Try our new research platform with insights from 80,000+ expert users

Bitdefender GravityZone EDR vs IBM Security QRadar comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 5, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Bitdefender GravityZone EDR
Ranking in Endpoint Detection and Response (EDR)
13th
Average Rating
8.4
Reviews Sentiment
7.6
Number of Reviews
61
Ranking in other categories
No ranking in other categories
IBM Security QRadar
Ranking in Endpoint Detection and Response (EDR)
17th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
207
Ranking in other categories
Log Management (6th), Security Information and Event Management (SIEM) (4th), User Entity Behavior Analytics (UEBA) (1st), Security Orchestration Automation and Response (SOAR) (4th), Managed Detection and Response (MDR) (10th), Extended Detection and Response (XDR) (12th)
 

Mindshare comparison

As of March 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of Bitdefender GravityZone EDR is 2.7%, down from 3.1% compared to the previous year. The mindshare of IBM Security QRadar is 1.2%, up from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR)
 

Featured Reviews

AMBARISH PATKAR - PeerSpot reviewer
Centralized control effectively manages devices while updates require powered-on systems
I use Bitdefender GravityZone EDR for the grooming industry. It is primarily utilized for the office environment The features I find most effective for threat detection include centralized control policy distribution and the control of independent devices, such as printers, laptops, and desktops…
Md. Shahriar Hussain - PeerSpot reviewer
Real-time incident detection and user-friendly dashboard benefit daily operations
There are many types of AI, and this AI is very limited in SQL and features. There may be potential for improvement. So far, it seems very limited. It shows some good features in the correlation part, but I think there is room for improvement. For instance, when creating rules, it can suggest more rules, reducing the effort needed. If AI-related support can suggest rules and integrate with existing security devices like MD, IPS, this SIM can create more relevant rules. Sometimes logs I receive don't mean anything, and I need technical stakeholders to share or forward logs, but these are sometimes inadequate. Keywords can help identify insufficient logs. I often lack time to verify logs. Sharing false positive results could be reduced to help my team.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Sandbox Analyzer, HyperDetect, and EDR are valuable to our customers."
"GravityZone can be controlled from the cloud."
"Great protection against malware, ransomware, and any other forms of malicious software."
"The pricing is reasonable."
"We have clients who are also migrating from other anti-virus solutions to GravityZone because of the ease of use, ease of installation and the fact that it can be deployed in the cloud and the same software; you can actually install on other server or workstation. It automatically knows what it's protecting."
"You can analyze any incident or malicious behavior. You can take action from within the EDR, and it can assist you in understanding how the attack was initiated or any malicious behavior in your environment."
"The Ultra is a valuable feature."
"The product is worth the investment."
"The threat hunting capabilities in general are great."
"IBM QRadar User Behavior Analytics's most important feature is its ease of use."
"think QRadar is great overall. We’ve had a positive experience with it and recommend it for deployment. However, there are areas for improvement. The technical support is good, and the documentation is valuable, but it could be enhanced, especially regarding integration with other systems. In terms of support and updates, QRadar’s capabilities are crucial for maintaining high security standards. Network and software administrators can monitor all traffic effectively, which reassures clients and drives further adoption."
"Technical support is good overall."
"It integrates very easily with other solutions. The solution is flexible. We can add anything to it, as it is a good companion to other tools."
"It'll get you from point A to B."
"The tool helps with infrastructure, application, and network monitoring."
"It has improved my efficiency."
 

Cons

"The cryptosystem could be improved a bit."
"Policy customization and deployment need a little bit of improvement. The push policies, the first line, and all those things."
"While the solution is secure, it could have better integration."
"We would like to see password management integrated into the solution because I don't like having a third-party password management system."
"The product fails to provide guides to its users...I want the tool to offer some guides and hands-on training that can guide users who want to learn more about the product without the vendor's help."
"When patching devices for updates, if a device is not switched on, it does not provide information dynamically."
"The solution's workflow is very cumbersome and should be improved."
"The reporting is much too simple."
"There should be more opportunity for community kind of distribution where, for example, if there was a zero-day threat targeting companies."
"Their technical support is not good. We opened a lot of cases and from my experience, they are not complicated issues but it takes forever to get an answer."
"The user interface is a bit clunky, a bit hard to find what you need."
"Its architecture is very complicated."
"I'd like them to improve the offense. When QRadar detects something, it creates what it calls offenses. So, it has a rudimentary ticketing system inside of it. This is the same interface that was there when I started using it 12 years ago. It just has not been improved. They do allow integration with IBM Resilient, but IBM Resilient is grotesquely expensive. The most effective integration that IBM offers today is with IBM Resilient, which is an instant response platform. It is a very good platform, but it is very expensive. They really should do something with the offense handling because it is very difficult to scale, and it has limitations. The maximum number of offenses that it can carry is 16K. After 16K, you have to flush your offenses out. So, it is all or nothing. You lose all your offenses up until that point in time, and you don't have any history within the offense list of older events. If you're dealing with multiple customers, this becomes problematic. That's why you need to use another product to do the actual ticketing. If you wanted the ticket existence, you would normally interface with ServiceNow, SolarWinds, or some other product like that."
"The solution is clunky."
"Needs better visualization options beyond the time series charts and a few other options that they have."
"GUI needs to be improved."
 

Pricing and Cost Advice

"We need to pay for a yearly license for the solution."
"The solution is affordable."
"There are different packages available that vary in terms of licensing fees."
"The licensing cost has been manageable for our small team."
"There is a fully functional trial that we used and we didn't have any issues."
"Bitdefender GravityZone Ultra is less expensive than other solutions, such as CrowdStrike. We had a really good deal because it was their year-end and they were trying to do a lot of sales that week. We bought a three-year contract from them and the cost was approximately $17 per endpoint, per year. It is was a very good price. I have spoken to other people who have purchased CrowdStrike at approximately $60 per endpoint, per year. I have no complaints about the price of this solution."
"Bitdefender GravityZone EDR is cost-effective and has the best pricing."
"The product has a reasonable price."
"Pricing and licensing are competitive. Their new licensing options allow logs to bypass the correlation engine for a flat rate, which is also appealing for log data that is compliance-driven for a small amount of money."
"On a scale of one to ten, I rate the price a one, where one is an extremely expensive product, and ten is a cheap product."
"QRadar's price is reasonable compared to LogRhythm."
"I feel that the price is reasonable but compared to other products that are on the market, such as an offering by Microsoft, it is more expensive."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate IBM Security QRadar's pricing a five out of ten."
"QRadar UBA's price is a little more than street price and could be reduced."
"The price of this solution is a little bit expensive, so if it were cheaper then it would help."
"The maintenance costs are high."
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
842,296 professionals have used our research since 2012.
 

Comparison Review

VS
Jun 28, 2015
Qradar vs. ArcSight
Continuing with the SIEM posts we have done at Infosecnirvana, this post is a Head to head comparison of the two Industry leading SIEM products in the market – HP ArcSight and IBM QRadar Both the products have consistently been in the Gartner Leaders Quadrant. Both HP and IBM took over niche SIEM…
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Comms Service Provider
11%
Government
5%
Manufacturing Company
5%
Educational Organization
23%
Computer Software Company
14%
Financial Services Firm
10%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What is your experience regarding pricing and costs for Bitdefender GravityZone Ultra?
The cost is reasonable, with the license costing approximately six to eight dollars per user.
What needs improvement with Bitdefender GravityZone Ultra?
When patching devices for updates, if a device is not switched on, it does not provide information dynamically.
What are the biggest differences between Securonix UEBA, Exabeam, and IBM QRadar?
It mostly depends on your use-cases and environment. Exabeam and Securonix have a stronger UEBA feature set, friendlier GUI and are not licensed based on capacity (amount of logs and information in...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is your experience regarding pricing and costs for IBM Security QRadar?
The cost depends. The price I negotiated varies by region and relationship with the OEM. Cost is not shared due to another procurement team handling negotiations, but it was reasonable as far as I ...
 

Also Known As

Bitdefender GravityZone Ultra, Bitdefender GravityZone
IBM QRadar, QRadar SIEM, QRadar UBA, QRadar on Cloud, IBM QRadar Advisor with Watson
 

Overview

 

Sample Customers

Mentor Graphics, Rudersdal Kommune
Clients across multiple industries, such as energy, financial, retail, healthcare, government, communications, and education use QRadar.
Find out what your peers are saying about Bitdefender GravityZone EDR vs. IBM Security QRadar and other solutions. Updated: March 2025.
842,296 professionals have used our research since 2012.