations
Torq’s value wasn’t confined to the SOC. The platform’s flexibility allowed Bloomreach to extend automation to other functions, including Help Desk and Business Intelligence teams. This adaptability made Torq more than just a SOC tool — it became an enterprise-wide automation layer that simplified processes, reduced manual effort, and delivered measurable time savings across multiple teams.
“Torq levels up the type of work analysts can perform. It removes repetitive tasks and gives them time to focus on higher-value work.”
Chris Talevi, Deputy CISO at Bloomreach
![]()
From Core SOC Workflows to Enterprise-Wide Automation
“We wanted to expand beyond SOC. We didn’t want the automation product to be just for the SOC — we wanted something we could adapt across multiple teams. The Torq platform and specifically the Torq Academy made this possible.”
Chris Talevi, Deputy CISO at Bloomreach
Bloomreach’s journey with Torq began in the SOC, where the team migrated high-volume, high-friction workflows like phishing triage and authentication validation. Once analysts saw the platform’s ease of use and reliability, adoption spread quickly beyond security into other business units. Today, Torq acts as an enterprise-wide automation layer, streamlining processes across multiple teams.
Phishing and authentication workflows
Phishing triage and authentication checks were among the first workflows Bloomreach migrated into Torq. Incoming alerts are automatically enriched with user and device context, cross-checked against threat intelligence, and escalated only when risk is confirmed. Authentication anomalies trigger workflows that validate user activity, enforce MFA, or reset credentials as needed. These automations have significantly reduced manual workload while ensuring faster, more accurate responses to two of the SOC’s most common alert types.
Help Desk automation
Bloomreach’s Help Desk team uses Torq to eliminate repetitive account management tasks. Automated workflows trigger from collaboration channels, verifying user identity, resetting access, and cross-checking HR data for validation. What once required manual intervention now runs autonomously, cutting down on ticket volume and response times. By offloading these tasks, Help Desk staff are free to focus on more complex, user-facing issues.
Threat intel summaries
Instead of analysts manually parsing RSS feeds and intelligence reports, Torq aggregates threat intel automatically. Large Language Models (LLMs) summarize the data, categorize IOCs, and publish clear, actionable reports directly into Slack. This means Bloomreach’s threat hunters receive concise, relevant intelligence in near real time without having to sift through raw feeds. As a result, the SOC spends less time gathering data and more time acting on it.
Business intelligence workflow automation
Beyond the SOC, Bloomreach’s Business Intelligence team leverages Torq for process automation tied to Salesforce. Automated queries identify overdue renewals, send reminders to account owners, and update order management workflows once responses are received. This reduces manual follow-up, accelerates quarterly close cycles, and ensures nothing falls through the cracks. What began as a security automation platform has become a cross-business enabler of efficiency.
“How I see my team building workflows surprises me with how quickly they learned the Torq platform, compared to the three years we were trying to push traditional SOAR. Many haven’t even completed the formal automation training, but their hands-on experience and adoption rate with Torq is impressive.”
Raghavendran Muthusamy, Manager, Advanced Detections and Threat Intelligence at Bloomreach
![]()
Bloomreach’s Wins with Torq: Adoption, Time Savings, and Scale
With Torq HyperSOC, Bloomreach has transformed automation from a developer-driven task into a company-wide capability. The SOC now runs faster, adoption is higher across all levels, and automation has expanded into adjacent teams — all while AI takes on repetitive work so analysts can focus on what matters.
Measurable time savings
Two workflows alone have saved Bloomreach over five analyst hours per week. The cumulative impact of dozens more in production translates into major efficiency gains across teams.
Automation for all skill levels
Analysts at every level — from junior to senior — can now build and maintain workflows. This democratization of automation reduces bottlenecks and accelerates innovation across the SOC.
AI does the heavy lifting
With Socrates, Torq’s AI SOC Analyst, repetitive Tier-1 and Tier-2 tasks are handled autonomously. Analysts spend time on meaningful alerts and strategic work rather than repetitive triage.
Cross-team value
Beyond the SOC, Bloomreach’s Business Intelligence and Help Desk teams have adopted Torq to automate routine tasks. This enterprise-wide usage extends Torq’s value far beyond security operations.
With Torq HyperSOC, Bloomreach has transformed its SOC and unlocked enterprise-wide automation, saving time, scaling operations, and empowering every team to work smarter.
“We picked Torq to remove typical L1 and L2 security operations analyst busywork. With Torq, analysts can spend time on meaningful alerts rather than repetitive ones.”
Raghavendran Muthusamy, Manager, Advanced Detections and Threat Intelligence at Bloomreach
Want to see how Torq can transform your SOC?
Bloomreach is the agentic platform for personalization. Powering autonomous search, conversational shopping, and autonomous marketing, Bloomreach personalizes the entire customer experience. From retail to financial services, hospitality to gaming, businesses create experiences that drive higher growth and lasting loyalty. Bloomreach drives personalization for 1,400+ brands around the world, including American Eagle, Sonepar, and Pandora.
