Palo Alto closes IBM QRadar SaaS buy, extends security partnership

Palo Alto Networks has closed the deal to acquire IBM’s QRadar software-as-a-service security intelligence platform. Now that the deal is complete, existing QRadar customers will be moved, for no charge, to Palo Alto’s Cortex Extended Security Intelligence and Automation (XSIAM) platform, which is the vendor’s core extended detection and response (XDR) platform.

IBM is a preferred Palo Alto partner for Cortex XSIAM migrations, and IBM Consulting will handle the migration for eligible QRadar clients, letting customers retain their existing workflows and expertise, according to IBM.

“IBM Consulting will utilize the expertise of thousands of industry and domain-specific consultants, along with Cortex XSIAM migration automation assistant technologies, pre-built accelerators, and global, regional, and local delivery models to provide a smooth transition,” IBM stated in a blog post.

Any organization that wants to stay with QRadar on-prem will continue to receive IBM features and support, including security, usability and critical bug fixes, as well as updates to existing connectors and the ability to expand consumption, IBM noted. QRadar SaaS customers will get customer service and support until they are ready to move to Cortex XSIAM.

The QRadar buy is one aspect of a wide-reaching partnership between the two vendors to extend security technology internally and for enterprise customers.

The partnership includes a variety of integrations between IBM’s watsonx AI and data platform and Palo Alto’s XSIAM, for example. Palo Alto said it intends to integrate watsonx LLMs into Cortex to drive additional automation capabilities. And watsonx will help Palo Alto address known technical issues, create tailored self-service solutions, and boost overall agent productivity within Palo Alto customer support operations.

IBM’s managed security services teams and its security operations center (SOC) consulting groups can use Palo Alto Networks’ Cortex XSIAM suite to help customers build next-generation SOC solutions, reduce security risks, improve visibility, and achieve faster response times, IBM stated.

IBM also said it intends to expand its use of Palo Alto’s AI-powered security platforms internally, adopting Cortex for next-gen security operations and Prisma SASE 3.0 for zero-trust network security to safeguard more than 250,000 of its global workforce. In addition, IBM plans to build industry-vertical capabilities on top of Cortex XSIAM using its watsonx technology.

“IBM and Palo Alto Networks have already moved swiftly to expand their partnership, commencing work to train over 1,000 IBM consultants on Palo Alto Networks security solutions and delivering joint offerings to help organizations build cyber resiliency into every part of the business,” IBM stated.

Additionally, the partnership combines Palo Alto Networks’ Prisma Cloud platform with IBM Consulting’s global system integration and managed security services to provide customized solutions across the DevSecOps lifecycle, improving cyber resiliency across cloud and enterprise applications, IBM stated.     

When the sale of QRadar was first announced in May, Steven Dickens, chief technology advisor at Futurum Group, wrote that the move represented consolidation in a vast market of security players.

“Specifically, it marks the exit of a major security information and event management (SIEM) software provider from the security operations space (at least at the product level) and is a nod to the newer XDR offerings that are gaining ground at the expense of SIEM tools,” Dickens stated.

The deal provided a significant opportunity for Palo Alto, which gains a large customer base from the QRadar side, he noted.

“Furthermore, the partnership with IBM opens up new go-to-market opportunities. IBM’s extensive consulting network and global presence will help Palo Alto Networks tap into new markets and enhance its sales efforts,” Dickens wrote. “The integration of IBM’s Watsonx large language models into Cortex XSIAM will also boost Palo Alto Networks’ AI capabilities, enabling it to deliver more sophisticated and automated security solutions.”

For IBM, the integration of Palo Alto Networks’ platforms into IBM’s managed security services will enhance IBM’s ability to deliver comprehensive security solutions to its clients. Additionally, the training and certification of over 1,000 IBM consultants on Palo Alto Networks’ products will strengthen IBM’s consulting capabilities, enabling it to offer more effective and efficient security services, Dickens said.