About IBM Security QRadar
IBM QRadar SIEM is a security information and event management platform for security analysts to accurately detect, prioritize, investigate and quickly respond to threats across cloud-based and on-premises environments. QRadar monitors the enterprise network using machine learning and AI algorithms, providing teams with intelligent insights which enable security analysts to formulate a response plan before attackers are able to damage systems, steal data, or disrupt business operations.
QRadar provides tools for advanced persistent threat detection which enable security analysts to collect data on low risk events in order to identify the high risk cyber attacks which are underway. By correlating current and historical security information, security teams are provided with a single view into the broader threat, as events related to the same threat are automatically chained together. QRadar helps security teams to formulate a response plan, speed up investigation times by leveraging cognitive intelligence, and begin activating automated incident response processes using the IBM Resilient integration.
For insider threat detection, QRadar provides advanced analytics and machine-learning algorithms to help identify high-risk activities, uncover compromised credentials, prioritize high-risk users, and alert security teams to serious incidents. Integrated identity governance solutions enable users to suspend high-risk users’ accounts to contain threats and block potential damage. Integration with cloud services including Amazon Web Service (AWS), Azure, Office 365, SalesForce, and traditional on-premises infrastructure help security analysts to better detect and respond to threats regardless of their location.
QRadar also includes tools for compliance and data privacy to ensure the protection of sensitive data for both brand reputation and compliance with regulations including GDPR. The platform alerts security teams to any suspicious activities that may signal an attempt of data theft, and continuously analyzes network traffic to detect new assets on the network. The optional vulnerability scanner feature prioritizes risks and vulnerabilities, while security features provide insights into sensitive databases and access entitlements across the network.
Pricing starting from:
Not provided by vendor
- Free Version
- Free Trial
- Subscription
Top 5 alternatives to IBM Security QRadar
Key benefits of IBM Security QRadar
Typical Customers
- Freelancers
- Small Businesses (2-50)
- Mid-size Companies (51-500)
- Large enterprises (500 and more)
Deployment
- Cloud-based
- On-premise
Markets
United States
Supported Languages
English
Pricing starting from:
Not provided by vendor
- Free Version
- Free Trial
- Subscription
Top 5 alternatives to IBM Security QRadar
Images
Features
Total features of IBM Security QRadar: 16
Alternatives
IBM Security MaaS360 with Watson
ArcSight
FortiSIEM
USM Anywhere
Reviews
Already have IBM Security QRadar?
Software buyers need your help! Product reviews help the rest of us make great decisions.
- Industry: Computer Software
- Company size: 10 000+ Employees
- Used Daily for 2+ years
-
Review Source
Overall rating
- Ease of Use
- Likelihood to recommend 8.0 /10
Security at it's peak
Reviewed on 2019/07/10
Pros
Security Innovation event management system is excellent as it has endless layers of security for a company's firewall
Cons
To be sincere, the only way this system can be flawed is when pass codes are compromised within
- Industry: Retail
- Company size: 51-200 Employees
- Used Daily for 1+ year
-
Review Source
Overall rating
- Value for Money
- Ease of Use
- Customer Support
- Likelihood to recommend 10.0 /10
IBM QRadar SIEM
Reviewed on 2019/05/20
Collect in secure mode all critical events from our critical resources. Identify and analysis...
Collect in secure mode all critical events from our critical resources. Identify and analysis incidents and attacks.
Pros
The IBM QRadar SIEM is a powerful tool. A mature solution to collect event and investigate incidents and attacks. The tool store in secure mode all events. The tool is easy to use. Easy to add log sources and analysis offenses.
Cons
The documentation of the tool can be more detailed.
Alternatives Considered
Splunk EnterpriseReasons for Switching to IBM Security QRadar
Easy to use. Mature solution that assure security of the events.
- Industry: Semiconductors
- Company size: 10 000+ Employees
- Used Daily for 2+ years
-
Review Source
Overall rating
- Value for Money
- Ease of Use
- Customer Support
- Likelihood to recommend 10.0 /10
A feasible solution for the detection of incidents, all our information is safe.
Reviewed on 2023/02/18
With IBM Security QRadar we reduce the risk of being vulnerable to a cyber attack, since the...
With IBM Security QRadar we reduce the risk of being vulnerable to a cyber attack, since the protection of this software is intuitive and prioritizes threats to be more effective in the security of our IT environment. It is a truly automatic process that guarantees the total protection of our data, has detailed reports and a very powerful response to cyber attacks.
Pros
It is a necessary software for all our business environment, since it guarantees that our information is safe, the dashboard is intuitive and understandable, the analyzes are effective so that threats do not enter and damage our information, I like the prioritization of threats, since neutralizes in order of importance, network forensics is very good, advanced searches are good, protection of our entire IT infrastructure is high, and we really like the trust that IBM Security QRadar places in us.
Cons
It has many features that somewhat limit the understanding of early adopters, it can be overwhelming the first time, but the quality of the results keeps our data safe and threats away.
- Industry: Computer & Network Security
- Company size: 51-200 Employees
- Used Daily for 2+ years
-
Review Source
Overall rating
- Value for Money
- Ease of Use
- Customer Support
- Likelihood to recommend 3.0 /10
QRadar Gets It Mostly Done At A Cost
Reviewed on 2020/09/01
I used QRadar for over 10 years, and have found great success in using it in a reactive sense when...
I used QRadar for over 10 years, and have found great success in using it in a reactive sense when other staff bring up security or connectivity issues; the ability to quickly show normalized logs -- along with the raw log output for the skeptical staff out there -- is a real boon to quickly finding the root cause of an issue and moving on. The pricing and licensing schemes of the product have gotten more cumbersome since the purchase of the product by IBM, and their support channels exhibit the kind of mind-numbing bureaucracy you can expect out of such a large organization.
Pros
When aggregating log information, the ability to quickly click and pivot around between data sources and filter results on-the-fly worked very well for any reactive kind of events. The software also did a relatively decent job on identifying data and log sources and classifying them correctly.
Cons
The software can be very involved and cumbersome; expect to dedicate significant staff time towards it in order to keep it operational and to continually tune the software for false positives. For example, at an organization with over 2,000 employees I had to dedicate almost a single employee to perform tasks within QRadar, and nothing else. Along with that, in order to be successful your support staff must be extremely familiar with networking and understanding the reasons why devices send the logs that they do. This is not the case where you can point-and-click a few things and have a system that alerts you properly when attacks are taking place.
Reasons for Switching to IBM Security QRadar
Ultimately, we were early adopters of the product and continued to utilize our initial licensing investment repeatedly when we upgraded our hardware. It was a known quantity that my staff had good familiarity in, although over the course of 10 years we were still not able to get the product to perform all of the features it said it could. This is partly due to my inability to get additional staff resources, as well as having a network layout that was decentralized and not relatively simple.
- Industry: Information Services
- Company size: 201-500 Employees
- Used Daily for 1+ year
-
Review Source
Overall rating
- Value for Money
- Ease of Use
- Customer Support
- Likelihood to recommend 10.0 /10
High-quality monitoring that protects us from threats.
Reviewed on 2023/01/05
We integrated IBM Security QRadar because it is a much more functional SIEM software than the...
We integrated IBM Security QRadar because it is a much more functional SIEM software than the others, the usability, security, analysis and incident resolution features are amazing, it also allows a quick response to threats found in the network. It is the perfect software to monitor our infrastructure and prevent threats from entering and damaging our system.
Pros
I like that it has an easy to understand user interface, detection of threats is accurate and neutralizes them before they cause damage to our system, it is customizable and reduces the risk of damage to our system. It has detailed reports that help us understand what is happening and does not detect false positives.
Cons
It is a high quality SIEM product, it has big differences in functions and results compared to others and although it is not so easy to use the software for the first time, it has a simple interface that you can learn to use and customize in a short time.
IBM Security QRadar FAQs
Below are some frequently asked questions for IBM Security QRadar.Q. What type of pricing plans does IBM Security QRadar offer?
IBM Security QRadar offers the following pricing plans:
- Free Trial: Available
Get your pricing estimate: https://www.ibm.com/qradar/security-qradar-siem/pricing
Q. Who are the typical users of IBM Security QRadar?
IBM Security QRadar has the following typical customers:
201-500, 501-1 000, 1 001-5 000
Q. What languages does IBM Security QRadar support?
IBM Security QRadar supports the following languages:
English
Q. Does IBM Security QRadar support mobile devices?
IBM Security QRadar supports the following devices:
Q. What other apps does IBM Security QRadar integrate with?
IBM Security QRadar integrates with the following applications:
Microsoft 365, Microsoft Azure, Salesforce Sales Cloud
Q. What level of support does IBM Security QRadar offer?
IBM Security QRadar offers the following support options:
Email/Help Desk, Phone Support
Related categories
See all software categories found for IBM Security QRadar.
