By bridging SaaS convenience with on‑prem flexibility, QRadar continues to redefine what secure, intelligent, and compliant SIEM looks like in the age of AI.
In May 2025, IBM launched the QRadar Investigation Assistant app that helps security teams accelerate investigations by integrating generative AI into IBM QRadar SIEM, making it easier to analyze offenses and uncover insights.
Launched with seamless SaaS support for watsonx.ai, it simplifies setup by automatically connecting to IBM Cloud regions without manual configuration. Customers simply selected their deployment region — Dallas, Frankfurt, London, Tokyo, Sydney, or Toronto — and the app automatically configured the connection, eliminating the need to enter endpoint details manually. For details on regional availability, follow the official watsonx documentation - Regional availability of services and features.
This out-of-the-box integration gave QRadar customers unmatched ease in connecting a fully equipped generative AI platform to their SIEM, setting it apart from other solutions in the market.
Beyond ease of integration, watsonx.ai comes with built‑in safeguards for security and privacy when working with foundational models. These capabilities ensure that sensitive data is protected while enabling powerful AI‑driven investigations. Please refer to Security and privacy for foundation models | IBM watsonx for more details on the topic.
Despite these safeguards, many QRadar customers — particularly in banking, financial services, and government sectors — face unique challenges:
-
Air‑gapped environments where no data can leave the local infrastructure.
-
Strict data residency requirements that prohibit sending information to the cloud.
-
Legal and regulatory frameworks that mandate keeping all data within national borders.
For these organizations, SaaS integration alone is not sufficient. They require on‑premise deployment of watsonx to meet compliance and operational needs.
On‑Prem watsonx Integration: What’s New
To address these demands, the QRadar product team recently completed a successful Proof of Concept for on‑premise integration with watsonx.
This upcoming capability will allow customers to deploy AI‑powered investigation assistance entirely within their own environments.
The configuration experience will remain simple:
-
Administrators toggle “On‑prem” to Yes.
-
Provide the Username and Project URL.
-
QRadar handles the rest, ensuring a smooth setup.
We would love to hear from you: Inviting customers for the Early Access Program (EAP)
Existing QRadar customers will soon have the opportunity to join the Early Access Program (EAP) for the upcoming app version that supports integration with on‑premise watsonx deployments.
As an EAP participant, you’ll not only be among the first to experience this new capability, but you’ll also have the chance to collaborate directly with the product team behind the Investigation Assistant app. Your feedback and insights will play a key role in shaping the integration and onboarding experience.
Throughout the program, the product team will be available to provide guidance and support, ensuring you can get up and running quickly and smoothly.
To confirm your participation in the EAP, please feel free to contact me at ankit.bargale@ibm.com or reach out to your designated IBM representative.
Setting a New Standard in SIEM
With this enhancement, QRadar will become the only SIEM solution in the market to support both cloud‑based and fully on‑prem AI deployments out of the box. This dual approach ensures that customers across industries—from highly regulated government agencies to global enterprises—can leverage generative AI while meeting their unique compliance and data residency requirements.
#AI #QRadar #IBMQRadar #Security #IBMSecurity #IBMThreatManagement #QRadar