Try our new research platform with insights from 80,000+ expert users

IBM Security QRadar vs Secureworks Taegis Managed XDR / MDR comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 19, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IBM Security QRadar
Ranking in Managed Detection and Response (MDR)
7th
Average Rating
8.0
Reviews Sentiment
6.6
Number of Reviews
219
Ranking in other categories
Log Management (7th), Security Information and Event Management (SIEM) (3rd), User Entity Behavior Analytics (UEBA) (1st), Endpoint Detection and Response (EDR) (17th), Security Orchestration Automation and Response (SOAR) (4th), Extended Detection and Response (XDR) (11th)
Secureworks Taegis Managed ...
Ranking in Managed Detection and Response (MDR)
18th
Average Rating
7.8
Reviews Sentiment
7.1
Number of Reviews
14
Ranking in other categories
Managed Security Services Providers (MSSP) (2nd)
 

Mindshare comparison

As of January 2026, in the Managed Detection and Response (MDR) category, the mindshare of IBM Security QRadar is 1.0%, up from 0.7% compared to the previous year. The mindshare of Secureworks Taegis Managed XDR / MDR is 2.4%, down from 4.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Managed Detection and Response (MDR) Market Share Distribution
ProductMarket Share (%)
IBM Security QRadar1.0%
Secureworks Taegis Managed XDR / MDR2.4%
Other96.6%
Managed Detection and Response (MDR)
 

Featured Reviews

HarshBhardiya - PeerSpot reviewer
SOC Engineer at a outsourcing company with 10,001+ employees
Have managed daily asset and alert monitoring effectively but have encountered limitations with manual processes and interface usability
It's still very manual and doesn't work on its own. It's still in an early stage and not on par where we can consider it a really successful detection system. The accuracy is not there. The UI could be better when compared to Sentinels where we can use flags and tagging. It could be much more user-friendly. IBM Security QRadar has all features and is fully competitive with other SIEM tools, but when it comes to user-friendliness, a new user takes time to get used to it. More intuitive, user-friendly interfaces and more helpful documentation would be beneficial. The query searching and data fetching could be faster. In large to very large organizations with around 5,000 or 6,000 assets or beyond, even with proper configurations and RAM and hardware backing up, the query is fairly slow.
reviewer2396166 - PeerSpot reviewer
VP International Business and Alliances at a tech services company with 51-200 employees
Customers have found quick incident response and proactive security management through effective threat detection
Secureworks Taegis Managed XDR MDR is a great product that has not posed any challenges from my perspective. I am extremely happy with the quick response from the Secureworks team. After the Sophos merger, I look forward to seeing a better and more enhanced version of the product. The team does a phenomenal job with automatic maintenance.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Improved our organization's TCO."
"I would rate IBM Security QRadar nine out of ten."
"The product provides a complete platform for ingesting the log, doing the correlations and handling the runtime."
"The detection rate is good and the false positive rate is low."
"I think the QDI is very good."
"The feature that I have found most valuable is its artificial intelligence component, Watson. Its contribution is pretty good from a machine-learning artificial intelligence perspective. This compliments the orchestration automation component, as well."
"Integration is very easy and the reporting is good."
"Provided that the report is prebuilt and I can find what I am looking for, the reporting is the most valuable feature in this solution."
"We don't have a full SOC, so it's helpful to have them sifting through our alerts and only bringing actionable items to us."
"The pricing is flexible."
"The most valuable feature is the fast alerting and response time."
"It provides more visibility and more control over endpoints. It reduces the noise. It clears things and only shows things that are really important. It only shows those things that need to be looked at or need to be investigated further. Other similar solutions give you a lot of alerts and other things, but Secureworks gives you a defined or less noisy view so that you can work or focus on things that are important in terms of investigation, response, and remediation."
"The most valuable features are IDS and IPS."
"The most valuable feature is the support. The support chat. It's always connecting to people. And you open the chat, and it's not about that automated response. It's actually a human being that responds to you."
"We can easily isolate affected machines in the network."
"The initial setup was very straight forward."
 

Cons

"It doesn't have a SOAR system by default. You need to purchase it additionally, which is the main problem with QRadar."
"Technical support is good, but not great."
"I would like for Yara to be supported by all components."
"I have noticed a few things while working on this. After the restart of the server, sometimes, the services misbehave, and you need to manually start or restart the service. I have seen that specifically with the Tomcat service. Sometimes, when you click on log sources, instead of opening the log source extension, it redirects you over the internet."
"I need a solution which will send alerts in the event of any behavior."
"The implementation and configuration are not easy."
"I'd like them to improve the offense. When QRadar detects something, it creates what it calls offenses. So, it has a rudimentary ticketing system inside of it. This is the same interface that was there when I started using it 12 years ago. It just has not been improved. They do allow integration with IBM Resilient, but IBM Resilient is grotesquely expensive. The most effective integration that IBM offers today is with IBM Resilient, which is an instant response platform. It is a very good platform, but it is very expensive. They really should do something with the offense handling because it is very difficult to scale, and it has limitations. The maximum number of offenses that it can carry is 16K. After 16K, you have to flush your offenses out. So, it is all or nothing. You lose all your offenses up until that point in time, and you don't have any history within the offense list of older events. If you're dealing with multiple customers, this becomes problematic. That's why you need to use another product to do the actual ticketing. If you wanted the ticket existence, you would normally interface with ServiceNow, SolarWinds, or some other product like that."
"There are a lot of things they are working on and a lot of technologies that are not yet there. They should probably work out a better reserve with their ecosystem of business partners and create wider and more in-depth qualities, third-party tools, and add-ons. These things really give immediate business value. For instance, there are many limitations in using SAP, EBS, or Micro-Dynamics. A lot of things that are happening in those platforms could also be monitored and allowed from the cybersecurity risks perspective. IBM might be leaving this gap or empty space for business partners. Some larger organizations might already be doing this. It would be very nice if IBM can make some artificial intelligence part free of charge for all current QRadar users. This would be a big advantage as compared to other competitors. There are companies that are going in different directions. Of course, you can't do everything inside QRadar. In general, it might be very good for all players to provide more use cases, especially regarding data protection and leakage prevention. There are some who are already doing some kind of file integrity or gathering some more information from all possible technologies for building anything related to the user and data analysis, content analysis, and management regarding the data protection."
"The integration with the Carbon Black sensor could be better. ManagedXDR doesn't seem to know how to extract the forensic data from an endpoint that was quarantined by Carbon Black."
"Dell Secureworks could improve its integration with other third-party solutions."
"Tamper-proofing or tamper protection is still pending in Secureworks. Tamper protection will make it more secure. If I'm an admin of a device, I can uninstall an agent without the knowledge of the security or Secureworks admin. If someone gets hold of one endpoint with admin credentials, he can remove anything, and an organization will lose visibility. They need to work on providing more visibility across endpoints. A couple of times it has happened that the cloak agent is there, but it did not get activated, or there were some issues. The machine was restarted, but the cloak agent didn't run. In such cases, you have to troubleshoot. It is a big issue if a cyber attack is happening, and your machine is rebooted, but the events are not captured."
"The integration would look better with other products, with other EDRs, with other firewalls, with other older versions of firewalls, and the versions of software and hardware."
"In the next release of this solution, I would like to see file integrity monitoring."
"Secureworks Taegis ManagedXDR's query language and stability need improvement."
"The deployment could definitely be improved."
"We did a PoC of their next-gen antivirus product, but it wasn't ready yet. It was underdeveloped and caused a lot of issues. We'd like to move away from Carbon Black, but they said that it's probably still not to a point where we'd be happy with it. Carbon Black and RedCloak seem to work fine for us."
 

Pricing and Cost Advice

"The solution has a licensing model that is based on events per second so it scales to need and budget."
"Most of the time, it is easier and cheaper to buy a new product or the QRadar box."
"The license is not subscription-based."
"When compared with other SIM solutions, QRadar is considerably less expensive."
"The licensing is also overly complex, as there is a need to buy the work load performance monitoring separately."
"I feel that the price is reasonable but compared to other products that are on the market, such as an offering by Microsoft, it is more expensive."
"The price of this product is high."
"The price of this solution is a little bit expensive, so if it were cheaper then it would help."
"Secureworks Taegis ManagedXDR is very expensive and could be more cost-effective."
"The pricing of Dell Secureworks is very reasonable."
"It is expensive but there is no better product than this."
"The pricing for this solution is reasonable. One agent costs approximately 270 dirhams/70 USD for one year. There is a reduction in cost per licence as the number of licences used increases."
"The Red Cloak agent is free."
"The price is kind of on par. The licensing was comparable to other solutions. It's not particularly high or low."
"Initially, the cost was going to be something around $160 or $170. And eventually, I think they brought it down to $110 and they also threw in some endpoint protection platforms."
report
Use our free recommendation engine to learn which Managed Detection and Response (MDR) solutions are best for your needs.
880,901 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Jun 28, 2015
Qradar vs. ArcSight
Continuing with the SIEM posts we have done at Infosecnirvana, this post is a Head to head comparison of the two Industry leading SIEM products in the market – HP ArcSight and IBM QRadar Both the products have consistently been in the Gartner Leaders Quadrant. Both HP and IBM took over niche SIEM…
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Financial Services Firm
11%
Manufacturing Company
7%
Government
6%
Computer Software Company
11%
Financial Services Firm
9%
Manufacturing Company
8%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business91
Midsize Enterprise39
Large Enterprise105
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise6
Large Enterprise4
 

Questions from the Community

What are the biggest differences between Securonix UEBA, Exabeam, and IBM QRadar?
It mostly depends on your use-cases and environment. Exabeam and Securonix have a stronger UEBA feature set, friendlier GUI and are not licensed based on capacity (amount of logs and information in...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is your experience regarding pricing and costs for IBM Security QRadar?
My experience with pricing, setup cost, and licensing is great compared to the other vendor.
What needs improvement with Secureworks Taegis ManagedXDR?
I would not say there is a potential area of improvement. I am also waiting to see what Sophos will bring in terms of enhancement. There is room for AI integration as the industry evolves, and more...
What is your primary use case for Secureworks Taegis ManagedXDR?
The solution is used for threat detection and response. We generally use it for quick responses during incidents and to secure our systems.
What advice do you have for others considering Secureworks Taegis ManagedXDR?
I would rate Secureworks Taegis Managed XDR MDR at ten out of ten. This solution provides excellent support and response.
 

Also Known As

IBM QRadar, QRadar SIEM, QRadar UBA, QRadar on Cloud, IBM QRadar Advisor with Watson
Secureworks Red Cloak Managed Detection and Response, Dell Secureworks, SecureWorks Taegis Managed TDR
 

Overview

 

Sample Customers

Clients across multiple industries, such as energy, financial, retail, healthcare, government, communications, and education use QRadar.
RICOH, Owens and Minor
Find out what your peers are saying about IBM Security QRadar vs. Secureworks Taegis Managed XDR / MDR and other solutions. Updated: January 2026.
880,901 professionals have used our research since 2012.