TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Cisco XDR

    Score9.2 out of 10
    N/AA solution to uncover sophisticated attacks and leverage machine learning to prioritize incidents across multiple security controls based on risk score and asset value. Streamlines incident response by simplifying preparation, detection, analysis, containment, eradication, and recovery, which can involve anything from adding a worknote to implementing an automated response.N/A

    IBM Security QRadar EDR

    Score8 out of 10
    N/AIBM Security QRadar EDR (formerly ReaQta) combines automation and dashboards to minimize analyst workloads, detect anomalous endpoint behavior and remediate threats in near real time. With visibility across endpoints, it combines expected features, like MITRE ATT&CK mapping and attack visualizations, with dual-engine AI and automation. For teams that need extended support, managed detection and response (MDR) services offers 24/7 monitoring and response to help keep users…N/A
    Pricing
    Cisco XDRIBM Security QRadar EDR
    Editions & Modules
    Cisco XDR Essentials
    Contact Sales
    per user
    Cisco XDR Advantage
    Contact Sales
    per user
    Cisco XDR Premier
    Contact Sales
    per user
    No answers on this topic
    Offerings
    Pricing Offerings
    Cisco XDRIBM Security QRadar EDR
    Free Trial
    NoYes
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeOptional
    Additional DetailsThere are three License tiers in which Cisco XDR is available: Essentials, Advantage, and Premier (licensed per user). Cisco XDR Essentials delivers the full XDR features and integrates across the Cisco Security portfolio, with a few exceptions. Cisco XDR Advantage builds upon the capabilities delivered in Essentials by adding Cisco-curated integrations with select third-party security tools. Cisco XDR Premier delivers the full Advantage capabilities as a Managed Service provided by Cisco security experts and includes security validation through penetration testing and select Cisco Talos Incident Response services. Data retention: A data retention period of 90 days is included by default. Customers can purchase additional retention periods of 180 or 365 days. Data ingestion: Each tier includes a data ingestion limit of 2GB per user per month. Customers can purchase additional GBs beyond the 2GB default, measured in units of GB per user per month.—
    More Pricing Information
    Community Pulse
    Cisco XDRIBM Security QRadar EDR
    Considered Both Products
    Cisco
    Chose Cisco XDR
    Cisco XDR is great for companies that primarily run Cisco and provides a more seamless integration than Qradar both in terms of identify risks and mitigating them. Cisco XDR also provides insight through Cisco Talos and gives the end users ability to customize their work flow …
    Incentivized
    IBM
    No answer on this topic
    Key User Insights
    Would buy again
    83%
    Would buy again
    5 Answers
    100%
    Would buy again
    11 Answers
    Delivers good value for the price
    100%
    Delivers good value for the price
    6 Answers
    88%
    Delivers good value for the price
    7 Answers
    Happy with the feature set
    83%
    Happy with the feature set
    5 Answers
    100%
    Happy with the feature set
    11 Answers
    Lived up to sales and marketing promises
    100%
    Lived up to sales and marketing promises
    6 Answers
    88%
    Lived up to sales and marketing promises
    7 Answers
    Implementation went as expected
    100%
    Implementation went as expected
    6 Answers
    100%
    Implementation went as expected
    9 Answers
    Features
    Cisco XDRIBM Security QRadar EDR
    Endpoint Security
    Comparison of Endpoint Security features of Cisco XDR and IBM Security QRadar EDR
    Feature
    Cisco XDR
    -
    Ratings
    IBM Security QRadar EDR
    7.5
    10 Ratings
    13% below category average
    Anti-Exploit Technology00 Ratings7.39 Ratings
    Endpoint Detection and Response (EDR)00 Ratings7.410 Ratings
    Centralized Management00 Ratings7.410 Ratings
    Hybrid Deployment Support00 Ratings7.39 Ratings
    Infection Remediation00 Ratings7.310 Ratings
    Malware Detection00 Ratings8.110 Ratings
    Best Alternatives
    Cisco XDRIBM Security QRadar EDR
    Small Businesses
    Microsoft Defender XDR
    Score8.7 out of 10
    SentinelOne Singularity
    Score9 out of 10
    Medium-sized Companies
    InsightIDR
    Score8.5 out of 10
    BlackBerry Protect (CylancePROTECT)
    Score9.1 out of 10
    Enterprises
    Microsoft Defender XDR
    Score8.7 out of 10
    ESET PROTECT
    Score8.8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Cisco XDRIBM Security QRadar EDR
    Likelihood to Recommend
    7.5
    (6 ratings)
    7.0
    (11 ratings)
    User Testimonials
    Cisco XDRIBM Security QRadar EDR
    Likelihood to Recommend
    Cisco
    I enjoy how well it integrates Cisco systems to provide a single pane of glass for security events that are easily digestible to the SOC. However there is room for improvement to integrate more seamlessly with non Cisco products. XDR is great to identify where malicious processes are in the MITR kill chain and is useful for threat analysis.
    Incentivized
    Read full review
    IBM
    IBM Security QRadaar EDR provides all the security features at one place with a reasonable price. Though for smaller organizations, the price may be quite high. Plus since it can detect threats and malwares in real time, every business should try them out.
    Incentivized
    Read full review
    Pros
    Cisco
    • Providing visibility for threat risks
    • Detecting holes in the network that have vulnerabilites
    • Flagging ddos events and kicking off an incident response
    Incentivized
    Read full review
    IBM
    • Detect known and unknown endpoint security threats
    • Remediate these threats near real time
    • Automation in threat detection
    • Threat attack attack visualization storyboards
    • Alert management authomation
    Incentivized
    Read full review
    Cons
    Cisco
    • XDR can improve with more integrations
    • XDR can be improved with more programmability for the end user
    • XDR can be improved with more options to mitigate events
    Incentivized
    Read full review
    IBM
    • use AI to review previous false negatives that contributed wrongly in the AI suggestion on the follow alerts
    • easily run a script based on values from an hash, ips, path inside the boxes on the behavioral tree
    • apply the remediation to a range of endpoint instead to only the endpoint of the current alert
    • use ajax for example to update the alert page automatically while actions are happening
    • for api have profiles that allow only get actions, or just post on some actions
    • create users in bulk
    Incentivized
    Read full review
    Alternatives Considered
    Cisco
    While both products were both easy to use and would have fit our environment, we are a very heavy Cisco shop and Cisco Cisco XDR fit better with the rest of our software portfolio. Stellar Cyber has some additional functionality in addition to Cisco XDR but the cost difference didn't work with our budget.
    Incentivized
    Read full review
    IBM
    Bitdefender GravityZone combines multiple security services into a single platform to reduce the cost of building a trusted environment for endpoints. bit the IBM provides a vast support and always there to guide when in need With the majority of our users working in hybrid mode we needed a strong security control that could provide top-class protection with the minimum amount of False Positives (and, of course, of True Positives).
    Incentivized
    Read full review
    Return on Investment
    Cisco
    • The impact Cisco XDR has on our organization's overall business objectives is that, in our experience, Cisco XDR Accelerates incident detection
    Incentivized
    Read full review
    IBM
    • NOCs and SOCs heavily use IBM Security QRadar EDR and IBM Security QRadar EDR reduced labor costs to identify endpoint security threats and the treat remediation
    • IBM Security QRadar EDR offers a consistent approach to endpoint threat identification and resolution, reduces enterprise security operations support costs
    • In general, IBM Security QRadar EDR enhances enterprise security posture
    Incentivized
    Read full review
    ScreenShots

    IBM Security QRadar EDR Screenshots

    Screenshot of Behavioral tree: 
A behavioral tree provides full alert and attack visibility.Screenshot of Behavioral tree storyline: 
A visual storyline is automatically created as an attack unfolds, including mapping to MITRE ATT&CK, for full visibility.Screenshot of Cyber Assistant alerts: 
The Cyber Assistant, an AI-powered alert management system, can autonomously handle alerts, reducing analysts’ workloads.Screenshot of Cyber Assistant recommends:
The Cyber Assistant learns from analyst decisions, then retains the intellectual capital and learned behaviors to make recommendations and help reduce false positives.Screenshot of Custom detection strategies: 
Detection Strategy (DeStra) scripting allows users to build custom detection strategies — beyond preconfigured models — to address compliance or company-specific requirements without the need to reboot the endpoint.