What users are saying about
87 Ratings
87 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 8.9 out of 100

Likelihood to Recommend

IBM QRadar

If you have a small-to-large company looking for a SIEM solution that "does the job" and is easy to deploy/use, QRadar is your tool. If you're looking for a complex solution that supports integration with data-mining solutions (e.g. ELK), then you may need a different solution. Overall, QRadar fits the needs of 99% of the companies. It is one of the easiest SIEM solutions to deploy and use.
Anonymous | TrustRadius Reviewer

Feature Rating Comparison

Security Information and Event Management (SIEM)

IBM QRadar
9.2
Centralized event and log data collection
IBM QRadar
9.5
Correlation
IBM QRadar
9.9
Event and log normalization
IBM QRadar
9.5
Deployment flexibility
IBM QRadar
9.0
Integration with Identity and Access Management Tools
IBM QRadar
8.6
Custom dashboards and views
IBM QRadar
9.0
Host and network-based intrusion detection
IBM QRadar
8.7

Pros

IBM QRadar

  • It allows us to have visibility to potential problems both on premise and in the cloud which was key as we have become a hybrid consumer.
  • It has automated monitoring which has allowed us to see threats faster and also allowed us to be proactive.
  • By having over 20,000 employees, QRadar has also allowed us to be aware of internal threats that are brought into the company by unsuspecting employees.
Anonymous | TrustRadius Reviewer

Cons

IBM QRadar

  • There is a steep learning curve compared to other platforms. Qradar is incredibly powerful but does require some homework.
  • There is a glaring lack of threat feed utilization outside of STIXX/TAXII which remains very limited at this time.
  • May require a considerable amount of tuning during deployment with very little "out of the box" offense information.
Anonymous | TrustRadius Reviewer

Support Rating

IBM QRadar

IBM QRadar 8.5
Based on 4 answers
I've had many issues with QRadar, and the support would hear and respond to my question all the time (more so than in the case of IBM Resilient support). They were very quick to respond, were helpful, and provided remote access.
larbi belmiloud | TrustRadius Reviewer

Alternatives Considered

IBM QRadar

Splunk Enterprise Security I've found is the easiest of all major SIEM's to deploy due to its event normalization capabilities. It lags behind QRadar in event correlation but is better in user GUI customization. One issue where QRadar beats it is in cost. Splunk starts off cheap, but as you expand (due to it's licensing model), it quickly becomes very expensive. It is the monster that keeps on feeding.
Douglas Concepcion | TrustRadius Reviewer

Return on Investment

IBM QRadar

  • QRadar has helped us improve our rating when going through an IT audit.
  • It has allowed us to answer some security related contract questions much more positively when going through contract negotiation.
  • It helps us to protect our company and investors from Outside and Internal threats.
Anonymous | TrustRadius Reviewer

Pricing Details

IBM QRadar

General

Free Trial
Free/Freemium Version
Premium Consulting/Integration Services
Entry-level set up fee?
No

Rating Summary

Add comparison