IBM X-Force Exchange vs. Symantec DeepSight

IBM X-Force is well suited for organizations with medium to large SOC's and run IBM Qradar as their SIEM.

Incentivized

It is good to monitor viruses and threat detection in our systems and it does provide detailed information on the detected threat. Email and phone alerts can be configured to keep us updated. It does get updated frequently. Pricing is high only top-level license has every feature. Customer support can be improved.

Incentivized

• Ready made security research on threats.
• Security Intel
• Integrate threat intel feeds with SIEMs.

Incentivized

• User Friendly console
• Malware , Threat prevention
• Email and phone alerts are very useful
• Deepsight feeds provide more information to analyze threats.

Incentivized

• Pruning of IOC to reduce false positives.
• Add more flexibility to integration on SIEMs to allow users to compare UserAgents, Compromised users/domains like HIBP.
• Only watch vulnerabilities for selected vendors.

Incentivized

• Prices seems to be very high , Only top tier plans have all features.
• Customer support needs to be improved, They do take a long time to reply back to queries.

Incentivized

IBM X-force is community-based and crowd strike is not. Community-based will always be best-effort quality.

Incentivized

We do come across multiple security tools but we get more information and security on Symantec deep sight.

Incentivized

• Threat Intel - Low Confidence IOC - Overhead.
• Lack of integration with IBM Qradar+Vulnerability via X-Force.

Incentivized

• It does provide good security to our systems
• We do get proper service for what we pay.
• Symantec mitigates security threat to our network

Incentivized