TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    IBM Security QRadar SIEM

    Score8.9 out of 10
    N/AIBM Security QRadar is security information and event management (SIEM) Software.N/A

    Microsoft Intune

    Score8.2 out of 10
    N/AMicrosoft Intune (formerly Microsoft Endpoint Manager), combining the capabilities of the former Microsoft System Center Configuration Manager, SCCM or ConfigMgr, is presented as a unified endpoint management option. Microsoft Intune is an endpoint management solution for mobile devices, an MDM solution that allows the user to securely manage iOS, Android, Windows, and macOS devices with a single endpoint management solution. The component Endpoint Configuration Manager (the…

    $5

    per user/per month

    Pricing
    IBM Security QRadar SIEMMicrosoft Intune
    Editions & Modules
    No answers on this topic
    Microsoft 365 Business Basic
    $5
    per user/per month
    Microsoft 365 For Individuals
    $6.99
    per month
    Microsoft 365 Apps
    $8.25
    per user/per month
    Microsoft 365 For Families
    $9.99
    per month
    Microsoft 365 Business Standard
    $12.50
    per user/per month
    Microsoft 365 Business Premium
    $15
    per user/per month
    Offerings
    Pricing Offerings
    IBM Security QRadar SIEMMicrosoft Intune
    Free Trial
    YesNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    IBM Security QRadar SIEMMicrosoft Intune
    Considered Both Products
    IBM
    No answer on this topic
    Microsoft
    No answer on this topic
    Key User Insights
    Would buy again
    92%
    Would buy again
    67 Answers
    100%
    Would buy again
    23 Answers
    Delivers good value for the price
    97%
    Delivers good value for the price
    61 Answers
    91%
    Delivers good value for the price
    20 Answers
    Happy with the feature set
    96%
    Happy with the feature set
    70 Answers
    96%
    Happy with the feature set
    22 Answers
    Lived up to sales and marketing promises
    86%
    Lived up to sales and marketing promises
    38 Answers
    95%
    Lived up to sales and marketing promises
    18 Answers
    Implementation went as expected
    94%
    Implementation went as expected
    59 Answers
    95%
    Implementation went as expected
    19 Answers
    Features
    IBM Security QRadar SIEMMicrosoft Intune
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of IBM Security QRadar SIEM and Microsoft Intune
    Feature
    IBM Security QRadar SIEM
    8.5
    69 Ratings
    7% above category average
    Microsoft Intune
    -
    Ratings
    Centralized event and log data collection9.927 Ratings00 Ratings
    Correlation8.669 Ratings00 Ratings
    Event and log normalization/management9.527 Ratings00 Ratings
    Deployment flexibility7.827 Ratings00 Ratings
    Integration with Identity and Access Management Tools8.965 Ratings00 Ratings
    Custom dashboards and workspaces7.569 Ratings00 Ratings
    Host and network-based intrusion detection9.725 Ratings00 Ratings
    Data integration/API management9.07 Ratings00 Ratings
    Behavioral analytics and baselining7.648 Ratings00 Ratings
    Rules-based and algorithmic detection thresholds8.049 Ratings00 Ratings
    Response orchestration and automation7.75 Ratings00 Ratings
    Reporting and compliance management7.947 Ratings00 Ratings
    Incident indexing/searching8.97 Ratings00 Ratings
    Best Alternatives
    IBM Security QRadar SIEMMicrosoft Intune
    Small Businesses
    No answers on this topic
    Avast CloudCare
    Score10 out of 10
    Medium-sized Companies
    Sumo Logic
    Score8.9 out of 10
    Action1
    Score9.4 out of 10
    Enterprises
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    ManageEngine Endpoint Central
    Score9 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    IBM Security QRadar SIEMMicrosoft Intune
    Likelihood to Recommend
    8.6
    (89 ratings)
    8.7
    (53 ratings)
    Likelihood to Renew
    8.8
    (5 ratings)
    9.9
    (2 ratings)
    Usability
    8.0
    (2 ratings)
    8.4
    (12 ratings)
    Availability
    9.0
    (1 ratings)
    -
    (0 ratings)
    Performance
    9.0
    (1 ratings)
    6.9
    (14 ratings)
    Support Rating
    8.1
    (62 ratings)
    10.0
    (10 ratings)
    In-Person Training
    9.0
    (1 ratings)
    -
    (0 ratings)
    Online Training
    9.0
    (1 ratings)
    -
    (0 ratings)
    Implementation Rating
    8.0
    (1 ratings)
    8.9
    (2 ratings)
    Configurability
    8.0
    (1 ratings)
    -
    (0 ratings)
    Contract Terms and Pricing Model
    9.0
    (1 ratings)
    -
    (0 ratings)
    Ease of integration
    8.1
    (58 ratings)
    7.6
    (14 ratings)
    Product Scalability
    8.0
    (1 ratings)
    -
    (0 ratings)
    Professional Services
    10.0
    (1 ratings)
    -
    (0 ratings)
    Vendor post-sale
    9.0
    (1 ratings)
    -
    (0 ratings)
    Vendor pre-sale
    9.0
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    IBM Security QRadar SIEMMicrosoft Intune
    Likelihood to Recommend
    IBM
    I would only recommend IBM Security QRadar SIEM in a few situations. For one, it's very easy to setup and use if all your log sources are generic from known vendors. It's also significantly cheaper than Splunk, which is nice if you're trying to save money or be more efficient. I would not recommend IBM Security QRadar SIEM for environments with a lot of custom logs and complicated detection requirements.
    Incentivized
    Read full review
    Microsoft
    Microsoft Intune is well suited for the larger end of the small business segment to the enterprise. The ability to configure and remotely deploy computer configurations, control mobile devices, and fine tune security controls of each device or device group is a major win for this product. Smaller and mid-sized businesses may balk at having to increase their license level to unlock the better updating features.
    Incentivized
    Read full review
    Pros
    IBM
    • Enables identification and prioritization of vulnerabilities in IT infrastructure for corrective action.
    • Facilitates security incident investigation and forensic analysis.
    • Provides a real-time view of security events, enabling immediate incident response.
    • Can integrate with external threat intelligence sources to enrich data and improve threat detection.
    • Enables the generation of detailed and customized reports.
    Incentivized
    Read full review
    Microsoft
    • [Microsoft Endpoint Manager (Microsoft Intune + SCCM)] helps to speed up the deployment of patches/software throughout our environment. I can easily build a package and then deploy across all endpoints.
    • The ability to supercede software is also quite handy. This automates the removal of old versions and replacing them with newer versions.
    • The Intune Autopilot option is very useful if you want to deploy software to devices straight out of the box. You can configure them to download software when a user opens a new PC and turns it on for the first time.
    Incentivized
    Read full review
    Cons
    IBM
    • Need to spend more time configuring the system to properly interpret and normalize different type of data collected from multiple resources.
    • While Rule creation QRadar uses that rules to detect security threats and generate alerts, but to creating and managing rules is bit complex & tedious work to complete.
    • IBM Security QRadar SIEM is excellent in handling large & complex systems that requires in-depth knowledge and extensive training to configure and maintain the system which includes upgrading, optimization of performance & issue troubleshooting.
    Incentivized
    Read full review
    Microsoft
    • Deploying more apps besides Microsoft Edge and Microsoft Office 365 app
    • Microsoft needs to make it easier to deploy exe, pkg, and msi apps without having to go through the manual process of re-packaging these apps using tools from github like intuneapputil
    • Add a feature to push out software updates for 3rd party apps
    Incentivized
    Read full review
    Likelihood to Renew
    IBM
    QRadar is an established and stable product, we have been using it for many years and want to continue to focus on it. Anyone who has used the product and knows it knows how reliable it is and how it facilitates continuous monitoring of threats from outside and inside. it is an exceptional product that is very useful for us.
    Incentivized
    Read full review
    Microsoft
    Mascom Wireless is a Microsoft shop and SCCM has proved to be helpful in keeping our Microsoft products up to date every month without fail. We also have a Microsoft Enterprise Agreement which we renewed for three years ending 2022. The remote access utility works wonders for the organisation and have saved travel bills including subsistance allowance. We have been able to fulfill security audits both internal and external. We have been able to keep a robust inventory of our computer assets and nothing falls of the cracks
    Incentivized
    Read full review
    Usability
    IBM
    As a grade I give 8 as QRadar is not easy to learn. It requires some time to master it. It also needs a team of people actively working on the product. Once you learn to use it the software works very well and it is easy to correlate and understand detected threats. It only takes time to learn how to use it well and configure it properly.
    Incentivized
    Read full review
    Microsoft
    The console is not intuitive and does not work well often. Due to the complexity of the product, documentation can be confusing. When properly configured, routine tasks like OS deployment, remote control, and software deployment are easy to do. Troubleshooting of System Center Configuration Manager issues is hard, as there are various logs, and their content can be hard to understand.
    Incentivized
    Read full review
    Performance
    IBM
    No answers on this topic
    Microsoft
    It's a 'heavy' system, which demands a lot of resources form the datacenter perspective. So, make sure you followed the requirements to avoid frustration in the future. From the 'client' perspective, it's fine. I've never had any issue with that.
    Incentivized
    Read full review
    Support Rating
    IBM
    Customer support is Good of IBM, While Using IBM QRadar its deployment is to slow and suddenly stop working and crashed we have contacted IBM Support and Rised a Ticket within a few minute we get call back from customer support and Query Resolved by them Fast And Rapid Support of Ibm
    Incentivized
    Read full review
    Microsoft
    We have not needed to seek support for this product in the time that we have used it thus far. It's been working really well, and have not had any major issues. Being that it's a Microsoft product, it goes without saying that there will be many support options available if needed. This includes phone, web, forums, KB articles, etc. There is even comprehensive documentation that is available on the web through Microsoft's website for use of the product.
    Incentivized
    Read full review
    In-Person Training
    IBM
    The training was very useful and the people who taught us were very knowledgeable. Although the software may initially seem difficult to learn they made things much easier for us.
    Incentivized
    Read full review
    Microsoft
    No answers on this topic
    Online Training
    IBM
    The training was very useful and the people who taught us were very knowledgeable. Although the software may initially seem difficult to learn they made things much easier for us.
    Incentivized
    Read full review
    Microsoft
    No answers on this topic
    Implementation Rating
    IBM
    Initial patience is required to learn how to use the product, and it takes a dedicated team to use it. One person is not enough, and it's not enough to just set it up and check it once in a while. It has to be used daily and kept under control to be used effectively
    Incentivized
    Read full review
    Microsoft
    Work with a "test group" of users who you have a good relationship with so that when things don't work properly they understand! Work with your partner nicely without forcing things especially timelines as you are bound to make mistakes and create oversights in the project Management can also interfere with the implementation (which can cause delays) if you make too many mistakes which takes me back to having a "test group" where you have good relations
    Incentivized
    Read full review
    Alternatives Considered
    IBM
    IBM Qradar takes the best from its competitors. Reliable and stable but sometimes very expensive, the SIEM from IBM offers a wide range of scenarios in which the customers can suite and size their own infrastructures. IBM Qradar doesn't really needs to stack up againt its competitors because it already sets an example in the SIEM world.
    Incentivized
    Read full review
    Microsoft
    We did not evaluate or use other products like Microsoft Endpoint Manager (Microsoft Intune + SCCM). The main reason we did not evaluate or use other products is because Microsoft Endpoint Manager (Microsoft Intune + SCCM) integrates seamlessly with Microsoft 365 and Windows PCs. Expenses would have increased as well if we had purchased another similar product.
    Incentivized
    Read full review
    Return on Investment
    IBM
    • Offense investigation was really helped in tackling the incidents. It was accurate and brief
    • The automation with IBM resilient (SOAR) was a milestone in elimination of user mistakes
    • The X-Force threat intelligence supported us in getting the work done without any 3rd party enterprise OSINT database
    Incentivized
    Read full review
    Microsoft
    • In our current environment, this System Center Configuration Manager had replaced several standalone solutions for patching, imaging, remote assistance, reporting, etc. That saved a lot of time and resulted in money to manage the IT infrastructure.
    • Once SCCM is deployed and fully configured, all agents are deployed and it is easy to automate a lot of processes and just control them from time to time to make sure that everything is working as supposed to be.
    • SCCM + Windows 10: great built-in endpoint protection solution. As a result, there is no need to buy additional software for that purpose.
    • The imaging process is better compared to WDS because you can modify deployment packages and apply patches to a newly imaged machine. This saves tons of time for new employees deployment.
    Incentivized
    Read full review
    ScreenShots

    IBM Security QRadar SIEM Screenshots

    Screenshot of QRadar SIEM Cloud native- Threat intelligence preview