TrustRadius: an HG Insights company

IBM Security QRadar EDR vs. Microsoft Defender for Endpoint

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    IBM Security QRadar EDR

    Score8 out of 10
    N/AIBM Security QRadar EDR (formerly ReaQta) combines automation and dashboards to minimize analyst workloads, detect anomalous endpoint behavior and remediate threats in near real time. With visibility across endpoints, it combines expected features, like MITRE ATT&CK mapping and attack visualizations, with dual-engine AI and automation. For teams that need extended support, managed detection and response (MDR) services offers 24/7 monitoring and response to help keep users…N/A

    Microsoft Defender for Endpoint

    Score8.8 out of 10
    N/AMicrosoft Defender for Endpoint (formerly Microsoft Defender ATP) is a holistic, cloud delivered endpoint security solution that includes risk-based vulnerability management and assessment, attack surface reduction, behavioral based and cloud-powered next generation protection, endpoint detection and response (EDR), automatic investigation and remediation, managed hunting services, rich APIs, and unified security management.

    $2.50

    per user/per month

    Pricing
    IBM Security QRadar EDRMicrosoft Defender for Endpoint
    Editions & Modules
    No answers on this topic
    Academic
    $2.50
    per user/per month
    Standalone
    $5.20
    per user/per month
    Offerings
    Pricing Offerings
    IBM Security QRadar EDRMicrosoft Defender for Endpoint
    Free Trial
    YesYes
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeOptionalNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    IBM Security QRadar EDRMicrosoft Defender for Endpoint
    Considered Both Products
    IBM
    Chose IBM Security QRadar EDR
    We had a lot of experience with IBM security products and services, and IBM Security QRadar EDR offered a low risk approach to endhance endpoint secuirty protection.
    Incentivized
    Chose IBM Security QRadar EDR
    Ease of deployment, gartner leader solution and with help of IBM Security QRadar EDR as SIEM to integrate with the EDR solution of IBM. Visualization is beautiful which provides the right source of information also by keeping the visibility of the actual threats and keep away …
    Incentivized
    Microsoft
    Chose Microsoft Defender for Endpoint
    Microsoft comes as a bundle suite and for other solutions the purchasing needs to be done separately.
    Incentivized
    Chose Microsoft Defender for Endpoint
    Microsoft Defender for Endpoint is one of the best solutions when the goal is to protect the endpoints of a windows oriented infrastructure. The integrations with the Microsoft services and the unified platform that the analyst can use play a decisive role in the choice and …
    Incentivized
    Key User Insights
    Would buy again
    100%
    Would buy again
    11 Answers
    96%
    Would buy again
    157 Answers
    Delivers good value for the price
    88%
    Delivers good value for the price
    7 Answers
    99%
    Delivers good value for the price
    146 Answers
    Happy with the feature set
    100%
    Happy with the feature set
    11 Answers
    95%
    Happy with the feature set
    155 Answers
    Lived up to sales and marketing promises
    88%
    Lived up to sales and marketing promises
    7 Answers
    97%
    Lived up to sales and marketing promises
    130 Answers
    Implementation went as expected
    100%
    Implementation went as expected
    9 Answers
    95%
    Implementation went as expected
    140 Answers
    Features
    IBM Security QRadar EDRMicrosoft Defender for Endpoint
    Endpoint Security
    Comparison of Endpoint Security features of IBM Security QRadar EDR and Microsoft Defender for Endpoint
    Feature
    IBM Security QRadar EDR
    7.5
    10 Ratings
    13% below category average
    Microsoft Defender for Endpoint
    8.7
    79 Ratings
    2% above category average
    Anti-Exploit Technology7.39 Ratings9.075 Ratings
    Endpoint Detection and Response (EDR)7.410 Ratings9.179 Ratings
    Centralized Management7.410 Ratings8.679 Ratings
    Hybrid Deployment Support7.39 Ratings7.110 Ratings
    Infection Remediation7.310 Ratings9.077 Ratings
    Malware Detection8.110 Ratings9.278 Ratings
    Vulnerability Management00 Ratings8.774 Ratings
    Best Alternatives
    IBM Security QRadar EDRMicrosoft Defender for Endpoint
    Small Businesses
    SentinelOne Singularity
    Score9 out of 10
    SentinelOne Singularity
    Score9 out of 10
    Medium-sized Companies
    BlackBerry Protect (CylancePROTECT)
    Score9.1 out of 10
    BlackBerry Protect (CylancePROTECT)
    Score9.1 out of 10
    Enterprises
    ESET PROTECT
    Score8.8 out of 10
    ESET PROTECT
    Score8.8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    IBM Security QRadar EDRMicrosoft Defender for Endpoint
    Likelihood to Recommend
    7.0
    (11 ratings)
    8.9
    (169 ratings)
    Likelihood to Renew
    -
    (0 ratings)
    8.4
    (10 ratings)
    Usability
    -
    (0 ratings)
    8.6
    (40 ratings)
    Availability
    -
    (0 ratings)
    9.1
    (1 ratings)
    Performance
    -
    (0 ratings)
    9.1
    (1 ratings)
    Support Rating
    -
    (0 ratings)
    9.0
    (7 ratings)
    Implementation Rating
    -
    (0 ratings)
    7.3
    (1 ratings)
    Configurability
    -
    (0 ratings)
    8.2
    (1 ratings)
    Product Scalability
    -
    (0 ratings)
    9.1
    (1 ratings)
    User Testimonials
    IBM Security QRadar EDRMicrosoft Defender for Endpoint
    Likelihood to Recommend
    IBM
    IBM Security QRadaar EDR provides all the security features at one place with a reasonable price. Though for smaller organizations, the price may be quite high. Plus since it can detect threats and malwares in real time, every business should try them out.
    Incentivized
    Read full review
    Microsoft
    If you have multiple endpoints in your environment, if you're looking to understand what your environment looks like, if you're trying to identify the health of your environment, or identify any risks or vulnerabilities in your environment pertaining to your endpoints and devices.
    Incentivized
    Read full review
    Pros
    IBM
    • Detect known and unknown endpoint security threats
    • Remediate these threats near real time
    • Automation in threat detection
    • Threat attack attack visualization storyboards
    • Alert management authomation
    Incentivized
    Read full review
    Microsoft
    • The big thing for us is on endpoint, it kind of integrates with everything else that we already have because we use Microsoft completely. And so that helps us with being able to integrate, and send things over to Azure Sentinel as we need to as well.
    Incentivized
    Read full review
    Cons
    IBM
    • use AI to review previous false negatives that contributed wrongly in the AI suggestion on the follow alerts
    • easily run a script based on values from an hash, ips, path inside the boxes on the behavioral tree
    • apply the remediation to a range of endpoint instead to only the endpoint of the current alert
    • use ajax for example to update the alert page automatically while actions are happening
    • for api have profiles that allow only get actions, or just post on some actions
    • create users in bulk
    Incentivized
    Read full review
    Microsoft
    • I'd say building out summaries and log reviews for analysts reviewing incidents. So, pivoting from the alerts themselves to actually getting the detail underneath. Trying to understand what caused an alert, where they went from there, et cetera, et cetera. And then trying to get into deeper log review to take that investigation further can be a pain point.
    Incentivized
    Read full review
    Likelihood to Renew
    IBM
    No answers on this topic
    Microsoft
    Cost add-ons for Security features is nickel and diming the process to keep pace with cybercrime. Limited Education budgets require us to be more pro-active in finding cost-effective measures to protect our devices, staff and students. Defender is a strong, well-featured product that is pricing itself out of the education market
    Incentivized
    Read full review
    Usability
    IBM
    No answers on this topic
    Microsoft
    Because it's hard to find things sometimes. I can find things now because I know where they are. But you have to work with it a little while to figure out how. I'd basically say it was a security tool designed by developers. So you have to get that mindset to find things. So a new hire, a new person in the SOC would have a difficult time. I know that's sitting in here, or that screen is in here somewhere. So it's gotten better.
    Incentivized
    Read full review
    Reliability and Availability
    IBM
    No answers on this topic
    Microsoft
    Microsoft Defender for Endpoint chugs along just fine no matter what we throw at it and what systems it's running on. It doesn't take up a lot of resources either, so that's welcomed.
    Incentivized
    Read full review
    Performance
    IBM
    No answers on this topic
    Microsoft
    Microsoft Defender for Endpoint is easy on memory and resources on clients.
    Incentivized
    Read full review
    Support Rating
    IBM
    No answers on this topic
    Microsoft
    The first time I tried to onboard my macOS endpoints to MDE I struggled for quite a bit. I had to reach out to Microsoft's MDE support team. The tech was very helpful in walking me through the steps during a screen share session
    Incentivized
    Read full review
    Implementation Rating
    IBM
    No answers on this topic
    Microsoft
    Deployment was handled by our team here and everything went pretty smoothly. We did have a few hiccups in our test group, but that only took a bit to get ironed out.
    Incentivized
    Read full review
    Alternatives Considered
    IBM
    Bitdefender GravityZone combines multiple security services into a single platform to reduce the cost of building a trusted environment for endpoints. bit the IBM provides a vast support and always there to guide when in need With the majority of our users working in hybrid mode we needed a strong security control that could provide top-class protection with the minimum amount of False Positives (and, of course, of True Positives).
    Incentivized
    Read full review
    Microsoft
    Particularly, we're evaluating Symantec Endpoint Protection, the commercial version. We've looked at eSet, a couple of the others, and it's much too heavy or difficult to manage, things like that. Ease of use, ease of integration. It's already there. It's super easy to update it with the regular OS updates and everything. So we can manage it whether we're using SCCM or Intune or Dato, it's very easy to deploy updates and manage things.
    Incentivized
    Read full review
    Scalability
    IBM
    No answers on this topic
    Microsoft
    Microsoft Defender for Endpoint is easily scaled from small orgs to giant enterprises.
    Incentivized
    Read full review
    Return on Investment
    IBM
    • NOCs and SOCs heavily use IBM Security QRadar EDR and IBM Security QRadar EDR reduced labor costs to identify endpoint security threats and the treat remediation
    • IBM Security QRadar EDR offers a consistent approach to endpoint threat identification and resolution, reduces enterprise security operations support costs
    • In general, IBM Security QRadar EDR enhances enterprise security posture
    Incentivized
    Read full review
    Microsoft
    • I think the positive impact overall is that we do a lot of sitting in front of assessors- federal assessors, government assessors. And it really comes down to when the assessor has to think about another product that you're bringing in that's not Microsoft, it creates a lot of confusion, more paperwork, more explanation. But the positive impact is that they know it, everybody kind of knows Microsoft. And so when you tell them you have this endpoint for Microsoft Defender for Endpoint, they're like, okay. The questions go away, and it makes the overhead a lot less during an assessment.
    Incentivized
    Read full review
    ScreenShots

    IBM Security QRadar EDR Screenshots

    Screenshot of Behavioral tree: 
A behavioral tree provides full alert and attack visibility.Screenshot of Behavioral tree storyline: 
A visual storyline is automatically created as an attack unfolds, including mapping to MITRE ATT&CK, for full visibility.Screenshot of Cyber Assistant alerts: 
The Cyber Assistant, an AI-powered alert management system, can autonomously handle alerts, reducing analysts’ workloads.Screenshot of Cyber Assistant recommends:
The Cyber Assistant learns from analyst decisions, then retains the intellectual capital and learned behaviors to make recommendations and help reduce false positives.Screenshot of Custom detection strategies: 
Detection Strategy (DeStra) scripting allows users to build custom detection strategies — beyond preconfigured models — to address compliance or company-specific requirements without the need to reboot the endpoint.

    Microsoft Defender for Endpoint Screenshots

    Screenshot of blocked activitiesScreenshot of Detects & respondsScreenshot of discovers vulnerabilityScreenshot of Eliminates blind spotsScreenshot of Risk management