IBM Guardium

Score9.1 out of 10

158 Reviews and Ratings

What is IBM Guardium?

IBM Guardium is IBM's data security posture management solution, that aims to offer organizations comprehensive visibility, actionable insights and real-time controls to help users comply with regulations, preserve privacy and secure sensitive data no matter where it is stored.

Categories & Use Cases

Media

Screenshot of the IBM Guardium Data Protection dashboard showing all the features. One click can take you to databases or to data analytics.

Screenshot of IBM Guardium Data Protection: The S-TAP and GIM Dashboard gives real-time visibility into the health and performance of S-TAPs. It is used to track the status of different S-TAP versions, see database activity across inspection engines, and view detailed insights by operating system.

Screenshot of IBM Guardium DSPM: Discovery, Classification & Threat Monitoring - Automate cloud data security with discovery, classification, and continuous threat monitoring. This offers a unified view of sensitive data across cloud workloads (AWS, Azure, GCP) and SaaS (SharePoint, OneDrive, Slack, Google Drive, Jira, Confluence and more), understand its risk level, and ensure ongoing protection and compliance.

1 / 5

Screenshot of the IBM Guardium Data Protection dashboard showing all the features. One click can take you to databases or to data analytics.

Security Posture Assessment & Risk Prioritization
Identifies structural security drift and misconfiguration and flags vulnerabilities based on the sensitivity of exposed data.
Category average: 9.1
Data Access & Entitlement Mapping
Analyzes IAM policies, roles, and Access Control Lists (ACLs) to determine who or what has read/write access to sensitive datasets.
Category average: 8.2
Non-Intrusive, Agentless Scanning
Agentless architecture for scanning without degrading database performance or violating host boundaries.
Category average: 8.2

Automated Compliance Mapping
Automatically maps data risks directly to major regulatory frameworks, with real-time audit logs and compliance posture scores.
Category average: 8.2
Shadow & Dark Data Identification
Uncovers undocumented database or forgotten files that exist outside of official IT/security inventories.
Category average: 7.3
AI-Ready Security Guardrails
Manages AI pipeline risk to ensure sensitive data is masked or blocked before it can be ingested by LLMs.
Category average: 7.3

Most Frequent Users

Top 3 industries using IBM Guardium.

Based on HG Insights installation data

View all Reviews

#1 most frequent

Finance and Insurance

32.1%

160 installations of 499

“We use IBM Guardium for both Data monitoring and for Vulnerability assessments.”
— Cyber security Engineer, Comerica Bank

#2 most frequent

Professional, Scientific, and Technical Services

22.4%

112 installations of 499

“IBM Guardium DP's capabilities have allowed us to reduce detection times and conduct early investigations into incidents involving our assets monitored by the solution.”
— Senor Security IBM Solutios Architet, TD SYNNEX

#3 most frequent

Information

11.0%

55 installations of 499

“IBM Guardium provides us with the ability discover and identify data.”
— President, DataHub

Pros

Comprehensive visibility into data access patterns
Effective data security and protection for sensitive information
Robust auditing and compliance reporting capabilities

Cons

User interface/GUI requires improvements for flow and consistency
High pricing is perceived as a significant drawback
Steep learning curve and complexity during implementation

Verified User

Manager in Information Technology (1001-5000 employees)

Use Cases and Deployment Scope

We didn't exactly know how to where all of our sensitive data was stored or how to rank its importance to the organization. Using IBM Guardium we were able to discover and classify assets that were in need of protection. The other issue we had was lack of active monitoring of those discovered assets. We now run reports against the databases to log access and other activity.

Pros

Discovered were our most critical assets resided
Monitor our databases for activity
Vulnerability assessment which wad had not done in a long while

Cons

Vulnerability assessment takes some time to learn
We had to run a few discoveries to get find everything we needed to on the sensitive data front however, it was very useful
Compliance management took a long time to get a handle on how to implement changes to address compliance issues

Return on Investment

We have a lot of time finding our critical assets.
Active monitoring increased our awareness of activity on our databases
Vulnerability Assessment helped us patch some important security holes

Alternatives Considered

Bradford Networks Sentry

Other Software Used

Secureworks Counter Threat Unit (CTU), Fortinet FortiGate, HPE Aruba Networking ClearPass Policy Manager

Cesar Augusto Restrepo Gomez View profile

Senor Security IBM Solutios Architet in Sales at TD SYNNEX (501-1000 employees)

Use Cases and Deployment Scope

IBM Guardium Data Protection and Vulnerability Assessment has helped me gain visibility into who, how, where, when, and in what ways sensitive data is being accessed within the organization. Usually, our sensitive data is stored in relational databases and non-relational, storage systems with unstructured sensitive data. Being able to discover vulnerabilities that could impact sensitive data has been another huge achievement. This has allowed us to understand the level of risk in accessing sensitive data. We have also been able to identify and trace all operations of database administrators and users who have access to sensitive data.

Pros

It allows us to discover sensitive data, where it is located, and within which repository it is located.
It allows us to have visibility and audit trails of all user interactions with sensitive data repositories in real time.
It helps us build and deliver the required regulatory compliance reports much more quickly.
It allows us to create policies for the separation of roles and functions within access to sensitive data.
It allows us to investigate incidents with the help of analytics, behavioral, and artificial intelligence engines that analyze user behavior to detect variations and identify risks.

Cons

Allow viewing user entitlement reports graphically or through dashboards.
Allow integration with Watson.X Orchestrate and Watson.X Governance to integrate analytics on data usage, risk, and usability, possibly integrating with LLM models or AI Agents.
It would be interesting if GDP could uncover Shadow Data as well.

Return on Investment

IBM Guardium DP has streamlined the identification time for suspicious access to sensitive data in real time.
IBM Guardium DP has helped the organization efficiently and quickly deliver compliance reports or reports required by internal departments in a timely and effective manner.
IBM Guardium DP has supported the investigation and response process for incidents involving sensitive data that put the organization at risk due to a regulation or compliance standard.

Alternatives Considered

Imperva Data Security

Other Software Used

IBM Security QRadar SOAR, IBM Verify, IBM Security QRadar SIEM

Lisa Wright

Cyber security Engineer in Engineering at Comerica Bank (1001-5000 employees)

Use Cases and Deployment Scope

We use IBM Guardium for both Data monitoring and for Vulnerability assessments. We started with a small scope of applications and have now made IBM Guardium a standard requirement for all [...] managed DB's. It is working great and is fullying integrated with our SIEM and Service Now for ticket creation and investigations.

Pros

identifies failed logins
Possible app issue
monitors access to data
identifies possible issues with CSS

Cons

patching - ease of the process
consistent labels in the GUI
memory management in the appliances

Return on Investment

allows us to monitor critical data
Data protection is critical in banking - IBM Guardium allows us to better protect it.
Still too soon in our deployment process to determine the actual business impact.

Jim McDonough

President in Corporate at DataHub (11-50 employees)

Use Cases and Deployment Scope

IBM Guardium provides us with the ability discover and identify data. Once we discover data, we have the ability to control access and lock data down. This is extremely valuable based on the rate that data is growing.

Pros

Discovery & Classify Data
Data Encryption

Cons

User Interface
Pricing (lower price)

Return on Investment

The ability to discover and classify data is a huge time savings
Pre Built templates for PCI / HIPPA are huge time savings

Alternatives Considered

Imperva Data Security

Other Software Used

IBM Verify, HashiCorp Vault

JC Husmillo

IT Manager in Information Technology at Questronix Corporation (51-200 employees)

Use Cases and Deployment Scope

This address our security issues, specially our FSI clients.

Pros

Database Encryption
Data Masking
Data Security

Cons

I don't remember any but maybe support
Pricing

Return on Investment

Positive impact is that we comply to all regulations

Alternatives Considered

TokenOne

Other Software Used

IBM Instana, IBM API Connect

Oracle Security Monitoring and Analytics

BigID

AWS Security Hub

IBM Guardium

What is IBM Guardium?

Categories & Use Cases

Media

IBM Guardium Key Features

Top Performing Features

Security Posture Assessment & Risk Prioritization

Data Access & Entitlement Mapping

Non-Intrusive, Agentless Scanning

Areas for Improvement

Automated Compliance Mapping

Shadow & Dark Data Identification

AI-Ready Security Guardrails

Who Buys & Uses IBM Guardium

Most Frequent Users

Finance and Insurance

Professional, Scientific, and Technical Services

Information

Most Frequent Users

Small Businesses

Mid-sized Companies

Enterprises

Most Frequent Users

United States of America

Brazil

India

IBM Guardium Reviews

Pros

Cons

Use Cases and Deployment Scope

Pros

Cons

Return on Investment

Alternatives Considered

Other Software Used

Use Cases and Deployment Scope

Pros

Cons

Return on Investment

Alternatives Considered

Other Software Used

Use Cases and Deployment Scope

Pros

Cons

Return on Investment

Use Cases and Deployment Scope

Pros

Cons

Return on Investment

Alternatives Considered

Other Software Used

Use Cases and Deployment Scope

Pros

Cons

Return on Investment

Alternatives Considered

Other Software Used

IBM Guardium Alternatives