IBM Security QRadar vs Stackify comparison

Read 6 Stackify reviews

212 Views
147 Comparison Views

71% willing to recommend

IBM Security QRadar

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 5, 2025

IBM Security QRadar competes in enterprise-level security, while Stackify focuses on application performance monitoring. IBM Security QRadar has an edge in security features, whereas Stackify excels in developer-friendly tools.

Features:IBM Security QRadar offers robust threat detection, log management, and comprehensive network activity monitoring. Its user behavior analytics and integration with AWS enhance its security offerings. Stackify provides powerful application performance optimization tools, detailed error tracking, and flexible cloud-based metrics, making it attractive for development environments.

Room for Improvement:IBM Security QRadar could improve its UI design and make deployment easier due to the current complexity in architecture. Enhanced integration features with more third-party platforms could boost its adaptability. Stackify could benefit from offering deeper network-level monitoring and expanded integration capabilities with enterprise-level security tools. Improving the alerting functionality for more real-time updates could enhance its responsiveness.

Ease of Deployment and Customer Service:IBM Security QRadar requires significant time and resources for deployment due to its complex architecture, but it offers extensive support channels. Stackify, with its cloud-based model, provides a simpler deployment process, ensuring minimal setup times and a responsive customer service team that is easily accessible.

Pricing and ROI:IBM Security QRadar involves higher setup costs, justified by its extensive security infrastructure, leading to significant ROI in enterprise applications. Stackify has relatively lower setup costs with a model aligned with application-centric businesses, suggesting a favorable ROI for firms focused on application performance and budget consciousness.

To learn more, read our detailed IBM Security QRadar vs. Stackify Report (Updated: March 2025).

IBM Security QRadar vs. Stackify

Download the complete report

Helped 845,406 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

IBM Security QRadar

Ranking in Log Management

6th

Average Rating

8.0

Reviews Sentiment

6.8

Number of Reviews

207

Ranking in other categories

Security Information and Event Management (SIEM) (4th), User Entity Behavior Analytics (UEBA) (1st), Endpoint Detection and Response (EDR) (17th), Security Orchestration Automation and Response (SOAR) (4th), Managed Detection and Response (MDR) (9th), Extended Detection and Response (XDR) (11th)

Stackify

Ranking in Log Management

63rd

Average Rating

7.8

Number of Reviews

Ranking in other categories

Application Performance Monitoring (APM) and Observability (62nd), IT Infrastructure Monitoring (57th)

Mindshare comparison

As of April 2025, in the Log Management category, the mindshare of IBM Security QRadar is 3.8%, down from 5.2% compared to the previous year. The mindshare of Stackify is 0.1%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management

Featured Reviews

Md. Shahriar Hussain

Information Security Analyst at Banglalink

Real-time incident detection and user-friendly dashboard benefit daily operations

There are many types of AI, and this AI is very limited in SQL and features. There may be potential for improvement. So far, it seems very limited. It shows some good features in the correlation part, but I think there is room for improvement. For instance, when creating rules, it can suggest more rules, reducing the effort needed. If AI-related support can suggest rules and integrate with existing security devices like MD, IPS, this SIM can create more relevant rules. Sometimes logs I receive don't mean anything, and I need technical stakeholders to share or forward logs, but these are sometimes inadequate. Keywords can help identify insufficient logs. I often lack time to verify logs. Sharing false positive results could be reduced to help my team.

Read full review

Moses Arigbede

Head of DevOps at Partsimony

Easy to set up with great custom dashboards but needs to improve non-.NET infrastructure

They need to improve non-.NET infrastructure. We always had difficulty when it comes to reporting or metrics that come from Linux operating systems and Docker containers. For anything that runs within the Unix environment, we always had problems with them, however, if it was a document-based application, Stackify was 100%, it gave everything. Now, the aggregation agent, the metric agent for Stackify for Linux, collects everything. When I say everything, I mean, everything. It collects so much information that we now started to term it as useless data as all that ingestion will just come in and overwhelm your log retention limit for the month and really this spike up your cost at the end of the month. You'll need to do a lot in order to train down the data coming in from all your Linux environments, to get to what you really need, which actually takes some time as well. I would like to be able to see metrics about individual running containers on the host machines. Stackify has not really gotten that right, as far as I'm concerned. Netdata has done a better job and New Relic has also done a better job. They need to improve on that. We need to be able to see the individual resource usage of containers running within a particular host.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It's quite scalable. We have upgraded some solutions from 1000 APS up to 3500 APS to 5000 APS. It's a good solution, they have no scalability issues."

"It has a lot of good correlation rules. From a customer's point of view, it is one of the best solutions because you don't need to create correlation rules from scratch. You just review them and customize them as you want."

"The tool helps with infrastructure, application, and network monitoring."

"It has a good integration with the artificial intelligence engine of Watson."

"The most valuable feature currently is security behaviors and the pdf files."

"QRadar, Splunk, and ArcSight are SIEM solutions with built-in AI/ML features. They can do the complete investigation and alert the admin about what is happening. They can also do the root cause analysis. There are many other features that come with QRadar. It has a more granular log, so you can integrate with various non-IT as well as IT-based components. You can get unstructured data to the SIEM data, and you can identify more what is happening in the network or what is happening in the central head office. You can also identify what is happening between your remote offices. You can also use it to identify what the users in the field are doing on their devices and how things are moving. From the integration point of view, it is very centric. It gives complete control centrally. If a user is not connected to the system, whenever he comes online, we can see the policy updates over the Internet, and we can ensure that the data that is supposed to be protected is protected."

"It's built around Red Hat Linux, which is highly robust."

"Provided that the report is prebuilt and I can find what I am looking for, the reporting is the most valuable feature in this solution."

More IBM Security QRadar pros

"The solution is stable and reliable."

"The filter feature on Stackify is one of the features I found valuable. It's awesome. When I want to get the application logs, the solution gives me many filters. For example, if I want to get logs from my test environment, the option is there for me to select the environment from Stackify, and you can also select the particular application, and you'll see the information you need there. The filter feature alone and the fact that Stackify offers a lot of different filters is what I like the most about the solution because I've used other tools with the filter feature, but the filtering was very difficult, versus Stackify that has good filtering. On Stackify, you can filter the information by the last one hour, or the last four hours, and you can also select the date range and specify the timestamp, then the solution will give you the information based on the date range you specified. Another feature I found valuable on Stackify is its rating feature because it tells you how your application is faring. For example, a rating of A means excellent, while a rating of F means very bad, or that your application is not doing well at all. The ratings are from A to F. I also like that Stackify helps you in terms of load management because the solution gives you information on overutilized resources. These are the most valuable features of the solution."

"The deployment is very fast."

"The performance dashboard and the accurate level of details are beneficial."

Cons

"Whenever we are upgrading or installing any type of patch, at that time we have some delays."

"The whole process for support is something that needs to be improved."

"The AI engine could be smarter."

"The solution does not support the integration of flat file databases."

"The solution should enhance its capabilities of UEBA and AI/ML tech modeling."

"It doesn't have a SOAR system by default. You need to purchase it additionally, which is the main problem with QRadar."

"QRadar's performance has room for improvement because it cannot handle the volume. I need massive amounts of logs from various devices in our existing network architecture. IBM needs to improve QRadar's capacity to handle more logs."

"The quality of technical support depends on the IBM support person. Sometimes, it's hard to get the right person on the other side. A ticket coordinator could be the key to better quality delivery."

More IBM Security QRadar cons

"The search feature could be improved."

"It should be easily scalable and configurable in different instances."

"I've not used Stackify for a while, and I'm currently using a solution now that's not as good as Stackify. Among the solutions I've been using so far, Stackify has been one of the best for me, but there's always room for improvement. For example, I don't know if it's just me, but when I try to get the log from Stackify, sometimes it doesn't appear in real-time. It takes a few minutes before the logs appear. When I redeploy my solution and the application starts, I don't see the logs immediately, and it would take two to three minutes before I see the logs. I don't know if other customers have a similar experience. It's the wait time for the logs to appear that's a concern for me, could be improved, and is what the Stackify team should be looking into. In terms of any additional feature that I'd like added to the solution, I'm not sure if Stackify has a way to export logs out. I've been trying to do it. On the solution, you can click on a spiral-like icon and it shows you the entire error, and I'd prefer an export button that would let me download the error and save that into a text file, for example, so it'll be available on my local machine for me to reference it, especially because the log keeps going and as you're using the solution, the system keeps pushing messages on to Stackify, so if I'm looking at a particular error at 12:05 PM, for example, by the time I go back to my system and would like to revisit the error at 12:25 PM, on Stackify, the logs would have gone past that level and I won't see it again which makes it difficult. When you now go back to that timestamp, you don't tend to see it immediately, but if the solution had an export feature for me to save that particular error information on my local machine for reference at a later time, I won't have to go back to Stackify. I just go to that log, specifically to that particular export that I've received on my local machine. I can get it and review it, and it would be easier that way versus me going back to Stackify to find that particular error and request that particular information."

"I would like to be able to see metrics about individual running containers on the host machines."

Pricing and Cost Advice

"A good approach would be to begin with an On Cloud subscription, then later on do a more exact sizing."

"I feel that the price is reasonable but compared to other products that are on the market, such as an offering by Microsoft, it is more expensive."

"QRadar UBA's price is a little more than street price and could be reduced."

"The license is not subscription-based."

"It would be great if this product were cheaper."

"The maintenance costs are high."

"The price of this solution is reasonable."

"IBM QRadar User Behavior Analytics is an application framework and you can install many applications without any additional costs."

More IBM Security QRadar pricing and cost advice

"The price is variable. It depends on how much data we have received in that particular month. Usually, it goes up to $2,000, or, at times, $3,000 USD per month."

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

845,406 professionals have used our research since 2012.

Comparison Review

Vinod Shankar

Manager, Enterprise Risk Consulting at Deloitte & Touche

Jun 28, 2015

Qradar vs. ArcSight

Continuing with the SIEM posts we have done at Infosecnirvana, this post is a Head to head comparison of the two Industry leading SIEM products in the market – HP ArcSight and IBM QRadar Both the products have consistently been in the Gartner Leaders Quadrant. Both HP and IBM took over niche SIEM…

Read full review

Top Industries

By visitors reading reviews

Educational Organization

23%

Computer Software Company

14%

Financial Services Firm

10%

Government

Financial Services Firm

22%

Computer Software Company

14%

Manufacturing Company

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What are the biggest differences between Securonix UEBA, Exabeam, and IBM QRadar?

It mostly depends on your use-cases and environment. Exabeam and Securonix have a stronger UEBA feature set, friendlier GUI and are not licensed based on capacity (amount of logs and information in...

See all answers

What SOC product do you recommend?

For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...

See all answers

What is your experience regarding pricing and costs for IBM Security QRadar?

The cost depends. The price I negotiated varies by region and relationship with the OEM. Cost is not shared due to another procurement team handling negotiations, but it was reasonable as far as I ...

See all answers

Ask a question

Earn 20 points

Comparisons

Splunk Enterprise Security vs IBM Security QRadar

Compared 15% of the time

Microsoft Sentinel vs IBM Security QRadar

Compared 11% of the time

Sentinel vs IBM Security QRadar

Compared 7% of the time

Wazuh vs IBM Security QRadar

Compared 7% of the time

Cortex XSIAM vs IBM Security QRadar

Compared 6% of the time

More IBM Security QRadar Competitors

Dynatrace vs Stackify

Compared 44% of the time

New Relic vs Stackify

Compared 40% of the time

Splunk Enterprise Security vs Stackify

Compared 16% of the time

More Stackify Competitors

Product Reports

IBM Security QRadar

Download IBM Security QRadar product report

Download Stackify product report

Also Known As

IBM QRadar, QRadar SIEM, QRadar UBA, QRadar on Cloud, IBM QRadar Advisor with Watson

No data available

Overview

IBM Security QRadar (recently acquired by Palo Alto Networks) is a security and analytics platform designed to defend against threats and scale security operations. This is done through integrated visibility, investigation, detection, and response. QRadar empowers security groups with actionable insights into high-priority threats by providing visibility into enterprise security data. Through centralized visibility, security teams and analysts can determine their security stance, which areas pose a potential threat, and which areas are critical. This will help streamline workflows by eliminating the need to pivot between tools.

IBM Security QRadar is built to address a wide range of security issues and can be easily scaled with minimal customization effort required. As data is ingested, QRadar administers automated, real-time security intelligence to swiftly and precisely discover and prioritize threats. The platform will issue alerts with actionable, rich context into developing threats. Security teams and analysts can then rapidly respond to minimize the attackers' strike. The solution will provide a complete view of activity in both cloud-based and on-premise environments as a large amount of data is ingested throughout the enterprise. Additionally, QRadar’s anomaly detection intelligence enables security teams to identify any user behavior changes that could be indicators of potential threats.

IBM QRadar Log Manager

To better help organizations protect themselves against potential security threats, attacks, and breaches, IBM QRadar Log Manager gathers, analyzes, preserves, and reports on security log events using QRadar Sense Analytics. All operating systems and applications, servers, devices, and applications are converted into searchable and actionable intelligent data. QRadar Log Manager then helps organizations meet compliance reporting and monitoring requirements, which can be further upgraded to QRadar SIEM for a more superior level of threat protection.

Some of QRadar Log Manager’s key features include:

Data processing and capture on any security event
Disaster recovery options and high availability
Scalability for large enterprises
SoftLayer cloud installation capability
Advanced threat protection

Reviews from Real Users

IBM Security QRadar is a solution of choice among users because it provides a complete solution for security teams by integrating network analysis, log management, user behavior analytics, threat intelligence, and AI-powered investigations into a single solution. Users particularly like having a single window into their network and its ability to be used for larger enterprises.

Simon T., a cyber security services operations manager at an aerospace/defense firm, notes, "The most valuable thing about QRadar is that you have a single window into your network, SIEM, network flows, and risk management of your assets. If you use Splunk, for instance, then you still need a full packet capture solution, whereas the full packet capture solution is integrated within QRadar. Its application ecosystem makes it very powerful in terms of doing analysis."

A management executive at a security firm says, "What we like about QRadar and the models that IBM has, is it can go from a small-to-medium enterprise to a larger organization, and it gives you the same value."

IBM

Stackify is an application performance management (APM) solution that combines application performance monitoring with logs, errors, and reporting. It is a SaaS solution that is developer-focused. Users can quickly scan, identify, and repair issues with applications. Stackify APM offers valuable tools, such as Prefix and Retrace, which help to make it a comprehensive and valuable APM solution. Stackify is now part of the Netreo family of IT Infrastructure Management (ITIM), which is considered one of the fastest-growing IT organizations in the marketplace today.

Stackify Prefix

Stackify Prefix helps developers write better code, faster. The tool examines, tests, and approves code as it is being written. Almost every new application is code-perfect, negating the need for exhausting troubleshooting and frustrating time-consuming code review.

Prefix is able to discover poor-performing SQL queries, ORM queries, potential bottlenecks, and concealed exceptions prior to moving the application into production.

Prefix offers Summary Dashboards, intuitive suggestions, integrated logs, and distributed tracing. Distributed tracing expands visibility to cloud-native applications, microservices, and containers and can also provide additional transparency to cache services, web services, third-party services, and more. Users are able to easily move from logs to traces and back.

This valuable tool ensures developers are able to consistently release the best code possible in the least amount of time, while improving performance, productivity, and profitability.

Prefix is a very robust and easy-to-use tool. It can be used seamlessly with Linux, macOS, and Windows. Prefix integrates well with numerous languages, such as Java, Python, Ruby, PHP, Node.js, .Net, and .Net Core.

Stackify Retrace

Stackify Retrace is a user-friendly, trusted APM solution used in more than fifty countries worldwide. Users know that Retrace is able to ensure they can complete quicker, more efficient application development and consistently enhance overall application performance by suggesting important intuitive suggestions users need.

This solution is beneficial to both developers (Dev) and operations (Ops) personnel to learn to improve code and immediately finetune issues by:

Establishing effortless collaboration between Dev and Ops personnel via an easy-to-use GUI dashboard.
Delivering complete transparency of all stages of the application development process, from pre-development to production.
Utilizing performance protocols, such as error tracking, application logs, and code profiling, in real time in order to thoroughly understand how long a code will take to complete various tasks.
Improving overall efficiency and productivity by immediately discovering and repairing application issues.

Retrace Real User Monitoring (RUM) uses both front-end and back-end monitoring to give users a complete picture of what is going on with the applications. This intuitive dashboard displays performance with a complete breakdown of resource usage and integrates the server-side and client traces into one engaging, user-friendly, extensive view.

Retrace is an out-of-the-box solution that works seamlessly with Java stacks, PHP, Node.js, Ruby, Python, .Net, and .Net Core. It is also compatible with many of today’s popular frameworks, such as AWS, Azure, Elasticsearch, MongoDB, MySQL, Oracle, PostgreSQL, Redis, and SQL Server. Additionally, Retrace will work effectively with many cloud providers, containers, and languages, and offers excellent and easy integration with today's favorite tools such as Jira, Slack, Jenkins, and more.

Sample Customers

Clients across multiple industries, such as energy, financial, retail, healthcare, government, communications, and education use QRadar.

MyRacePass, ClearSale, Newitts, Carbonite, Boston Software, Children's International, Starkwood Media Group, Fewzion

IBM Security QRadar vs. Stackify