Try our new research platform with insights from 80,000+ expert users

IBM Cloud Pak for Security vs IBM Security QRadar comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IBM Cloud Pak for Security
Average Rating
0.0
Number of Reviews
1
Ranking in other categories
Cloud and Data Center Security (21st)
IBM Security QRadar
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
216
Ranking in other categories
Log Management (7th), Security Information and Event Management (SIEM) (3rd), User Entity Behavior Analytics (UEBA) (1st), Endpoint Detection and Response (EDR) (17th), Security Orchestration Automation and Response (SOAR) (4th), Managed Detection and Response (MDR) (7th), Extended Detection and Response (XDR) (11th)
 

Mindshare comparison

IBM Cloud Pak for Security and IBM Security QRadar aren’t in the same category and serve different purposes. IBM Cloud Pak for Security is designed for Cloud and Data Center Security and holds a mindshare of 0.5%, up 0.1% compared to last year.
IBM Security QRadar, on the other hand, focuses on Security Information and Event Management (SIEM), holds 5.6% mindshare, down 9.0% since last year.
Cloud and Data Center Security Market Share Distribution
ProductMarket Share (%)
IBM Cloud Pak for Security0.5%
Illumio19.5%
Akamai Guardicore Segmentation18.8%
Other61.2%
Cloud and Data Center Security
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
IBM Security QRadar5.6%
Splunk Enterprise Security7.4%
Wazuh7.3%
Other79.7%
Security Information and Event Management (SIEM)
 

Featured Reviews

reviewer1907040 - PeerSpot reviewer
IBM Security Product Manager at a tech services company with 201-500 employees
Great user-friendly interface; provides many functionalities and many free applications
The interface is good and very user-friendly, it's easy for our customers to use. Cloud Pak provides a lot of functionalities and many free applications available from the online shop which can be deployed to your system. It allows for an increase in functionalities even if you've bought the smallest installation.
HarshBhardiya - PeerSpot reviewer
SOC Engineer at a outsourcing company with 10,001+ employees
Have managed daily asset and alert monitoring effectively but have encountered limitations with manual processes and interface usability
It's still very manual and doesn't work on its own. It's still in an early stage and not on par where we can consider it a really successful detection system. The accuracy is not there. The UI could be better when compared to Sentinels where we can use flags and tagging. It could be much more user-friendly. IBM Security QRadar has all features and is fully competitive with other SIEM tools, but when it comes to user-friendliness, a new user takes time to get used to it. More intuitive, user-friendly interfaces and more helpful documentation would be beneficial. The query searching and data fetching could be faster. In large to very large organizations with around 5,000 or 6,000 assets or beyond, even with proper configurations and RAM and hardware backing up, the query is fairly slow.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The interface is good and very user-friendly."
"Search capabilities are sufficient for most tasks."
"The most valuable thing about QRadar is that you have a single window into your network, SIEM, network flows, and risk management of your assets. If you use Splunk, for instance, then you still need a full packet capture solution, whereas the full packet capture solution is integrated within QRadar. Its application ecosystem makes it very powerful in terms of doing analysis."
"An engineer can live-monitor all the flow happening in real-time. This would help us a lot while investigating a case, and it would even help us with preventive actions."
"Due to the skills shortage, we are able to use it from the standpoint of bringing in a lower level employee or a person who may not have security knowledge."
"The features that I have found most valuable are that it is very stable, easy to get going, and easy to manage. It is also easy to review all incidents."
"The features that I have found most valuable in QRadar are its data enrichment, use case creations, and adding references - those kinds of features are very good. Also QRadar's event filtration and device integration are perfect."
"The solution is easy to use, manage, and review all incidents."
"We've found the technical support to be very good."
 

Cons

"Lacks sufficient technical support."
"I'd like them to improve the offense. When QRadar detects something, it creates what it calls offenses. So, it has a rudimentary ticketing system inside of it. This is the same interface that was there when I started using it 12 years ago. It just has not been improved. They do allow integration with IBM Resilient, but IBM Resilient is grotesquely expensive. The most effective integration that IBM offers today is with IBM Resilient, which is an instant response platform. It is a very good platform, but it is very expensive. They really should do something with the offense handling because it is very difficult to scale, and it has limitations. The maximum number of offenses that it can carry is 16K. After 16K, you have to flush your offenses out. So, it is all or nothing. You lose all your offenses up until that point in time, and you don't have any history within the offense list of older events. If you're dealing with multiple customers, this becomes problematic. That's why you need to use another product to do the actual ticketing. If you wanted the ticket existence, you would normally interface with ServiceNow, SolarWinds, or some other product like that."
"The advanced planning management (APM) features should be included."
"The technical support is poor. Mostly because when I open a PMR for IBM, I am stuck with Level 1 staff. As an engineer, nothing that I am bringing them does not require Level 2 or Level 3 support."
"I would like for Yara to be supported by all components."
"The quoting and the dashboard session could be improved. It should be more user-friendly."
"I would also like to see more integration with other vendors. IBM doesn't integrate well with products from China, like Huawei. Many Middle Eastern customers are switching to Huawei from American vendors like Cisco because of the price. In most RFPs, Huawei wins because it costs less."
"The price of IBM Security QRadar is an area of concern where improvements are required."
"IBM QRadar has a margin for development, for out-of-the-box use cases. It can be enhanced with better support and automate the use cases for that."
 

Pricing and Cost Advice

Information not available
"QRadar is quite expensive. It wouldn't be worth it for a small business..."
"We use QRadar as a managed service and we pay licensing fees to the partner."
"The tool's price is high."
"There is a license required for this solution. There are some limitations depending on what license you purchase."
"There are additional costs, such as the cost associated with the different hardware required for implementation and deployment. Along with the add-on apps, these are all additional costs, and they require licensing as well."
"As for licensing costs, I haven't seen the exact figures, but it is considered somewhat costly. On a scale from one to ten, where one is very expensive and ten is very cheap, I would rate it a six—it’s costly but worth the money."
"It is overly expensive and overly complex in terms of licensing. They have many different appliances, which makes it extremely difficult to choose the technology. It is very difficult to choose the technology or QRadar components that you should be deploying. They have improved some of it in the last few years. They have made it slightly easy with the fact that you can now buy virtual versions of all the appliances, which is good, but it is still very fragmented. For instance, on some of the smaller appliances, there is no upgrade path. So, if you exceed the capacity of the appliance, you have to buy a bigger appliance, which is not helpful because it is quite a major cost. If you want to add more disks to the system, they'll say that you can't."
"Pricing is good."
report
Use our free recommendation engine to learn which Cloud and Data Center Security solutions are best for your needs.
879,422 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Jun 28, 2015
Qradar vs. ArcSight
Continuing with the SIEM posts we have done at Infosecnirvana, this post is a Head to head comparison of the two Industry leading SIEM products in the market – HP ArcSight and IBM QRadar Both the products have consistently been in the Gartner Leaders Quadrant. Both HP and IBM took over niche SIEM…
 

Top Industries

By visitors reading reviews
No data available
Computer Software Company
14%
Financial Services Firm
10%
Manufacturing Company
7%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business89
Midsize Enterprise38
Large Enterprise105
 

Questions from the Community

Ask a question
Earn 20 points
What are the biggest differences between Securonix UEBA, Exabeam, and IBM QRadar?
It mostly depends on your use-cases and environment. Exabeam and Securonix have a stronger UEBA feature set, friendlier GUI and are not licensed based on capacity (amount of logs and information in...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is your experience regarding pricing and costs for IBM Security QRadar?
My experience with pricing, setup cost, and licensing is great compared to the other vendor.
 

Also Known As

No data available
IBM QRadar, QRadar SIEM, QRadar UBA, QRadar on Cloud, IBM QRadar Advisor with Watson
 

Overview

 

Sample Customers

Information Not Available
Clients across multiple industries, such as energy, financial, retail, healthcare, government, communications, and education use QRadar.
Find out what your peers are saying about Akamai, Broadcom, SentinelOne and others in Cloud and Data Center Security. Updated: December 2025.
879,422 professionals have used our research since 2012.