Skip to main content
TrustRadius
IBM Security QRadar EDR

IBM Security QRadar EDR
Formerly ReaQta

Overview

What is IBM Security QRadar EDR?

IBM Security QRadar EDR (formerly ReaQta) combines automation and dashboards to minimize analyst workloads, detect anomalous endpoint behavior and remediate threats in near real time.With visibility across endpoints, it combines expected features, like MITRE ATT&CK mapping and attack visualizations, with…

Read more

Learn from top reviewers

Effective Threat Mitigation

Rating: 9 out of 10
April 3, 2024
IncentivizedVetted ReviewVerified User
As a user of IBM Security QRadar EDR in our organization, we use its powerful capabilities to improve our cybersecurity posture. The product plays a critical role in giving va...
Continue reading
Verified user
Manager
IBM Security QRadar EDR2 years of experience

Great security solution with advanced analytics and intuitive interface

Rating: 8 out of 10
March 31, 2024
IncentivizedVetted ReviewVerified User
IBM Security QRadar EDR is a reliable endpoint security solution that uses advanced analytics to detect threats and malwares and vulnerabilities and it is only possible becaus...
Continue reading
Laury Mante
Professional - Information Technology
Senior Software Quality Assurance Analyst
Computools
IBM Security QRadar EDR3 years of experience

My Experience for IBM Security QRadar.

Rating: 10 out of 10
March 19, 2024
IncentivizedVetted ReviewVerified User
IBM Security RRader EDR has a straightforward and user-friendly interface. IBM Security QReata is easy to use for users and helps security analysis navigate the system more ef...
Continue reading
sandeep kamboj
Engineer - Engineering
Software Engineer
Tech Casa LLP
IBM Security QRadar EDR12 years of experience

IBM Security QRadar EDR endpoint security

Rating: 8 out of 10
March 12, 2024
IncentivizedVetted ReviewVerified User
We leverage IBM Security QRadar EDR capability to protect endpoints from cyberattacks, detect anomalous behavior and remediate security issues. The business problems we addres...
Continue reading
Dr. Paul Nemirovsky
Consultant - Information Technology
Cybersecurity Advisor
Northrop Grumman, CenturyLink, Lumen, Advisory
IBM Security QRadar EDR10 years of experience

EDR FOR ENDPOINT

Rating: 10 out of 10
February 22, 2024
IncentivizedVetted Review
We wanted to secure our end points with NxtGen AV and to protect the end points with response and detection. More over the solution competes very well with this immediate comp...
Continue reading
Verified user
Vice-President
IBM Security QRadar EDR14 years of experience
Log in with LinkedIn to see content from your network

Awards

Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards

Return to navigation

Pricing

View all pricing
IBM Security QRadar EDR

IBM Security QRadar EDR

N/A
Unavailable

What is IBM Security QRadar EDR?

IBM Security QRadar EDR (formerly ReaQta) combines automation and dashboards to minimize analyst workloads, detect anomalous endpoint behavior and remediate threats in near real time. With visibility across endpoints, it combines expected features, like MITRE ATT&CK mapping and attack…

Entry-level set up fee?

  • Setup fee optional
For the latest information on pricing, visithttps://www.ibm.com/products/qradar…

Offerings

  • Free Trial
  • Free/Freemium Version
  • Premium Consulting/Integration Services

Would you like us to let the vendor know that you want pricing?

9 people also want pricing

Alternatives Pricing

Microsoft Defender for Endpoint

Microsoft Defender for Endpoint

$2.50
per user/per month
What is Microsoft Defender for Endpoint?

Microsoft Defender for Endpoint (formerly Microsoft Defender ATP) is a holistic, cloud delivered endpoint security solution that includes risk-based vulnerability management and assessment, attack surface reduction, behavioral based and cloud-powered next generation protection, endpoint detection…

CrowdStrike Falcon

CrowdStrike Falcon

$59.99
per endpoint/month (minimum number of endpoints applies)
What is CrowdStrike Falcon?

CrowdStrike offers the Falcon Endpoint Protection suite, an antivirus and endpoint protection system emphasizing threat detection, machine learning malware detection, and signature free updating. Additionally the available Falcon Spotlight module delivers vulnerability assessment with no…

Return to navigation

Features

Endpoint Security

Endpoint security software protects enterprise connected devices from malware and cyber attacks.

8.1
Avg 8.5
Return to navigation

Product Details

What is IBM Security QRadar EDR?

IBM Security QRadar EDR (formerly ReaQta) combines automation and dashboards to minimize analyst workloads, detect anomalous endpoint behavior and remediate threats in near real time.

With visibility across endpoints, it combines expected features, like MITRE ATT&CK mapping and attack visualizations, with dual-engine AI and automation.

For teams that need extended support, managed detection and response (MDR) services offers 24/7 monitoring and response to help keep users protected. QRadar EDR can be deployed as SaaS, on-premises and in air-gapped environments.


https://ibm.biz/QRadar_EDR_product_page


IBM Security QRadar EDR Features

Endpoint Security Features

  • Supported: Anti-Exploit Technology
  • Supported: Endpoint Detection and Response (EDR)
  • Supported: Centralized Management
  • Supported: Hybrid Deployment Support
  • Supported: Infection Remediation
  • Supported: Malware Detection

Additional Features

  • Supported: Pre-execution prevention: Reviews file source code prior to full execution and stop files from running if malicious code is detected.
  • Supported: NanoOS: Each endpoint agent includes dual AI engines and NanoOS technology, which allows certain detection and autonomous operation capabilities even when endpoints are offline.
  • Supported: Attack visibility: Detects and correlates alert information, including an attack’s root cause, risk assessment, and MITRE ATT&CK framework.
  • Supported: Anti-ransomware: Analyzes file behaviors for detecting imminent attacks and stop malicious processes from executing.
  • Supported: Signature scanning: Uses heuristics and signature-based prevention.
  • Supported: Threat insights: Identifies potential threats with metadata-based analysis to expedite triaging and enable detection of an alert’s artifacts to discover new binaries as soon as they’re activated.
  • Supported: AI-driven Threat hunting: Enables real-time search for indicators of compromise (IOC), binaries and behaviors to facilitate the discovery of dormant threats.
  • Supported: Forensics: Enables remote gathering of forensic information to reconstruct an attacker’s activities.
  • Supported: Custom playbook: Creates custom-built detection response and remediation playbooks.
  • Supported: API access: Automates workflows and integrate with external platforms with Direct API access to ReaQta.

IBM Security QRadar EDR Screenshots

Screenshot of Behavioral tree: A behavioral tree provides full alert and attack visibility.Screenshot of Behavioral tree storyline: A visual storyline is automatically created as an attack unfolds, including mapping to MITRE ATT&CK, for full visibility.Screenshot of Cyber Assistant alerts: The Cyber Assistant, an AI-powered alert management system, can autonomously handle alerts, reducing analysts’ workloads.Screenshot of Cyber Assistant recommends: The Cyber Assistant learns from analyst decisions, then retains the intellectual capital and learned behaviors to make recommendations and help reduce false positives.Screenshot of Custom detection strategies: Detection Strategy (DeStra) scripting allows users to build custom detection strategies — beyond preconfigured models — to address compliance or company-specific requirements without the need to reboot the endpoint.

IBM Security QRadar EDR Videos

IBM Security QRadar EDR Integrations

IBM Security QRadar EDR Competitors

IBM Security QRadar EDR Technical Details

Deployment TypesSoftware as a Service (SaaS), Cloud, or Web-Based
Operating SystemsUnspecified
Mobile ApplicationNo
Supported CountriesGlobal
Supported LanguagesEnglish

IBM Security QRadar EDR Downloadables

Frequently Asked Questions

CrowdStrike Falcon, SentinelOne Singularity, and Carbon Black Endpoint are common alternatives for IBM Security QRadar EDR.

Reviewers rate Endpoint Detection and Response (EDR) highest, with a score of 8.5.

The most common users of IBM Security QRadar EDR are from Mid-sized Companies (51-1,000 employees).
Return to navigation

Comparisons

View all alternatives
Return to navigation

Reviews From Top Reviewers

View all reviews
(1-5 of 9)

Great security solution with advanced analytics and intuitive interface

Rating: 8 out of 10
Incentivized
March 31, 2024
LM
Laury Mante
Senior Software Quality Assurance Analyst
Computools (Computer Software, 501-1000 employees)
Vetted Review
Verified User
IBM Security QRadar EDR
3 years of experience
Use Cases and Deployment Scope
IBM Security QRadar EDR is a reliable endpoint security solution that uses advanced analytics to detect threats and malwares and vulnerabilities and it is only possible because of predefined rules and policies that come with it by default. Also its intuitive interface simplifies security operations for everyone and makes it very easy to operate. And it meets all the security needs a business may ever need and hence it is the best security solution.
Pros
  • Uses advanced analytics to detect threats and malwares and vulnerabilities in real time.
  • Intuitive interface so everyone can use it.
  • Easy to implement and set it up.
Cons
  • For large organizations, the pricing may be ok. But for smaller organization the price is quite high.
  • Sometimes consume too much resources though it doesn't last long and returns to normal usage after sometime.
Likelihood to Recommend
IBM Security QRadaar EDR provides all the security features at one place with a reasonable price. Though for smaller organizations, the price may be quite high. Plus since it can detect threats and malwares in real time, every business should try them out.

My Experience for IBM Security QRadar.

Rating: 10 out of 10
Incentivized
March 19, 2024
sk
sandeep kamboj
Software Engineer
Tech Casa LLP (Computer Software, 11-50 employees)
Vetted Review
Verified User
IBM Security QRadar EDR
12 years of experience
View profile
Use Cases and Deployment Scope
IBM Security RRader EDR has a straightforward and user-friendly interface. IBM Security QReata is easy to use for users and helps security analysis navigate the system more effectively. Real-time monitoring of network traffic and endpoint activities also helps admins reduce risk and respond to security incidents in a timely manner. I think not every security vendor provides continuous updates as fast as IBM. IBM is easy to implement.
Pros
  • Automatic alert management.
  • Analysis
  • UI/ UX
Cons
  • System Performance.
  • Little Bit Expensive.
Likelihood to Recommend
Its function of creating logs helped me a lot, as I could create accurate reports, which also saved me time and money. I think all are good in IBM security QRadar, but its security function and instant reporting function are best for me, as in the security field, as fast as action is taken, the problems can be solved correctly and accordingly.

IBM Security QRadar EDR endpoint security

Rating: 8 out of 10
Incentivized
March 12, 2024
DP
Dr. Paul Nemirovsky
Cybersecurity Advisor
Northrop Grumman, CenturyLink, Lumen, Advisory (Telecommunications, 1001-5000 employees)
Vetted Review
Verified User
IBM Security QRadar EDR
10 years of experience
View profile
Use Cases and Deployment Scope
We leverage IBM Security QRadar EDR capability to protect endpoints from cyberattacks, detect anomalous behavior and remediate security issues. The business problems we address with this service are the endpoint security of the enterprise IT systems, including network and IT infrastructure systems, automatic threat remediation, informed cybersecurity decision-making with attack visualization storyboards
Pros
  • Detect known and unknown endpoint security threats
  • Remediate these threats near real time
  • Automation in threat detection
  • Threat attack attack visualization storyboards
  • Alert management authomation
Cons
  • IBM Security QRadar EDR is expensive to use
  • Requires a complex and confusing training
  • Labor intensive to support
  • Complex to integrate with SOC/NOC (security operations center/network operations center) services
Likelihood to Recommend
Well suited: Complex, large scale enterprises with thousands of endpoints to secure, well trained security support groups, significant training budget.
Less appropriate: small and medium enterprises with limited security resources and talent. Limited training resources.

Effective Threat Mitigation

Rating: 9 out of 10
Incentivized
April 03, 2024
Verified User
Manager in Information Technology
Industrial Automation Company, 201-500 employees
Vetted Review
Verified User
IBM Security QRadar EDR
2 years of experience
Use Cases and Deployment Scope
As a user of IBM Security QRadar EDR in our organization, we use its powerful capabilities to improve our cybersecurity posture. The product plays a critical role in giving various business problems related to threat detection & response at the endpoint level. Firstly, QRadar EDR gives us solution to detecting potential security threats across our endpoints. It continuously moniters activities such as file changes, network connections & process behaviors. it alerts us to any suspicious & malicious activities in real-time.
Pros
  • QRadar is full capable of collecting extensive endpoint telemetry data, including file system changes, registry modifications, process executions, network connections etc.
  • Its interface & robust search capabilities analysts easily conduct detailed investigations & uncover IOCs as well as suspicious patterns of behavior.
  • QRadar EDR integrates smoothly with threat intelligence feeds, from which an organization can enrich endpoint data with contextual information about known threats & IOC.
Cons
  • QRadar EDR gives many predefined detection rules & response actions but from our team member found out limitations in terms of customization & flexibility.
Likelihood to Recommend
QRadar EDR is well suited for large malware detection capabilities above traditional antivirus solutions. It excellent in detecting advanced malware variants, including fileless malware, polymorphic malware & zero-day exploits.
As a security team, when we need to hunt for threats across our endpoints, IBM Security QRadar EDR's powerful search & investigation capabilities allow our analysts to take a deep look into endpoint data, searching for indicators of compromise (IOCs) & finding hidden threats.

EDR FOR ENDPOINT

Rating: 10 out of 10
Incentivized
February 22, 2024
Verified User
Vice-President in Sales
Information Technology & Services Company, 1001-5000 employees
Vetted Review
Reseller
IBM Security QRadar EDR
14 years of experience
Use Cases and Deployment Scope
We wanted to secure our end points with NxtGen AV and to protect the end points with response and detection. More over the solution competes very well with this immediate competitor and provides easy way to do the implementation and response to solution has turned out to be fantastic and provides exact response.
Pros
  • NxtGen AV
  • Easy to implement
  • Response and Detection to the threats
Cons
  • Clarity on the roadmap
  • Prices competitive
  • Provide cloud based security.
Likelihood to Recommend
As mentioned ease to deployment and implementation made the delivery seamless. NxtGen antivirus capabilities, it helps in protecting endpoints from Cyber attacks and anomalies and remediate vulnerabilities in near real time. Enable informed decision making with attack making visualisation, also help to automate decision and focus on the threats which are matters
Return to navigation