# IBM QRadar SOAR Reviews **Vendor:** IBM **Category:** [Security Orchestration, Automation, and Response (SOAR) Software](https://www.g2.com/categories/security-orchestration-automation-and-response-soar) **Average Rating:** 4.0/5.0 **Total Reviews:** 29 ## About IBM QRadar SOAR IBM QRadar® SOAR is designed to help your security team respond to cyberthreats with confidence, automate with intelligence and collaborate with consistency. It guides your team in resolving incidents by codifying established incident response processes into dynamic playbooks. The open and agnostic platform helps accelerate and orchestrate their response by automating actions with intelligence and integrating with other security tools. IBM QRadar SOAR is available on AWS Marketplace. ## IBM QRadar SOAR Pros & Cons **What users like:** - Users benefit from the **ease of use** of IBM QRadar SOAR, enabling quick workflows and seamless integrations. (5 reviews) - Users value the **fast automation capabilities** of IBM QRadar SOAR, significantly reducing manual work in security operations. (3 reviews) - Users value the **easy integrations** with various tools, simplifying workflows and enhancing security operations efficiency. (3 reviews) - Users appreciate the **seamless integration** with various tools, enhancing efficiency in security processes and workflows. (3 reviews) - Users value the **responsive IBM support** , appreciating quick resolutions and the user-friendly QRadar SOAR console. (2 reviews) - Customization (2 reviews) - Features (2 reviews) - Product Innovation (2 reviews) - Security (2 reviews) - Speed (2 reviews) **What users dislike:** - Users face **integration issues** with IBM QRadar SOAR, as it lacks out-of-the-box options and complicates sophisticated implementations. (3 reviews) - Users find the **initial complexity** of IBM QRadar SOAR challenging, requiring significant time to adapt to all features. (2 reviews) - Users are frustrated with the **limited integration** in IBM QRadar SOAR, hindering advanced transformations and usability. (2 reviews) - Users experience **system limitations** in IBM QRadar SOAR, facing difficulties in transformations and lack of dynamic features. (2 reviews) - Users report occasional **bug issues** causing workflow errors and slowness, disrupting their overall experience with QRadar SOAR. (1 reviews) - Complex Implementation (1 reviews) - Complex Setup (1 reviews) - Configuration Issues (1 reviews) - Connectivity Issues (1 reviews) - Difficult Learning (1 reviews) ## IBM QRadar SOAR Reviews ### 1. Difficult to implement, although response automation has potential **Rating:** 2.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) **Reviewed Date:** April 25, 2026 **What do you like best about IBM QRadar SOAR?** Automation in response flows **What do you dislike about IBM QRadar SOAR?** Multiple issues arose with the provisioning of the service; after the implementation, the configuration was carried out easily. **What problems is IBM QRadar SOAR solving and how is that benefiting you?** Automation in the response to security events; ### 2. Analyze Soar Qradar **Rating:** 5.0/5.0 stars **Reviewed by:** Aparecido A. | N1 - Security Operations Center Analyst(Blue Team), Mid-Market (51-1000 emp.) **Reviewed Date:** June 28, 2024 **What do you like best about IBM QRadar SOAR?** ease of use and easy interface and easy implementation **What do you dislike about IBM QRadar SOAR?** the layout seems a bit old compared to others **What problems is IBM QRadar SOAR solving and how is that benefiting you?** we are automating the alerts and taking less time to act, thus our incident response becomes faster and more accurate ### 3. IBM Security QRadar SOAR **Rating:** 4.5/5.0 stars **Reviewed by:** Prashanth K. | Assistant Manager, Small-Business (50 or fewer emp.) **Reviewed Date:** May 23, 2024 **What do you like best about IBM QRadar SOAR?** Seamless integration with security and ticketing tools, makes routine work easy Very flexible customization options **What do you dislike about IBM QRadar SOAR?** Sometimes, workflows end up in errors and have to restart the workflows Also experiences lagging/slowness sometimes **What problems is IBM QRadar SOAR solving and how is that benefiting you?** QRadar SOAR is helping us deal with daily routine work of raising incidents based on SIEM tool alerts. With SOAR workflows, it has become very easy to gather required data and provide this data in very structured format to our clients via tickets, all automated to be simple workflows ### 4. Platform is so Good **Rating:** 4.5/5.0 stars **Reviewed by:** Vivek R. | Digital Marketing & Branding Specialist, Mid-Market (51-1000 emp.) **Reviewed Date:** May 23, 2024 **What do you like best about IBM QRadar SOAR?** Secruity and Platform from IBM is important thing I like about QRadar SOAR **What do you dislike about IBM QRadar SOAR?** sofar nothing, I have been using partially on the Platform **What problems is IBM QRadar SOAR solving and how is that benefiting you?** Providing real-time insights that enhance the detection and remediation of threats. ### 5. IBM SOAR Review **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Mid-Market (51-1000 emp.) **Reviewed Date:** May 08, 2024 **What do you like best about IBM QRadar SOAR?** IBM Soar console is very easy to use,we can create any playbook in a very fast approach and if in case we need oem support just raised a ticket and you find almost in the day we have resolution. **What do you dislike about IBM QRadar SOAR?** Some time all playbooks not going in the same direction for which we have configured to acheive the goal. **What problems is IBM QRadar SOAR solving and how is that benefiting you?** Identify the attacks and doing automation base analysis and then blocking the same iocs. ### 6. Very expensive for what little it offers **Rating:** 2.0/5.0 stars **Reviewed by:** Verified User in Retail | Enterprise (> 1000 emp.) **Reviewed Date:** July 26, 2024 **What do you like best about IBM QRadar SOAR?** Integration with QRADAR and some IBM tools **What do you dislike about IBM QRadar SOAR?** We have some bugs due to lack of integrations with Trend Micro solutions. In my opinion, the U.B.A tool is still not 100% complete. **What problems is IBM QRadar SOAR solving and how is that benefiting you?** Enrich events ### 7. Great automation and response tool **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Consulting | Enterprise (> 1000 emp.) **Reviewed Date:** February 24, 2024 **What do you like best about IBM QRadar SOAR?** It is a great security tool to streamline security processes and workflows. It has great automation capabilites which reduces manual work for security operations. It also allows to create custome playbooks and also easily integrates with different security platforms. **What do you dislike about IBM QRadar SOAR?** It is bit complex to work on initially and takes time to get used to with all the feautues. **What problems is IBM QRadar SOAR solving and how is that benefiting you?** It helps to streamline security processes and workflows in our organization. It helps to automate security incdents and reduces manual work for security operations. It helps to create custom playbooks which helps to configure as per our security environment. ### 8. Excellent IBM software does everything we need. **Rating:** 5.0/5.0 stars **Reviewed by:** Alan P. | Manager, Financial Planning & Analysis, Enterprise (> 1000 emp.) **Reviewed Date:** July 20, 2023 **What do you like best about IBM QRadar SOAR?** It is quite simple to construct a workflow by dragging dropdown boxes and connecting them; the interface provides a fantastic method to view the stages we are developing and allows us to rapidly apply each of them. The biggest advantage is its extensive connectivity library, which allows us to connect to Jira, Lacework, Gsuite, and other providers as needed. The combination of all of these SaaS offerings results in unique commercial capabilities. **What do you dislike about IBM QRadar SOAR?** It rapidly hits its limits when it comes to sophisticated transformations and manipulations, and implementations become quite difficult. I'd like to be able to effortlessly version control all of my tales, hide my secrets, and even edit them with pull requests. I would want to see first-rate integration with a version control system. **What problems is IBM QRadar SOAR solving and how is that benefiting you?** The key issue that he assists the organization with is reducing the amount of time spent on repeated manual operations by utilizing some security measures. We were able to automate several procedures by interacting with numerous tools and incorporating various people from various teams and roles, which increased efficiency and saved time. We mostly use IBM Security QRadar SOAR to test for vulnerabilities; it allows you to analyze the complete event payload and filter and add a lot of relevant information to the Jira ticket. We can use IBM Security QRadar SOAR to swiftly automate processes that are resilient, auditable, and debuggable without having to write any code. ### 9. Qradar soar **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** March 26, 2024 **What do you like best about IBM QRadar SOAR?** This is the great tool to automate and respond on the alerts using playbook which help to identify real incidents and triage alerts. **What do you dislike about IBM QRadar SOAR?** Proper knowledge and guidance needed to setup and maintaining playbook **What problems is IBM QRadar SOAR solving and how is that benefiting you?** Major issue that this is solving is reducing mean time response for alert i.e., saving time . ### 10. my experiences. **Rating:** 5.0/5.0 stars **Reviewed by:** Süleyman A. | Enterprise (> 1000 emp.) **Reviewed Date:** July 06, 2023 **What do you like best about IBM QRadar SOAR?** units with advanced capabilities to manage and automate security operations. Some of the features on the appreciation surface are the ability to maintain and analyze security protections, automate incident response business processes and integrate them with various security tools. It manages to increase the protections of security operations and help respond effectively to threats. **What do you dislike about IBM QRadar SOAR?** While IBM Security QRadar SOAR has many powerful features, it is worth noting that some users may find the platform initially complex to install and configure. Also, depending on an organization's specific needs and requirements, there can be a learning curve involved in understanding and effectively using all the functionality of the platform. It is always a good idea to evaluate different solutions and consider factors such as usability, integration capabilities and overall fit with your organization's security operations **What problems is IBM QRadar SOAR solving and how is that benefiting you?** It meets almost all expectations on the SOC side. ### 11. Very expensive for what little it offers **Rating:** 2.0/5.0 stars **Reviewed by:** Verified User in Retail | Enterprise (> 1000 emp.) **Reviewed Date:** March 28, 2024 **What do you like best about IBM QRadar SOAR?** Best integration with QRADAR and some other IBM tools **What do you dislike about IBM QRadar SOAR?** Have some bugs our lack the integrations with Trend Micro solutions **What problems is IBM QRadar SOAR solving and how is that benefiting you?** Enrich events ### 12. I'm have working with IBM SOAR since February 2023 **Rating:** 3.5/5.0 stars **Reviewed by:** Alina S. | Mid-Market (51-1000 emp.) **Reviewed Date:** July 13, 2023 **What do you like best about IBM QRadar SOAR?** I'm have working with IBM SOAR since February 2023. For me helpful is fast automatic reaction **What do you dislike about IBM QRadar SOAR?** I dislike when i need connect application which absent in X-force **What problems is IBM QRadar SOAR solving and how is that benefiting you?** Fast reaction to incident response ### 13. Strong Cyber Analyze Tool **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Enterprise (> 1000 emp.) **Reviewed Date:** April 18, 2023 **What do you like best about IBM QRadar SOAR?** Strong rules writing and reference sets are very useful **What do you dislike about IBM QRadar SOAR?** Graphical interfaces. Such as filter columns are not dynamic and sorting is not work **What problems is IBM QRadar SOAR solving and how is that benefiting you?** Authorization Problem, Network attacks ### 14. IBM Resilient SOAR Review **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** June 01, 2022 **What do you like best about IBM QRadar SOAR?** Good to use. User friendly, support from IBM **What do you dislike about IBM QRadar SOAR?** Right now it is getting replaced by CP4S. Hence very less integrations out of box. **Recommendations to others considering IBM QRadar SOAR:** Old product. Will be getting replaced by IBM CP4S. **What problems is IBM QRadar SOAR solving and how is that benefiting you?** SOAR tool, used for consolidating security incidents for better visibilty. ### 15. Powerful customizable tool but only when it's configured correctly **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) **Reviewed Date:** July 23, 2020 **What do you like best about IBM QRadar SOAR?** IBM resilient soar is good platform when we consider automation in process. We have integrated this tool with IBM Qradar. Best part is that it can automate the security incidents directly without human interference. We can do part of automation which we want to automate, their are lots of functionalities in this tool itself. Incidents can be created automatically or manually. We can integrate the other API also. This tool helps in saving the time and meeting the SLA. **What do you dislike about IBM QRadar SOAR?** This tool is best when all the configuration is done correctly otherwise you will face number of small problems. It's a powerful but it needs time for proper setup. As we have integrated resilient with Qradar, when we do some changes in Qradar, resilient stops working because of some error. This happens frequently. So we have to fix this number of times. Sometimes Qradar data tables not generate in resilient so that creation of incidents stops for a while. **Recommendations to others considering IBM QRadar SOAR:** Resilient is best automation tool for the quick generation of incidents. It helps in creation of major and critical incidents generation within SLA. But we cannot compare it with human analysis and investigation. It helps only generation of incidents with some details. After that analyst have to do actual investigation for the case. **What problems is IBM QRadar SOAR solving and how is that benefiting you?** Sometimes resilient fails to fetch data from Qradar which stops the incident creation. This problem we are solving with the resilient. ### 16. Best Security Orchestration, Automation & Response Tool on the Market! **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** May 02, 2020 **What do you like best about IBM QRadar SOAR?** We recently built a Resilient solution in the IBM cloud. The Resilient tool is being used to demonstrate capabilities and train our internal personnel for the internal production SOAR deployment too. The set up was easy and within just a couple days we were already realizing the value of Resilient. **What do you dislike about IBM QRadar SOAR?** I wish there was more guidance for the use of the Resilient SOAR tool. The documentation is lacking is some areas and is rudimentary. We need more guidance around how to set up playbooks, use of functions and workflows, how integrations can be further developed. There is a heavy reliance on GitHub and community development that can be difficult to find, validate and implement if inexperienced with the tool. **What problems is IBM QRadar SOAR solving and how is that benefiting you?** We immediately realized time savings benefits for SOC analysts. The threat intelligence was easy to set up and showed value very quickly. ### 17. Resilient experience feedback **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Defense & Space | Enterprise (> 1000 emp.) **Reviewed Date:** November 02, 2019 **What do you like best about IBM QRadar SOAR?** Process Oriented ! Product allow to build and use dynamic workflow with very useful. Resilient is very powerful from the user interface to the integration of functions in a BMMN like view. Products integrate a privacy module (have to pay) wich is very helpful too for internationals company and for the DPO. **What do you dislike about IBM QRadar SOAR?** From the action / circuits part (function implementations) you have to download what you need and implement it on your own, you don't to select it directly from the product. Maybe some improvement to do on reporting scheduling. **What problems is IBM QRadar SOAR solving and how is that benefiting you?** Very usefull for incident response, and most of all, to get orchestration and fast answer for the analyst with SI integrations. In the point of Management (dashboard/report) and for the analyst, user. For DevSecOps the API is well documented. ### 18. Excellent and Powerful SOAR Platform **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Utilities | Enterprise (> 1000 emp.) **Reviewed Date:** November 23, 2019 **What do you like best about IBM QRadar SOAR?** IBM Security Resilient is a very powerful platform because of the openness of Python and architecture of the product. Resilient makes it easy to develop custom integrations, on top of the 150+ they already have pre-built. The Community is helpful and growing each day. It's easy to get support for the product from the official IBM Support portal as well. Resilient is very configurable and can be used to do about anything in the SOAR realm. Great product overall, and I continue to see it getting better and being built up. **What do you dislike about IBM QRadar SOAR?** Integrations are a bit lackluster in some cases, and often require tailoring to suite needs better. Resilient is powerful, but this means that it requires time be dedicated to building it out, it's not a quick and easy job necessarily due to its current architecture. **Recommendations to others considering IBM QRadar SOAR:** Great platform. I definitely recommend IBM Resilient, and especially if you have time and some Python programming resources to put into the product (hire an intern!). **What problems is IBM QRadar SOAR solving and how is that benefiting you?** Major FTE productivity gains were realized with Resilient, saving analysts 20-30 minutes per hour of doing tedious or manual work. Resilient also organizes incident response and makes it easier to report information to leadership. ### 19. IR Response **Rating:** 3.5/5.0 stars **Reviewed by:** Poonam K. | Executive Director - IT and Cloud Security Architecture, Enterprise (> 1000 emp.) **Reviewed Date:** June 12, 2018 **What do you like best about IBM QRadar SOAR?** Signatures are pretty accurate, detect incidents proactively **What do you dislike about IBM QRadar SOAR?** Installation takes a while - it takes a lot of effort and doesn't seem out of the box **What problems is IBM QRadar SOAR solving and how is that benefiting you?** Solving audit requirements as well as IT requests to manage incidents ### 20. Resilient Incident Response Platform - IBM Product **Rating:** 4.5/5.0 stars **Reviewed by:** Gokul K. | Program Manager - Product Delivery , Enterprise (> 1000 emp.) **Reviewed Date:** June 26, 2018 **What do you like best about IBM QRadar SOAR?** We are using this product for the past 6 months in our healthcare initiatives projects. We are currently using the Resilient platform version of IBM-26 1. Delivers critical incident to Support analysts instantly. 2. create incidents from QRadar: manually, and automatically. 3. Notes and closing events are synchronized bi-directionally between the systems. 4. Automatically Closing Incidents due to update task, which runs every 2 minutes. 5. Initial installation is easy due to IBM guide available for everyone at free of cost while purchasing the licenses. 6. Availablity of IBM support analysts are more in the market and business is easy to do with for support analysts for deployment of projects. **What do you dislike about IBM QRadar SOAR?** Only Dislike is learning since we are moving from other prioduct and installation will take its own time. As well its not an open source tool and we have to migrate all our existing data of incident back to Qradar tool. **Recommendations to others considering IBM QRadar SOAR:** 1. Installation is easy once we procured the licenses for the accounting team. 2. Cost wise its much better than other tools in the market. 3. Response time is ease of knowledge and analysts will get to know the incidents in quick period of time. **What problems is IBM QRadar SOAR solving and how is that benefiting you?** Major business benefits in my project are: Real-time incident dashboards and metrics that help security managers assess, measure, and improve IR capabilities. Due to that we have a good amount of reporting informations which stats information on Incidents. Automated enrichment that provides critical incident data that enables faster and more accurate decision making. ### 21. Highly customizable **Rating:** 4.0/5.0 stars **Reviewed by:** Timothy V. | Lead Analyst - Incident Handling and Response - Allstate SOC, Enterprise (> 1000 emp.) **Reviewed Date:** January 13, 2018 **What do you like best about IBM QRadar SOAR?** The ability to custom code the interface any way we like, we are able to create effective tasks, intake is good. The ability to plugin to our primary intakes such as splunk. The ability to automate process and procedures with Phantom integration. Although intensive to setup, it is highly customizable. API integration with other products and good reporting will allow us to achieve our goals. **What do you dislike about IBM QRadar SOAR?** There does not appear to be any way of changing some of the default fields. The task based system is ok, but we would like the ability to create custom frames, that when clicked, would allow an analyst to move on in the task list. The interface can be very overwhelming for a junior analyst, even when we strip out a lot of content. **Recommendations to others considering IBM QRadar SOAR:** Plan properly before deployment, I cannot stress this enough. If you do not know what you want the product to do for you, it will be significantly harder to create the right dashboards and intakes. **What problems is IBM QRadar SOAR solving and how is that benefiting you?** Moving to a single pane of glass implementation will help us respond faster, gather better metrics, and get an overall better feel of the types of incidents our staff have to deal with on a daily basis We realize a huge benefit over our existing system, as we did not have good metadata during incident response. Resilient has allowed us to capture this info better. ### 22. Best dashboard reporting by the timeline status **Rating:** 3.5/5.0 stars **Reviewed by:** Haresh S. | Software Developer, Computer Software, Enterprise (> 1000 emp.) **Reviewed Date:** November 15, 2017 **What do you like best about IBM QRadar SOAR?** I have used a lot of incident response platform tool over the years called Consumer call management and many more, but this one has infrastructure integration with directory,endpoint and network controls and also easy collaboration of email and web forms which makes it stand out and i could drill down by incident timeline status and type order and also dashboard reports which is quite easier **What do you dislike about IBM QRadar SOAR?** Sometimes the incident escalation ticket requests and follow up are out of sync and threat intelligence for DDOS attacks are not perfect since they dont track them ideally step by step and i have to redefine the process to find them **Recommendations to others considering IBM QRadar SOAR:** Tap the finest potential of it and also explore the nuances of what it has to offer **What problems is IBM QRadar SOAR solving and how is that benefiting you?** Mainly with dynamic request to incident adaptations and gives suggestive action which is really ideal being an end user and the special customer service ticketing platform gives a lot of edge for all SIEM & IRP requests ### 23. Wonderful **Rating:** 5.0/5.0 stars **Reviewed by:** Tehani d. | Employee, Enterprise (> 1000 emp.) **Reviewed Date:** July 26, 2018 **What do you like best about IBM QRadar SOAR?** Easy to navigate, no experience needed! **What do you dislike about IBM QRadar SOAR?** Nothing that I can think of it’s a very well rounded project. **What problems is IBM QRadar SOAR solving and how is that benefiting you?** I benefit in learning a new softaware that enables me to work at a quicker and steadier pace. ### 24. Recovery phase is marvellous **Rating:** 4.0/5.0 stars **Reviewed by:** Sander J. | Software developer, Information Technology and Services, Small-Business (50 or fewer emp.) **Reviewed Date:** November 28, 2017 **What do you like best about IBM QRadar SOAR?** I had been using this product for my time for a longer time duration and i got to say that it has got whatever we need and in terms of preparation,eradication,recovery and also ensuring that no threat remains and bringing them back into the production environment ,this is vital and every time the incident documentation is perfectly updated in the portal and i can just prepare my team for potential incidents **What do you dislike about IBM QRadar SOAR?** Sometimes it takes a lot of time to get back the damaged systems back into the fully functional mode and its a long-tiresome cumbersome process and cannot be done in a single step and has to be charted one step at a time and also to improve future response effects we need to limit the number of requests ,and also it takes a lot of time notifying about the plan to stakeholders **Recommendations to others considering IBM QRadar SOAR:** Use it to recover from breach when detected **What problems is IBM QRadar SOAR solving and how is that benefiting you?** When the critical central repository system was just about to fail,there was a lot of chaos and confusion in the background running process and we were kind of unsure on the next steps,but i was able to use IRP to fasttrack,detect and limit the effects of a potential information with ease ### 25. Great response system **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** September 15, 2018 **What do you like best about IBM QRadar SOAR?** It makes integration very easy with real time dashboard. **What do you dislike about IBM QRadar SOAR?** There nothing that I dislike about this system. **What problems is IBM QRadar SOAR solving and how is that benefiting you?** It has made decision making very effective as it guides the time through best responses. ### 26. This is the best. But should have easier GUI. Please improve. **Rating:** 4.5/5.0 stars **Reviewed by:** Ryen L. | Researcher, Utilities, Enterprise (> 1000 emp.) **Reviewed Date:** December 27, 2017 **What do you like best about IBM QRadar SOAR?** Its functionality is great! Lots of functions are powerful and very great. The true ideas behind those functions are really awesome and helpful a lot for our use at our company. **What do you dislike about IBM QRadar SOAR?** The interface no really is convenient. But can be significantly improved. The ease of use is critical for its future use. I really think since its functionality is a lot, they should provide better technical support to lower the learning curve. This will be important for its growth in near future. The GUI really sometimes is confusing and just not really response. But can be better a lot hopefully. **Recommendations to others considering IBM QRadar SOAR:** Do better bargain. The price could be lower. **What problems is IBM QRadar SOAR solving and how is that benefiting you?** Sales platform ### 27. One stop integrated incident response software from IBM **Rating:** 4.5/5.0 stars **Reviewed by:** Phani Krishna G. | Infra Specialist , Enterprise (> 1000 emp.) **Reviewed Date:** January 08, 2018 **What do you like best about IBM QRadar SOAR?** Cloud Integrated, Backup protection, BCP, Data center services **What do you dislike about IBM QRadar SOAR?** Maintenance, Expensive, lot of steps involved in system recovery. **What problems is IBM QRadar SOAR solving and how is that benefiting you?** Life cycle steps generated during system failure and notification to all stack holders in each phase of system failure till recovery. ### 28. Incident Mgmt system review **Rating:** 3.0/5.0 stars **Reviewed by:** Verified User in Computer Networking | Enterprise (> 1000 emp.) **Reviewed Date:** November 12, 2017 **What do you like best about IBM QRadar SOAR?** The capability of orchestrating and automating incident response processes **What do you dislike about IBM QRadar SOAR?** would be better if integration is simplified and optimized as other tools like sniffer network incidents can integrate to IBM Resilient tool **Recommendations to others considering IBM QRadar SOAR:** recommend prospects to try out Resilient IRP quickly with organization’s existing security and IT investments. **What problems is IBM QRadar SOAR solving and how is that benefiting you?** Resilient IRP quickly and easily integrates with your organization’s existing security and IT investments. Overall Quality of product is excellent and helps improve business goals and objectives ### 29. Thank you! **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Internet | Enterprise (> 1000 emp.) **Reviewed Date:** December 21, 2017 **What do you like best about IBM QRadar SOAR?** Easy to navigate when I am in a pinch. **What do you dislike about IBM QRadar SOAR?** Slow response time when I have customers waiting on a response. **Recommendations to others considering IBM QRadar SOAR:** N/a **What problems is IBM QRadar SOAR solving and how is that benefiting you?** The opportunity to solve serious issues without leaving it in the hands of people that aren’t able to actually help. - [View IBM QRadar SOAR pricing details and edition comparison](https://www.g2.com/products/ibm-qradar-soar/reviews?section=pricing&secure%5Bexpires_at%5D=2026-06-12+10%3A01%3A36+-0500&secure%5Bsession_id%5D=62ce0c94-e4c5-4587-a910-ce741b2d601c&secure%5Btoken%5D=77e7186afe04b2832765e9f57ba659d440f40e71cc5d5e5a209f10111a78540b&format=llm_user) ## IBM QRadar SOAR Features **ServiceNow Apps** - ServiceNow Integration - Value **Response** - Resolution Automation - Resolution Guidance - System Isolation - Threat Intelligence - Incident Investigation **Automation** - Workflow Mapping - Workflow Automation - Automated Remediation - Log Monitoring **Functionality** - Centralized platform - Automated response - Breach notification law compliance - Workflow - Reporting **Agentic AI - ServiceNow Store Apps** - Autonomous Task Execution - Multi-step Planning - Cross-system Integration - Proactive Assistance **Records** - Incident Logs - Incident Reports **Orchestration** - Security Orchestration - Data Collection - Threat Intelligence - Data Visualization **Management** - Incident Alerts - Incident Case Management - Workflow Management **Response** - Alerting - Performance Baselin - High Availability/Disaster Recovery **Generative AI** - AI Text Generation - AI Text Summarization ## Top IBM QRadar SOAR Alternatives - [Microsoft Sentinel](https://www.g2.com/products/microsoft-sentinel/reviews) - 4.4/5.0 (272 reviews) - [Tines](https://www.g2.com/products/tines/reviews) - 4.7/5.0 (396 reviews) - [TheHive](https://www.g2.com/products/thehive/reviews) - 4.3/5.0 (18 reviews)