IBM announced Wednesday that it has reached an agreement to sell its QRadar SaaS assets to Palo Alto Networks in a new partnership between the two tech giants. QRadar, originally launched by IBM as a security information and event management (SIEM) product, has evolved over the years to offer extended detection and response (XDR) capabilities. The most recent development in the QRadar product line was the introduction of QRadar Suite, a subscription offering that combines various QRadar products with AI enhancements.
As part of the deal, existing QRadar SaaS customers will have their subscriptions and deployments transferred to Palo Alto Networks’ Cortex XSIAM platform, while IBM will continue to support on-premises QRadar customers. Additionally, IBM will receive incremental payments from Palo Alto Networks for QRadar on-prem customers that choose to migrate. Both companies have also committed to providing “no-cost migration services” for qualifying customers who choose to switch platforms.
In a strategic move, Palo Alto Networks will become IBM’s preferred cybersecurity partner for internal security products and services. The partnership will also involve the establishment of a joint security operations center offering managed SOC services to customers. Furthermore, Palo Alto Networks will integrate IBM Watsonx large language models (LLMs) into its Cortex XSIAM platform, in line with the industry trend of embracing generative AI and LLMs.
Nikesh Arora, chairman and CEO of Palo Alto Networks, expressed his excitement about the partnership, stating that the security industry is on the brink of transformation through AI. He highlighted the opportunity to combine the strengths of both companies to drive innovation and growth in the security sector. The financial terms of the deal were not disclosed, but the closing is expected by the end of September.
A spokesperson for IBM emphasized that the partnership with Palo Alto Networks aligns with IBM’s focus on hybrid cloud and AI security business. The spokesperson highlighted the collaboration between the two companies in advanced threat management, signaling IBM’s commitment to data security, identity, and access management for hybrid cloud and AI.
Analysts have weighed in on the implications of the deal, with Forrester Research principal analyst Allie Mellen noting that IBM’s decision to surrender its SIEM business marks a significant shift in focus for the company. Mellen highlighted the need for existing QRadar customers to transition to XSIAM or seek alternative vendors as IBM pivots its security portfolio. The acquisition of QRadar’s customer base was seen as a strategic move for Palo Alto Networks, with an emphasis on providing migration paths for current QRadar SaaS and on-prem customers.
Eric Parizo, managing principal analyst at Omdia, described the news as a “jaw-dropper” in the cybersecurity space, expressing surprise at IBM’s decision to sell QRadar to Palo Alto Networks. Parizo emphasized the significant market share gain for Palo Alto Networks in the SIEM space and speculated on IBM’s strategic shift towards partnership revenue over direct competition in the NG-SIEM market.
Overall, the partnership between IBM and Palo Alto Networks signifies a significant development in the cybersecurity industry, with implications for both companies and their customers. Stay tuned for further updates as the deal progresses.