Anonymous UserSenior Cyberecurity Manager at a financial services firm
We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
"The feature I find most valuable, is the reality graphical user interface."
"This solution requires less management and is very easy to use."
"We are using almost all of the features and we find it quite good overall."
"It can be deployed in autonomous mode, and then it automatically blocks malware threats."
"The product is very easy to use. Customers really appreciate that."
"The most valuable feature is the monitored support behind it."
"The feature that I have found most valuable is that the configuration and the usage of the product are not so complicated. For people responsible for using this infrastructure for the first line of workstation monitoring, it's quite easy to use."
"The dashboard is beautiful, overall easy of use, and the UBA and NBA features are valued."
"Most of the features are good. It is an excellent solution."
"In terms of the most valuable features, the log collections and log processing mechanisms are good. They have good dashboards."
"QRadar shows very effective correlations. If you combine all the logins plus user behavior and the current intelligence, it gives a very good correlation for business. I think it reduces the false positives in user activity monitoring because there is a lot of social information to correlate with other data."
"It has a powerful GUI where you can put together your use cases, and don't have to write your own scripts."
"I really like the feature we have with the logs, that if there are any credit card numbers being used, like a PII, you can just use rejects and you can mask it. This is a really good feature in QRadar."
"The feature that I find the most useful is that IBM QRadar User Behavior Analytics is free of charge. It's a fully free product that can be installed on top of IBM QRadar SIEM."
"It provides many options for searching. I can see devices from different vendors, like Cisco, in one interface, which is good for me."
"Integration is very easy and the reporting is good."
"I think the technical support could be better."
"A support center in Asia is needed."
"I would like to see support for mobile protection and some additional reports included."
"Could have better integration with other security applications."
"The solution just needs to keep maturing and they need to keep up with the threat landscape to ensure they're protecting clients well as time passes."
"Most of their times are in Greenwich Mean Time. I would like to see more local time zones."
"In terms of what could be improved, I would say the usability of this product for new threats. Meaning, not everything which is new is properly seen by the product and not all the required actions are taken."
"Compliance reports need to improve."
"IMB should reduce the pricing, or reduce some of the features for a more economical solution for the customer."
"They have to build more quantitative monitoring, profiling, and make it more predictive."
"From a functionality point of view there are issues sometimes."
"While the interface is easy to use, it could be a little more responsive."
"There should be an extension where we can get the reports. This could be an extension to the dashboard with the Guardian or another product with limited technology, for example IPS. Now, we only have IBM. Basically, it needs more and more integration models."
"The user interface and configurability of IBM QRadar User Behavior Analytics can be improved. It has a lot of pre-configured settings and not many things can be changed. It also needs more integrations. Currently, User Behavior Analytics is integrated only with IBM QRadar. It could have deeper integrations. It can also have more complicated scoring models. Currently, it has a very simple linear scoring model for users."
"We sometimes get an error about the hard drive. Approximately once in two months, we can't find the logs, and they go missing, which is a terrible issue. We are getting support for this issue from our support company."
"The dashboard is pathetic and it takes a long time to perform a search."
"It gives you a high level of protection at a very good price."
"Everything is included in this one solution and the pricing is pretty competitive."
"Our billing is on a quarterly basis, but they have monthly or annual billing availability."
"The price should not be less than $100 which is quite reasonable for this solution because you are getting multiple components."
"Its licensing is on a monthly basis."
"Pricing wise, Cynet seems to be very competitive. The cost is probably lower than that offered by many of its competitors for all the functions and features it offers."
"The price of this solution is a little bit expensive, so if it were cheaper then it would help."
"It's free of charge."
"The price of this product is high."
Cynet has pioneered the security industry’s first all-in-one security platform purposely built for organizations that need the ability to effortlessly identify, block and respond to all types of attacks inside the perimeter - defending endpoints, network, files and users - without the heavy burden of deep cyber expertise and the overhead of integrating and managing multiple products. Our approach converges and brings synergy with technology: endpoint protection, EDR, vulnerability management, deception, threat intelligence and network and end-user analytics, and expertise: a 24/7 cyber SWAT team for incident response, malware analysis, threat hunting and forensics. Cynet deploys in hours and simplifies management with automated monitoring to complement any sized staff.
The User Behavior Analytics for QRadar (UBA) app is a tool for detecting insider threats in your organization. It is built on top of the app framework to use existing data in your QRadar to generate new insights around users and risk. UBA adds two major functions to QRadar: risk profiling and unified user identities.
Risk profiling is done by assigning risk to different security use cases. Examples might include simple rules and checks such as bad websites, or more advanced stateful analytics that use machine learning. Risk is assigned to each one depending on the severity and reliability of the incident detected. UBA uses existing event and flow data in your QRadar system to generate these insights and profile risks of users.
Cynet is ranked 3rd in User Behavior Analytics - UEBA with 10 reviews while IBM QRadar User Behavior Analytics is ranked 9th in User Behavior Analytics - UEBA with 8 reviews. Cynet is rated 8.2, while IBM QRadar User Behavior Analytics is rated 6.8. The top reviewer of Cynet writes "Very user friendly but must expand threat detection for new threats". On the other hand, the top reviewer of IBM QRadar User Behavior Analytics writes "Stable and solid security intelligence but lacks some functionalities ". Cynet is most compared with CrowdStrike Falcon, Darktrace, SentinelOne, Microsoft Defender for Endpoint and Fortinet FortiEDR, whereas IBM QRadar User Behavior Analytics is most compared with Securonix UEBA, Splunk User Behavior Analytics, LogRhythm Enterprise UEBA and Citrix Analytics. See our Cynet vs. IBM QRadar User Behavior Analytics report.
See our list of best User Behavior Analytics - UEBA vendors.
We monitor all User Behavior Analytics - UEBA reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.