No more typing reviews! Try our Samantha, our new voice AI agent.

Cyware Cyber Fusion vs IBM Security QRadar comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Torq
Sponsored
Ranking in Security Orchestration Automation and Response (SOAR)
4th
Average Rating
8.6
Reviews Sentiment
6.4
Number of Reviews
8
Ranking in other categories
AI-SOC (2nd), AI-Powered Security Automation (2nd)
Cyware Cyber Fusion
Ranking in Security Orchestration Automation and Response (SOAR)
22nd
Average Rating
7.0
Reviews Sentiment
6.8
Number of Reviews
2
Ranking in other categories
Threat Intelligence Platforms (TIP) (29th)
IBM Security QRadar
Ranking in Security Orchestration Automation and Response (SOAR)
5th
Average Rating
8.0
Reviews Sentiment
6.6
Number of Reviews
217
Ranking in other categories
Log Management (6th), Security Information and Event Management (SIEM) (2nd), User Entity Behavior Analytics (UEBA) (2nd), Endpoint Detection and Response (EDR) (12th), Managed Detection and Response (MDR) (7th), Extended Detection and Response (XDR) (10th)
 

Mindshare comparison

As of May 2026, in the Security Orchestration Automation and Response (SOAR) category, the mindshare of Torq is 3.7%, down from 5.4% compared to the previous year. The mindshare of Cyware Cyber Fusion is 1.6%, up from 1.0% compared to the previous year. The mindshare of IBM Security QRadar is 5.9%, down from 7.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Orchestration Automation and Response (SOAR) Mindshare Distribution
ProductMindshare (%)
Torq3.7%
IBM Security QRadar5.9%
Cyware Cyber Fusion1.6%
Other88.8%
Security Orchestration Automation and Response (SOAR)
 

Featured Reviews

Nimrod Vardi - PeerSpot reviewer
Global IT Director at OpenWeb
Automation workflows have transformed our IT, enabling secure just-in-time access control
We work with them quite often, so we have a direct line regarding areas in Torq that have room for improvement. If we have a feature request, we can request it. I do not have anything in mind at the moment. We were a design partner for a short while, so we feel that they listen and that users of the system have an impact on the way the system is designed for the better. They have a new community, which is something that I personally suggested years ago. There are many people like me in different places and they might have already built the workflow that I need. Having the option to share workflows or to jump on a thread and say I have this need, did anyone ever build a workflow for it, is amazing. Someone would jump in and say yes, sure, here, take this workflow. I think this is an amazing thing and I really hope that the community will come alive because I think this is really powerful. This is something that I already suggested and it did happen eventually, and I am quite happy with it. I do not have any specific feature in mind that I have a need for at the moment.
AhmedKonsowa - PeerSpot reviewer
Senior Pre-Sales Engineer (Commercial Sector) at Cyber Knight
A stable solution with excellent features and a helpful technical support team
We use the solution for cyber fusion centers The product has a lot of strong points compared to other tools. The prices must be reduced. I have been using the solution for one year. I am using the latest version of the solution. I rate the tool’s stability a nine out of ten. In my company,…
HarshBhardiya - PeerSpot reviewer
SOC Engineer at a outsourcing company with 10,001+ employees
Have managed daily asset and alert monitoring effectively but have encountered limitations with manual processes and interface usability
It's still very manual and doesn't work on its own. It's still in an early stage and not on par where we can consider it a really successful detection system. The accuracy is not there. The UI could be better when compared to Sentinels where we can use flags and tagging. It could be much more user-friendly. IBM Security QRadar has all features and is fully competitive with other SIEM tools, but when it comes to user-friendliness, a new user takes time to get used to it. More intuitive, user-friendly interfaces and more helpful documentation would be beneficial. The query searching and data fetching could be faster. In large to very large organizations with around 5,000 or 6,000 assets or beyond, even with proper configurations and RAM and hardware backing up, the query is fairly slow.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Torq has helped a lot regarding SOC analyst efficiency."
"Torq's unified platform approach to AI, SOAR, automation, and case management is superior compared to my experience managing multiple point solutions."
"Any request that comes in, regardless of how complex it is, I can accomplish it with Torq."
"Using that one piece of AI, we auto-closed 511 cases in quarter four alone."
"What I appreciate most about Torq is that it is an essential part of our system."
"If I review about 100 vendors that I might work with, Torq is definitely in the top five that gave me personally investment back, just because every bit of effort I put into Torq eventually became a workflow that gave it back to me."
"Since we started working with Torq, I am handling much fewer alerts, it is becoming really easy for me to handle an alert, I have all the information that I need, I do not need to connect to different vendors to receive this information, and the main thing I got from Torq is time, which now helps me to build another automated system and learn."
"Once I started to use the system and I saw the potential, it changed all of our work in IT."
"The technical support team is helpful."
"The product is stable."
"In terms of the most valuable features, the log collections and log processing mechanisms are good. They have good dashboards."
"It's built around Red Hat Linux, which is highly robust."
"The pre-canned rules and reports in this product are a huge plus."
"I like the API and it's easy to use."
"From an analytics perspective, it's a good tool."
"This solution has allowed us to correlate logs from multiple sources."
"The most valuable features are all the implementations, the plug-ins, and the User Behavior Analytics (UBA)."
"The vulnerability management aspect is the most valuable feature."
 

Cons

"Even now, we have workflows that are in production that use AI steps and I get different results, making it unusable to some degree."
"We have MCP that we are working with our cloud security platform, and we wanted to connect this MCP to the case management."
"It was able to capture data but was unable to differentiate between the agent hostname we are using and the hostname that resides on the back end of the Internet."
"Regarding the pricing of Torq, I would say it is expensive."
"The initial deployment of Torq was not easy."
"Regarding stability, I have noticed some lagging, crashing, and downtime, which is one of my largest gripes."
"Additionally, the documentation for Torq is not very clear. Most of the information is presented in videos, which are not ideal for reading; there are mostly paragraphs and other text-based content."
"The initial deployment of Torq was not easy."
"The tool doesn't integrate well with ServiceNow."
"The prices must be reduced."
"Communication between the silos sometimes becomes an issue, making it an area where improvements are required."
"Customer support needs some improvement as there have been a few cases where we were unable to reach them in time."
"I think they could change their pricing model to be more cost effective."
"The solution is clunky."
"There is a shortage of skilled individuals with knowledge about the solution. There should be more training programs to teach and enable users get familiar."
"The implementation and configuration are not easy."
"It would be better if it were more stable and more secure. The price for maintenance could be better; it's too high."
"The QRadar implementation guide, especially in cluster environment, is complicated to deploy in an enterprise level."
 

Pricing and Cost Advice

Information not available
Information not available
"I would like for them to lower the price."
"The product is expensive. We have purchased the perpetual license, but we pay for the support."
"The license is not subscription-based."
"Customers have to purchase a license based on the number of users, devices, and applications they want to protect. It allows you to take a license on a subscription basis for three years or five years."
"There is a license required for this solution and it is an annual payment. I have found all solutions in the category to be expensive, including Splunk."
"We pay approximately $40,000 to use the solution annually. This solution is a lot less expensive than Splunk."
"It is a perpetual license that we have for the event collector. The licensing is done based on the number of events and flows that you receive on this particular device. These are perpetual licenses, which means once you purchase them, they don't expire, which means that the support to IBM is definitely renewed after every one year. We have an enterprise agreement with IBM, which puts the cost in a totally different category as compared to someone who is not an IBM partner and is approaching IBM for this solution. We were able to get massive discounts. To give you an idea, we recently purchased 30,000 event licenses, and it costs around $480,000. It is definitely not a cheap product. We have licenses for about 270,000 events per second and 3 million flows per second. All the appliances and their events and flows are basically clubbed together and charged or rather calculated through a single source. The console receives all the details from all the event processes that we have globally. So, the license that we have is a single license for 270,000 events per second and 3 million flows per second, but that can be managed centrally. I was only part of the secondary purchase, which was 30,000 events per second for about $480,000. You can calculate how much we paid for 270,000 events. Reducing its price would be a compromise. We have already used a lower-priced product in the form of NNT, but we had to get rid of it because it was not doing the job that we actually wanted to do. You get what you pay for."
"found other solutions, with more features at the same cost or less. You don’t have to leave the Gartner Magic Quadrant to beat their price."
report
Use our free recommendation engine to learn which Security Orchestration Automation and Response (SOAR) solutions are best for your needs.
893,244 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Jun 28, 2015
Qradar vs. ArcSight
Continuing with the SIEM posts we have done at Infosecnirvana, this post is a Head to head comparison of the two Industry leading SIEM products in the market – HP ArcSight and IBM QRadar Both the products have consistently been in the Gartner Leaders Quadrant. Both HP and IBM took over niche SIEM…
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Comms Service Provider
10%
Construction Company
10%
Manufacturing Company
9%
Comms Service Provider
23%
Healthcare Company
11%
Manufacturing Company
11%
Financial Services Firm
8%
Financial Services Firm
11%
Computer Software Company
10%
Manufacturing Company
7%
Construction Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business1
Midsize Enterprise3
Large Enterprise4
No data available
By reviewers
Company SizeCount
Small Business92
Midsize Enterprise39
Large Enterprise106
 

Questions from the Community

What needs improvement with Torq?
This is exactly what we discussed two days ago with the Torq team. We told them where we want to see improvements. Fo...
What is your primary use case for Torq?
I use Torq as my case management and alert system. Working as a SOC analyst, the first thing I do every morning is ge...
What advice do you have for others considering Torq?
I would definitely recommend Torq. I have no doubt, really. When we looked for another vendor, Torq really answered a...
Ask a question
Earn 20 points
What are the biggest differences between Securonix UEBA, Exabeam, and IBM QRadar?
It mostly depends on your use-cases and environment. Exabeam and Securonix have a stronger UEBA feature set, friendli...
What SOC product do you recommend?
For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is a...
What is your experience regarding pricing and costs for IBM Security QRadar?
Pricing and the license of EPS were managed by the governance team. I was not responsible for managing those. I was s...
 

Also Known As

No data available
CSOL, Fusion and Threat Response, Threat Intelligence eXchange, Security Orchestration and Automation (SOAR)
IBM QRadar, QRadar SIEM, QRadar UBA, QRadar on Cloud, IBM QRadar Advisor with Watson
 

Overview

 

Sample Customers

Information Not Available
Information Not Available
Clients across multiple industries, such as energy, financial, retail, healthcare, government, communications, and education use QRadar.
Find out what your peers are saying about Cyware Cyber Fusion vs. IBM Security QRadar and other solutions. Updated: April 2026.
893,244 professionals have used our research since 2012.