Try our new research platform with insights from 80,000+ expert users

IBM Cloud Pak for Security vs IBM Security QRadar comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

IBM Cloud Pak for Security
Average Rating
0.0
Number of Reviews
1
Ranking in other categories
Cloud and Data Center Security (22nd)
IBM Security QRadar
Average Rating
8.0
Number of Reviews
204
Ranking in other categories
Log Management (6th), Security Information and Event Management (SIEM) (4th), User Entity Behavior Analytics (UEBA) (1st), Endpoint Detection and Response (EDR) (18th), Security Orchestration Automation and Response (SOAR) (4th), Managed Detection and Response (MDR) (10th), Extended Detection and Response (XDR) (14th)
 

Mindshare comparison

IBM Cloud Pak for Security and IBM Security QRadar aren’t in the same category and serve different purposes. IBM Cloud Pak for Security is designed for Cloud and Data Center Security and holds a mindshare of 0.1%, up 0.1% compared to last year.
IBM Security QRadar, on the other hand, focuses on Security Information and Event Management (SIEM), holds 9.5% mindshare, up 9.3% since last year.
Cloud and Data Center Security
Security Information and Event Management (SIEM)
 

Featured Reviews

AK
Jul 7, 2022
Great user-friendly interface; provides many functionalities and many free applications
Our use case is behavior analytics with machine learning. We are partners and distributors of Cloud Pak. I'm a system security manager.  The interface is good and very user-friendly, it's easy for our customers to use. Cloud Pak provides a lot of functionalities and many free applications…
Muzzamil Hussain - PeerSpot reviewer
Aug 1, 2024
Is easy to integrate and doesn't require maintenance
One major drawback we are facing is in the area of IBM Security QRadar integration with flat file databases. IBM Security QRadar does not support flat file database integration. We are currently facing an issue with respect to the database, which you normally call a NoSQL database. There is no direct integration mechanism available with IBM Security QRadar. We have to approach IBM and generate a ticket so that they can develop a custom method for the integration. In database integration, we are facing issues with IBM Security QRadar. The solution does not support the integration of flat file databases. Certain organizations have flat file databases. IBM does not support direct integration with some databases. We had to create a plug, and we requested IBM to develop a parser, but it is taking IBM a couple of months to develop it. I think a flat-file database should be supported directly instead of developing a parser plugin. There should be a more refined threat intelligence platform, and cross-integration should be possible with locally available threat intelligence platforms.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The interface is good and very user-friendly."
"Log correlation is very useful for processing alerts. It serves to follow up alerts in real-time, building an entire workflow."
"I like the graphical interface. It's so good and easy."
"QRadar UBA's most valuable feature is the risk rating of users depending on their behavior."
"The solution is easy to use, manage, and review all incidents."
"The most valuable feature is the searching capability and real-time operational use."
"The threat hunting capabilities in general are great."
"It's hard for me to pinpoint any one feature that's most valuable because it is all about consuming logs and analyzing them. We started using QRadar UBA because we needed something that could analyze Linux authentication information. Other products take care of the Windows platform."
"One of the most valuable features of this solution is it has very good data correlation."
 

Cons

"Lacks sufficient technical support."
"The pricing of the solution is a bit high. If they could lower it, that would be ideal."
"The biggest problem was built on top of the QRadar in the executive operations center network. The integration was not using the network security specialist properly, and all the incidents were inferior with QRadar. Its compatibility is not really good."
"The technical support is poor. Mostly because when I open a PMR for IBM, I am stuck with Level 1 staff. As an engineer, nothing that I am bringing them does not require Level 2 or Level 3 support."
"The solution should enhance its capabilities of UEBA and AI/ML tech modeling."
"The dashboards are all legacy and old."
"IBM QRadar User Behavior Analytics is good, but I think the functionality should be much more integrated. You should have easy access to the artifacts if you are doing a particular investigation. It's good, but other team solutions like LogRhythm are actually merging the functionality. So, I think that is something IBM can work on."
"It is very difficult to activate all of the network equipment, and it would help if it were made easier."
"The implementation of the solution's technology needs to be simplified."
 

Pricing and Cost Advice

Information not available
"This price is a little high, so it's an expensive product."
"Most of the time, it is easier and cheaper to buy a new product or the QRadar box."
"The solution is costly and the price differs depending on the vendor you use."
"The pricing needs to be such that they are more competitive with other vendors."
"In terms of additional costs, it depends on the subscription that you choose. There are plenty of options to choose from."
"There are different types of subscriptions available. We were on an annual subscription, but our customers typically choose the two years subscription option."
"Licensing can be costly depending on your architecture."
"The price of this solution is a little high."
report
Use our free recommendation engine to learn which Cloud and Data Center Security solutions are best for your needs.
814,649 professionals have used our research since 2012.
 

Comparison Review

VS
Jun 28, 2015
Qradar vs. ArcSight
Continuing with the SIEM posts we have done at Infosecnirvana, this post is a Head to head comparison of the two Industry leading SIEM products in the market – HP ArcSight and IBM QRadar Both the products have consistently been in the Gartner Leaders Quadrant. Both HP and IBM took over niche SIEM…
 

Top Industries

By visitors reading reviews
Retailer
15%
Financial Services Firm
11%
Government
9%
Recreational Facilities/Services Company
7%
Educational Organization
22%
Computer Software Company
14%
Financial Services Firm
10%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Ask a question
Earn 20 points
What are the biggest differences between Securonix UEBA, Exabeam, and IBM QRadar?
It mostly depends on your use-cases and environment. Exabeam and Securonix have a stronger UEBA feature set, friendlier GUI and are not licensed based on capacity (amount of logs and information in...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What do you like most about IBM QRadar?
The event collector, flow collector, PCAP and SOAR are valuable.
 

Also Known As

No data available
IBM QRadar, QRadar SIEM, QRadar UBA, QRadar on Cloud, QRadar, IBM QRadar User Behavior Analytics, IBM QRadar Advisor with Watson
 

Learn More

 

Overview

 

Sample Customers

Information Not Available
Clients across multiple industries, such as energy, financial, retail, healthcare, government, communications, and education use QRadar.
Find out what your peers are saying about VMware, Akamai, Illumio and others in Cloud and Data Center Security. Updated: November 2024.
814,649 professionals have used our research since 2012.