TrustRadius: an HG Insights company

IBM Security QRadar SIEM vs. Kaspersky Endpoint Security

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    IBM Security QRadar SIEM

    Score8.9 out of 10
    N/AIBM Security QRadar is security information and event management (SIEM) Software.N/A

    Kaspersky Endpoint Security

    Score7.5 out of 10
    N/AKaspersky Small Office Security (formerly Kaspersky Work Space Security) is antivirus / endpoint security software from Russian company Kaspersky.

    $29.99

    per month

    Pricing
    IBM Security QRadar SIEMKaspersky Endpoint Security
    Editions & Modules
    No answers on this topic
    Essential Suite
    $29.99
    per month
    Advanced Suite
    $39.99
    per month
    Premium Suite
    $44.99
    per month
    Offerings
    Pricing Offerings
    IBM Security QRadar SIEMKaspersky Endpoint Security
    Free Trial
    YesNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    IBM Security QRadar SIEMKaspersky Endpoint Security
    Considered Both Products
    IBM
    No answer on this topic
    Kaspersky Lab
    No answer on this topic
    Key User Insights
    Would buy again
    92%
    Would buy again
    67 Answers
    86%
    Would buy again
    12 Answers
    Delivers good value for the price
    97%
    Delivers good value for the price
    61 Answers
    93%
    Delivers good value for the price
    13 Answers
    Happy with the feature set
    96%
    Happy with the feature set
    70 Answers
    86%
    Happy with the feature set
    12 Answers
    Lived up to sales and marketing promises
    86%
    Lived up to sales and marketing promises
    38 Answers
    92%
    Lived up to sales and marketing promises
    12 Answers
    Implementation went as expected
    94%
    Implementation went as expected
    59 Answers
    100%
    Implementation went as expected
    14 Answers
    Features
    IBM Security QRadar SIEMKaspersky Endpoint Security
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of IBM Security QRadar SIEM and Kaspersky Endpoint Security
    Feature
    IBM Security QRadar SIEM
    8.5
    69 Ratings
    7% above category average
    Kaspersky Endpoint Security
    -
    Ratings
    Centralized event and log data collection9.927 Ratings00 Ratings
    Correlation8.669 Ratings00 Ratings
    Event and log normalization/management9.527 Ratings00 Ratings
    Deployment flexibility7.827 Ratings00 Ratings
    Integration with Identity and Access Management Tools8.965 Ratings00 Ratings
    Custom dashboards and workspaces7.569 Ratings00 Ratings
    Host and network-based intrusion detection9.725 Ratings00 Ratings
    Data integration/API management9.07 Ratings00 Ratings
    Behavioral analytics and baselining7.648 Ratings00 Ratings
    Rules-based and algorithmic detection thresholds8.049 Ratings00 Ratings
    Response orchestration and automation7.75 Ratings00 Ratings
    Reporting and compliance management7.947 Ratings00 Ratings
    Incident indexing/searching8.97 Ratings00 Ratings
    Endpoint Security
    Comparison of Endpoint Security features of IBM Security QRadar SIEM and Kaspersky Endpoint Security
    Feature
    IBM Security QRadar SIEM
    -
    Ratings
    Kaspersky Endpoint Security
    9.3
    15 Ratings
    9% above category average
    Anti-Exploit Technology00 Ratings9.015 Ratings
    Endpoint Detection and Response (EDR)00 Ratings9.015 Ratings
    Centralized Management00 Ratings9.514 Ratings
    Hybrid Deployment Support00 Ratings9.511 Ratings
    Infection Remediation00 Ratings9.015 Ratings
    Vulnerability Management00 Ratings9.015 Ratings
    Malware Detection00 Ratings10.015 Ratings
    Best Alternatives
    IBM Security QRadar SIEMKaspersky Endpoint Security
    Small Businesses
    No answers on this topic
    SentinelOne Singularity
    Score9 out of 10
    Medium-sized Companies
    Sumo Logic
    Score8.9 out of 10
    BlackBerry Protect (CylancePROTECT)
    Score9.1 out of 10
    Enterprises
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    ESET PROTECT
    Score8.8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    IBM Security QRadar SIEMKaspersky Endpoint Security
    Likelihood to Recommend
    8.6
    (89 ratings)
    9.0
    (28 ratings)
    Likelihood to Renew
    8.8
    (5 ratings)
    10.0
    (2 ratings)
    Usability
    8.0
    (2 ratings)
    9.0
    (3 ratings)
    Availability
    9.0
    (1 ratings)
    10.0
    (1 ratings)
    Performance
    9.0
    (1 ratings)
    10.0
    (1 ratings)
    Support Rating
    8.1
    (62 ratings)
    8.5
    (3 ratings)
    In-Person Training
    9.0
    (1 ratings)
    -
    (0 ratings)
    Online Training
    9.0
    (1 ratings)
    -
    (0 ratings)
    Implementation Rating
    8.0
    (1 ratings)
    9.0
    (1 ratings)
    Configurability
    8.0
    (1 ratings)
    -
    (0 ratings)
    Contract Terms and Pricing Model
    9.0
    (1 ratings)
    -
    (0 ratings)
    Ease of integration
    8.1
    (58 ratings)
    -
    (0 ratings)
    Product Scalability
    8.0
    (1 ratings)
    10.0
    (1 ratings)
    Professional Services
    10.0
    (1 ratings)
    -
    (0 ratings)
    Vendor post-sale
    9.0
    (1 ratings)
    -
    (0 ratings)
    Vendor pre-sale
    9.0
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    IBM Security QRadar SIEMKaspersky Endpoint Security
    Likelihood to Recommend
    IBM
    I would only recommend IBM Security QRadar SIEM in a few situations. For one, it's very easy to setup and use if all your log sources are generic from known vendors. It's also significantly cheaper than Splunk, which is nice if you're trying to save money or be more efficient. I would not recommend IBM Security QRadar SIEM for environments with a lot of custom logs and complicated detection requirements.
    Incentivized
    Read full review
    Kaspersky Lab
    I think Kaspersky is well suited for large and small companies. Larger companies can take advantage of the KSC (Kaspersky Security Center) servers to help manage a large network. The KSC has many good features to help monitor the health of the organization. It does a good job with updating and deploying remotely. It has inventory features, and can even deploy non-Kaspersky software packages uploaded to the center. KSC can become a source of good information about [your] network that can be seen at a glance. IT departments are normally smaller than they need to be. KSC helps with larger and smaller companies because of this. A small company would appreciate the amount of information and management that can be done through KSC without needing extra help. If the company is small enough that they don't have servers on-site, there is a cloud version. I have not used that to know how it differs from the local KSC.
    Incentivized
    Read full review
    Pros
    IBM
    • Enables identification and prioritization of vulnerabilities in IT infrastructure for corrective action.
    • Facilitates security incident investigation and forensic analysis.
    • Provides a real-time view of security events, enabling immediate incident response.
    • Can integrate with external threat intelligence sources to enrich data and improve threat detection.
    • Enables the generation of detailed and customized reports.
    Incentivized
    Read full review
    Kaspersky Lab
    • The Security Center is laid out very well and makes it easy to install and manage the client endpoint protection on servers and workstations.
    • The way security policies are defined and managed is very easy to understand.
    • The client programs seem to be lighter and smaller on the client systems than others I have used in the past. Using fewer resources is always an advantage.
    Incentivized
    Read full review
    Cons
    IBM
    • Need to spend more time configuring the system to properly interpret and normalize different type of data collected from multiple resources.
    • While Rule creation QRadar uses that rules to detect security threats and generate alerts, but to creating and managing rules is bit complex & tedious work to complete.
    • IBM Security QRadar SIEM is excellent in handling large & complex systems that requires in-depth knowledge and extensive training to configure and maintain the system which includes upgrading, optimization of performance & issue troubleshooting.
    Incentivized
    Read full review
    Kaspersky Lab
    • The PC imaging tools are difficult to set up and use
    • Device Encryption tools are getting better, but are difficult to manage.
    • The policies are powerful, but could be broken up. More help can be provided in what the policy element does within the policy setup
    Incentivized
    Read full review
    Likelihood to Renew
    IBM
    QRadar is an established and stable product, we have been using it for many years and want to continue to focus on it. Anyone who has used the product and knows it knows how reliable it is and how it facilitates continuous monitoring of threats from outside and inside. it is an exceptional product that is very useful for us.
    Incentivized
    Read full review
    Kaspersky Lab
    The product is stable and accurate in detecting security threats. There are very few or no false positives in detecting security threats or unusual behavior and has very sharp heuristics. The product does the job very well including saving us money in getting 3rd party patch management tools as the business is already using Microsoft System Center Configuration Manager which is Microsoft product specific and the product patches these third party products e.g Adobe Flash Player
    Incentivized
    Read full review
    Usability
    IBM
    As a grade I give 8 as QRadar is not easy to learn. It requires some time to master it. It also needs a team of people actively working on the product. Once you learn to use it the software works very well and it is easy to correlate and understand detected threats. It only takes time to learn how to use it well and configure it properly.
    Incentivized
    Read full review
    Kaspersky Lab
    I will give Kaspersky a score of 9 out of 10 for scalability, as it allows businesses to easily expand their security infrastructure. This means it won't cost them a lot to add further protection and security. It won't also require them to purchase other hardware and services for their required protection.
    Read full review
    Reliability and Availability
    IBM
    No answers on this topic
    Kaspersky Lab
    I've used the on-premise server. I've only experienced one time that we couldn't open the console, and that was a server issue. It seems to be a dependable solution. It's there, and it's stable.
    Incentivized
    Read full review
    Performance
    IBM
    No answers on this topic
    Kaspersky Lab
    Users don't notice any slowdown with the antivirus running on their systems. There have been issues when the systems have missed a scheduled scan, and it was checked to run at [a] first available time, they will start a full scan at startup. This has caused some lag. Normally there are also some issues with the workstation, but it is something to note.
    Incentivized
    Read full review
    Support Rating
    IBM
    Customer support is Good of IBM, While Using IBM QRadar its deployment is to slow and suddenly stop working and crashed we have contacted IBM Support and Rised a Ticket within a few minute we get call back from customer support and Query Resolved by them Fast And Rapid Support of Ibm
    Incentivized
    Read full review
    Kaspersky Lab
    I give the maximum grade because we have no complaints; we never had any failure, serious error, and serious threat to the company. All of its features work very well. The great advantage of having a product supported by an industry-leading security company is that regularly updated security protocols will protect the system against all emerging threats.
    Incentivized
    Read full review
    In-Person Training
    IBM
    The training was very useful and the people who taught us were very knowledgeable. Although the software may initially seem difficult to learn they made things much easier for us.
    Incentivized
    Read full review
    Kaspersky Lab
    No answers on this topic
    Online Training
    IBM
    The training was very useful and the people who taught us were very knowledgeable. Although the software may initially seem difficult to learn they made things much easier for us.
    Incentivized
    Read full review
    Kaspersky Lab
    No answers on this topic
    Implementation Rating
    IBM
    Initial patience is required to learn how to use the product, and it takes a dedicated team to use it. One person is not enough, and it's not enough to just set it up and check it once in a while. It has to be used daily and kept under control to be used effectively
    Incentivized
    Read full review
    Kaspersky Lab
    Make sure to provide awareness campaigns on changes that will be implemented and WHY the business is doing it and the benefits reaped. Benefits reaped is very important for the justification of why things have to change and emphasizing the importance of security. This will reduce user disgruntlement and total bitterness on use of their workstation or laptop
    Incentivized
    Read full review
    Alternatives Considered
    IBM
    IBM Qradar takes the best from its competitors. Reliable and stable but sometimes very expensive, the SIEM from IBM offers a wide range of scenarios in which the customers can suite and size their own infrastructures. IBM Qradar doesn't really needs to stack up againt its competitors because it already sets an example in the SIEM world.
    Incentivized
    Read full review
    Kaspersky Lab
    Kaspersky is a leader in endpoint protection, but its ties to potential adversaries are unsettling. Kaspersky has a great threat research team and quickly identifies malicious software and its signature. Its web-based protection is also top notch. This is a great product but as with everything has its place.
    Incentivized
    Read full review
    Scalability
    IBM
    No answers on this topic
    Kaspersky Lab
    You can create groups and create different policies for each group. You can customize many parts of the software before it is deployed. You can create different tasks and schedules based on the groups. It is customizable.
    Incentivized
    Read full review
    Return on Investment
    IBM
    • Offense investigation was really helped in tackling the incidents. It was accurate and brief
    • The automation with IBM resilient (SOAR) was a milestone in elimination of user mistakes
    • The X-Force threat intelligence supported us in getting the work done without any 3rd party enterprise OSINT database
    Incentivized
    Read full review
    Kaspersky Lab
    • It reduced the incidents of infections and so reduced the efforts needed by the IT department to mitigate problems.
    • It made it difficult to manage the security of our growing mobile user base due to infrequent contact with our on-premise management server.
    Incentivized
    Read full review
    ScreenShots

    IBM Security QRadar SIEM Screenshots

    Screenshot of QRadar SIEM Cloud native- Threat intelligence preview