TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    IBM Security QRadar SIEM

    Score8.9 out of 10
    N/AIBM Security QRadar is security information and event management (SIEM) Software.N/A

    Sophos Intercept X

    Score8.9 out of 10
    N/ASophos Endpoint Protection (Sophos EPP) with Intercept X is an endpoint security product providing an antivirus / antimalware solution that when upgraded with Intercept X or Intercept X Advanced provides advanced threat detection and EDR capabilities.

    $28

    per year per user

    Pricing
    IBM Security QRadar SIEMSophos Intercept X
    Editions & Modules
    No answers on this topic
    Intercept X Advanced
    $28
    per year per user
    Intercept X Advanced with XDR
    $48
    per year per user
    Sophos Managed Threat Response
    $79
    per year per user
    Offerings
    Pricing Offerings
    IBM Security QRadar SIEMSophos Intercept X
    Free Trial
    YesNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details—Pricing is for a 3-year commitment. Government and Education pricing available.
    More Pricing Information
    Community Pulse
    IBM Security QRadar SIEMSophos Intercept X
    Considered Both Products
    IBM
    Chose IBM Security QRadar SIEM
    As a part of core security service provider, we could not stand with the tools that are used as a generic data processor. The compliance, log reading and events are well managed in QRadar compared to other tools
    Incentivized
    Sophos
    No answer on this topic
    Key User Insights
    Would buy again
    92%
    Would buy again
    67 Answers
    91%
    Would buy again
    20 Answers
    Delivers good value for the price
    97%
    Delivers good value for the price
    61 Answers
    100%
    Delivers good value for the price
    22 Answers
    Happy with the feature set
    96%
    Happy with the feature set
    70 Answers
    100%
    Happy with the feature set
    22 Answers
    Lived up to sales and marketing promises
    86%
    Lived up to sales and marketing promises
    38 Answers
    100%
    Lived up to sales and marketing promises
    20 Answers
    Implementation went as expected
    94%
    Implementation went as expected
    59 Answers
    90%
    Implementation went as expected
    19 Answers
    Features
    IBM Security QRadar SIEMSophos Intercept X
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of IBM Security QRadar SIEM and Sophos Intercept X
    Feature
    IBM Security QRadar SIEM
    8.5
    69 Ratings
    6% above category average
    Sophos Intercept X
    -
    Ratings
    Centralized event and log data collection9.927 Ratings00 Ratings
    Correlation8.669 Ratings00 Ratings
    Event and log normalization/management9.527 Ratings00 Ratings
    Deployment flexibility7.827 Ratings00 Ratings
    Integration with Identity and Access Management Tools8.965 Ratings00 Ratings
    Custom dashboards and workspaces7.569 Ratings00 Ratings
    Host and network-based intrusion detection9.725 Ratings00 Ratings
    Data integration/API management9.07 Ratings00 Ratings
    Behavioral analytics and baselining7.648 Ratings00 Ratings
    Rules-based and algorithmic detection thresholds8.049 Ratings00 Ratings
    Response orchestration and automation7.75 Ratings00 Ratings
    Reporting and compliance management7.947 Ratings00 Ratings
    Incident indexing/searching8.97 Ratings00 Ratings
    Endpoint Security
    Comparison of Endpoint Security features of IBM Security QRadar SIEM and Sophos Intercept X
    Feature
    IBM Security QRadar SIEM
    -
    Ratings
    Sophos Intercept X
    8.1
    24 Ratings
    5% below category average
    Anti-Exploit Technology00 Ratings8.623 Ratings
    Endpoint Detection and Response (EDR)00 Ratings8.024 Ratings
    Centralized Management00 Ratings8.024 Ratings
    Hybrid Deployment Support00 Ratings8.03 Ratings
    Infection Remediation00 Ratings7.924 Ratings
    Vulnerability Management00 Ratings8.44 Ratings
    Malware Detection00 Ratings8.024 Ratings
    Best Alternatives
    IBM Security QRadar SIEMSophos Intercept X
    Small Businesses
    No answers on this topic
    SentinelOne Singularity
    Score9 out of 10
    Medium-sized Companies
    Sumo Logic
    Score8.9 out of 10
    BlackBerry Protect (CylancePROTECT)
    Score9.1 out of 10
    Enterprises
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    ESET PROTECT
    Score8.8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    IBM Security QRadar SIEMSophos Intercept X
    Likelihood to Recommend
    8.6
    (89 ratings)
    8.2
    (41 ratings)
    Likelihood to Renew
    8.8
    (5 ratings)
    10.0
    (1 ratings)
    Usability
    8.0
    (2 ratings)
    8.1
    (8 ratings)
    Availability
    9.0
    (1 ratings)
    -
    (0 ratings)
    Performance
    9.0
    (1 ratings)
    -
    (0 ratings)
    Support Rating
    8.1
    (62 ratings)
    8.1
    (12 ratings)
    In-Person Training
    9.0
    (1 ratings)
    -
    (0 ratings)
    Online Training
    9.0
    (1 ratings)
    -
    (0 ratings)
    Implementation Rating
    8.0
    (1 ratings)
    9.0
    (1 ratings)
    Configurability
    8.0
    (1 ratings)
    -
    (0 ratings)
    Contract Terms and Pricing Model
    9.0
    (1 ratings)
    -
    (0 ratings)
    Ease of integration
    8.1
    (58 ratings)
    -
    (0 ratings)
    Product Scalability
    8.0
    (1 ratings)
    -
    (0 ratings)
    Professional Services
    10.0
    (1 ratings)
    -
    (0 ratings)
    Vendor post-sale
    9.0
    (1 ratings)
    -
    (0 ratings)
    Vendor pre-sale
    9.0
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    IBM Security QRadar SIEMSophos Intercept X
    Likelihood to Recommend
    IBM
    I would only recommend IBM Security QRadar SIEM in a few situations. For one, it's very easy to setup and use if all your log sources are generic from known vendors. It's also significantly cheaper than Splunk, which is nice if you're trying to save money or be more efficient. I would not recommend IBM Security QRadar SIEM for environments with a lot of custom logs and complicated detection requirements.
    Incentivized
    Read full review
    Sophos
    To be frank, this product is fairly expensive. So I would recommend this to companies that are mid-sized or larger to condone the cost of the purchase. It does save me a significant amount of time in my day - being able to glance at the dashboard and see if there are any outstanding issues that require my attention, as not much digging must be done to accomplish this. So for our company, with a short-staffed IT department, it's incredibly helpful to us. We also qualify for Educational pricing which brings the cost down - which helps tremendously
    Incentivized
    Read full review
    Pros
    IBM
    • Enables identification and prioritization of vulnerabilities in IT infrastructure for corrective action.
    • Facilitates security incident investigation and forensic analysis.
    • Provides a real-time view of security events, enabling immediate incident response.
    • Can integrate with external threat intelligence sources to enrich data and improve threat detection.
    • Enables the generation of detailed and customized reports.
    Incentivized
    Read full review
    Sophos
    • Sophos Intercept X is great at preventing malware infections and rolling back their effects. I have seen this happen hundreds of times since we installed it
    • When combined with Sophos Central, you have an easy to use dashboard where you can manage all installations from a single pane of glass.
    • It's easy to deploy on machines and stays updated.
    • Good reporting features including alerts sent to the admin if there's ever something wrong with it.
    Incentivized
    Read full review
    Cons
    IBM
    • Need to spend more time configuring the system to properly interpret and normalize different type of data collected from multiple resources.
    • While Rule creation QRadar uses that rules to detect security threats and generate alerts, but to creating and managing rules is bit complex & tedious work to complete.
    • IBM Security QRadar SIEM is excellent in handling large & complex systems that requires in-depth knowledge and extensive training to configure and maintain the system which includes upgrading, optimization of performance & issue troubleshooting.
    Incentivized
    Read full review
    Sophos
    • Sophos OOTB policies are very strict and they don't offer anything less strict without you creating new custom policies. I'm sure this is deliberate because the product starts you out in the safest way possible but it means that you will have lots of calls to your tech support desk when you first deploy it unless you do somewhat extensive testing beforehand.
    • Sophos Intercept X is currently broken (at least the DLP component) by having secure boot turned on in the UEFI/BIOS. If any user wants to be able to write data to a USB drive or floppy from their PC (yes we still have a couple users who need to use floppies) we have to turn off secure boot on their PC, even if the DLP policy for that user/PC combination specifies that the user and PC are allowed to write to USB/floppy. This would be a very serious problem if it weren't for the fact that we have very few users who need to write files to USB. For us it's OK but I bet it would be a deal-breaker for others.
    • I don't see a whole lot of evidence that Intercept X is any different than any other anti-virus, so maybe their admin alerts just don't clearly identify when they have identified a zero-day threat or maybe we just haven't had any zero-day threats.
    Incentivized
    Read full review
    Likelihood to Renew
    IBM
    QRadar is an established and stable product, we have been using it for many years and want to continue to focus on it. Anyone who has used the product and knows it knows how reliable it is and how it facilitates continuous monitoring of threats from outside and inside. it is an exceptional product that is very useful for us.
    Incentivized
    Read full review
    Sophos
    We have gotten a great product for the price. Easy to maintain and set up on new devices. Support is great and easy to work with and understand.
    Incentivized
    Read full review
    Usability
    IBM
    As a grade I give 8 as QRadar is not easy to learn. It requires some time to master it. It also needs a team of people actively working on the product. Once you learn to use it the software works very well and it is easy to correlate and understand detected threats. It only takes time to learn how to use it well and configure it properly.
    Incentivized
    Read full review
    Sophos
    The usability has never been a problem. Sophos Intercept X is a program you can install and let protect your company without much intervention. Apart from a few policies, Sophos will keep you protected better than most any product on the market. Sophos Intercept X works quite well when you are looking to "tighten your grip" on user's access to websites, programs, and add-ons.
    Read full review
    Support Rating
    IBM
    Customer support is Good of IBM, While Using IBM QRadar its deployment is to slow and suddenly stop working and crashed we have contacted IBM Support and Rised a Ticket within a few minute we get call back from customer support and Query Resolved by them Fast And Rapid Support of Ibm
    Incentivized
    Read full review
    Sophos
    Most of the support reps are fantastic. There have been a few though that have had to be escalated via Account Manager when they haven't followed up but this is a rare instance, and often followed up by the Support Manager for APAC.
    Incentivized
    Read full review
    In-Person Training
    IBM
    The training was very useful and the people who taught us were very knowledgeable. Although the software may initially seem difficult to learn they made things much easier for us.
    Incentivized
    Read full review
    Sophos
    No answers on this topic
    Online Training
    IBM
    The training was very useful and the people who taught us were very knowledgeable. Although the software may initially seem difficult to learn they made things much easier for us.
    Incentivized
    Read full review
    Sophos
    No answers on this topic
    Implementation Rating
    IBM
    Initial patience is required to learn how to use the product, and it takes a dedicated team to use it. One person is not enough, and it's not enough to just set it up and check it once in a while. It has to be used daily and kept under control to be used effectively
    Incentivized
    Read full review
    Sophos
    Best thing was the help pushing out via group policy and was able to get instructions for that on sophos site
    Incentivized
    Read full review
    Alternatives Considered
    IBM
    IBM Qradar takes the best from its competitors. Reliable and stable but sometimes very expensive, the SIEM from IBM offers a wide range of scenarios in which the customers can suite and size their own infrastructures. IBM Qradar doesn't really needs to stack up againt its competitors because it already sets an example in the SIEM world.
    Incentivized
    Read full review
    Sophos
    Webroot Endpoint Protection is not even in the same league as Sophos Intercept-X. I have tested and compared both sides by side, run simulations and it's not even close. Plus the Sophos central management is so much better. Easier to view user activities and apply policies and remediate threats. Sophos is the clear winner between these two products.
    Incentivized
    Read full review
    Return on Investment
    IBM
    • Offense investigation was really helped in tackling the incidents. It was accurate and brief
    • The automation with IBM resilient (SOAR) was a milestone in elimination of user mistakes
    • The X-Force threat intelligence supported us in getting the work done without any 3rd party enterprise OSINT database
    Incentivized
    Read full review
    Sophos
    • Once our technical and commercial areas got certified, the ROI over the time spent, is great. Actual customers, and/or new ones with other tools, feel safe and advised, once they get in touch with us.
    • When Sophos EndPoint is being compared against Web Management Tools (competitors), we have failed to deliver, nevertheless, there is a version of Sophos Central (Cloud) which achieves this requirement at 100% and more, since is Cloud Based (on AWS).
    • We are grateful to be on Sophos "Radar" as a Platinum Partner, and "The Americas" valued partner, we have seen our business grow, thanks to this kind of technology, throughout the years.
    Incentivized
    Read full review
    ScreenShots

    IBM Security QRadar SIEM Screenshots

    Screenshot of QRadar SIEM Cloud native- Threat intelligence preview

    Sophos Intercept X Screenshots

    Product screenshotProduct screenshotProduct screenshot