2023 QRadar pricing includes volume based discounts and determined by the event logs per second and network flow logs per minute that will be sent to QRadar.

QRadar pricing volume discounts apply to both on premise products such as appliances, software, VMware, as well as QRadar in the Cloud, Security as a Service and hosted managed SIEM service offerings. IBM QRadar pricing is very competitive to other SIEM tools, especially after factoring in the ROI and TCO benefits. QRadar SIEM Security Intelligence platform Security Intelligence platform enables companies of any size to implement a SOC right out of the box, without having to purchase additional features and services to utilize cybersecurity, internal threats and vulnerability discovery features. It is very common for QRadar customers to replace 6 or more security products, given all the additional advanced capabilities they get from a single product.

Price Comparison Considerations Against Other SIEM

When comparing QRadar pricing to other SIEM tools, take into consideration both the TCO and ROI factors.

Forrester Research estimates the cost of QRadar for initial licenses, on-going maintenance and support for a small company over three years is about $155,000, and a mid-sized company would be about $645,000 for 3 years.

Mid-sized company infrastructures can vary more so than smaller companies, and even more so for larger companies. However Forrester offered one of IBM’s largest SIEM customers as an example for comparison, which has over $20B in revenue and 32,000 employees that cost $5.048M for QRadar over 3 years. Forrester Research is responsible for these cost estimates and taken from their “The Total Economic Impact Of IBM QRadar Security Intelligence Platform” study, which do not take into account TCO or ROI benefits.

• Efficiency of detecting threats and vulnerabilities
• Effectiveness of detecting actual threats and vulnerabilities
• Incident response times
• Less forensic investigations
• Integration of third-party applications and log sources
• Learning curve and training
• Speed of implementation
• Compliance and administrative costs
• Human resources needed
• Support of legacy systems and general infrastructure

Infrastructure Details Needed for A Quote Discussion

To discuss QRadar pricing or to receive a quote, the quantities or estimates of the below infrastructure details that you wish to send to a QRadar SIEM is needed from each site (primary data center and remote sites separately). QRadar SIEM has maximums for the number event logs per second or network flows per minute that can be sent. QRadar is only limited by the log sources your company decides to send to the SIEM. To learn more about how different event log and network flow sources (NetFlow, J-Flow, sFlow, vFlow, and QFlow) contribute to identifying cybersecurity threats and vulnerabilities, please schedule a demonstration or watch the below short video demo.

Request A Free Demo

• AD, ESX, DNS, DHCP and Authentication Servers
• Windows IIS and Exchange Servers
• Windows Servers (general purpose)
• Unix and Linux Servers (general purpose)
• Antivirus and Antimalware Servers
• Database Servers
• Proxy/Web Application Firewall Servers
• Core, Large Firewalls (exposed to the public internet)
• Small, Edge, Internal Firewalls (intranet)
• IDS, VPN, IPS, WAF, DAM, DLP, LB systems
• VPN Instances
• Routers, Switches and Wireless devices
• IBM i iSeries AS400 LPARs (can include: QAUDJRN, QHST, QSYSOPR, DB2 FIM, Performance, Network Traffic from Exit Programs)
• IBM Mainframe z Series (can include: RACF, CICS and DB2)
• Other Servers (provide Manufacture Type)
• Critical 3^rd Party Applications
• Total Number of Workstations
• Total Number of Servers
• Number of Months for Log Retention on-line
• Bandwidth
• SEIM Product Preference: Appliance, Virtual, Cloud, SaasS or hosted/fully managed