TrustRadius: an HG Insights company

IBM Security QRadar SIEM vs. Microsoft Sentinel

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    IBM Security QRadar SIEM

    Score9 out of 10
    N/AIBM Security QRadar is security information and event management (SIEM) Software.N/A

    Microsoft Sentinel

    Score8.6 out of 10
    N/AMicrosoft Sentinel (formerly Azure Sentinel) is designed as a birds-eye view across the enterprise. It is presented as a security information and event management (SIEM) solution for proactive threat detection, investigation, and response.

    $2.46

    per GB ingested

    Pricing
    IBM Security QRadar SIEMMicrosoft Sentinel
    Editions & Modules
    No answers on this topic
    Azure Sentinel
    $2.46
    per GB ingested
    100 GB per day
    $123.00
    per day
    200 GB per day
    $221.40
    per day
    300 GB per day
    $319.80
    per day
    400 GB per day
    $410.00
    per day
    500 GB per day
    $492.00
    per day
    More than 500 GB per day
    $492.00 + $98.40
    per day/plus each additional 100 GB increment
    Offerings
    Pricing Offerings
    IBM Security QRadar SIEMMicrosoft Sentinel
    Free Trial
    YesYes
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details
    More Pricing Information
    Community Pulse
    IBM Security QRadar SIEMMicrosoft Sentinel
    Considered Both Products
    IBM
    Chose IBM Security QRadar SIEM
    The QRadar licensing process is based on EPS (Events Per Second) and there are no limitations on event collection, regardless of the origin of the logs. This becomes an advantage as the price is agreed between the parties before purchase, so you have knowledge of what you can …
    Incentivized
    Chose IBM Security QRadar SIEM
    I found that IBM Security QRadar SIEM has better threat detection methods and the identification of cyber kill chains followed by attackers. Analysis of the data gives visibility that other SIEM solutions need to improve. Integration in IBM Security QRadar SIEM is also better …
    Incentivized
    Chose IBM Security QRadar SIEM
    price, to be honest IBM Security QRadar SIEM package is very good for most customers than Splunk and Sentinel
    Incentivized
    Chose IBM Security QRadar SIEM
    It's in the middle of this chart, Splunk from my point of view it's still the best SIEM actually and Sentinel it's very easy to use.
    Incentivized
    Chose IBM Security QRadar SIEM
    Much less manual work and easier integration.
    Incentivized
    Chose IBM Security QRadar SIEM
    More User-friendly in creating use cases. Managing offenses. Identifying issues more easily. Everything is accessible in fingertip.
    Incentivized
    Chose IBM Security QRadar SIEM
    IBM is more user-friendly if we compare it with ELK stack and ArcSight. Much reliable, and have better Support. Onboarding data, creating correlation searches, and easier to integrate with 3rd party solutions as well. LogOps projects and less time-consuming products. Qradar …
    Incentivized
    Microsoft
    Chose Microsoft Sentinel
    Sentinel AI makes it a better choice. Also, its flexibility and customization make it a bit more costly than other competitors.
    Incentivized
    Chose Microsoft Sentinel
    The key advantage of using Sentinel lies in Microsoft already being a renowned name in cloud services. Hence, the Collection of data at the cloud scale across all users, devices, applications, and infrastructure, both on-premises and especially in the MS Cloud, is super easy. …
    Incentivized
    Chose Microsoft Sentinel
    Microsoft Sentinel really goes the extra mile when it comes to an SIEM that slowly improves toward a proper SOAR, this may be the best selling point of the entire solution. Highly scalable, cloud-based, and nearly perfect when dealing with Microsoft-based infrastructures, …
    Incentivized
    Chose Microsoft Sentinel
    Microsoft Sentinel feels on another different level from these solutions , all in the cloud . No need for troubleshooting , deployment or upgrades. Constant updates from the vendor and good support
    Incentivized
    Key User Insights
    Would buy again
    92%
    Would buy again
    67 Answers
    98%
    Would buy again
    46 Answers
    Delivers good value for the price
    97%
    Delivers good value for the price
    61 Answers
    90%
    Delivers good value for the price
    38 Answers
    Happy with the feature set
    96%
    Happy with the feature set
    70 Answers
    98%
    Happy with the feature set
    46 Answers
    Lived up to sales and marketing promises
    86%
    Lived up to sales and marketing promises
    38 Answers
    92%
    Lived up to sales and marketing promises
    35 Answers
    Implementation went as expected
    94%
    Implementation went as expected
    59 Answers
    98%
    Implementation went as expected
    43 Answers
    Features
    IBM Security QRadar SIEMMicrosoft Sentinel
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of IBM Security QRadar SIEM and Microsoft Sentinel
    Feature
    IBM Security QRadar SIEM
    8.5
    69 Ratings
    9% above category average
    Microsoft Sentinel
    7.3
    24 Ratings
    6% below category average
    Centralized event and log data collection9.927 Ratings8.224 Ratings
    Correlation8.669 Ratings7.124 Ratings
    Event and log normalization/management9.527 Ratings6.924 Ratings
    Deployment flexibility7.827 Ratings7.422 Ratings
    Integration with Identity and Access Management Tools8.965 Ratings6.422 Ratings
    Custom dashboards and workspaces7.569 Ratings7.524 Ratings
    Host and network-based intrusion detection9.725 Ratings5.020 Ratings
    Data integration/API management9.07 Ratings6.522 Ratings
    Behavioral analytics and baselining7.648 Ratings6.820 Ratings
    Rules-based and algorithmic detection thresholds8.049 Ratings7.922 Ratings
    Response orchestration and automation7.75 Ratings7.221 Ratings
    Reporting and compliance management7.947 Ratings9.04 Ratings
    Incident indexing/searching8.97 Ratings8.622 Ratings
    User Ratings
    IBM Security QRadar SIEMMicrosoft Sentinel
    Likelihood to Recommend
    8.4
    (89 ratings)
    8.6
    (43 ratings)
    Likelihood to Renew
    7.3
    (4 ratings)
    8.2
    (1 ratings)
    Usability
    9.1
    (1 ratings)
    7.3
    (4 ratings)
    Support Rating
    8.1
    (62 ratings)
    8.0
    (3 ratings)
    Ease of integration
    8.1
    (58 ratings)
    -
    (0 ratings)
    Professional Services
    -
    (0 ratings)
    5.0
    (1 ratings)
    User Testimonials
    IBM Security QRadar SIEMMicrosoft Sentinel
    Likelihood to Recommend
    IBM
    No answers on this topic
    Microsoft
    No answers on this topic
    Pros
    IBM
    • Enables identification and prioritization of vulnerabilities in IT infrastructure for corrective action.
    • Facilitates security incident investigation and forensic analysis.
    • Provides a real-time view of security events, enabling immediate incident response.
    • Can integrate with external threat intelligence sources to enrich data and improve threat detection.
    • Enables the generation of detailed and customized reports.
    Incentivized
    Read full review
    Microsoft
    No answers on this topic
    Cons
    IBM
    • Need to spend more time configuring the system to properly interpret and normalize different type of data collected from multiple resources.
    • While Rule creation QRadar uses that rules to detect security threats and generate alerts, but to creating and managing rules is bit complex & tedious work to complete.
    • IBM Security QRadar SIEM is excellent in handling large & complex systems that requires in-depth knowledge and extensive training to configure and maintain the system which includes upgrading, optimization of performance & issue troubleshooting.
    Incentivized
    Read full review
    Microsoft
    No answers on this topic
    Likelihood to Renew
    IBM
    No answers on this topic
    Microsoft
    No answers on this topic
    Usability
    IBM
    No answers on this topic
    Microsoft
    The Microsoft Azure Sentinel solution is very good and even better if you use Azure. It's easy to implement and learn how to use the tool with an intuitive and simple interface. New updates are happening to always bring new news and improve the experience and usability. The solution brings reliability as it is from a very reliable manufacturer.
    Incentivized
    Read full review
    Support Rating
    IBM
    Customer support is Good of IBM, While Using IBM QRadar its deployment is to slow and suddenly stop working and crashed we have contacted IBM Support and Rised a Ticket within a few minute we get call back from customer support and Query Resolved by them Fast And Rapid Support of Ibm
    Incentivized
    Read full review
    Microsoft
    No answers on this topic
    In-Person Training
    IBM
    No answers on this topic
    Microsoft
    No answers on this topic
    Online Training
    IBM
    No answers on this topic
    Microsoft
    No answers on this topic
    Implementation Rating
    IBM
    No answers on this topic
    Microsoft
    No answers on this topic
    Alternatives Considered
    IBM
    No answers on this topic
    Microsoft
    We decided to go with Microsoft Sentinel because it works really well with Microsoft tools we are already using. Microsoft Sentinel's intelligent features detect and resolve problems more quickly than Sumo Logic. It also allows us to pay for what we use and grow as we need. While Sumo Logic is good at analyzing data, Microsoft Sentinel fits our needs.
    Read full review
    Professional Services
    IBM
    No answers on this topic
    Microsoft
    Did not use professional services
    Incentivized
    Read full review
    Return on Investment
    IBM
    No answers on this topic
    Microsoft
    No answers on this topic
    ScreenShots

    IBM Security QRadar SIEM Screenshots

    Screenshot of QRadar SIEM Cloud native- Threat intelligence preview

    Microsoft Sentinel Screenshots

    Product screenshotProduct screenshotScreenshot of Microsoft Sentinel Capabilities