IBM Security QRadar SIEM
Rating: 9 out of 10
October 02, 2024
Verified User
Vetted Review
Verified User
3 years of experience
I still don't have experience with other SIEM solutions.
Overview
What is IBM Security QRadar SIEM?
IBM Security QRadar is security information and event management (SIEM) Software.
Learn from top reviewers
IBM Security QRadar SIEM
Rating: 9 out of 10
October 2, 2024We use IBM Security QRadar SIEM to help us quickly analyze and respond to potential security incidents. Today it is an indispensable solution for our SOC. By having a centrali...
Verified user
Consultant
3 years of experienceIBM Security QRadar SIEM Review
Rating: 5 out of 10
September 11, 2024We use IBM Security QRadar SIEM as a SIEM in a few of our internal customer environments. This helps us provide security monitoring to those environments once we onboard the r...
Verified user
Engineer
4 years of experienceAnalysis and experience with QRadar SIEM
Rating: 9 out of 10
September 10, 2024I use the IBM QRadar SIEM since 2014 and I have had a good experience since then. We have a large number of security assets and QRadar SIEM helps us collect and correlate aler...
Saulo Prado
Analyst - Information Technology
/security Specialist
BANCO DO BRASIL S/A
10 years of experienceIBM Security QRadar SIEM best SIEM Tool
Rating: 10 out of 10
September 9, 2024With the increasing number of cybersecurity threats, our company needed software to help us correlate logs sent from our infrastructure for the purpose of detecting and preven...
Verified user
Administrator
4 years of experienceIBM Qradar:: The Stellar SIEM for your organization
Rating: 10 out of 10
August 28, 2024The business needed an all in one solution which can collect logs from all the devices across the organization as well as it should be user friendly enough for analysts to use...
Verified user
Analyst
7 years of experienceIBM Security QRadar SIEM review
Rating: 9 out of 10
July 17, 2024We use IBM Security QRadar SIEM in our organization to centralize all the security and compliance events to monitor and detect a possible security breach in our environment. T...
Verified user
Analyst
4 years of experienceIBM Security QRadar SIEM
Rating: 10 out of 10
July 12, 2024IBM Security QRadar SIEM is one of the company's main security tools and today we meet several regulatory requirements through this IBM solution. We have several use cases bot...
Verified user
Engineer
3 years of experienceAn effective and easy SIEM solution
Rating: 9 out of 10
July 10, 2024IBM Security QRadar SIEM is user-friendly. It is not a burden to manage offensives because of excellent correlation and the ability to observe any earlier offense from the sam...
IBM Security QRadar SIEM
Rating: 7 out of 10
June 11, 2024We use IBM Security QRadar SIEM to collect and analyze log data from our IT systems, helping us detect and respond to security threats in real-time. It also assists in meeting...
Verified user
Consultant
5 years of experienceA good solution with areas for improvement
Rating: 8 out of 10
May 24, 2024At ADV-IC we provide cybersecurity services to multiple clients, QRadar SIEM is one of the tools that stands out the most for its practicality, which is why I interact a lot w...
Verified user
Engineer
4 years of experienceReview SIEM Qradar Cibanco
Rating: 9 out of 10
April 12, 2024It is used to monitor all the organization's security tools and infrastructure centrally and in this way detect incidents quickly, it also helps us comply with regulations.
QRADAR IBM REVIEW
Rating: 10 out of 10
April 5, 2024QRadar is a robust monitoring tool, friendly to the implementation process, based on various cybersecurity methodologies. It currently helps the organization I work for to hav...
Janette Iris Contreras Reyes
Manager - Information Technology
Gerente de Monitoreo y Respuesta a Incidentes
Altan Redes
1 year of experienceIBM Security QRadar SIEM Review
Rating: 9 out of 10
March 31, 2024With IBM Security QRadar SIEM, my team can identify, respond and contain many threats in our environment, because the SIEM IBM QRADAR brings insights about our security. Is ea...
Verified user
Analyst
2 years of experienceQRadar Pluxee Review
Rating: 8 out of 10
March 31, 2024We use as a traditional SIEM, Logs correlation, User Behaviour, Threat Intel, and threat hunting are some examples of use cases.
Verified user
Analyst
2 years of experienceQRadar review.
Rating: 8 out of 10
March 31, 2024We have used IBM Security QRadar SIEM to provide security to our costumers (B2B) and also for our own corporate security. IBM Securty QRadar SIEM itself is an amazing tool, bu...
Verified user
Administrator
4 years of experience
Log in with LinkedIn to see content from your network
Awards
Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards
Reviewer Pros & Cons
Pricing
N/A
Unavailable
What is IBM Security QRadar SIEM?
IBM Security QRadar is security information and event management (SIEM) Software.
Entry-level set up fee?
- No setup fee
For the latest information on pricing, visithttps://www.ibm.com/products/qradar…
Offerings
- Free Trial
- Free/Freemium Version
- Premium Consulting/Integration Services
Would you like us to let the vendor know that you want pricing?
12 people also want pricing
Alternatives Pricing
What is Blumira?
Blumira’s cloud SIEM platform offers both automated threat detection and response, enabling organizations of any size to more defend against cybersecurity threats in near real-time. It's goal is to ease the burden of alert fatigue, complexity of log management and lack of IT visibility.
Product Demos
IBM Security QRadar SIEM (Cloud-Native) Demo
mediacenter.ibm.com
Features
Return to navigation
Product Details
- About
- Integrations
- Competitors
- Tech Details
- FAQs
What is IBM Security QRadar SIEM?
IBM QRadar SIEM helps users to remediate threats faster by prioritizing high-fidelity alerts to help catch threats.
QRadar analytics monitor threat intel, network and user behavior anomalies to prioritize where immediate attention and remediation is needed. When threat actors trigger multiple detection analytics, move across the network or change their behaviors, QRadar SIEM will track each tactic and technique being used. More important, it will correlate, track and identify related activities throughout a kill chain, with a single high-fidelity case, automatically prioritized for the user.
https://ibm.biz/QRadar_SIEM_product_page
IBM Security QRadar SIEM Features
Security Information and Event Management (SIEM) Features
- Supported: Correlation
- Supported: Integration with Identity and Access Management Tools
- Supported: Custom dashboards and workspaces
- Supported: Behavioral analytics and baselining
- Supported: Rules-based and algorithmic detection thresholds
- Supported: Reporting and compliance management
Additional Features
- Supported: Open architecture to deploy on premises, on cloud, or as a service.
- Supported: Investigation speed faster with automated triage and contextual intelligence
- Supported: Better visibility by removing silos and unifying input and shared insights
- Supported: Integrates with existing tools to leave data where it is and leveraging current environment.
IBM Security QRadar SIEM Screenshots
IBM Security QRadar SIEM Video
IBM Security QRadar SIEM Integrations
IBM Security QRadar SIEM Competitors
IBM Security QRadar SIEM Technical Details
| Deployment Types | Software as a Service (SaaS), Cloud, or Web-Based |
|---|---|
| Operating Systems | Unspecified |
| Mobile Application | No |
Frequently Asked Questions
IBM Security QRadar is security information and event management (SIEM) Software.
Microsoft Sentinel, Splunk Enterprise Security (ES), and LogRhythm NextGen SIEM Platform are common alternatives for IBM Security QRadar SIEM.
Reviewers rate Centralized event and log data collection highest, with a score of 9.9.
The most common users of IBM Security QRadar SIEM are from Enterprises (1,001+ employees).
Comparisons
Compare with
Reviews and Ratings
(281)
Community Insights
TrustRadius Insights are summaries of user sentiment data from TrustRadius reviews and, when necessary, 3rd-party data sources. Have feedback on this content? Let us know!
- Pros
- Cons
Efficient Integration with Technologies: Users have consistently praised the tool for its seamless integration with various technologies, allowing for the efficient monitoring of attack patterns and correlation of events. Reviewers indicate that this capability provides a comprehensive view across different systems. User-Friendly Interface: Many reviewers have highlighted the clean, complete, and user-friendly interface that facilitates easy management and contributes to reducing downtime during outages. The intuitive design has been commended for enhancing the overall user experience. Customizability and Flexibility: Users highly value the tool's ability to create custom dashboards. Reviewers also like the customization options for rules, reports, parsed fields, and DSM settings. This flexibility empowers users to tailor the tool according to their specific needs.
Limited Reporting Flexibility: Some users have expressed the need for better breadth in report editing, suggesting that the current tools restrict their ability to customize reports to their specific needs. This limitation may hinder their ability to extract key insights from the data effectively.
Complex Rule Creation and Logic Understanding: Users have reported difficulties with regex language, rule creation, and understanding the logic behind certain features, making it challenging for them to effectively utilize the system. This complexity can lead to errors in configuring rules and potentially impact the accuracy of threat detection.
Slow Deployment and Lag Issues: Several users have mentioned issues with lag, slow deployment, manual offense updates, and a lack of an alarm system for offenses, indicating potential performance concerns. These delays in system responsiveness could impede real-time threat monitoring and incident response efficiency.
Reviews
(1-25 of 61)Companies can't remove reviews or game the system. Here's why
IBM Security QRadar SIEM Review
Rating: 5 out of 10
September 11, 2024
Verified User
Vetted Review
Verified User
4 years of experience
- Splunk Enterprise Security (ES) and Splunk Enterprise
I would always recommend Splunk over IBM Security QRadar SIEM unless you're trying to save money or only onboarding and normalizing well known data sources. IBM Security QRadar SIEM doesn't seem to handle RBA and complicated, chaining correlation rules very effectively and if I had to write a custom add-on for custom data, I found it easier to do so in Splunk.
Analysis and experience with QRadar SIEM
Rating: 9 out of 10
September 10, 2024
SP
Vetted Review
Verified User
10 years of experience
The QRadar licensing process is based on EPS (Events Per Second) and there are no limitations on event collection, regardless of the origin of the logs. This becomes an advantage as the price is agreed between the parties before purchase, so you have knowledge of what you can use from the SIEM infrastructure. In Microsfot Sentinel, licensing is by type of log ingestion, making the event management process more complex for paying for the solution, in addition to making it more expensive and unpredictable.
IBM Security QRadar SIEM best SIEM Tool
Rating: 10 out of 10
September 09, 2024
Verified User
Vetted Review
Verified User
4 years of experience
- Splunk Enterprise Security (ES) and ManageEngine Log360
We chose IBM Security QRadar SIEM not only because it was a leader but because it convinced us it was a solid product suitable for multiple scenarios but most importantly we needed a really secure and powerful software for our infrastructure.
IBM Qradar:: The Stellar SIEM for your organization
Rating: 10 out of 10
August 28, 2024
Verified User
Vetted Review
Verified User
7 years of experience
IBM Security QRadar SIEM has been quite a revolutionary siem solution compared to its counterparts. Be it the use case building to maintaining log source integrations, Qradar has proved to be one of the most efficient and easy to use solution. Having IBM SOAR along with the SIEM gives a 360 degree view of the enterprise security offenses.
IBM Security QRadar SIEM review
Rating: 9 out of 10
July 17, 2024
Verified User
Vetted Review
Verified User
4 years of experience
Because is easy to use and if you don't have analysts with database language skills IBM Security QRadar SIEM is easy to use in comparison to Splunk.
IBM Security QRadar SIEM
Rating: 10 out of 10
July 12, 2024
Verified User
Vetted Review
Verified User
3 years of experience
Because they are the best and most used tools in the Cyber ​​Security market for event correlation.
A good solution with areas for improvement
Rating: 8 out of 10
May 24, 2024
Verified User
Vetted Review
Verified User
4 years of experience
- IBM Security QRadar SIEM
It provides practicality by containing several domains in a single tenant and being able to subdivide them in a single place, in addition to the fact that the price is very competitive in the market.
QRADAR IBM REVIEW
Rating: 10 out of 10
April 05, 2024
JI
Vetted Review
Verified User
1 year of experience
- Splunk Application Performance Monitoring (APM)
friendly tool
With reasonable costs
with ease of integration
with ease to create rules
With reasonable costs
with ease of integration
with ease to create rules
IBM Security QRadar SIEM Review
Rating: 9 out of 10
March 31, 2024
Verified User
Vetted Review
Verified User
2 years of experience
We select a IBM Security QRadar SIEM because is better to integrate a our SIEM QRADAR.
IBM Security QRadar SIEM for Cybersecurity
Rating: 9 out of 10
January 24, 2024
Verified User
Vetted Review
Verified User
9 years of experience
ArcSight is more difficult to understand and administer, and it looks more like a box for programming and needs a lot of high-level skills personnel. IBM Security QRadar SIEM is well suited for organization cybersecurity in large and medium organizations. IBM Security QRadar SIEM has a very user-friendly interface.
IBM Qradar Review
Rating: 8 out of 10
January 03, 2024
UJ
Vetted Review
Verified User
1 year of experience
Qradar is on my top choice because I have hands-on experience on it. on qradar it is much easier to investigate in case of any incident happend.
Comprehensive protection against cyber threats
Rating: 9 out of 10
December 21, 2023
BL
Vetted Review
Verified User
2 years of experience
IBM Security QRadar SIEM offers a wide range of features and capabilities, such as behavioral analysis, event correlation and incident management, making it a robust and effective choice.
Qradar the best for soc monitorings
Rating: 10 out of 10
December 21, 2023
Verified User
Vetted Review
Verified User
5 years of experience
IBM Security QRadar SIEM: Unleashing Advanced Analytics for Comprehensive Threat Intelligence and Incident Response.
Rating: 9 out of 10
November 27, 2023
NK
Vetted Review
Verified User
1 year of experience
QRadar's open architecture is easy to integrate with a wide range of security tools and third-party applications, which are available at the IBM X-force library to enhance overall flexibility. Its powerful analytics and correlation capabilities provide advanced threat detection and response. Suitable for both small and large enterprises as per need.
IBM QRadar is the brain of the SOC
Rating: 10 out of 10
November 13, 2023
KD
Vetted Review
Verified User
4 years of experience
QRadar is simpler when it comes to threat hunting
One of the best SIEM solution for monitoring end points and network.
Rating: 10 out of 10
October 06, 2023
PM
Vetted Review
Verified User
2 years of experience
I would take below parameters to say IBM Security QRadar SIEM is better than other SIEM tools such as netwitness SIEM"
1) Easy to Use
2) Easy to Setup
3) Meet Requirements
4) Easy for admins
5) Quality of Support
6) Future roadmap and new features
These points helped me decide that i should go with IBM Security QRadar SIEM.
1) Easy to Use
2) Easy to Setup
3) Meet Requirements
4) Easy for admins
5) Quality of Support
6) Future roadmap and new features
These points helped me decide that i should go with IBM Security QRadar SIEM.
Good SIEM to Reduce Your MTTD
Rating: 8 out of 10
September 27, 2023
RD
Vetted Review
Verified User
10 years of experience
- Microsoft Sentinel, DNIF HyperScale SIEM and Securonix Next-Generation SIEM
I found that IBM Security QRadar SIEM has better threat detection methods and the identification of cyber kill chains followed by attackers. Analysis of the data gives visibility that other SIEM solutions need to improve. Integration in IBM Security QRadar SIEM is also better than others. Dashboards are also easily customizable giving view to users as per role-based access.
User friendly Qradar
Rating: 9 out of 10
August 09, 2023
Verified User
Vetted Review
Verified User
2 years of experience
User friendly and use case management portal which helps to get brief idea about security posture based on mitre mapping is best thing i have experienced in qradar.
IBM Security QRadar SIEM Unraveling Security Mysteries
Rating: 10 out of 10
August 07, 2023
My
Vetted Review
Verified User
3 years of experience
price, to be honest IBM Security QRadar SIEM package is very good for most customers than Splunk and Sentinel
The most complete and reliable SIEM
Rating: 10 out of 10
August 04, 2023
Verified User
Vetted Review
Verified User
4 years of experience
IBM Qradar takes the best from its competitors. Reliable and stable but sometimes very expensive, the SIEM from IBM offers a wide range of scenarios in which the customers can suite and size their own infrastructures. IBM Qradar doesn't really needs to stack up againt its competitors because it already sets an example in the SIEM world.
QRadar review
Rating: 8 out of 10
August 04, 2023
MM
Vetted Review
Verified User
6 years of experience
It's in the middle of this chart, Splunk from my point of view it's still the best SIEM actually and Sentinel it's very easy to use.
SIEM THAT IS EASY TO USE AND GIVES VALUE TO MONEY
Rating: 8 out of 10
August 04, 2023
Verified User
Vetted Review
Verified User
8 years of experience
- Splunk Enterprise Security (ES)
IBM Qradar is cheaper and also easy to use.
For splunk you need dedicated team of experts.
For splunk you need dedicated team of experts.
IBM Qradar SIEM: Unraveling the Cybersecurity Enigma!
Rating: 8 out of 10
August 03, 2023
Verified User
Vetted Review
Verified User
3 years of experience
As a part of core security service provider, we could not stand with the tools that are used as a generic data processor. The compliance, log reading and events are well managed in QRadar compared to other tools
A successful enterprise solution for log management and correlation
Rating: 9 out of 10
July 27, 2023
ıb
Vetted Review
Verified User
1 year of experience
- Splunk Enterprise Security (ES), FortiSIEM and IBM Security QRadar SIEM
roi (return of investment) is better for Qradar SIEM.