In the relentless battle against cyber threats, security operations centers (SOCs) constantly seek advanced capabilities to outmaneuver adversaries. The sheer volume and sophistication of modern attacks demand not just reactive defense but proactive, intelligent strategies. This ongoing need for operational excellence is precisely why the recent partnership between Torq and Criminal IP marks a significant milestone in autonomous SOC operations: delivering decision-ready threat intelligence directly into security workflows.

The Imperative for Autonomous SOC Operations

Traditional SOC models, heavily reliant on manual processes, struggle under the weight of alerts and the speed of attacks. The concept of an autonomous SOC aims to automate repetitive tasks, accelerate incident response, and free human analysts to focus on complex, high-value investigations. Achieving this autonomy necessitates seamless integration of robust security tools and, crucially, access to highly accurate, actionable threat intelligence.

Introducing the Torq and Criminal IP Partnership

On July 13th, 2026, CyberNewswire reported a pivotal collaboration between two leaders in the cybersecurity space: Cyber Threat Intelligence search engine and Attack Surface Management platform, Criminal IP, and agentic security operations leader, Torq. This alliance is designed to bridge the gap between raw threat data and actionable security decisions. By integrating Criminal IP’s “decision-ready” threat intelligence into the Torq AI SOC Platform, security teams gain unprecedented capabilities to triage, investigate, and respond to threats with greater speed and precision.

Criminal IP: Powering Threat Intelligence and Attack Surface Management

Criminal IP stands out as a sophisticated platform that not only functions as a cyber threat intelligence search engine but also offers comprehensive attack surface management. It continuously scans and indexes global internet assets, providing real-time data on potential vulnerabilities, malicious IPs, phishing sites, and other indicators of compromise (IoCs). This rich dataset is critical for understanding an organization’s exposure and identifying external threats before they materialize.

• Threat Intelligence: Provides up-to-the-minute data on adversary infrastructure, malicious activity, and emerging threats.
• Attack Surface Management: Helps organizations discover and monitor their internet-facing assets, identifying weak points hackers could exploit.

Torq AI SOC Platform: Agentic Security Operations at its Core

Torq is rapidly establishing itself as a leader in agentic security operations. Their AI SOC Platform is engineered to automate and orchestrate complex security workflows, transforming how security teams operate. By embedding AI and automation into every stage of the incident lifecycle, Torq enables faster detection, more efficient investigation, and automated response capabilities. The platform’s “agentic” approach means it can intelligently execute tasks, adapt to new information, and make autonomous decisions based on pre-defined playbooks and integrated intelligence.

• Automation & Orchestration: Streamlines incident response, reducing manual effort and human error.
• AI-Driven Insights: Leverages artificial intelligence to enhance threat detection and analysis.
• Autonomous Response: Enables automated remediation actions based on real-time threat intelligence.

Synergy for Enhanced Threat Triage and Investigation

The integration of Criminal IP’s threat intelligence with the Torq AI SOC Platform creates a powerful synergy. When alerts are generated within Torq, they can be instantly enriched with Criminal IP’s context-rich data. For instance, if an inbound connection originates from an IP address flagged by Criminal IP as malicious or associated with a known campaign, Torq can immediately escalate its priority, trigger automated blocking actions, or launch a deeper investigation with pre-populated threat details. This prevents security analysts from manually correlating data across disparate systems, significantly reducing mean time to detect (MTTD) and mean time to respond (MTTR).

The Future of Decision-Ready Threat Intelligence

The concept of “decision-ready” threat intelligence is central to this partnership. It’s not just about providing raw data, but about delivering intelligence that is immediately actionable without extensive human interpretation. Criminal IP provides this by categorizing and contextualizing threats, making it easy for platforms like Torq to consume and act upon. This integration moves beyond simply alerting to empowering autonomous systems to make informed security decisions, thereby enhancing the overall effectiveness and efficiency of SOC operations. Such advancements are crucial for defending against vulnerabilities like the recent CVE-2024-21887 affecting Ivanti Connect Secure, where rapid intelligence integration can prevent widespread exploitation.

Key Takeaways for Security Professionals

• The partnership between Torq and Criminal IP will significantly enhance autonomous SOC capabilities.
• It aims to provide “decision-ready” threat intelligence for faster and more accurate threat triaging and investigation.
• This collaboration underscores the growing trend towards integrating advanced threat intelligence directly into security automation platforms.
• Security teams can expect reduced manual workloads and improved incident response times through this enhanced integration.