IBM Reviews, Ratings & Features 2026 | Gartner Peer Insights

Security information and event management (SIEM) is a configurable system of record that collects, aggregates and analyzes security event data from on-premises and cloud environments. SIEM processes security event data for the purposes of threat detection, investigation and response. It natively supports data normalization and offers user-configurable detection content and reporting to orchestrate threat mitigation and satisfy compliance requirements. These solutions are delivered via a SaaS platform or client-hosted on-premises or private cloud. The security information and event management (SIEM) system must assist with: 1. Aggregating and normalizing data from various IT and operational technology (OT) environments. 2. Designing and executing near real-time monitoring and alerting content. 3. Enriching and investigating security events of interest. 4. Supporting manual and automated response actions. 5. Maintaining and reporting on current and historical event data.

Active

Find the top Security Information and Event Management Software with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Security Information and Event Management

IBM Security QRadar SIEM

It Security & Risk Management Associate

IBM Security Qradar remains a cornerstone in the SIEM landscape, engineered for organizations that require centralized monitoring, high-fidelity threat detection, and structured incident response. It is a powerhouse for enterprise environments, though its true value is typically unlocked only through specialized expertise and methodical tuning.
QRadar primary strength lies in its real time corelation engine. By ingesting massive volumes of telemetry from across the infrastructure, it excels at connecting disparate dots that might otherwise go unnoticed. The platform's ability to weave together SIEM logs, flow data, and threat intelligence into a unified "Offense" model allows SOC analysts to focus on high priority threats rather than chasing individual alerts.
The platform provides an expansive view of the network, endpoint and application layers. One of its most practical features is the "Offense management system". which automatically groups related security events. This drastically reduces alert fatigue and streamlines the investigation process. While building basic detection rules is accessible, the system truly shines in crafting complex use cases tailored to specific business risks.

50M - 250M USD

<50M USD

500M - 1B USD

1B - 3B USD

3B - 10B USD

250M - 500M USD

10B - 30B USD

30B + USD

Gov't/PS/ED <5,000 Employees

Gov't/PS/ED 5,000 - 50,000 Employees

Gov't/PS/ED 50,000 + Employees

Cyber Security Analyst

The overall experience was positive, QRadar helps with log collection/correlation and investigation, making it a reliable solution for security monitoring. If offers good visibility across many log sources, including endpoints, network devices, firewalls and servers, which helps better on investigating the events.

IBM Qradar has exceptional capabilities when it comes to SIEM solutions. I personally have been using IBM Qradar right from the time I joined my organization. It is easy to navigate, is extremely user friendly and the interface provided is a ready to use interface even for beginners kick starting their careers in SOC and cybersecurity.

Although its user friendly nature and ease of navigation is commendable, its response time and log retrieving is something where it lags a lot. Slow processing of selected filters and I/O error while loading of the selected search filters, is some of the things which really take a lot of time while investigating or monitoring of offenses and security events

Cisco Systems (Splunk)

LogRhythm

McAfee

Fortinet

SolarWinds

Elastic

OpenText (Micro Focus)

AT&T Cybersecurity

Microsoft

Other...

FireEye

Rapid7

Graylog

Securonix

Exabeam

Wazuh

ManageEngine

CrowdStrike

LogSentinel

Guardsix

Google

Hewlett Packard Enterprise (HPE)

SentinelOne

Palo Alto Networks

Trellix

Tripwire

Sumo Logic

Xcitium

IBM is a well-established entity focused on technology and development. The primary mission revolves around fostering technological growth and enhancing infrastructure, achieved through focused developments and consulting services. By encouraging inventiveness and innovation, it is geared towards facilitating the transition of theoretical ideas into practical realities, thus improving global functionalities. IBM brings about transformation by creating advanced solutions that reshape and redefine the world.

At IBM, we do more than work. We create. We create as technologists, developers, and engineers. We create with our partners. We create with our competitors. If you're searching for ways to make the world work better through technology and infrastructure, software and consulting, then we want to work with you.

We're here to help every creator turn their "what if" into what is. Let's create something that will change everything.

Reviews

Ratings Overview

Overall experience with

Favorable Review

Slow Response Times and Cloud Limitations Affect IBM Qradar Investigation Workflow

Critical Review

QRadar Enhances Security Monitoring With Centralized Visibility and Log Correlation

Likes and dislikes about

likes

dislikes