Pragmatic features for in-depth investigation into all internal and external activity
May 20, 2022

Pragmatic features for in-depth investigation into all internal and external activity

Michael Ronchetti | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User

Software Version

QRadar Advisor with Watson (legacy branding)

Modules Used

  • XDR Connect
  • SIEM
  • NDR
  • SOAR

Overall Satisfaction with IBM Security QRadar

We adopted this technology due to its capability of defending our critical data from novel, rapidly evolving cyber threats and inside threats, whether malicious or non-malicious. This self-learning technology is able to detect and report ransomware actively attacking our network from within, which none of our security tools were able to spot. Genuinely anomalous activity is reported to the IT security team, allowing us to carry out further investigation and mitigate any risk posed.
  • Improved understanding of user and device behavior.
  • Alerts to threats as they occur, allowing efficient risk mitigation.
  • Complete, 24/7 network visibility.
  • Staff must be extremely familiar with networking to continually tune the software for false positives.
  • Defends intellectual property and sensitive customer data.
  • Real time visualization of abnormal activity.
  • Helped distribute our human resources according to urgency and importance.
Integrated well with existing systems and allowed us to retain our complex systems whilst defending them. Now we are able to investigate the emerging problems in detail, respond to them accordingly, and mitigate the risk they pose before they become serious network vulnerabilities.
Provides resources for technical help, case policies, and other information for customer assistance on their support page. Their support is a global team and I can even upload diagnostics files and screen captures when opening a case with the Support Team.

Do you think IBM Security QRadar SIEM delivers good value for the price?


Are you happy with IBM Security QRadar SIEM's feature set?


Did IBM Security QRadar SIEM live up to sales and marketing promises?


Did implementation of IBM Security QRadar SIEM go as expected?


Would you buy IBM Security QRadar SIEM again?


This technology is capable of real-time threat detection because it quickly learns the network's pattern by modeling the behaviors of each user and device as well as the network as a whole. The IT security team will be more confident in the knowledge that potential threats from inside and even the unknown won't go unnoticed.