IBM QRadar SOAR Reviews & Product Details

Best integration with QRADAR and some other IBM tools Review collected by and hosted on G2.com.

Have some bugs our lack the integrations with Trend Micro solutions Review collected by and hosted on G2.com.

I'm have working with IBM SOAR since February 2023. For me helpful is fast automatic reaction Review collected by and hosted on G2.com.

I dislike when i need connect application which absent in X-force Review collected by and hosted on G2.com.

Strong rules writing and reference sets are very useful Review collected by and hosted on G2.com.

Graphical interfaces. Such as filter columns are not dynamic and sorting is not work Review collected by and hosted on G2.com.

Good to use. User friendly, support from IBM Review collected by and hosted on G2.com.

Right now it is getting replaced by CP4S. Hence very less integrations out of box. Review collected by and hosted on G2.com.

IBM resilient soar is good platform when we consider automation in process. We have integrated this tool with IBM Qradar. Best part is that it can automate the security incidents directly without human interference. We can do part of automation which we want to automate, their are lots of functionalities in this tool itself. Incidents can be created automatically or manually. We can integrate the other API also. This tool helps in saving the time and meeting the SLA. Review collected by and hosted on G2.com.

This tool is best when all the configuration is done correctly otherwise you will face number of small problems. It's a powerful but it needs time for proper setup. As we have integrated resilient with Qradar, when we do some changes in Qradar, resilient stops working because of some error. This happens frequently. So we have to fix this number of times. Sometimes Qradar data tables not generate in resilient so that creation of incidents stops for a while. Review collected by and hosted on G2.com.

We recently built a Resilient solution in the IBM cloud. The Resilient tool is being used to demonstrate capabilities and train our internal personnel for the internal production SOAR deployment too. The set up was easy and within just a couple days we were already realizing the value of Resilient. Review collected by and hosted on G2.com.

I wish there was more guidance for the use of the Resilient SOAR tool. The documentation is lacking in some areas and is rudimentary. We need more guidance around how to set up playbooks, use of functions and workflows, how integrations can be further developed. There is a heavy reliance on GitHub and community development that can be difficult to find, validate and implement if inexperienced with the tool. Review collected by and hosted on G2.com.

Process Oriented! Product allows building and using dynamic workflows very effectively. Resilient is very powerful from the user interface to the integration of functions in a BMMN-like view. Products integrate a privacy module (requires payment) which is very helpful too for international companies and for the DPO. Review collected by and hosted on G2.com.

From the action/circuits part (function implementations), you have to download what you need and implement it on your own; you can't select it directly from the product. Maybe some improvements are needed in reporting scheduling. Review collected by and hosted on G2.com.

IBM Security Resilient is a very powerful platform because of the openness of Python and architecture of the product. Resilient makes it easy to develop custom integrations, on top of the 150+ they already have pre-built. The Community is helpful and growing each day. It's easy to get support for the product from the official IBM Support portal as well. Resilient is very configurable and can be used to do about anything in the SOAR realm. Great product overall, and I continue to see it getting better and being built up. Review collected by and hosted on G2.com.

Integrations are a bit lackluster in some cases, and often require tailoring to suite needs better. Resilient is powerful, but this means that it requires time be dedicated to building it out, it's not a quick and easy job necessarily due to its current architecture. Review collected by and hosted on G2.com.

Signatures are pretty accurate, detect incidents proactively Review collected by and hosted on G2.com.

Installation takes a while - it takes a lot of effort and doesn't seem out of the box Review collected by and hosted on G2.com.

We are using this product for the past 6 months in our healthcare initiatives projects. We are currently using the Resilient platform version of IBM-26

1. Delivers critical incident to Support analysts instantly.

2. create incidents from QRadar: manually, and automatically.

3. Notes and closing events are synchronized bi-directionally between the systems.

4. Automatically Closing Incidents due to update task, which runs every 2 minutes.

5. Initial installation is easy due to IBM guide available for everyone at free of cost while purchasing the licenses.

6. Availablity of IBM support analysts are more in the market and business is easy to do with for support

analysts for deployment of projects. Review collected by and hosted on G2.com.

Only Dislike is learning since we are moving from other product and installation will take its own time. As well its not an open source tool and we have to migrate all our existing data of incident back to Qradar tool. Review collected by and hosted on G2.com.