Palo Alto Networks retires the QRadar SaaS products it acquired from IBM: QRadar EDR, X-Force Threat Intelligence, Randori Attack and QRadar Advisor with Watson all reach end of life on August 31, 2026 — and Randori Recon, Resilient/SOAR on Cloud and the XDR-package SKUs already shut down on April 14. A SaaS end of life is a hard stop: there is nothing to keep running and nothing to extend.
What dies, and what is already dead
| Product family | End of life | What it does |
|---|---|---|
| IBM QRadar EDR | August 31, 2026 | Endpoint detection and response |
| IBM X-Force Threat Intelligence | August 31, 2026 | Threat-intelligence feeds and enrichment |
| Randori Attack / Randori SaaS Attack | August 31, 2026 | Continuous automated red teaming |
| IBM QRadar Advisor with Watson | August 31, 2026 | AI-assisted investigation |
| Randori Recon (all tiers) | April 14, 2026 — already gone | Attack-surface management |
| Resilient IRP / SOAR on Cloud | April 14, 2026 — already gone | Incident response / SOAR |
| QRadar XDR-package log archival SKUs | April 14, 2026 — already gone | Log archival for the XDR package |
What's covered
- What dies, and what is already dead
- The one-week checklist
- The pattern worth noticing
Full guide with every version, risk scores, and live updates: https://endoflife.ai/article-qradar-saas-shutdown-august-2026
Top comments (0)