Item: IBM Security QRadar SIEM
Rating: 7
Author: Marcelo Erazo

Use Cases and Deployment Scope

We are a SOC and a security that is a security operation center and a center of incident response. So we have a lot of clients. All of these clients have a lot of locks, a lot of information security, information security events, and security alarms. We use this product to put each client in a separate bucket and all its security logs in each bucket. So if any of our clients have an incident, an alarm of a cybersecurity threat, we can see it in a dashboard. So we use this tool to correlate all the information so we can alert our clients that they are under attack

Pros and Cons

It is really simple to integrate different technologies because we have to correlate it and if it is difficult to integrate sources, I won't be able to do my job. So one of the best things is the way it integrates with different vendors so it's easy for us to deploy.

This product can do better in a lot of things. First, better integrating machine learning and artificial intelligence so all the logs can be integrated and can show threats besides the threats that we program. If we don't program a threat, the tool is not going to show me anything. We have to program it. But there are new technologies like artificial intelligence that could make this for us so we can have more visibility of threats. Right now they don't have these capabilities and there are other products that are incorporating these capabilities.

Return on Investment

It makes our analysts work efficiently because it correlates the information and gives information in one panel. So it has a really good role in that matter. But when I need to incorporate artificial intelligence to gather information on threats, the raw decreases because the tools that I need are really expensive because the product doesn't have it. So if I need artificial intelligence, I don't see a really good raw in this product.

Key Insights

Do you think IBM Security QRadar SIEM delivers good value for the price?

Yes

Are you happy with IBM Security QRadar SIEM's feature set?

Yes

Did IBM Security QRadar SIEM live up to sales and marketing promises?

Did implementation of IBM Security QRadar SIEM go as expected?

Yes

Would you buy IBM Security QRadar SIEM again?

Yes

Likelihood to Recommend

It's well suited If you have a complex big network when you need a simple but reliable platform. It is not suited for companies that want a tool that does everything because there are some tools that are less reliable, maybe smaller, but have a lot of features. So if you are looking for a lot of features, these might not be the tool, but if you are looking for a reliable platform that integrates well and you know that it is going to work, it is the tool for you.

IBM Security QRadar SIEM Review

Software Version

Overall Satisfaction with IBM Security QRadar SIEM