TrustRadius: an HG Insights company

IBM Security QRadar EDR vs. Palo Alto Networks Cortex XDR

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    IBM Security QRadar EDR

    Score7.4 out of 10
    N/AIBM Security QRadar EDR (formerly ReaQta) combines automation and dashboards to minimize analyst workloads, detect anomalous endpoint behavior and remediate threats in near real time. With visibility across endpoints, it combines expected features, like MITRE ATT&CK mapping and attack visualizations, with dual-engine AI and automation. For teams that need extended support, managed detection and response (MDR) services offers 24/7 monitoring and response to help keep users…N/A

    Palo Alto Networks Cortex XDR

    Score8.4 out of 10
    N/ACortex XDR (formerly Traps) replaces traditional antivirus with multi-method prevention, a proprietary combination of malware and exploit prevention methods that protect users and endpoints from known and unknown threats.N/A
    Pricing
    IBM Security QRadar EDRPalo Alto Networks Cortex XDR
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    IBM Security QRadar EDRPalo Alto Networks Cortex XDR
    Free Trial
    YesNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeOptionalNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    IBM Security QRadar EDRPalo Alto Networks Cortex XDR
    Considered Both Products
    IBM
    Chose IBM Security QRadar EDR
    The main feature over other tools if the AI and ML capabilities of EDR as it saves a lot of efforts and resources for proper identification and proper action can be taken in much effective way. The dashboard is also better, and automation activities are better as compared to …
    Incentivized
    Palo Alto Networks
    No answer on this topic
    Key User Insights
    Would buy again
    100%
    Would buy again
    9 Answers
    89%
    Would buy again
    8 Answers
    Delivers good value for the price
    83%
    Delivers good value for the price
    5 Answers
    88%
    Delivers good value for the price
    7 Answers
    Happy with the feature set
    100%
    Happy with the feature set
    9 Answers
    89%
    Happy with the feature set
    8 Answers
    Lived up to sales and marketing promises
    83%
    Lived up to sales and marketing promises
    5 Answers
    86%
    Lived up to sales and marketing promises
    6 Answers
    Implementation went as expected
    100%
    Implementation went as expected
    8 Answers
    88%
    Implementation went as expected
    7 Answers
    Features
    IBM Security QRadar EDRPalo Alto Networks Cortex XDR
    Endpoint Security
    Comparison of Endpoint Security features of IBM Security QRadar EDR and Palo Alto Networks Cortex XDR
    Feature
    IBM Security QRadar EDR
    7.9
    9 Ratings
    8% below category average
    Palo Alto Networks Cortex XDR
    -
    Ratings
    Anti-Exploit Technology8.08 Ratings00 Ratings
    Endpoint Detection and Response (EDR)8.39 Ratings00 Ratings
    Centralized Management7.99 Ratings00 Ratings
    Hybrid Deployment Support7.38 Ratings00 Ratings
    Infection Remediation7.99 Ratings00 Ratings
    Malware Detection7.99 Ratings00 Ratings
    Best Alternatives
    IBM Security QRadar EDRPalo Alto Networks Cortex XDR
    Small Businesses
    Acronis Cyber Protect Cloud
    Score9.1 out of 10
    Sophos Intercept X for Server
    Score7.3 out of 10
    Medium-sized Companies
    Watchguard Endpoint Security
    Score8.8 out of 10
    InsightIDR
    Score9.5 out of 10
    Enterprises
    ESET PROTECT
    Score9.1 out of 10
    Kaspersky EDR Optimum
    Score9.2 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    IBM Security QRadar EDRPalo Alto Networks Cortex XDR
    Likelihood to Recommend
    8.2
    (9 ratings)
    9.0
    (13 ratings)
    Usability
    -
    (0 ratings)
    7.0
    (2 ratings)
    Support Rating
    -
    (0 ratings)
    10.0
    (3 ratings)
    User Testimonials
    IBM Security QRadar EDRPalo Alto Networks Cortex XDR
    Likelihood to Recommend
    IBM
    IBM Security QRadaar EDR provides all the security features at one place with a reasonable price. Though for smaller organizations, the price may be quite high. Plus since it can detect threats and malwares in real time, every business should try them out.
    Incentivized
    Read full review
    Palo Alto Networks
    Malware that doesn’t leave files behind has become widely available. Anyone who can afford to reverse this trend should purchase technology. Application whitelisting isn’t for everyone, and Palo Alto Networks Traps can help. Enterprises looking for a low-affected, next-generation solution with high protection should consider it. PAN Traps is a great product at a reasonable price, and I highly recommend it.
    Incentivized
    Read full review
    Pros
    IBM
    • Detect known and unknown endpoint security threats
    • Remediate these threats near real time
    • Automation in threat detection
    • Threat attack attack visualization storyboards
    • Alert management authomation
    Incentivized
    Read full review
    Palo Alto Networks
    • Direct Access to devices via Live Terminal which provides operations with scripting, triage, and preservation of artifacts.
    • Behavioral Indicators of Compromise which provides alerts on events regarding groups of hosts and their signatures.
    • Querying complex data sets involving a variety of devices for network connections, hashes, DNS, etc.
    Incentivized
    Read full review
    Cons
    IBM
    • use AI to review previous false negatives that contributed wrongly in the AI suggestion on the follow alerts
    • easily run a script based on values from an hash, ips, path inside the boxes on the behavioral tree
    • apply the remediation to a range of endpoint instead to only the endpoint of the current alert
    • use ajax for example to update the alert page automatically while actions are happening
    • for api have profiles that allow only get actions, or just post on some actions
    • create users in bulk
    Incentivized
    Read full review
    Palo Alto Networks
    • Traps doesn't seem to function as a traditional A/V very well, so it's better as another layer to your endpoint protection
    • Traps can cause issues with some legacy or custom programs, so exceptions may have to be made
    • Traps falsely identifies things as malicious at times, this is not often though
    Incentivized
    Read full review
    Usability
    IBM
    No answers on this topic
    Palo Alto Networks
    Cortex XDR does a very good job of blocking suspicious and threatening items. However, as with all software of this nature, it will sometimes block known-good items. The difficulty is in manually whitelisting these known-good items. The interface to whitelist is confusing even for a seasoned IT professional and has been the single most frustrating experience of using Cortex XDR
    Incentivized
    Read full review
    Support Rating
    IBM
    No answers on this topic
    Palo Alto Networks
    The support we receive from Palo Alto is one of the best aspects of Traps. It is very easy to recommend their support. It seems much easier to connect directly with someone with a deep understanding of the product rather than other companies where you basically have to make an airtight case that it is some kind of non-standard issue that can't be solved with existing documentation. Palo Alto digs deep and helps with advanced troubleshooting to get things working.
    Incentivized
    Read full review
    Alternatives Considered
    IBM
    Bitdefender GravityZone combines multiple security services into a single platform to reduce the cost of building a trusted environment for endpoints. bit the IBM provides a vast support and always there to guide when in need With the majority of our users working in hybrid mode we needed a strong security control that could provide top-class protection with the minimum amount of False Positives (and, of course, of True Positives).
    Incentivized
    Read full review
    Palo Alto Networks
    Traps is the slickest interface, easy to use and intuitive rule making, and the rest just didn't quite stack up to the performance level of Traps. McAfee and Kaspersky just hog processor and RAM power. I didn't like the interface and functionality of SentinelOne as much as Traps. Palo Alto really put a lot of time into the development of this software, and had some of the founding fathers of IT Security heading the development process. Can't beat that.
    Incentivized
    Read full review
    Return on Investment
    IBM
    • NOCs and SOCs heavily use IBM Security QRadar EDR and IBM Security QRadar EDR reduced labor costs to identify endpoint security threats and the treat remediation
    • IBM Security QRadar EDR offers a consistent approach to endpoint threat identification and resolution, reduces enterprise security operations support costs
    • In general, IBM Security QRadar EDR enhances enterprise security posture
    Incentivized
    Read full review
    Palo Alto Networks
    • After putting Palo Alto Networks Cortex XDR on a user's system, users came back with a positive response that there are no performance issues now.
    • We are able to track and control granular suspicious and malicious activities.
    • Web controls are missing, which if they would have been there would have been very helpful.
    Incentivized
    Read full review
    ScreenShots

    IBM Security QRadar EDR Screenshots

    Screenshot of Behavioral tree: 
A behavioral tree provides full alert and attack visibility.Screenshot of Behavioral tree storyline: 
A visual storyline is automatically created as an attack unfolds, including mapping to MITRE ATT&CK, for full visibility.Screenshot of Cyber Assistant alerts: 
The Cyber Assistant, an AI-powered alert management system, can autonomously handle alerts, reducing analysts’ workloads.Screenshot of Cyber Assistant recommends:
The Cyber Assistant learns from analyst decisions, then retains the intellectual capital and learned behaviors to make recommendations and help reduce false positives.Screenshot of Custom detection strategies: 
Detection Strategy (DeStra) scripting allows users to build custom detection strategies — beyond preconfigured models — to address compliance or company-specific requirements without the need to reboot the endpoint.

    Palo Alto Networks Cortex XDR Screenshots

    Screenshot of a Cortex XDR overviewScreenshot of a view of the Cortex XDR dashboardScreenshot of a view of the Cortex XDR dashboardScreenshot of a view of the Cortex XDR dashboard