IBM QRadar SIEM

Security information & event management (SIEM) platform

About IBM QRadar SIEM

IBM QRadar SIEM is a security information and event management platform for security analysts to accurately detect, prioritize, investigate and quickly respond to threats across cloud-based and on-premises environments. QRadar monitors the enterprise network using machine learning and AI algorithms, providing teams with intelligent insights which enable security analysts to formulate a response plan before attackers are able to damage systems, steal data, or disrupt business operations.

QRadar provides tools for advanced persistent threat detection which enable security analysts to collect data on low risk events in order to identify the high risk cyber attacks which are underway. By correlating current and historical security information, security teams are provided with a single view into the broader threat, as events related to the same threat are automatically chained together. QRadar helps security teams to formulate a response plan, speed up investigation times by leveraging cognitive intelligence, and begin activating automated incident response processes using the IBM Resilient integration.

For insider threat detection, QRadar provides advanced analytics and machine-learning algorithms to help identify high-risk activities, uncover compromised credentials, prioritize high-risk users, and alert security teams to serious incidents. Integrated identity governance solutions enable users to suspend high-risk users’ accounts to contain threats and block potential damage. Integration with cloud services including Amazon Web Service (AWS), Azure, Office 365, SalesForce, and traditional on-premises infrastructure help security analysts to better detect and respond to threats regardless of their location.

QRadar also includes tools for compliance and data privacy to ensure the protection of sensitive data for both brand reputation and compliance with regulations including GDPR. The platform alerts security teams to any suspicious activities that may signal an attempt of data theft, and continuously analyzes network traffic to detect new assets on the network. The optional vulnerability scanner feature prioritizes risks and vulnerabilities, while security features provide insights into sensitive databases and access entitlements across the network.

Key benefits of IBM QRadar SIEM

  • Discover cyber attacks sooner in the attack cycle, view all relevant events in one place, and formulate an effective response plan to block and contain advanced attackers.

  • Detect activities such as anomalous access to data or suspicious movement of data which may indicate an attempt to corrupt or steal sensitive information.

  • QRadar enables security teams to detect, investigate and react to insider threats before attackers are able to damage systems, steal data, or disrupt business operations.

  • QRadar's network insights help users to analyze network traffic and locate critical data, monitor usage, and detect threats in real time.

  • Identify and group related events by correlating current and historical security information, and prioritize alerts to the most critical threats.

  • Devices

    Business size

    S M L

    Markets

    United States

    Supported Languages

    English

    Images

    IBM QRadar extends visibility to cloud solutions and platforms by collecting, normalizing and analyzing events to help detect threats
    View 2 more
    IBM QRadar SIEM video
    IBM QRadar SIEM screenshot: IBM QRadar extends visibility to cloud solutions and platforms by collecting, normalizing and analyzing events to help detect threats

    Features

    Total features of IBM QRadar SIEM: 19

    • Alerts / Escalation
    • Behavior Tracking
    • Compliance Management
    • Incident Management
    • Monitoring
    • Planning Tools
    • Prioritizing
    • Real Time Analytics
    • Real Time Data
    • Real Time Notifications
    • Risk Alerts
    • Risk Analytics
    • Risk Assessment
    • Security Auditing
    • Third Party Integration
    • Usage Tracking
    • Visual Analytics
    • Vulnerability Scanning
    • Web Analytics

    Alternatives

    EventTracker

    3,6
    #1 Alternative to IBM QRadar SIEM
    EventTracker is a managed SIEM (security information and event management), threat intelligence, and log management...

    ManageEngine Log360

    4,6
    #2 Alternative to IBM QRadar SIEM
    ManageEngine Log360 is a log management and SIEM (security information and event management) platform which helps...

    Blumira

    5
    #3 Alternative to IBM QRadar SIEM
    Blumira is a cloud-based threat detection and response platform that helps businesses manage operations related to...

    EventLog Analyzer

    4,7
    #4 Alternative to IBM QRadar SIEM
    EventLog Analyzer is a web-based security information and event management (SIEM) solution, which assists small to...

    Reviews

    Overall rating

    4,4 /5
    (12)
    Value for Money
    4,1/5
    Features
    4,5/5
    Ease of Use
    4,1/5
    Customer Support
    4,2/5

    Already have IBM QRadar SIEM?

    Software buyers need your help! Product reviews help the rest of us make great decisions.

    Write a Review!
    Showing 5 reviews of 12
    Success I.
    Overall rating
    • Industry: Computer Software
    • Company size: 10 000+ Employees
    • Used Daily for 2+ years
    • Review Source

    Overall rating

    • Ease of Use
    • Likelihood to recommend 8.0 /10

    Security at it's peak

    Reviewed on 2019/07/10

    Pros

    Security Innovation event management system is excellent as it has endless layers of security for a company's firewall

    Cons

    To be sincere, the only way this system can be flawed is when pass codes are compromised within

    Josh A.
    Overall rating
    • Industry: Retail
    • Company size: 51-200 Employees
    • Used Daily for 1+ year
    • Review Source

    Overall rating

    • Value for Money
    • Ease of Use
    • Customer Support
    • Likelihood to recommend 10.0 /10

    IBM QRadar SIEM

    Reviewed on 2019/05/20

    Collect in secure mode all critical events from our critical resources. Identify and analysis...

    Collect in secure mode all critical events from our critical resources. Identify and analysis incidents and attacks.

    Pros

    The IBM QRadar SIEM is a powerful tool. A mature solution to collect event and investigate incidents and attacks. The tool store in secure mode all events. The tool is easy to use. Easy to add log sources and analysis offenses.

    Cons

    The documentation of the tool can be more detailed.

    Houcem H.
    Overall rating
    • Industry: Telecommunications
    • Company size: 1 001-5 000 Employees
    • Used Daily for 2+ years
    • Review Source

    Overall rating

    • Value for Money
    • Ease of Use
    • Customer Support
    • Likelihood to recommend 6.0 /10

    Full featured SIEM solution - at a price

    Reviewed on 2021/01/21

    A robust SIEM solution that requires a fair amount of tuning to reduce the number of false positives

    A robust SIEM solution that requires a fair amount of tuning to reduce the number of false positives

    Pros

    Overall product stability
    Predefined log normalization functionnality
    Diverse feature set
    Perpetual licensing

    Cons

    Licensing model: the EPS (events per second) cap limits the amount of logs that can be ingested in Qradar
    Can produce a lot of false positives

    Kevin H.
    Overall rating
    • Industry: Computer & Network Security
    • Company size: 51-200 Employees
    • Used Daily for 2+ years
    • Review Source

    Overall rating

    • Value for Money
    • Ease of Use
    • Customer Support
    • Likelihood to recommend 3.0 /10

    QRadar Gets It Mostly Done At A Cost

    Reviewed on 2020/09/01

    I used QRadar for over 10 years, and have found great success in using it in a reactive sense when...

    I used QRadar for over 10 years, and have found great success in using it in a reactive sense when other staff bring up security or connectivity issues; the ability to quickly show normalized logs -- along with the raw log output for the skeptical staff out there -- is a real boon to quickly finding the root cause of an issue and moving on. The pricing and licensing schemes of the product have gotten more cumbersome since the purchase of the product by IBM, and their support channels exhibit the kind of mind-numbing bureaucracy you can expect out of such a large organization.

    Pros

    When aggregating log information, the ability to quickly click and pivot around between data sources and filter results on-the-fly worked very well for any reactive kind of events. The software also did a relatively decent job on identifying data and log sources and classifying them correctly.

    Cons

    The software can be very involved and cumbersome; expect to dedicate significant staff time towards it in order to keep it operational and to continually tune the software for false positives. For example, at an organization with over 2,000 employees I had to dedicate almost a single employee to perform tasks within QRadar, and nothing else. Along with that, in order to be successful your support staff must be extremely familiar with networking and understanding the reasons why devices send the logs that they do. This is not the case where you can point-and-click a few things and have a system that alerts you properly when attacks are taking place.

    Verified Reviewer
    Overall rating
    • Industry: Wine & Spirits
    • Company size: 201-500 Employees
    • Used Daily for 6-12 months
    • Review Source

    Overall rating

    • Value for Money
    • Ease of Use
    • Customer Support
    • Likelihood to recommend 10.0 /10

    QRadar is the best!!!

    Reviewed on 2019/05/08

    IBM QRadar is very good solution to assure integrity of logs. You can add all your log sources,...

    IBM QRadar is very good solution to assure integrity of logs. You can add all your log sources, monitor logs, offenses. Also you can prevent and detect attacks and investigate incidents.

    Pros

    Easy to use. Easy integration with log sources. Assure security of logs is easy with QRadar.

    Cons

    Sometime use too more resources. The user manual can be more detailed.

    Showing 5 reviews of 12 Read all reviews

    IBM QRadar SIEM FAQs

    Below are some frequently asked questions for IBM QRadar SIEM.

    IBM QRadar SIEM offers the following pricing plans:

    • Pricing model: Subscription
    • Free Trial: Available

    Contact IBM for pricing information

    IBM QRadar SIEM offers the following features:

    • Automated incident response processes
    • Behavioral analytics
    • Block advanced attackers
    • Cognitive intelligence
    • Correlate current and historical security information
    • Critical data & GDPR
    • Detect advanced threats
    • Detect insider threats
    • Endpoint management
    • Formulate response plans
    • Identify high-risk activities
    • Incident alerts to security teams
    • Incident forensics
    • Machine-learning algorithms
    • Network monitoring
    • Prioritize risks and vulnerabilities
    • Security analytics engine
    • Third party integration
    • Threat detection in real time
    • Threat intelligence
    • Usage monitoring
    • User behavior analytics
    • Vulnerability scanner (optional)

    IBM QRadar SIEM has the following typical customers:

    Large Enterprises, Mid Size Business

    IBM QRadar SIEM supports the following languages:

    English

    We do not have any information about what devices IBM QRadar SIEM supports

    IBM QRadar SIEM integrates with the following applications:

    IntSights, IronDefense, Keeper for Business, LoginRadius, Microsoft 365, Microsoft Azure, Salesforce Sales Cloud, Threat Detection Marketplace

    IBM QRadar SIEM offers the following support options:

    Online Support, Phone Support

    Related categories

    See all software categories found for IBM QRadar SIEM.