Menu

Palo Alto Networks Acquires IBM QRadar, Enhancing AI Security

Palo Alto Networks Acquires IBM QRadar, Enhancing AI Security

The News: Palo Alto Networks and IBM announced a collaboration on AI-powered security solutions. Plato Alto Networks also announced the acquisition of IBM QRadar, and IBM is set to offer security consulting services utilizing Palo Alto Networks platforms. Read more here.

Palo Alto Networks Acquires IBM QRadar, Enhancing AI Security

Analyst Take: Arvind Krishna, the Chairman and CEO of IBM, has been steering the company through a transformative journey centered around a two-pronged strategy: hybrid cloud and artificial intelligence (AI). This dual focus is designed to position IBM at the forefront of addressing the evolving needs of modern enterprises. The hybrid cloud strategy, initiated a few years ago, has been instrumental in helping IBM clients seamlessly integrate their on-premises and cloud environments, thereby optimizing their IT infrastructure and operational efficiency.

More recently, AI has shifted into a central role in IBM’s strategic vision. Specifically, IBM aims to leverage its deep expertise in AI to deliver intelligent solutions that drive business value. This focus on AI was underscored by the launch of the watsonx platform, which has been pivotal in bringing AI-driven insights and automation to IBM’s clients.

To further its cloud-focused initiatives, IBM made a significant move by announcing its intent to acquire HashiCorp, a leader in multi-cloud infrastructure automation, in April 2024. To fund this acquisition and ensure financial flexibility, IBM decided to divest certain assets that no longer align with its core strategic objectives. One such divestiture is the sale of its QRadar network security management platform to Palo Alto Networks.

The security landscape is increasingly consolidating around comprehensive platforms that offer end-to-end protection. This shift necessitates a robust M&A strategy to build out these platforms, something that IBM may have been hesitant to invest heavily in, given its strategic pivot toward hybrid cloud and AI. By selling the QRadar assets, IBM not only streamlines its focus but also generates capital to fuel its AI and hybrid cloud ambitions.

What Was Announced?

On May 15, IBM and Palo Alto Networks announced intent for Palo Alto to acquire IBM’s QRadar cloud software assets, including QRadar intellectual property rights (IBM’s Endpoint Detection and Response EDR offering, IBM Security X-Force Threat Intelligence, QRadar Security Orchestration, Automation and Response, and Randori Recon). This acquisition is expected to close by the end of September 2024, subject to regulatory approvals and other customary conditions.

Notably, the announcement represents consolidation in a vast market of security players. Specifically, it marks the exit of a major security information and event management (SIEM) software provider from the security operations space (at least at the product level) and is a nod to the newer extended detection and response (XDR) that are gaining ground at the expense of SIEM tools, on the back of their more comprehensive visibility and rich analytics capabilities.

The key elements of the announcement include:

Acquisition and Migration: Palo Alto Networks will acquire the QRadar cloud software assets and migrate existing customers to its Cortex Extended Security Intelligence and Automation (XSIAM) platform. This migration is anticipated to take one to three months. Palo Alto Networks’ CEO, Nikesh Arora, emphasized that this move will significantly enhance their security platform’s capabilities.

Internal Adoption and Training: IBM will adopt Palo Alto Networks’ products internally, including Cortex XSIAM and Prisma SASE 3.0. Additionally, IBM will train more than 1,000 of its consulting employees on Palo Alto Networks’ products, thereby enhancing its consulting capabilities and offering clients robust security solutions powered by AI and automation.

Joint Go-to-Market Initiatives: The partnership will involve joint go-to-market initiatives, including co-selling and co-marketing activities.

Strategic Investments: IBM will continue to invest in its hybrid cloud and AI strategy. By divesting the QRadar assets, IBM can allocate more resources towards developing advanced AI capabilities and enhancing its hybrid cloud offerings. This strategic realignment is expected to drive significant growth and innovation for IBM.

Customer and Partner Benefits: The partnership brings substantial benefits to both companies’ customer bases. IBM clients will gain access to Palo Alto Networks’ cutting-edge security platforms, while Palo Alto Networks will benefit from IBM’s extensive consulting expertise and global reach.

Looking Ahead

For Palo Alto Networks, the acquisition of IBM’s QRadar cloud software assets and the partnership with IBM represent a significant opportunity. First, this move will bring a larger customer base to Palo Alto Networks, as QRadar clients transition to the Cortex XSIAM platform. This expanded customer base will provide Palo Alto Networks with greater scale and market reach.

Furthermore, the partnership with IBM opens up new go-to-market opportunities. IBM’s extensive consulting network and global presence will help Palo Alto Networks tap into new markets and enhance its sales efforts. The integration of IBM’s Watsonx large language models into Cortex XSIAM will also boost Palo Alto Networks’ AI capabilities, enabling it to deliver more sophisticated and automated security solutions.

Having IBM as a major customer and go-to-market partner is a significant advantage. IBM’s adoption of Palo Alto Networks’ products internally demonstrates a strong endorsement of their capabilities and provides a marquee reference that can be leveraged in future sales and marketing efforts.

For IBM, the divestiture of the QRadar cloud software assets aligns with its strategic focus on AI and hybrid cloud. The funds generated from this transaction will provide IBM with the financial flexibility to invest further in these areas, driving innovation and growth. By partnering with Palo Alto Networks, IBM ensures that its clients continue to receive best-in-class security solutions, while it concentrates on enhancing its core offerings.

IBM’s security consulting practice will benefit from having a strong partner in Palo Alto Networks. The integration of Palo Alto Networks’ platforms into IBM’s managed security services will enhance IBM’s ability to deliver comprehensive security solutions to its clients. Additionally, the training and certification of over 1,000 IBM consultants on Palo Alto Networks’ products will strengthen IBM’s consulting capabilities, enabling it to offer more effective and efficient security services.

Overall, this partnership represents a strategic win-win for both companies. Palo Alto Networks gains a significant boost in scale and capabilities, while IBM accelerates its hybrid cloud and AI strategy with a strong security partner by its side. As the cybersecurity landscape continues to evolve, the collaboration between these two industry leaders is poised to drive significant advancements and deliver enhanced value to their customers.

Disclosure: The Futurum Group is a research and advisory firm that engages or has engaged in research, analysis, and advisory services with many technology companies, including those mentioned in this article. The author does not hold any equity positions with any company mentioned in this article.

Analysis and opinions expressed herein are specific to the analyst individually and data and other information that might have been provided for validation, not those of The Futurum Group as a whole.

Other Insights from The Futurum Group:

Dig Security Rounds Out Palo Alto Networks’ Prisma Cloud Strategy

IBM Q1 2024 Earnings: A Deep Dive into Hybrid Cloud and AI Strategy

Q1 Earnings and Another Busy Week in Tech! – Infrastructure Matters, Episode 39

Author Information

Steven engages with the world’s largest technology brands to explore new operating models and how they drive innovation and competitive edge.

Krista Case brings over 15 years of experience providing research and advisory services and creating thought leadership content. Her vantage point spans technology and vendor portfolio developments; customer buying behavior trends; and vendor ecosystems, go-to-market positioning, and business models. Her work has appeared in major publications including eWeek, TechTarget and The Register.

Related Insights
AWS European Sovereign Cloud Debuts with Independent EU Infrastructure
January 16, 2026

AWS European Sovereign Cloud Debuts with Independent EU Infrastructure

Nick Patience, AI Platforms Practice Lead at Futurum, shares his/her insights on AWS’s launch of its European Sovereign Cloud. It is an independently-run cloud in the EU aimed at meeting...
Five9 Expands Google Cloud Partnership With a Unified Enterprise CX AI Platform
January 16, 2026

Five9 Expands Google Cloud Partnership With a Unified Enterprise CX AI Platform

Keith Kirkpatrick, Research Director at Futurum, examines Five9’s expanded partnership with Google Cloud and the launch of a joint Enterprise CX AI offering integrating Gemini Enterprise and Vertex AI....
As CrowdStrike Buys Seraphic, Is Browser Security Destined to Be Just a Feature
January 15, 2026

As CrowdStrike Buys Seraphic, Is Browser Security Destined to Be Just a Feature?

Fernando Montenegro, VP at Futurum, analyzes CrowdStrike's acquisition of Seraphic Security, a strategic move to secure the browser "blind spot" and extend Falcon's visibility to unmanaged devices....
Salesforce’s Slackbot Goes GA - Is This the Real Test for Agentforce
January 15, 2026

Salesforce’s Slackbot Goes GA – Is This the Real Test for Agentforce?

Keith Kirkpatrick, Research Director at Futurum, examines Slackbot general availability and how Salesforce is operationalizing Agentforce 360 by embedding a permissioned, context-aware AI agent directly into Slack workflows....
Salesforce’s Agentic Enterprise Push Highlights the Role of Context
January 15, 2026

Salesforce’s Agentic Enterprise Push Highlights the Role of Context

Keith Kirkpatrick, Research Director at Futurum, examines Salesforce’s Spring ’26 Release and its Agentic Enterprise strategy, focusing on how shared context across AI agents is reshaping sales, service, and commerce...
Will Google Gemini Enterprise for Customer Experience Deliver Context?
January 13, 2026

Will Google Gemini Enterprise for Customer Experience Deliver Context?

Keith Kirkpatrick, Research Director at Futurum, shares his insights into Google’s Gemini Enterprise for Customer Experience, and discusses the core guardrails and capabilities required to drive adoption by customers....

Book a Demo

Newsletter Sign-up Form

Get important insights straight to your inbox, receive first looks at eBooks, exclusive event invitations, custom content, and more. We promise not to spam you or sell your name to anyone. You can always unsubscribe at any time.

All fields are required






Thank you, we received your request, a member of our team will be in contact with you.