We performed a comparison between IBM Security QRadar and LMNTRIX Active Defense based on real PeerSpot user reviews.
Find out in this report how the two Managed Detection and Response (MDR) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The most valuable part of Binary Defense is its team of cybersecurity analysts. Their analysts filter out the noise and only forward the critical threats that require a response instead of false positives."
"The case interface is Binary Defense MDR's most valuable feature."
"One of the main benefits of Binary Defense MDR is the ability to easily meet with their support team to discuss any issues we encounter."
"Binary Defense's most valuable feature is the 24/7 monitoring and threat hunting. Their team checks the latest breaches and how they're done."
"With Binary Defense, we don't just get an alert, but also a detailed rundown of why they're alerting us on it. They tell us what was executed, or the username, script, or IP. That way, we're not wasting time investigating."
"The most valuable features are the SIEM and the ticketing function; the latter is very smooth and easy to read and understand. We don't have any issues looking at the ticketing information when we're trying to identify what's going on."
"Among the valuable features are the agent, continuous reporting, and dashboard. It has all the features we need and we haven't had to customize it, other than turning on certain features that we wanted."
"The most valuable feature is reviewing tickets and the notes added by technicians."
"Senses, tracks, and links significant incidents and threats."
"The product provides a complete platform for ingesting the log, doing the correlations and handling the runtime."
"The most valuable feature is the searching capability and real-time operational use."
"IBM Qradar's ability to simplify the number of events, not only on a technical level but by making that information easy to pan through the orchestration deduplication. It is very impressive given that we have hundreds of devices that send event logs through."
"It also has a graph that shows the traffic history. I can see what happened yesterday or today. If there's an incident, I can check the traffic behavior on QRadar."
"The QNI feature is the one I am very interested in, and I have also been interested in Watson. From the log analysis and the security perspective, we are able to dive deep into any of the logs and anomalies."
"It has a good integration with the artificial intelligence engine of Watson."
"This solution has allowed us to correlate logs from multiple sources."
"LMNTRIX gives us fantastic information about the security of our environment. It tells us about possible threats and how to fix any issues."
"We have a dedicated technical representative that is very responsive."
"LMNTRIX first validates incidents before alerting us of the activity, so we're not inundated with false positives."
"Automatic alerts from staying current with the threat landscape have helped us stay safe."
"The fact that it's constantly hunting, looking for anomalies, and can evict without any intervention is really incredible."
"It's hard to think of anything that they need to improve on, but just to point out something, I would like to see them provide advanced XDR."
"Binary Defense MDR could be even better with additional features, like automatic scans and file quarantine."
"It's sometimes difficult to know when to engage Binary Defense or TrustedSec, their sister company. TrustedSec is more focused on offensive security, as opposed to the defensive security that the MDR solution provides. It would be awesome if there were a better bridge between that relationship for when we need to get more proactive services or when we need to do a penetration test."
"We found a couple of bugs in the user interface."
"If I were shopping for an MDR solution today, I would not only look for a company that has the ability to alert, detect, and remediate, but also the ability to integrate vulnerability management. That's a big thing that they're lacking today."
"The only area I see for improvement with Binary Defense is their service portal. It could benefit from some enhancements."
"The current reporting system could benefit from improvement."
"We found that an earlier version of the agent had high memory usage and that was a bit concerning, but we raised the concern with their support team and they immediately replied that they had noticed the same thing and had a candidate fix already available... it totally fixed the issue."
"Right now, if you look at the compatibility, if you need to deploy QRadar in a physical appliance you have only two choices of server, their own or a Lenovo server. In today's world, you cannot keep something tied to such a big brand. Clients want to be able to use whatever type of server they want."
"There are areas in IBM Security QRadar that could benefit from improvement. Its ability to customize knowledge for specific purposes could be enhanced. Also, it lacks clarity in presenting details. It is also difficult to see the reports."
"The user interface is a bit clunky, a bit hard to find what you need."
"Some of the cloud apps need improvement."
"While the interface is easy to use, it could be a little more responsive."
"IBM QRadar User Behavior Analytics is good, but I think the functionality should be much more integrated. You should have easy access to the artifacts if you are doing a particular investigation. It's good, but other team solutions like LogRhythm are actually merging the functionality. So, I think that is something IBM can work on."
"Technical support is good, but not great."
"I would like to see a more user-friendly product."
"The only multifactor authentication that is available is Google Authenticator. I would love to see other multifactor applications added to this list as well as physical devices such as Yubikey."
"The next release might include a monthly newsletter."
"The dashboard can seem overwhelming at times. It's fairly simple for the end user, and we don't need to do much to make it work, but the dashboard makes it seem a little more complicated than it actually is. There could also be more guidance on how to set up playbooks."
"In the beginning, we were having issues with the LMNTRIX respond agent not playing nice with Cisco AMP."
"The portal is still a bit buggy, although it's new and still being refined."
IBM Security QRadar is ranked 10th in Managed Detection and Response (MDR) with 198 reviews while LMNTRIX Active Defense is ranked 20th in Managed Detection and Response (MDR) with 5 reviews. IBM Security QRadar is rated 8.0, while LMNTRIX Active Defense is rated 9.8. The top reviewer of IBM Security QRadar writes "A highly stable and scalable solution that provides good technical support". On the other hand, the top reviewer of LMNTRIX Active Defense writes "It gives us fantastic information about the security of our environment". IBM Security QRadar is most compared with Microsoft Sentinel, Splunk Enterprise Security, Wazuh, LogRhythm SIEM and Elastic Security, whereas LMNTRIX Active Defense is most compared with CrowdStrike Falcon Complete and SentinelOne Vigilance. See our IBM Security QRadar vs. LMNTRIX Active Defense report.
See our list of best Managed Detection and Response (MDR) vendors.
We monitor all Managed Detection and Response (MDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.