IBM Security QRadar SIEM vs. Microsoft Sentinel

IBM Security QRadar SIEM

284 Reviews and Ratings

Microsoft Sentinel

102 Reviews and Ratings

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
IBM Security QRadar SIEM	Score9 out of 10	N/A	IBM Security QRadar is security information and event management (SIEM) Software.	N/A
Microsoft Sentinel	Score8.6 out of 10	N/A	Microsoft Sentinel (formerly Azure Sentinel) is designed as a birds-eye view across the enterprise. It is presented as a security information and event management (SIEM) solution for proactive threat detection, investigation, and response.	$2.46 per GB ingested

Pricing

IBM Security QRadar SIEM

Microsoft Sentinel

No answers on this topic

Azure Sentinel: $2.46
per GB ingested
100 GB per day: $123.00
per day
200 GB per day: $221.40
per day
300 GB per day: $319.80
per day
400 GB per day: $410.00
per day
500 GB per day: $492.00
per day
More than 500 GB per day: $492.00 + $98.40
per day/plus each additional 100 GB increment

Pricing Offerings
IBM Security QRadar SIEM	Microsoft Sentinel
Free Trial
Yes	Yes
Free/Freemium Version
No	No
Premium Consulting/Integration Services
No	No

No setup fee

No setup fee

—

—

Community Pulse
Key User Insights
	IBM Security QRadar SIEM	Microsoft Sentinel
Considered Both Products	IBM Saulo Prado /security Specialist in Information Technology at BANCO DO BRASIL S/A (Banking, 10,001+ employees) Chose IBM Security QRadar SIEM The QRadar licensing process is based on EPS (Events Per Second) and there are no limitations on event collection, regardless of the origin of the logs. This becomes an advantage as the price is agreed between the parties before purchase, so you have knowledge of what you can … Incentivized Helpful? Rahul Deshmukh Security Solutions Architect in Information Technology at Tech Mahindra Ltd (Information Technology & Services, 10,001+ employees) Chose IBM Security QRadar SIEM I found that IBM Security QRadar SIEM has better threat detection methods and the identification of cyber kill chains followed by attackers. Analysis of the data gives visibility that other SIEM solutions need to improve. Integration in IBM Security QRadar SIEM is also better … Incentivized Helpful? Mahmoud younis cybersecurity engineer in Engineering at Vaporvm (Information Technology & Services, 201-500 employees) Chose IBM Security QRadar SIEM price, to be honest IBM Security QRadar SIEM package is very good for most customers than Splunk and Sentinel Incentivized Helpful? Marco Mondelli Senior Security Specialist in Engineering at Accenture (Telecommunications, 1001-5000 employees) Chose IBM Security QRadar SIEM It's in the middle of this chart, Splunk from my point of view it's still the best SIEM actually and Sentinel it's very easy to use. Incentivized Helpful? Verified User Chose IBM Security QRadar SIEM Much less manual work and easier integration. Incentivized Helpful? Tobin Mathew SIEM Admin in Information Technology at CyberProof (Information Technology & Services, 10,001+ employees) Chose IBM Security QRadar SIEM More User-friendly in creating use cases. Managing offenses. Identifying issues more easily. Everything is accessible in fingertip. Incentivized Helpful? Muhammed Ali CETİN Information Technology Security Engineer in Information Technology at Yapı Kredi Teknoloji (Banking, 10,001+ employees) Chose IBM Security QRadar SIEM IBM is more user-friendly if we compare it with ELK stack and ArcSight. Much reliable, and have better Support. Onboarding data, creating correlation searches, and easier to integrate with 3rd party solutions as well. LogOps projects and less time-consuming products. Qradar … Incentivized Helpful?	Microsoft Ajay Sehgal Project Manager in Engineering at Pickright Technologies (Financial Services, 11-50 employees) Chose Microsoft Sentinel Sentinel AI makes it a better choice. Also, its flexibility and customization make it a bit more costly than other competitors. Incentivized Helpful? Verified User Chose Microsoft Sentinel The key advantage of using Sentinel lies in Microsoft already being a renowned name in cloud services. Hence, the Collection of data at the cloud scale across all users, devices, applications, and infrastructure, both on-premises and especially in the MS Cloud, is super easy. … Incentivized Helpful? Verified User Chose Microsoft Sentinel Microsoft Sentinel really goes the extra mile when it comes to an SIEM that slowly improves toward a proper SOAR, this may be the best selling point of the entire solution. Highly scalable, cloud-based, and nearly perfect when dealing with Microsoft-based infrastructures, … Incentivized Helpful? Mohamad Islam Hamadieh SOC Engineer in Engineering at Dell technology (Computer & Network Security, 10,001+ employees) Chose Microsoft Sentinel Microsoft Sentinel feels on another different level from these solutions , all in the cloud . No need for troubleshooting , deployment or upgrades. Constant updates from the vendor and good support Incentivized Helpful?
	Would buy again
	No answers on this topic	No answers on this topic
	Delivers good value for the price
	No answers on this topic	No answers on this topic
	Happy with the feature set
	No answers on this topic	No answers on this topic
	Lived up to sales and marketing promises
	No answers on this topic	No answers on this topic
	Implementation went as expected
No answers on this topic	No answers on this topic

Features

IBM Security QRadar SIEM

Microsoft Sentinel

Comparison of Security Information and Event Management (SIEM) features of IBM Security QRadar SIEM and Microsoft Sentinel
Feature	IBM Security QRadar SIEM 8.5 69 Ratings	Microsoft Sentinel 7.3 24 Ratings
Centralized event and log data collection	9.927 Ratings	8.224 Ratings
Correlation	8.669 Ratings	7.124 Ratings
Event and log normalization/management	9.527 Ratings	6.924 Ratings
Deployment flexibility	7.827 Ratings	7.422 Ratings
Integration with Identity and Access Management Tools	8.965 Ratings	6.422 Ratings
Custom dashboards and workspaces	7.569 Ratings	7.524 Ratings
Host and network-based intrusion detection	9.725 Ratings	5.020 Ratings
Data integration/API management	9.07 Ratings	6.522 Ratings
Behavioral analytics and baselining	7.648 Ratings	6.820 Ratings
Rules-based and algorithmic detection thresholds	8.049 Ratings	7.922 Ratings
Response orchestration and automation	7.75 Ratings	7.221 Ratings
Reporting and compliance management	7.947 Ratings	9.04 Ratings
Incident indexing/searching	8.97 Ratings	8.622 Ratings

User Ratings
	IBM Security QRadar SIEM	Microsoft Sentinel
Likelihood to Recommend	8.4 (89 ratings)	8.6 (43 ratings)
Likelihood to Renew	7.3 (4 ratings)	8.2 (1 ratings)
Usability	9.1 (1 ratings)	7.3 (4 ratings)
Support Rating	8.1 (62 ratings)	8.0 (3 ratings)
Ease of integration	8.1 (58 ratings)	- (0 ratings)
Professional Services	- (0 ratings)	5.0 (1 ratings)