TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Cisco Secure Endpoint

    Score9.3 out of 10
    N/ACisco Secure Endpoint is a comprehensive, cloud-managed endpoint security solution designed to protect devices from advanced malware and cyber threats throughout the entire attack lifecycle—before, during, and after an attack. It offers powerful prevention capabilities to identify and stop threats before they compromise your systems, using multifaceted techniques including risk-based vulnerability management and posture assessments. The solution provides deep visibility and advanced detection…N/A

    IBM Security QRadar EDR

    Score7.4 out of 10
    N/AIBM Security QRadar EDR (formerly ReaQta) combines automation and dashboards to minimize analyst workloads, detect anomalous endpoint behavior and remediate threats in near real time. With visibility across endpoints, it combines expected features, like MITRE ATT&CK mapping and attack visualizations, with dual-engine AI and automation. For teams that need extended support, managed detection and response (MDR) services offers 24/7 monitoring and response to help keep users…N/A
    Pricing
    Cisco Secure EndpointIBM Security QRadar EDR
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    Cisco Secure EndpointIBM Security QRadar EDR
    Free Trial
    NoYes
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeOptional
    Additional Details——
    More Pricing Information
    Community Pulse
    Cisco Secure EndpointIBM Security QRadar EDR
    Considered Both Products
    Cisco
    Chose Cisco Secure Endpoint
    Because of the Cisco ecosystem
    Incentivized
    IBM
    No answer on this topic
    Key User Insights
    Would buy again
    90%
    Would buy again
    19 Answers
    100%
    Would buy again
    9 Answers
    Delivers good value for the price
    100%
    Delivers good value for the price
    20 Answers
    83%
    Delivers good value for the price
    5 Answers
    Happy with the feature set
    95%
    Happy with the feature set
    20 Answers
    100%
    Happy with the feature set
    9 Answers
    Lived up to sales and marketing promises
    100%
    Lived up to sales and marketing promises
    16 Answers
    83%
    Lived up to sales and marketing promises
    5 Answers
    Implementation went as expected
    100%
    Implementation went as expected
    17 Answers
    100%
    Implementation went as expected
    8 Answers
    Features
    Cisco Secure EndpointIBM Security QRadar EDR
    Endpoint Security
    Comparison of Endpoint Security features of Cisco Secure Endpoint and IBM Security QRadar EDR
    Feature
    Cisco Secure Endpoint
    7.3
    28 Ratings
    16% below category average
    IBM Security QRadar EDR
    7.9
    9 Ratings
    8% below category average
    Anti-Exploit Technology6.927 Ratings8.08 Ratings
    Endpoint Detection and Response (EDR)8.528 Ratings8.39 Ratings
    Centralized Management5.028 Ratings7.99 Ratings
    Hybrid Deployment Support8.55 Ratings7.38 Ratings
    Infection Remediation7.328 Ratings7.99 Ratings
    Vulnerability Management6.727 Ratings00 Ratings
    Malware Detection8.528 Ratings7.99 Ratings
    Best Alternatives
    Cisco Secure EndpointIBM Security QRadar EDR
    Small Businesses
    Acronis Cyber Protect Cloud
    Score9.1 out of 10
    Acronis Cyber Protect Cloud
    Score9.1 out of 10
    Medium-sized Companies
    Watchguard Endpoint Security
    Score8.8 out of 10
    Watchguard Endpoint Security
    Score8.8 out of 10
    Enterprises
    ESET PROTECT
    Score9.1 out of 10
    ESET PROTECT
    Score9.1 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Cisco Secure EndpointIBM Security QRadar EDR
    Likelihood to Recommend
    8.5
    (31 ratings)
    8.2
    (9 ratings)
    Likelihood to Renew
    4.5
    (1 ratings)
    -
    (0 ratings)
    Usability
    7.3
    (26 ratings)
    -
    (0 ratings)
    Availability
    7.3
    (1 ratings)
    -
    (0 ratings)
    Support Rating
    7.6
    (28 ratings)
    -
    (0 ratings)
    Implementation Rating
    4.5
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    Cisco Secure EndpointIBM Security QRadar EDR
    Likelihood to Recommend
    Cisco
    Cisco Secure Endpoint is well suited for keeping track of the many different and points that we have in our organization. All of these devices can easily be monitored with Cisco Secure Endpoint. It can monitor our servers and our desktops and laptops in our environment. It isn’t as appropriate for our student devices. However, those aren’t as critical since they are just Chromebooks.
    Incentivized
    Read full review
    IBM
    IBM Security QRadaar EDR provides all the security features at one place with a reasonable price. Though for smaller organizations, the price may be quite high. Plus since it can detect threats and malwares in real time, every business should try them out.
    Incentivized
    Read full review
    Pros
    Cisco
    • Once we, I guess one turned out that path because we have a small IT team, one of the big factors that came into play is how easy it was to deploy and the kind of security it provides for your endpoint devices. For us, it's got all those AI capabilities that really help. So traditionally when there was an incident on Alert on an antivirus program, you'd have a couple of guys run across the office to try to pull a plug. One of the awesome features with Secure Endpoint is its isolation mode that clamps down endpoint devices and then just isolate it. It's connected to, I think Cisco's tell us the threat intel environment. So they've got up-to-date metrics and fixes on threats out in the wild. And once they detect that, they apply it across your whole brand. So yeah, really effective for us.
    • One of the things that really stands out is the retrospective detections. So say something's detected two weeks later of a product that you had on your system. Initially it scanned it past, but then they discover vulnerability. The product has the ability to come back and retrospectively apply restrictions on specific applications you have on your environment. So I think that's one key winner.
    Incentivized
    Read full review
    IBM
    • Detect known and unknown endpoint security threats
    • Remediate these threats near real time
    • Automation in threat detection
    • Threat attack attack visualization storyboards
    • Alert management authomation
    Incentivized
    Read full review
    Cons
    Cisco
    • The interface has many views that all look the same, except that functionalities are different. This makes it incredibly difficult to find the action you want to take.
    • Built-in exclusion sets are missing a number of notable Anti-Malware products and must be manually implemented.
    • High learning curve due to complexity of the solution and the range of features it contains. Provided documentation is hidden in a small icon at the top of the page which is often off-screen when needed.
    • Color choices lead to panic situations during deployment. 1 questionable file could lead to the main display showing a large, bright red alert which makes customers think their whole environment is compromised.
    Incentivized
    Read full review
    IBM
    • use AI to review previous false negatives that contributed wrongly in the AI suggestion on the follow alerts
    • easily run a script based on values from an hash, ips, path inside the boxes on the behavioral tree
    • apply the remediation to a range of endpoint instead to only the endpoint of the current alert
    • use ajax for example to update the alert page automatically while actions are happening
    • for api have profiles that allow only get actions, or just post on some actions
    • create users in bulk
    Incentivized
    Read full review
    Likelihood to Renew
    Cisco
    the renewal must be studied with different factors
    Incentivized
    Read full review
    IBM
    No answers on this topic
    Usability
    Cisco
    AMP is very difficult to use compared to other products we've seen. It's hard to understand why there are so many different logins for the various products that supposedly integrate with AMP. We had weekly phone calls for months to implement the product yet none of the IT department really enjoys using this product or feels comfortable with the accuracy of detections. The number of false positives is high.
    Incentivized
    Read full review
    IBM
    No answers on this topic
    Reliability and Availability
    Cisco
    no complain and no issue with availability
    Incentivized
    Read full review
    IBM
    No answers on this topic
    Support Rating
    Cisco
    In terms of technical support for Cisco Secure Endpoint, the support has been pretty good. All the cases I submitted were solved in a reasonable time frame, and it was a good experience. However, I find that not as many vendors have the expertise I would expect.
    Incentivized
    Read full review
    IBM
    No answers on this topic
    Implementation Rating
    Cisco
    no participation in implementation
    Incentivized
    Read full review
    IBM
    No answers on this topic
    Alternatives Considered
    Cisco
    Cisco Secure Endpoint is an advanced EDR solution that is highly effective and scalable. Our experience previously with MalwareBytes and Microsoft Defender was not horrible, but these products were not as effective and did not integrate well with our other security products to allow us to monitor and react quickly to address threats that were within our network. Key to any security effort is mitigation and the ability to quickly identify and respond so any damage can be avoided or limited.
    Incentivized
    Read full review
    IBM
    Bitdefender GravityZone combines multiple security services into a single platform to reduce the cost of building a trusted environment for endpoints. bit the IBM provides a vast support and always there to guide when in need With the majority of our users working in hybrid mode we needed a strong security control that could provide top-class protection with the minimum amount of False Positives (and, of course, of True Positives).
    Incentivized
    Read full review
    Return on Investment
    Cisco
    • It ensures minimal spread of cyber threats in case of infiltration thanks to containment response capabilities.
    • By keeping our endpoints threat-proof, our systems and devices run efficiently hence better productivity.
    • It frees IT staff thanks to its automation and ability to keep threats away with minimal intervention.
    Incentivized
    Read full review
    IBM
    • NOCs and SOCs heavily use IBM Security QRadar EDR and IBM Security QRadar EDR reduced labor costs to identify endpoint security threats and the treat remediation
    • IBM Security QRadar EDR offers a consistent approach to endpoint threat identification and resolution, reduces enterprise security operations support costs
    • In general, IBM Security QRadar EDR enhances enterprise security posture
    Incentivized
    Read full review
    ScreenShots

    IBM Security QRadar EDR Screenshots

    Screenshot of Behavioral tree: 
A behavioral tree provides full alert and attack visibility.Screenshot of Behavioral tree storyline: 
A visual storyline is automatically created as an attack unfolds, including mapping to MITRE ATT&CK, for full visibility.Screenshot of Cyber Assistant alerts: 
The Cyber Assistant, an AI-powered alert management system, can autonomously handle alerts, reducing analysts’ workloads.Screenshot of Cyber Assistant recommends:
The Cyber Assistant learns from analyst decisions, then retains the intellectual capital and learned behaviors to make recommendations and help reduce false positives.Screenshot of Custom detection strategies: 
Detection Strategy (DeStra) scripting allows users to build custom detection strategies — beyond preconfigured models — to address compliance or company-specific requirements without the need to reboot the endpoint.