What the Proof of Concept Was Actually Testing

Running a proof of concept across multiple AI SOC platforms before committing to one is not standard practice. Many organizations pick a vendor through a combination of existing relationships, analyst recommendations, and sales cycles. The fact that SilverSky ran an extended evaluation says something about how seriously the company treats the infrastructure decision underneath its managed security offering.

What SilverSky was looking for, according to Thomas Neclerio, President of MDR and CISO at SilverSky, came down to three things working together: AI-driven investigation, response orchestration, and transparent human oversight across the security operations lifecycle. That third element, transparent human oversight, is worth flagging because it is the one that gets quietly dropped in platforms that prioritize automation speed over accountability.

Neclerio described the reasoning: “We conducted an extensive proof of concept across AI SOC automation platforms and selected Torq because we believe they are a leader in the industry and the right strategic partner for where modern SOC operations are headed. In today’s urgent threat environment, time is critical. Reducing time to detection and time to response directly strengthens how we protect our customers. Leveraging Torq helps SilverSky adopt best-in-class technology, advance our operational capabilities, and stay ahead of an increasingly complex threat landscape.”

Why Time to Detection and Time to Response Are the Metrics That Matter

SilverSky serves regulated and high-consequence organizations, a category that includes financial services, healthcare, and other sectors where the cost of a slow response is not just operational but regulatory and reputational. For those customers, compliance establishes a baseline, but it does not protect them. What protects them is how fast a threat gets detected, how quickly investigation produces actionable context, and how decisively the response executes.

That framing shapes what SilverSky needed from a platform partner. An AI SOC tool that improves alert volume management without compressing investigation time does not solve the right problem. Torq’s combination of agentic AI, contextual reasoning, and autonomous execution is aimed specifically at the time dimension, moving the SOC from a function that processes security events toward one that acts on them before they develop into larger incidents.

For healthcare organizations in particular, that speed question carries additional weight. Clinical environments running connected medical devices and IoT infrastructure face threat patterns that move faster than traditional SOC workflows were designed to handle, and the consequences of delayed response extend beyond data loss into patient safety territory. Security leaders in that space, evaluating both their SOC model and their IoMT security posture, are asking similar questions about detection speed, vendor accountability, and what genuine visibility across connected assets actually looks like in practice. The IoMT Security Buyer’s Guide covers that evaluation framework in detail, including the vendor checklist questions that matter most for regulated clinical environments.

The Architecture Behind the Partnership

Torq‘s platform sits at the intersection of three capabilities that are individually common but rarely well-integrated: agentic AI that can reason through an investigation rather than just pattern-match against rules, response orchestration that can execute across a distributed toolset without requiring manual handoffs at each step, and the audit trail and human oversight layer that regulated environments need to demonstrate accountability.

Eldad Livni, CINO and Co-Founder of Torq, described what the partnership is designed to deliver: “The Torq AI SOC Platform combines agentic AI, contextual reasoning, and autonomous execution to help organizations respond faster, operate more intelligently, and strengthen resilience across the threat lifecycle. SilverSky’s focus on disciplined execution, customer outcomes, and compliance-aware security delivery makes this a strong strategic partnership. Together, we’re helping organizations build AI-driven security operations that are faster, smarter, and more resilient.”

The phrase compliance-aware security delivery is doing specific work in that statement. It distinguishes between organizations that treat compliance as the security goal and those that treat it as the floor, building operational security capability on top of it. SilverSky has been explicit that its model falls in the second category, which is what makes the Torq integration a natural fit rather than a feature addition.

What This Means for Customers in Regulated Sectors

The organizations SilverSky serves do not have the luxury of treating security operations as a background function. Regulatory requirements, customer audits, and the threat landscape they face demand that security controls are not just present but actively working, with demonstrable evidence that investigations happen and responses are executed within timeframes that actually matter.

Bringing Torq into the backend of that operation changes what SilverSky can promise and demonstrate. Faster triage means fewer alerts that age into incidents. Consistent investigation logic means fewer gaps created by analyst fatigue or shift changes. Automated response orchestration means the window between detection and containment shrinks without requiring proportional increases in analyst headcount.

For customers who have been asking managed security providers to show their work rather than just report outcomes, the transparency layer built into Torq’s platform gives SilverSky a more concrete answer to that question.

A Deliberate Investment in the Infrastructure Underneath the Service

The framing SilverSky has used around this partnership is worth taking at face value. Describing it as a deliberate investment in the backend platform that powers security operations is a direct acknowledgment that the quality of a managed security service is inseparable from the quality of the tooling running underneath it.

That is an obvious point once stated, but it is not how managed security providers have always talked about their technology choices. The willingness to be specific about platform selection, evaluation process, and the reasoning behind the decision reflects a broader shift in how buyers in regulated sectors are asking these questions. They want to know who is running the SOC, not just what the SLA says.

Research and Intelligence Sources: SilverSky, Torq

To participate in our interviews, please write to our CyberTech Media Room at info@intentamplify.com