CyberIndexBeta

IBM

International Business Machines Corporation

Vendor

IBM's security business is built on operations rather than on endpoint protection: its best-known product is QRadar, the security information and event management platform that many large organisations run their security operations centre on, alongside a substantial consulting and managed services arm and the X-Force research and incident response teams. IBM QRadar EDR, the product listed here, is its endpoint detection and response agent, which came from its 2021 acquisition of the Italian company ReaQta. One thing a buyer should check. In 2024 IBM agreed to sell the QRadar SaaS business to Palo Alto Networks and to migrate those customers onto Cortex XSIAM, which changes the future of the wider QRadar family; the product line listed here should be confirmed as currently sold and supported before it is evaluated.

Country
United States
Headquarters
Armonk, United States
Year Established
1911
Employees
264,300
Customers
30K organisations (2026)
Users
2M devices protected (2023)Vendor states: IBM Announces New AI-Powered Threat Detection and Response Services
Revenue
$67.5B (2025)Source: Web search — SEC
Status
Active

Support locations

Support in 57 countries on 5 continents, from 66 known locations

United Arab EmiratesAustriaBelgiumBulgariaSwitzerlandCzechiaDenmarkEgyptEstoniaFinlandGreeceCroatiaHungaryIrelandIsraelJamaicaSouth KoreaKuwaitSri LankaLithuaniaLuxembourgLatviaMalaysiaNorwayPakistanPhilippinesPolandQatarRomaniaSaudi ArabiaSerbiaSlovakiaSloveniaSwedenThailandTürkiyeTaiwanUkraineVietnamSouth AfricaNew ZealandNetherlandsPortugalFranceUnited StatesArubaBahrainBahamasCuraçaoCyprusNew CaledoniaFrench PolynesiaTrinidad & TobagoGuadeloupe
Headquarters · Armonk, United States Support location Country with support
North America7 countries
ArubaBahamasCuraçaoGuadeloupe · Baie-MahaultJamaicaTrinidad & TobagoUnited States · Armonk
Europe28 countries · 34 locations
Austria · ViennaBelgium · BrusselsBulgaria · SofiaCroatia · ZagrebCyprus · NicosiaCzechia · Brno, PragueDenmark · CopenhagenEstonia · TallinnFinland · HelsinkiFrance · Bois-ColombesGreece · HalandriHungary · BudapestIreland · DublinLatvia · RigaLithuania · VilniusLuxembourg · BelvauxNetherlands · AmsterdamNorway · OsloPoland · WarsawPortugal · LisbonRomania · BucharestSerbia · BelgradeSlovakia · BratislavaSlovenia · LjubljanaSweden · StockholmSwitzerland · Grand-Lancy, Gümligen, Lugano, Prilly, ZurichTürkiye · Ankara, IstanbulUkraine · Kyiv
Asia17 countries · 18 locations
BahrainHong Kong SAR China · Hong KongIsrael · Petach-TikvaKuwaitMacao SAR China · MacauMalaysia · Petaling JayaPakistanPhilippines · Quezon CityQatarSaudi ArabiaSingapore · SingaporeSouth KoreaSri Lanka · ColomboTaiwan · TaipeiThailand · BangkokUnited Arab EmiratesVietnam · Hanoi, Ho Chi Minh City
Africa2 countries
EgyptSouth Africa
Oceania3 countries · 5 locations
French Polynesia · PapeeteNew Caledonia · NoumeaNew Zealand · Auckland, Christchurch, Wellington

Where the vendor offers local support — a support centre, an office it lists, or a local support line (shown as the country alone) — from the vendor’s own site. Partners and resellers are not counted.

Products

ProductCategoryMarketPlatform & VersionFree / Paid
IBM QRadar EDREnterprise AntimalwareEnterpriseLinux:1.0.0macOS:1.2.0Windows:3.12.7Paid
IBM Sterling Connect:DirectManaged File TransferEnterpriseLinux:6.4.0.6.iFix025Paid
IBM Sterling Secure File TransferManaged File TransferEnterprise, Mid-Market, SMBContainerLinuxWindows ServerPaid

Certifications

—

Recent test results

MITRE ATT&CK Evaluations

Recent changes

  • 2026-10-28New version: 1.0.0 (Linux) IBM QRadar EDR
  • 2026-10-28New version: 1.2.0 (macOS) IBM QRadar EDR
  • 2026-10-28New version: 3.12.7 (Windows) IBM QRadar EDR
  • 2026-10-28New version: 6.4.0.6.iFix025 (Linux) IBM Sterling Connect:Direct
  • 2026-10-28Version no longer recorded: 3.12.26 IBM QRadar EDR
  • 2026-10-28Version no longer recorded: 3.12.26 IBM QRadar EDR
  • 2026-10-28Version no longer recorded: 3.12.26 IBM QRadar EDR
  • 2026-10-21Users: 2M endpoints (2023, from IBM Announces New AI-Powered Threat Detection and Response Services)
  • 2026-10-21Users: 2M endpoints (2023, from LLM estimation)
  • 2026-10-20Users: 2M users (2026, from LLM estimation)
  • 2026-10-20New version: 2.3 IBM Sterling Secure File Transfer
  • 2026-10-18Support location: CW
  • 2026-10-18Support location: AW
  • 2026-10-18Support location: BS
  • 2026-10-18Support location: TT
Something wrong? Suggest a correction →

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.