Try our new research platform with insights from 80,000+ expert users

IBM Security QRadar vs SentinelOne Singularity MDR comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 28, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IBM Security QRadar
Ranking in Managed Detection and Response (MDR)
8th
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
211
Ranking in other categories
Log Management (7th), Security Information and Event Management (SIEM) (4th), User Entity Behavior Analytics (UEBA) (1st), Endpoint Detection and Response (EDR) (18th), Security Orchestration Automation and Response (SOAR) (4th), Extended Detection and Response (XDR) (11th)
SentinelOne Singularity MDR
Ranking in Managed Detection and Response (MDR)
23rd
Average Rating
8.0
Reviews Sentiment
7.7
Number of Reviews
2
Ranking in other categories
No ranking in other categories
 

Featured Reviews

Mahmoud Younes - PeerSpot reviewer
Reliable installation and diverse use cases provide strong value
IBM Security QRadar has some areas for improvement. We have missed some DSM components. We need to customize logs where there is no DSM or connector for certain products. We can integrate but we have missed the DSM, which is the connector to pass logs coming from different applications. For example, with a university customer, we tried onboarding Canvas service. IBM Security QRadar does not support Canvas, so we had to create custom scripts and workarounds to pull logs from Canvas.
Prathamesh Samant - PeerSpot reviewer
Effective integration and threat hunting capabilities boost operational ease, but interface improvements are needed
I would like to improve the dashboard in SentinelOne Singularity MDR, as it could be much better, along with the reporting structure. The granularity of policies and ease of policy management from the console could be made better, while my experience from a feature standpoint has been good overall. Regarding summary reports provided from SentinelOne Singularity MDR, I find the reporting structure could be much better in terms of granularity. Additionally, for C-suite executives, there can be more non-technical content that provides a bird's eye view of organizational risk posture, rather than just detailed technical analyses. This high-level perspective on the organization's risk would be highly beneficial at the management level.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"IBM QRadar has improved my organization by introducing many functions. It collects logs from all of our systems in the organization and has functioned very well. It alerts and correlates the aggregate events or offenses we receive through all the applications we use."
"The most valuable feature is the searching capability and real-time operational use."
"Most valuable features include the granularity of information."
"It comes with many rules disabled. You can tune them and modify them according to your enterprise needs and avoid false positives."
"The most valuable feature is user behavior analytics (UBA)."
"The initial setup of QRadar is not complex because we have done it before and we are used to the development. It is getting easier all the time."
"We've found the technical support to be very good."
"The best part of this solution is having a third-party SOC."
"The main benefits that clients receive from SentinelOne Singularity MDR, from an operational perspective, include ease of deployment, where the installation process across various operating systems and different hardware configurations goes smoothly with minimal impact on end users."
"The impact of the threat hunting capabilities on detecting known and emerging threats in real-time is notable, and with the AI, it helps for real-time threat hunting."
 

Cons

"The technical support is poor. Mostly because when I open a PMR for IBM, I am stuck with Level 1 staff. As an engineer, nothing that I am bringing them does not require Level 2 or Level 3 support."
"The tech support is not that good."
"The solution is highly used here in Pakistan and in many sectors, they could improve it by having more SIEM connectors."
"The Indian tech support is not helpful."
"The technical support can be improved a little bit, and the price could be cheaper."
"I would like the rule creation interface to be much more user-friendly in the next release."
"IBM is going through some problems with its resources currently making its support response time slow."
"Each module requires a separate license and a separate cost."
"I would like to improve the dashboard in SentinelOne Singularity MDR, as it could be much better, along with the reporting structure."
"The integration with Microsoft 365 for SentinelOne Singularity MDR isn't quite as effective as with Field Effect."
 

Pricing and Cost Advice

"There is a license required for this solution."
"The pricing needs to be such that they are more competitive with other vendors."
"This price is a little high, so it's an expensive product."
"Licensing can be costly depending on your architecture."
"It's too expensive. The licensing is also a little bit difficult to understand because you have to license it per event and per number of flows."
"QRadar UBA's price is a little more than street price and could be reduced."
"It's free of charge."
"It is a perpetual license that we have for the event collector. The licensing is done based on the number of events and flows that you receive on this particular device. These are perpetual licenses, which means once you purchase them, they don't expire, which means that the support to IBM is definitely renewed after every one year. We have an enterprise agreement with IBM, which puts the cost in a totally different category as compared to someone who is not an IBM partner and is approaching IBM for this solution. We were able to get massive discounts. To give you an idea, we recently purchased 30,000 event licenses, and it costs around $480,000. It is definitely not a cheap product. We have licenses for about 270,000 events per second and 3 million flows per second. All the appliances and their events and flows are basically clubbed together and charged or rather calculated through a single source. The console receives all the details from all the event processes that we have globally. So, the license that we have is a single license for 270,000 events per second and 3 million flows per second, but that can be managed centrally. I was only part of the secondary purchase, which was 30,000 events per second for about $480,000. You can calculate how much we paid for 270,000 events. Reducing its price would be a compromise. We have already used a lower-priced product in the form of NNT, but we had to get rid of it because it was not doing the job that we actually wanted to do. You get what you pay for."
Information not available
report
Use our free recommendation engine to learn which Managed Detection and Response (MDR) solutions are best for your needs.
869,566 professionals have used our research since 2012.
 

Comparison Review

VS
Jun 28, 2015
Qradar vs. ArcSight
Continuing with the SIEM posts we have done at Infosecnirvana, this post is a Head to head comparison of the two Industry leading SIEM products in the market – HP ArcSight and IBM QRadar Both the products have consistently been in the Gartner Leaders Quadrant. Both HP and IBM took over niche SIEM…
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
11%
Government
7%
Manufacturing Company
7%
Computer Software Company
15%
Performing Arts
8%
Comms Service Provider
8%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business89
Midsize Enterprise36
Large Enterprise102
No data available
 

Questions from the Community

What are the biggest differences between Securonix UEBA, Exabeam, and IBM QRadar?
It mostly depends on your use-cases and environment. Exabeam and Securonix have a stronger UEBA feature set, friendlier GUI and are not licensed based on capacity (amount of logs and information in...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...
What is your experience regarding pricing and costs for IBM Security QRadar?
When comparing with Splunk, IBM Security QRadar's cost is reasonable. Splunk is more expensive than IBM Security QRadar.
What needs improvement with SentinelOne Singularity MDR?
I would like to improve the dashboard in SentinelOne Singularity MDR, as it could be much better, along with the reporting structure. The granularity of policies and ease of policy management from ...
What is your primary use case for SentinelOne Singularity MDR?
We have been using SentinelOne Singularity MDR for threat hunting and correlation, particularly when we identify if some kind of IOCs has been detected or if processes are found malicious. We then ...
What advice do you have for others considering SentinelOne Singularity MDR?
We currently work with multiple vendors since I work for a cybersecurity solution company, and in the EDR space, we are engaged with CrowdStrike and SentinelOne Singularity MDR. We work with Sentin...
 

Also Known As

IBM QRadar, QRadar SIEM, QRadar UBA, QRadar on Cloud, IBM QRadar Advisor with Watson
No data available
 

Overview

 

Sample Customers

Clients across multiple industries, such as energy, financial, retail, healthcare, government, communications, and education use QRadar.
Information Not Available
Find out what your peers are saying about IBM Security QRadar vs. SentinelOne Singularity MDR and other solutions. Updated: September 2025.
869,566 professionals have used our research since 2012.