TrustRadius: an HG Insights company

IBM Security QRadar SOAR

Score8.6 out of 10

68 Reviews and Ratings

What is IBM Security QRadar SOAR?

IBM Security® QRadar® SOAR is designed to help your security team respond to cyberthreats with confidence, automate with intelligence and collaborate with consistency. It guides your team in resolving incidents by codifying established incident response processes into dynamic playbooks.

Read more details.

Media

Screenshot of the IBM Security QRadar SOAR Breach Response solution. The software helps customers manage more than 180 global privacy reporting regulations including GDPR.
Screenshot of the Playbooks Landing page, that shows all active playbooks in a single view, including how many are actively running, disabled, or are in draft.
Screenshot of IBM Security QRadar SOAR’s Playbook Designer canvas, designed to lower the barrier to entry necessary to build automations through a graphical interface.
Screenshot of the Tasks view shows all response tasks, organized by phase, that have either completed or are set to be executed.
Screenshot of Threat Investigator automatically correlates incident information, curating an incident timeline from start to finish, including related artifacts and MITRE ATT&CK mappings.

1 / 5

Screenshot of the IBM Security QRadar SOAR Breach Response solution. The software helps customers manage more than 180 global privacy reporting regulations including GDPR.

Who Buys & Uses IBM Security QRadar SOAR

Automate incident responses with IBM Security QRadar SOAR

Use Cases and Deployment Scope

We use IBM Security QRadar SOAR to automate and improve security operations.

Pros

  • Automate incident response
  • Help analysts with high demand
  • Overview of threat landscape

Cons

  • Missing functionality
  • VirusTotal integration

Return on Investment

  • Help to respond fast to threats
  • Easy to use
  • Hard to implement

Usability

Alternatives Considered

Splunk Enterprise

Other Software Used

IBM Security QRadar SIEM, Splunk Enterprise Security (ES), Microsoft Defender for Business

IBM Security QRadar SOAR Review

Use Cases and Deployment Scope

The Python-based extensions for Orchestration & Automation are really important for me within IBM Security QRadar SOAR.

Pros

  • Monitoring
  • building a playbook
  • Containment, Response and Recovery

Cons

  • Tutorials

Return on Investment

  • With playbooks and automation you can achieve high ROI

Alternatives Considered

HPE 3PAR StoreServ

Other Software Used

HPE 3PAR StoreServ

Detailed view on IBM Security QRadar SOAR and alternatives.

Use Cases and Deployment Scope

We tried IBM suite for all threat detection and resolvece.

Pros

  • Dashboard and reporting are good. There is intuitive dashboard.
  • Multi team collaboration fetaure is good.
  • Automations of complex response workflows possible

Cons

  • Customising playbooks and workflows are bit challenging.
  • there are few compatibility issues while integrating with some external tools.
  • customer support is not good enough. Infact, there are few gaps in provided documentations.

Return on Investment

  • Faster response time for any suspected threat and mitigation. Of course this is positive impact.
  • If properly configured for automation, then it can save resources. Although, there is one time extensive resource utilization involved for initial setup.
  • In some cases organisation might not utilise its full capabilities, in that case it is expensive.

Usability

Alternatives Considered

Splunk Attack Analyzer, Palo Alto Networks Advanced Threat Prevention and Swimlane

Other Software Used

Zoho BugTracker, Google Cloud AI, Google Cloud Platform, MongoDB

SOARing Through With Security

Use Cases and Deployment Scope

I use IBM Security QRadar SOAR to protect my company from computer scans and security. I have a great sense of security without cyber crimes and scans. I would not want to operate without having this protection backing me. I am able to show others the benefits of having it and it is an easy sell.

Pros

  • User-friendly
  • Easy to manage users
  • Easily understood interface

Cons

  • Easier training for new users

Most Important Features

  • Security
  • Sense of familiarity

Return on Investment

  • Sense of security

Alternatives Considered

IBM Analytics Engine

Other Software Used

MACAW CRM

Usability

Unearthing QRadar's Cyber security Resilience.

Use Cases and Deployment Scope

QRadar SOR is primarily employed in our construction company to enhance our incident response capabilities and detect threats promptly. When an alert is triggered by any of our security systems, the platform automatically correlates data from multiple sources to asses the severity and validity of the alerts. It the initiates predefined response actions, such as isolating affected systems, notifying our security team containing the threat.

Pros

  • QRadar's ability to collect, analyze and normalize vast amount of security data from various sources is remarkable.
  • QRadar allows us to define and automate incident response playbooks which have been amazing for streamlining the response to security incidents.
  • It offers and extensive library of pre-built connectors and support for common security standards facilitating seamless integration with a wide range of security tools.

Cons

  • Although QRadar offers reporting capabilities, building custom reports can be challenging for non-technical users. A more user-friendly report builder with predefined templates could make this process more accessible.

Most Important Features

  • Incident Orchestration
  • Automated playbooks.
  • Audit and compliance automation.
  • Scalability.

Return on Investment

  • QRadar has significantly enhanced our security posture by enabling us to detect, respond to, and mitigate security threats more effectively.
  • As we expand construction projects, QRadar SOAR has seamlessly scaled with our growing security needs. We haven't needed to invest in additional security personnel at the same rate as our project expansion, resulting in cost savings and efficient resource allocation.

Other Software Used

IBM MQ, Slack, Google Meet