Skip to main content
TrustRadius
IBM Security QRadar SOAR

IBM Security QRadar SOAR

Overview

What is IBM Security QRadar SOAR?

IBM Security® QRadar® SOAR is designed to help your security team respond to cyberthreats with confidence, automate with intelligence and collaborate with consistency. It guides your team in resolving incidents by codifying established incident response processes into dynamic playbooks.

Read more
Recent Reviews

Good SIEM

7 out of 10
September 27, 2023
Incentivized
We use IBM Security QRadar SOAR as our primary SIEM tool. We injust logs from various other system and tools to gather intelligence and …
Continue reading
Read all reviews

Awards

Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards

Reviewer Pros & Cons

View all pros & cons
Return to navigation

Pricing

View all pricing
N/A
Unavailable

What is IBM Security QRadar SOAR?

IBM Security® QRadar® SOAR is designed to help your security team respond to cyberthreats with confidence, automate with intelligence and collaborate with consistency. It guides your team in resolving incidents by codifying established incident response processes into dynamic playbooks.

Entry-level set up fee?

  • No setup fee
For the latest information on pricing, visithttps://www.ibm.com/products/qradar…

Offerings

  • Free Trial
  • Free/Freemium Version
  • Premium Consulting/Integration Services

Would you like us to let the vendor know that you want pricing?

22 people also want pricing

Alternatives Pricing

What is KnowBe4 PhishER?

PhishER is presented as a lightweight Security Orchestration, Automation and Response (SOAR) platform to orchestrate threat response and manage the high volume of potentially malicious email messages reported by users. And, with automatic prioritization of emails, PhishER helps InfoSec and Security…

Return to navigation

Product Demos

Accelerating Response Time with IBM Security QRadar

mediacenter.ibm.com

IBM Security QRadar SOAR demo

mediacenter.ibm.com
Return to navigation

Product Details

What is IBM Security QRadar SOAR?

IBM Security® QRadar® SOAR is designed to improve SOC efficiency and ensure users' response processes are met with an intelligent automation and orchestration solution, which timestamps key actions, aides threat investigation, and helps users manage their response to 180+ international privacy and data breach regulations. It features prebuilt connectors for a broad ecosystem of connectors, while managing the organization's response.

  • Respond and Remediate Faster – using open standards ingest alerts from disparate data sources into a unified dashboard for improved investigation and response across the security, IT and other key stakeholders.
  • Customized Case Management – pre-built playbooks that adapt to any unique business processes using customizable layouts and tailored response. This facilitates getting started quicker, reduces complexity, and helps improve the incident response process.
  • Close the Skill Gap – create automations that bring together artifact correlation, threat enrichment, case investigation, and prioritization so analysts can process triaged cases faster. The playbook evolves as the investigation proceeds, with threat enrichment happening at each stage of the process.

IBM Security QRadar SOAR Features

  • Supported: Case management
  • Supported: Dynamic playbooks
  • Supported: Integrations out of the box
  • Supported: Deployment flexibility
  • Supported: Visual workflow
  • Supported: Privacy breach response
  • Supported: Automation

IBM Security QRadar SOAR Screenshots

Screenshot of the IBM Security QRadar SOAR Breach Response solution. The software helps customers manage more than 180 global privacy reporting regulations including GDPR.Screenshot of the Playbooks Landing page, that shows all active playbooks in a single view, including how many are actively running, disabled, or are in draft.Screenshot of IBM Security QRadar SOAR’s Playbook Designer canvas, designed to lower the barrier to entry necessary to build automations through a graphical interface.Screenshot of the Tasks view shows all response tasks, organized by phase, that have either completed or are set to be executed.Screenshot of Threat Investigator automatically correlates incident information, curating an incident timeline from start to finish, including related artifacts and MITRE ATT&CK mappings.

IBM Security QRadar SOAR Video

IBM Security QRadar SOAR Competitors

IBM Security QRadar SOAR Technical Details

Deployment TypesOn-premise, Software as a Service (SaaS), Cloud, or Web-Based
Operating SystemsWindows, Linux, Mac
Mobile ApplicationNo

Frequently Asked Questions

IBM Security® QRadar® SOAR is designed to help your security team respond to cyberthreats with confidence, automate with intelligence and collaborate with consistency. It guides your team in resolving incidents by codifying established incident response processes into dynamic playbooks.

Palo Alto Networks Cortex XSOAR, FortiSOAR, and Splunk SOAR are common alternatives for IBM Security QRadar SOAR.

The most common users of IBM Security QRadar SOAR are from Enterprises (1,001+ employees).
Return to navigation

Comparisons

View all alternatives
Return to navigation

Reviews and Ratings

(41)

Attribute Ratings

Reviews

(1-9 of 9)
Companies can't remove reviews or game the system. Here's why
Score 4 out of 10
Vetted Review
Verified User
Incentivized
IBM QRadar SOAR is a very good solution for collaborating on security events. Quite a few companies will be happy with such a tool. Good default settings. Clear interface. Great granularity of user permissions. Unfortunately, it is not suitable as a SOAR-class solution. As an incident management system, it meets most of the requirements.
Score 8 out of 10
Vetted Review
Verified User
Incentivized
IBM Security QRadar SOAR is particularly useful in guarding againt a phishing event. When a malware downloaded via a phishing email was detected, IBM Security QRadar SOAR was able to automate a response by isolating the infected device, blocking the malicious URL and removing the emails from all the user inbox based on hash signatures identified as attachment.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
A malware outbreak occurred in one of our construction site servers. IBM Security QRadar SOAR not only detected the malware but also orchestrated a response. It quarantined the infected server, initiated a scan and cleanup, informed the IT team and ensured compliance checks were run before restoring the server to the network. I would recommend QRadar to all industries looking to better their security posture.
September 27, 2023

Good SIEM

Score 7 out of 10
Vetted Review
Verified User
Incentivized
I think it is great for monitoring log source across environment. Good for threat hunting and alerting. Good to leverage data for MSSP services.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
IBM SOAR is highly recommended for Information Security teams that are small and want to have a quick response to incidents in a secure and audited way. It is a flexible and highly customizable tool.It is possible to create different playbooks and it has a very intuitive console. There are many applications for SOAR that make it easy to deploy for integration with third-party tools, thus helping to facilitate automation.
Score 7 out of 10
Vetted Review
Verified User
Incentivized
We've been able to achieve airtight cybersecurity and secure data encryption with IBM SOAR (thanks to the robust in-platform capabilities). The playbooks having been properly documented with little input required to codify processes. The SOAR is agile enough to handle breaches, sending alerts to the investigative team as they happen and in real time.
It however sends plenty of false alerts, this was after we integrated it with a security deception software.
stephanie baker | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
Incentivized
IBM Resilient SOAR has excellent expediency for monitoring networks. It is great at identifying and notifying us of hidden security breaches. It has been effective for managing a vast amount of logs. However, if you are in need of a SIEM that has a very powerful engine you should look somewhere else.
Gokul Karuppiah | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User
Incentivized
This is well suited for a high-level application with 1000+ users that work across timezones of EST, IST, and APT where actions can be taken across 24/7 applications. This tool is less appropriate for the small scale application for which is not much is needed. For example, where the application is used only by users 2-5 users on around 10+.
Return to navigation