TrustRadius: an HG Insights company

IBM Security QRadar SIEM vs. KnowBe4 PhishER/PhishER Plus

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    IBM Security QRadar SIEM

    Score8.9 out of 10
    N/AIBM Security QRadar is security information and event management (SIEM) Software.N/A

    KnowBe4 PhishER/PhishER Plus

    Score8.7 out of 10
    N/APhishER is presented as a lightweight Security Orchestration, Automation and Response (SOAR) platform to orchestrate threat response and manage the high volume of potentially malicious email messages reported by users. And, with automatic prioritization of emails, PhishER helps InfoSec and Security Operations team cut through the inbox noise and respond to the most dangerous threats more quickly.

    $1.15

    per seat

    Pricing
    IBM Security QRadar SIEMKnowBe4 PhishER/PhishER Plus
    Editions & Modules
    No answers on this topic
    501-1000 Monthly Pricing 3 Year
    $1.15
    per seat
    101-500 Monthly Pricing 3 Year
    $1.50
    per seat
    Offerings
    Pricing Offerings
    IBM Security QRadar SIEMKnowBe4 PhishER/PhishER Plus
    Free Trial
    YesNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details—For organizations with over 1,000 seats, contact sales for a quote.
    More Pricing Information
    Community Pulse
    IBM Security QRadar SIEMKnowBe4 PhishER/PhishER Plus
    Considered Both Products
    IBM
    No answer on this topic
    KnowBe4
    No answer on this topic
    Key User Insights
    Would buy again
    92%
    Would buy again
    67 Answers
    97%
    Would buy again
    125 Answers
    Delivers good value for the price
    97%
    Delivers good value for the price
    61 Answers
    99%
    Delivers good value for the price
    124 Answers
    Happy with the feature set
    96%
    Happy with the feature set
    70 Answers
    97%
    Happy with the feature set
    125 Answers
    Lived up to sales and marketing promises
    86%
    Lived up to sales and marketing promises
    38 Answers
    96%
    Lived up to sales and marketing promises
    112 Answers
    Implementation went as expected
    94%
    Implementation went as expected
    59 Answers
    95%
    Implementation went as expected
    114 Answers
    Features
    IBM Security QRadar SIEMKnowBe4 PhishER/PhishER Plus
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of IBM Security QRadar SIEM and KnowBe4 PhishER/PhishER Plus
    Feature
    IBM Security QRadar SIEM
    8.5
    69 Ratings
    7% above category average
    KnowBe4 PhishER/PhishER Plus
    -
    Ratings
    Centralized event and log data collection9.927 Ratings00 Ratings
    Correlation8.669 Ratings00 Ratings
    Event and log normalization/management9.527 Ratings00 Ratings
    Deployment flexibility7.827 Ratings00 Ratings
    Integration with Identity and Access Management Tools8.965 Ratings00 Ratings
    Custom dashboards and workspaces7.569 Ratings00 Ratings
    Host and network-based intrusion detection9.725 Ratings00 Ratings
    Data integration/API management9.07 Ratings00 Ratings
    Behavioral analytics and baselining7.648 Ratings00 Ratings
    Rules-based and algorithmic detection thresholds8.049 Ratings00 Ratings
    Response orchestration and automation7.75 Ratings00 Ratings
    Reporting and compliance management7.947 Ratings00 Ratings
    Incident indexing/searching8.97 Ratings00 Ratings
    Incident Response Platforms
    Comparison of Incident Response Platforms features of IBM Security QRadar SIEM and KnowBe4 PhishER/PhishER Plus
    Feature
    IBM Security QRadar SIEM
    -
    Ratings
    KnowBe4 PhishER/PhishER Plus
    8.4
    122 Ratings
    6% below category average
    Company-wide Incident Reporting00 Ratings8.3101 Ratings
    Integration with Other Security Systems00 Ratings8.597 Ratings
    Centralized Dashboard00 Ratings9.0120 Ratings
    Machine Learning to Prevent Incidents00 Ratings8.0103 Ratings
    Live Response for Rapid Remediation00 Ratings8.1102 Ratings
    Best Alternatives
    IBM Security QRadar SIEMKnowBe4 PhishER/PhishER Plus
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    Sumo Logic
    Score8.9 out of 10
    No answers on this topic
    Enterprises
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    No answers on this topic
    All AlternativesView all alternativesView all alternatives
    User Ratings
    IBM Security QRadar SIEMKnowBe4 PhishER/PhishER Plus
    Likelihood to Recommend
    8.6
    (89 ratings)
    8.8
    (128 ratings)
    Likelihood to Renew
    8.8
    (5 ratings)
    8.8
    (9 ratings)
    Usability
    8.0
    (2 ratings)
    8.6
    (44 ratings)
    Availability
    9.0
    (1 ratings)
    8.2
    (1 ratings)
    Performance
    9.0
    (1 ratings)
    8.2
    (1 ratings)
    Support Rating
    8.1
    (62 ratings)
    8.6
    (8 ratings)
    In-Person Training
    9.0
    (1 ratings)
    -
    (0 ratings)
    Online Training
    9.0
    (1 ratings)
    -
    (0 ratings)
    Implementation Rating
    8.0
    (1 ratings)
    8.6
    (3 ratings)
    Configurability
    8.0
    (1 ratings)
    8.3
    (12 ratings)
    Contract Terms and Pricing Model
    9.0
    (1 ratings)
    9.1
    (1 ratings)
    Ease of integration
    8.1
    (58 ratings)
    9.1
    (2 ratings)
    Product Scalability
    8.0
    (1 ratings)
    8.2
    (1 ratings)
    Professional Services
    10.0
    (1 ratings)
    8.2
    (1 ratings)
    Vendor post-sale
    9.0
    (1 ratings)
    8.2
    (1 ratings)
    Vendor pre-sale
    9.0
    (1 ratings)
    9.1
    (1 ratings)
    User Testimonials
    IBM Security QRadar SIEMKnowBe4 PhishER/PhishER Plus
    Likelihood to Recommend
    IBM
    I would only recommend IBM Security QRadar SIEM in a few situations. For one, it's very easy to setup and use if all your log sources are generic from known vendors. It's also significantly cheaper than Splunk, which is nice if you're trying to save money or be more efficient. I would not recommend IBM Security QRadar SIEM for environments with a lot of custom logs and complicated detection requirements.
    Incentivized
    Read full review
    KnowBe4
    From an MSP perspective, it’s easier to sell products that provide cybersecurity protections if it’s all in one bundle. If you start providing 5 different email security products (even with the same vendor), it becomes confusing to non-technical individuals. They need a single package that doesn’t break the bank. Other products like Ironscales do that by providing an “all-in-one” package, essentially. And for a much less expensive price. I believe if you included all the features of anti-phishing, account takeover protection, and security awareness training, it would be close to $8/person each month. Competitors offer rates closer to $2/user, which include all those features and sometimes more.
    Incentivized
    Read full review
    Pros
    IBM
    • Enables identification and prioritization of vulnerabilities in IT infrastructure for corrective action.
    • Facilitates security incident investigation and forensic analysis.
    • Provides a real-time view of security events, enabling immediate incident response.
    • Can integrate with external threat intelligence sources to enrich data and improve threat detection.
    • Enables the generation of detailed and customized reports.
    Incentivized
    Read full review
    KnowBe4
    • KnowBe4's Phish Alert Button effectively collects all reported emails from end-users in one place.
    • The PhishML feature of PhishER effectively auto-scan reported emails using machine learning technologies, providing a tag for each email based on its body content and other aspects.
    • The PhishRIP feature works well by allowing the security team to create a query and quarantine all relevant emails from the end user's email system.
    Incentivized
    Read full review
    Cons
    IBM
    • Need to spend more time configuring the system to properly interpret and normalize different type of data collected from multiple resources.
    • While Rule creation QRadar uses that rules to detect security threats and generate alerts, but to creating and managing rules is bit complex & tedious work to complete.
    • IBM Security QRadar SIEM is excellent in handling large & complex systems that requires in-depth knowledge and extensive training to configure and maintain the system which includes upgrading, optimization of performance & issue troubleshooting.
    Incentivized
    Read full review
    KnowBe4
    • Issues with Global Blocklist
    • Email Template Modification - Simplification
    • Target Specific Users vs. Groups
    • PhishRIP info tabs (i.e. if improperly check ripped emails are turned into tests. This has caused issues.) Info tabs or markers allow user to hover and get more information about what action a check box or slider provides.
    Incentivized
    Read full review
    Likelihood to Renew
    IBM
    QRadar is an established and stable product, we have been using it for many years and want to continue to focus on it. Anyone who has used the product and knows it knows how reliable it is and how it facilitates continuous monitoring of threats from outside and inside. it is an exceptional product that is very useful for us.
    Incentivized
    Read full review
    KnowBe4
    When we first discovered that KnowBe4 released something like this, we saw a demo of it and were floored at what it could do and how it could help us from a security standpoint. Gone are the days of us in IT sending out a mass email saying please don't click on anything in the email from sender "X", and it allows us to quietly and easily ensure that people don't take any action on malicious emails.
    Incentivized
    Read full review
    Usability
    IBM
    As a grade I give 8 as QRadar is not easy to learn. It requires some time to master it. It also needs a team of people actively working on the product. Once you learn to use it the software works very well and it is easy to correlate and understand detected threats. It only takes time to learn how to use it well and configure it properly.
    Incentivized
    Read full review
    KnowBe4
    It has been super easy for users to work with training and quizzes. Admin is a little difficult because you have to build the specific campaign type you want. But you can even create your own training and upload it to your LMS. This is great!!
    Incentivized
    Read full review
    Support Rating
    IBM
    Customer support is Good of IBM, While Using IBM QRadar its deployment is to slow and suddenly stop working and crashed we have contacted IBM Support and Rised a Ticket within a few minute we get call back from customer support and Query Resolved by them Fast And Rapid Support of Ibm
    Incentivized
    Read full review
    KnowBe4
    When I have a question, their were fast to respond. The downside is a that at least once I had to work through the issue with the person assigned to help me because they didn't know the answer. That said they did try and were patient. However they should have known the answer on integration.
    Incentivized
    Read full review
    In-Person Training
    IBM
    The training was very useful and the people who taught us were very knowledgeable. Although the software may initially seem difficult to learn they made things much easier for us.
    Incentivized
    Read full review
    KnowBe4
    No answers on this topic
    Online Training
    IBM
    The training was very useful and the people who taught us were very knowledgeable. Although the software may initially seem difficult to learn they made things much easier for us.
    Incentivized
    Read full review
    KnowBe4
    No answers on this topic
    Implementation Rating
    IBM
    Initial patience is required to learn how to use the product, and it takes a dedicated team to use it. One person is not enough, and it's not enough to just set it up and check it once in a while. It has to be used daily and kept under control to be used effectively
    Incentivized
    Read full review
    KnowBe4
    It was very simple to implement - with just a few settings needed to connect it to our O365 environment
    Incentivized
    Read full review
    Alternatives Considered
    IBM
    IBM Qradar takes the best from its competitors. Reliable and stable but sometimes very expensive, the SIEM from IBM offers a wide range of scenarios in which the customers can suite and size their own infrastructures. IBM Qradar doesn't really needs to stack up againt its competitors because it already sets an example in the SIEM world.
    Incentivized
    Read full review
    KnowBe4
    We evaluated the Titan options because we have already used their DNS filtering product. However, KnowBe4 came in with a better price per user and a significantly stronger product lineup, particularly with its security awareness training component.
    Incentivized
    Read full review
    Return on Investment
    IBM
    • Offense investigation was really helped in tackling the incidents. It was accurate and brief
    • The automation with IBM resilient (SOAR) was a milestone in elimination of user mistakes
    • The X-Force threat intelligence supported us in getting the work done without any 3rd party enterprise OSINT database
    Incentivized
    Read full review
    KnowBe4
    • There has been a 700% increase in emails being reported now. Previously, staff were only reporting 4 emails a month. It is easier for us to promote the phish alert button, receive automated remediation and rapidly respond.
    • We had no reports on the amount of phishing emails were coming through Mimecast but now we have reports for the board of trustees.
    • Every Wednesday we talk about cyber security to all staff, PhishER allows us to point out the trend and what to look out for which raises awareness. Never before were we able to talk about cyber security like this.
    Incentivized
    Read full review
    ScreenShots

    IBM Security QRadar SIEM Screenshots

    Screenshot of QRadar SIEM Cloud native- Threat intelligence preview

    KnowBe4 PhishER/PhishER Plus Screenshots

    Screenshot of How PhishER Plus enables a critical workstream to help IR teams work together to mitigate the phishing threat and is suited for any organization that wants to automatically prioritize and manage potentially malicious messages.