Listing Thumbnail

    IBM Security QRadar Suite Software: SIEM & SOAR

     Info
    The threat detection and response suite built to help your security teams outsmart threats with speed, accuracy and efficiency. IBM Security QRadar SIEM (Classic) and QRadar SOAR are customer deployed software.
    Listing Thumbnail

    IBM Security QRadar Suite Software: SIEM & SOAR

     Info

    Overview

    Threats are increasing in volume and sophistication at a staggering pace. Real-time monitoring and visibility are required to detect threats like ransomware, insider threats, and cloud attacks before they cause disruption.

    IBM Security® QRadar® Suite is a modernized threat detection and response solution designed to unify the security analyst experience and accelerate their speed across the full incident lifecycle. The portfolio is embedded with enterprise-grade AI and automation to dramatically increase analyst productivity, helping resource-strained security teams work more effectively across core technologies.

    IBM Security QRadar SIEM (Classic): Market-leading Security Information and Event Management (SIEM) solution enables you to run your business in the cloud and on premises with visibility and security analytics built to rapidly investigate and prioritize critical threats.

    IBM Security QRadar SOAR: Recent winner of a Red Dot Design Award for interface and user experience, QRadar SOAR helps organizations automate and orchestrate incident response workflows and ensure their specific processes are followed in a consistent, optimized and measurable way.

    For more information, visit https://www.ibm.com/qradar 

    For customized QRadar SIEM (Classic) / QRadar SOAR pricing or if you are interested in additional product capabilities such as Threat Intelligence, Data Explorer, or EDR - contact your IBM Sales Representative or email us at SecurityOrdersAWS@wwpdl.vnet.ibm.com .

    Highlights

    • Find the right size for your solution and estimate your IBM QRadar SIEM (Classic Software) price: https://www.ibm.com/qradar/security-qradar-siem/pricing?mpid=aws
    • Gain centralized visibility across AWS and hybrid cloud environments via a single pane of glass. Leverage deep integrations with AWS security services including AWS Security Hub, CloudTrail, GuardDuty, Network Firewall, WAF, Amazon Detective, CloudWatch, VPC Flow Logs and more.
    • Correlate data across users, networks, and AWS native services to gain deep insights into key threats including cloud misconfigurations, policy changes and suspicious user activity. Connect related events to ensure teams only receive a single alert for an incident.

    Details

    Delivery method

    Features and programs

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    IBM Security QRadar Suite Software: SIEM & SOAR

     Info
    Pricing is based on contract duration. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.

    12-month contract (2)

     Info
    Dimension
    Description
    Cost/12 months
    QRadar SIEM
    500 Events Per Second, 10000 Flows Per Minute
    $12,074.40
    QRadar SOAR
    2 Authorized Users
    $22,704.00

    Vendor refund policy

    All orders are non-cancellable and all fees and other amounts that you pay are non-refundable. If you have purchased a multi-year subscription, you agree to pay the annual fees due for each year of the multi-year subscription term.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    Software as a Service (SaaS)

    SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.

    Support

    Vendor support

    For Sales Inquiries Contact: SecurityOrdersAWS@wwpdl.vnet.ibm.com  To contact IBM Security QRadar Suite Software support:

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Product comparison

     Info
    Updated weekly

    Accolades

     Info
    Top
    50
    In Log Analysis
    Top
    10
    In Vulnerability and Patch Management, Data Governance

    Customer reviews

     Info
    AI generated sentiment from actual customer reviews on AWS and G2
    Positive reviews
    Mixed reviews
    Negative reviews

    Overview

     Info
    AI generated from product descriptions
    Centralized Visibility
    Gain centralized visibility across AWS and hybrid cloud environments via a single pane of glass. Leverage deep integrations with AWS security services including AWS Security Hub, CloudTrail, GuardDuty, Network Firewall, WAF, Amazon Detective, CloudWatch, VPC Flow Logs and more.
    Threat Correlation
    Correlate data across users, networks, and AWS native services to gain deep insights into key threats including cloud misconfigurations, policy changes and suspicious user activity. Connect related events to ensure teams only receive a single alert for an incident.
    Enterprise-grade AI
    Embedded with enterprise-grade AI and automation to dramatically increase analyst productivity, helping resource-strained security teams work more effectively across core technologies.
    Incident Response Automation
    Helps organizations automate and orchestrate incident response workflows and ensure their specific processes are followed in a consistent, optimized and measurable way.
    Market-leading SIEM
    Market-leading Security Information and Event Management (SIEM) solution enables you to run your business in the cloud and on premises with visibility and security analytics built to rapidly investigate and prioritize critical threats.
    Threat Intelligence Platform
    Provides a SaaS platform to research, analyze, and collaborate on threat intelligence through an intuitive web interface
    Threat Intelligence Integration
    Offers integrations to layer contextualized threat intelligence onto existing security infrastructure
    Real-time Threat Alerting
    Delivers real-time threat intelligence alerts and dashboard views of trending threats and relevant intelligence
    Machine Learning-powered Threat Detection
    Utilizes patented machine learning to identify 22% more threats before impact
    Accelerated Threat Investigation
    Enables security operations to investigate indicators 10 times faster and more effectively prioritize vulnerabilities
    Vulnerability Management
    Live vulnerability management and endpoint analytics to view real-time risk
    Incident Detection and Response
    Accelerates detection and response by increasing efficiency with embedded threat intelligence, expertly vetted detections, and automation for faster response
    Cloud Security and Compliance
    Reduces risks of operating in the major cloud service providers through continuous security and compliance
    Application Security
    Stays in step with your application development to easily introduce security throughout your SDLC
    Workflow Automation
    Unites your technology by automating workflows across IT and Security cloud apps, on-premise systems for users and administrators

    Contract

     Info
    Standard contract
    No
    No

    Customer reviews

    Ratings and reviews

     Info
    0 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    0%
    0%
    0%
    0%
    0%
    0 AWS reviews
    |
    29 external reviews
    External reviews are sourced from G2  and are not included in the star rating for this product.
    Retail

    Very expensive for what little it offers

    Reviewed on Jul 26, 2024
    Review provided by G2
    What do you like best about the product?
    Integration with QRADAR and some IBM tools
    What do you dislike about the product?
    We have some bugs due to lack of integrations with Trend Micro solutions. In my opinion, the U.B.A tool is still not 100% complete.
    What problems is the product solving and how is that benefiting you?
    Enrich events
    Information Technology and Services

    Great software for incident detection and response

    Reviewed on Jun 29, 2024
    Review provided by G2
    What do you like best about the product?
    The facility operation and the variety of informations
    What do you dislike about the product?
    Take some time to get learned how to use
    What problems is the product solving and how is that benefiting you?
    Enhanced Threat Detection and Response: Improved ability to detect and respond to threats quickly, reducing the potential impact of security incidents.
    Improved Compliance: Simplified compliance reporting and audit processes, ensuring adherence to regulatory requirements.
    Aparecido A.

    Soar Qradar Analysis

    Reviewed on Jun 28, 2024
    Review provided by G2
    What do you like best about the product?
    ease of use and easy interface and easy implementation
    What do you dislike about the product?
    "the layout seems a bit old compared to others"
    What problems is the product solving and how is that benefiting you?
    we are automating the alerts and taking less time in action, with this our incident response becomes faster and more accurate
    Prashanth K.

    IBM Security QRadar SOAR

    Reviewed on May 24, 2024
    Review provided by G2
    What do you like best about the product?
    Seamless integration with security and ticketing tools, makes routine work easy

    Very flexible customization options
    What do you dislike about the product?
    Sometimes, workflows end up in errors and have to restart the workflows

    Also experiences lagging/slowness sometimes
    What problems is the product solving and how is that benefiting you?
    QRadar SOAR is helping us deal with daily routine work of raising incidents based on SIEM tool alerts.

    With SOAR workflows, it has become very easy to gather required data and provide this data in very structured format to our clients via tickets, all automated to be simple workflows
    Vivek R.

    Platform is so Good

    Reviewed on May 23, 2024
    Review provided by G2
    What do you like best about the product?
    Secruity and Platform from IBM is important thing I like about QRadar SOAR
    What do you dislike about the product?
    sofar nothing, I have been using partially on the Platform
    What problems is the product solving and how is that benefiting you?
    Providing real-time insights that enhance the detection and remediation of threats.
    View all reviews