QRadar apps

Use IBM® QRadar® apps to extend and enhance your current QRadar deployment with new data and ready-to-use use cases.

A QRadar app is a means to augment and enrich your current QRadar system with new data and functionality. You can download and install other shared apps that are created by IBM, its Business Partners, and other QRadar customers.

You create your own apps from QRadar by using the QRadar GUI Application Framework Software Development Kit (SDK). You can then package the app and reuse it in other QRadar deployments. You can share your app on the IBM X-Force Exchange portal (https://exchange.xforce.ibmcloud.com/).

Apps provide new tabs, API methods, dashboard items, pop-up menus, toolbar buttons, configuration pages, and more within the QRadar user interface. The functionality is entirely defined by Python Flask framework apps that serves the app endpoints from a secure container.

Important: The QRadar app framework does not support systems that are configured using the Security Technical Implementation Guide (STIG). Customers that use STIG hardened systems can not install apps in QRadar.

Download public apps

All apps and security product enhancements are hosted on the IBM X-Force Exchange portal (https://exchange.xforce.ibmcloud.com/).

You can see a list of available apps on the IBM Security App Exchange (https://exchange.xforce.ibmcloud.com/hub). Filter apps by selecting the Application check box.

Every download from the X-Force App Exchange is known as an extension. An extension can consist of an app or security product enhancement (content extension) that is packaged as an archive (.zip) file, which you can deploy on QRadar by using the Extensions Management tool on the Admin tab.