IBM QRadar is used to help our customers collect information. It collects the information from other tools on the firewall, network devices, cyber tools with both Carbon Black, Cortex, Cynet, and Darktrace.
SOC Manager at a computer software company with 51-200 employees
Feature - rich, well priced and has good support
Pros and Cons
- "The interface is good."
- "I would like to see the update process simplified."
What is our primary use case?
What is most valuable?
It's a complete platform.
The interface is good.
They have more than 100 features.
What needs improvement?
It is not easy to use.
The updates are not very easy. It is very complex. I would like to see the update process simplified.
When I said "it is not easy to use", I mean that QRadar is not for beginners.
Needs high competence and skyll to use it in a satisfactory way to really help customers.
The complexity is not a flaw, but it si a necessary quality for QRadar to be a truly effective tool in a Cyber environement.
For how long have I used the solution?
We have used IBM QRadar within the last twelve months.
Buyer's Guide
IBM Security QRadar
January 2026
Learn what your peers think about IBM Security QRadar. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
881,114 professionals have used our research since 2012.
What do I think about the stability of the solution?
IBM QRadar is a stable solution.
What do I think about the scalability of the solution?
It's a scalable platform.
How are customer service and support?
Technical support is good.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
What's my experience with pricing, setup cost, and licensing?
Pricing is good.
What other advice do I have?
I would rate IBM QRadar an eight out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. As a SOC we are real user of QRadar platform for more then one customers.
Certified AIX I.T Manager at a financial services firm with 10,001+ employees
Easy to use and useful for preparing use cases
What is our primary use case?
We primarily use QRadar for monitoring and preparing use cases.
This solution is deployed on-prem.
What is most valuable?
The most important and valuable feature of QRadar is how useful it is for preparing use cases. It's also easy to use.
What needs improvement?
The GUI of QRadar should be improved.
For how long have I used the solution?
I have been using IBM QRadar for one year.
What do I think about the stability of the solution?
QRadar is stable.
What do I think about the scalability of the solution?
This solution is scalable.
How are customer service and support?
I have contacted IBM's technical support—it was great. They are very knowledgeable.
How was the initial setup?
QRadar is very easy to install, and I can do it myself. The time period will depend on the organization itself, since it depends on the environment and the number of servers and endpoints.
What about the implementation team?
I implemented this solution myself.
What's my experience with pricing, setup cost, and licensing?
I pay for licensing yearly.
Which other solutions did I evaluate?
What other advice do I have?
I rate QRadar an eight out of ten. I would recommend QRadar, as well as LogRhythm, to others considering implementation.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
IBM Security QRadar
January 2026
Learn what your peers think about IBM Security QRadar. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
881,114 professionals have used our research since 2012.
Information Security Leader at a computer software company with 1,001-5,000 employees
Manage and review incidents easily
Pros and Cons
- "The features that I have found most valuable are that it is very stable, easy to get going, and easy to manage. It is also easy to review all incidents."
- "The only problem is that if you have too many events that occur, then the storage capacity becomes a problem. We would need to increase the storage capacity."
What is our primary use case?
We use IBM QRadar for user behavior analytics and incident handling.
What is most valuable?
The features that I have found most valuable are that it is very stable, easy to get going, and easy to manage. It is also easy to review all incidents.
What needs improvement?
The only problem is that if you have too many events that occur, then the storage capacity becomes a problem. We would need to increase the storage capacity.
For how long have I used the solution?
I have been using IBM QRadar for four years.
What do I think about the scalability of the solution?
We have three customers using it and these customers have 100 to 300 users.
How are customer service and support?
Getting support sometimes takes time.
How was the initial setup?
The initial setup was quite straightforward.
We had the complete deployment and it was up and running in half a day.
What about the implementation team?
You can implement it by yourself.
What other advice do I have?
I would recommend IBM QRadar to other people who want to start using it.
On a scale of one to ten, I would give QRadar a nine.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Assistant Engineer at a computer software company with 201-500 employees
Simple to manage, reliable, and straightforward installation
Pros and Cons
- "The solution is easy to use, manage, and review all incidents."
- "If you have too many events that occur, then the storage capacity becomes a problem. You need to have more storage."
What is our primary use case?
I use IBM QRadar for user behavior analytics, and mostly incident handling.
What is most valuable?
The solution is easy to use, manage, and review all incidents.
What needs improvement?
If you have too many events that occur, then the storage capacity becomes a problem. You need to have more storage.
For how long have I used the solution?
I have been using IBM QRadar for approximately four years.
What do I think about the stability of the solution?
The solution is very stable.
What do I think about the scalability of the solution?
We have approximately three customers and the total users that are using it would be approximately 200.
How was the initial setup?
The initial installation was straightforward, we were able to have it running in half a day.
What about the implementation team?
I do the implementation and maintenance of the solution.
What's my experience with pricing, setup cost, and licensing?
There are different types of subscriptions available. We were on an annual subscription, but our customers typically choose the two years subscription option.
What other advice do I have?
I would recommend this solution to others.
I rate IBM QRadar a nine out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Country Manager at a tech services company with 11-50 employees
Stable, scalable, and helpful support
Pros and Cons
- "I have found IBM QRadar to be stable."
- "IBM QRadar has a margin for development, for out-of-the-box use cases. It can be enhanced with better support and automate the use cases for that."
What is our primary use case?
The main tool for this operation center for collectings events from different devices, whatever server or network devices, such as switches and routers. It handles anything related to data that can be harmful related to security. Those events can be mapped to promote the threat, it creates another event for promoted threats.
We are a service provider and we provide services to our customers. We use IBM QRadar for many types of businesses, such as banks and telecom. It has a good reputation.
What needs improvement?
IBM QRadar has a margin for development, for out-of-the-box use cases. It can be enhanced with better support and automate the use cases for that.
For how long have I used the solution?
I have been using IBM QRadar for approximately two years.
What do I think about the stability of the solution?
I have found IBM QRadar to be stable.
What do I think about the scalability of the solution?
IBM QRadar is scalable.
How are customer service and support?
The technical support of IBM QRadar is good.
Which solution did I use previously and why did I switch?
IBM QRadar is the best SAN solution we have used compared to the others.
How was the initial setup?
We manage the installation of the solution. It is not something difficult, it is reasonable. It is not that easy for anyone to do, it needs a technical team.
What about the implementation team?
The implementation needs a technical team and we have two engineers for the implementation and maintenance.
What's my experience with pricing, setup cost, and licensing?
There is a license to use this solution, which is paid annually. However, there are subscription options available.
What other advice do I have?
I recommend this solution to others.
I rate IBM QRadar an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
CEO at a tech services company with 11-50 employees
Very powerful with plenty of features and capabilities
Pros and Cons
- "The product has plenty of features and capabilities."
- "The usability of interfaces could be improved."
What is our primary use case?
We use this solution both in our company and those of our clients. We are resellers of QRadar.
What is most valuable?
Curator is the leader of teams in the market. It's a product with plenty of features and capabilities. It's a very powerful solution.
What needs improvement?
The usability of interfaces could be improved and the solution could have better correlation services, as well as faster and updated intelligence interfaces.
For how long have I used the solution?
I've been using this solution for five years.
What do I think about the stability of the solution?
The solution is stable.
What do I think about the scalability of the solution?
The solution is scalable.
How are customer service and support?
Technical support has room for improvement.
How was the initial setup?
The initial setup is easy.
What's my experience with pricing, setup cost, and licensing?
Licensing costs are reasonable.
What other advice do I have?
I rate the solution nine out of 10.
Disclosure: My company has a business relationship with this vendor other than being a customer.
Solution Security Architect at a tech services company with 51-200 employees
Provides great analysis of event logs, event security; easily manageable with one monitor
Pros and Cons
- "It can analyze event logs, event security, and give a good consult."
- "Solution has too many menus that require going to two or three sub-monitors to enter the QRadar."
What is our primary use case?
This is a solution you use when you have many security products that you want to manage in one monitor, one analytic. We are partners with IBM and provide implementation services to our customers. I'm a solution security architect.
What is most valuable?
The most valuable feature is that it can analyze event logs, event security, and give a good consult. When you have SIEM, you can easily manage with one single monitor. QRadar can do a lot of analyses of every security product and will let us know what needs to be done to the log. Sometimes we need security orchestration automated response to support the SOC team.
What needs improvement?
The concern with QRadar is that there are so many features in the dashboard, too many menus that require going to two or three sub-monitors to enter the QRadar. The user interface is good but there are so many features that can be confusing for the administrator. It could be simplified.
For how long have I used the solution?
I've been using this solution for a year.
What do I think about the stability of the solution?
I think that QRadar is stable, but I've never worked with other solutions in this area and I have nothing to compare it to. It has dedicated machines and offers great performance.
What do I think about the scalability of the solution?
The scalability is easy but it comes at a high price.
How are customer service and support?
IBM in Indonesia provides great support.
How was the initial setup?
The initial setup is complex if the data set is large. It really depends on that. We provide maintenance services to our clients so that if they have any trouble, we assist with troubleshooting.
What's my experience with pricing, setup cost, and licensing?
SIEM is quite a pricey solution so we only offer it to enterprise companies that can pay the fees. For smaller companies, it's an extremely expensive product.
What other advice do I have?
I recommend this solution because I think they provide great support from the sales and technical perspective.
I rate the solution nine out of 10.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Assistant IT Manager at a insurance company with 1,001-5,000 employees
A SIEM solution that's easy to use, but the price could be better
Pros and Cons
- "I like that it's easy to use and the performance is good."
- "It would be better if it were more stable and more secure. The price for maintenance could be better. It's too high. In the next release, I think they should focus on the price and the operation."
What is our primary use case?
I use QRadar for cybersecurity defense, operation, and to improve performances.
What is most valuable?
I like that it's easy to use and the performance is good.
What needs improvement?
It would be better if it were more stable and more secure. The price for maintenance could be better. It's too high. In the next release, I think they should focus on the price and the operation.
For how long have I used the solution?
I have been using IBM QRadar for four years.
What do I think about the stability of the solution?
IBM QRadar is a stable solution, but it could be more stable.
What do I think about the scalability of the solution?
IBM QRadar is a scalable solution. We have about 100 users at the moment.
How are customer service and technical support?
I remember that I opened ten or 20 cases to receive support from IBM over three years.
How was the initial setup?
The initial setup and deployment are very easy. I think it took us about a month to implement this solution. We have a team of two, one manager and one technical, to deploy, manage, and maintain this solution.
What about the implementation team?
We installed this solution with the help of a consultant.
What's my experience with pricing, setup cost, and licensing?
The price could be better. I bought a subscription for three years.
What other advice do I have?
On a scale from one to ten, I would give IBM QRadar a seven.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Download our free IBM Security QRadar Report and get advice and tips from experienced pros
sharing their opinions.
Updated: January 2026
Product Categories
Security Information and Event Management (SIEM) Log Management User Entity Behavior Analytics (UEBA) Endpoint Detection and Response (EDR) Security Orchestration Automation and Response (SOAR) Managed Detection and Response (MDR) Extended Detection and Response (XDR)Popular Comparisons
CrowdStrike Falcon
Microsoft Defender for Endpoint
Dynatrace
Splunk Enterprise Security
Fortinet FortiEDR
Darktrace
Microsoft Sentinel
SentinelOne Singularity Complete
HP Wolf Security
Cortex XDR by Palo Alto Networks
Microsoft Defender XDR
Varonis Platform
Buyer's Guide
Download our free IBM Security QRadar Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Which would you recommend to your boss, IBM QRadar or Splunk?
- What SOC product do you recommend?
- Has anyone got experience in deployment of a SIEM solution?
- IBM QRadar is rated above competitors (McAfee, Splunk, LogRhythm) in Gartner's 2020 Magic Quandrant. Agree/Disagree?
- What is your opinion of IBM QRadar?
- What are the biggest differences between Securonix UEBA, Exabeam, and IBM QRadar?
- Why do most companies prefer IBM QRadar?
- What Solution for SIEM is Best To Be NIST 800-171 Compliant?
- When evaluating Security Information and Event Management (SIEM), what aspect do you think is the most important feature to look for?
- What are the main differences between Nessus and Arcsight?
















