QRadar product family consists of the following variations
QRadar SIEM (Security Information and Event Management) is a network security management platform that provides situational awareness and compliance support.
- QVM – QRadar Vulnerability Manager
QVM (QRadar Vulnerability Manager) is a scanning platform based on QRadar used to identify, manage, and prioritize vulnerabilities on your network assets. It provides additional tab inside console, where it can be activated, although it can have also additional appliance added to deployment, where resides QVM processor.
As of 2026, the QVM product is discontinued, and it has reached End of Support. QRadar Vulnerability Manager API endpoints are deprecated in QRadar 7.5.0 Update Package 6
- QRM – QRadar Risk Manager
The QRM (QRadar Risk Manager) appliance delivers fully integrated risk management, vulnerability prioritization, and automated configuration within the QRadar platform. QRadar Risk Manager enables tightly integrated features in QRadar SIEM that enhance incident management, log and network activity searches, threat visualization, and reports.
As of 2026, IBM documentation states that the QRM product is available to install with the latest version of QRadar 7.6.0.
- QRIF – QRadar Risk Incident Forensic
QRIF (QRadar Risk Incident Forensic) lets you retrace a potential attacker’s step-by-step actions and quickly conduct an in-depth forensic investigation of suspected malicious network security incidents. It reduces the time it takes security teams to investigate QRadar offense records, in many cases from days to hours – or even minutes. It can also help you remediate a network security breach and prevent it from happening again.
As of 2026, the QRIF product is discontinued, and it has reached End of Support.
- QPCAP – QRadar PCAP device
QPCAP ( QRadar Packet Capture) is a network traffic capture and search application. The QRadar Packet Capture appliance has only one capture port (DNA0) and you can install either a 10G or 1G SFP transceiver.
As of 2026, QPCAP is discontinued and has reached End of Support.
- QNI – QRadar Network Insights
QNI (QRadar Network Insights) is an appliance that provides detailed analysis of network flows to extend the threat detection capabilities of IBM Security QRadar. QRadar Network Insights analyzes network data in real time to uncover an attacker’s footprints and expose hidden security threats in many scenarios before they can damage your organization, including phishing emails, malware, data exfiltration, lateral movement, DNS and other application abuse, and compliance gaps.