IBM is an enterprise vendor selling dozens of separate products, not one buyable tool — fit depends entirely on which product you need. Large enterprises with admin budgets get value; small teams should look elsewhere.
Confidence
Medium. Based on ~50 public sources. ibm.com is a corporate portal to hundreds of products; no single product page or consolidated pricing was reviewed.
Ratings
Value for moneyNo consolidated pricing evidence; quote-based sales
Ease of useNo product UX evidence found
Feature depth
Support quality
Security posture
Pricing
Not disclosed
ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Best for
→Large enterprises with mainframe or legacy estates
→Teams buying watsonx AI or Cognos analytics at scale
→Procurement-backed buyers with admin budget
→Regulated industries needing vendor stability
Not for
×Small teams needing one simple tool
×Startups wanting self-serve signup and transparent pricing
×Buyers who pasted a login page, not a product
×Anyone without budget for enterprise contracts and admins
Gotchas - check before you buy
high
Deep mainframe and data-platform lock-in makes switching vendors costly.
medium
Enterprise deals are negotiated through sales; no consolidated public price list exists.
medium
Multiple 2026 CVEs across WebSphere, App Connect, IBM i require disciplined patching.
low
Channel partners have long complained about IBM's partner practices.
Pros and cons
Pros
+4.3/5 rating across 12,481 G2 seller reviews
+Century-old, stable company with $221B market cap
+Publishes security bulletins and runs a vulnerability-management program
+Active AI and quantum momentum, including a $500M AI venture fund
Cons
−is a corporate login portal, not a product page
−Five-plus 2026 CVEs, including WebSphere unauthenticated code execution
−Pricing scattered per product; mostly quote-based
−Long-documented partner and BBB complaint history
−Some reviewers say legacy processes hold it back
Sources & method
- 11 sources - Mature bulletin and vulnerability-management program, but several 2026 CVEs were disclosed across WebSphere, App Connect, and IBM i.
official x2review x4security x2news x3
CVE-2026-14512 & CVE-2026-14446: WebSphere code execution and privilege escalation, Unauthenticated code execution and privilege escalation in IBM WebSphere Application Server, disclosed July 2026.
CVE-2026-3602: SQL injection in IBM App Connect Enterprise, SQL injection leading to code execution, disclosed July 2026.
CVE-2026-16860: IBM i remote code execution, IBM security bulletin addresses remote code execution vulnerability in IBM i, August 2026.
CVE-2026-17273: IBM i denial-of-service, Denial-of-service vulnerability in IBM i, documented September 2026.
Key stats
Feature depth: 5/5
Rating
Not disclosed
Starting price
11
Sources
Analyzed
Value for money. No consolidated pricing evidence; quote-based sales
Ease of use. No product UX evidence found
Feature depth: 5/5. Broadest enterprise portfolio, mainframe to quantum
Support quality: 2/5. Documented partner complaints; layered support processes
Security posture: 3/5. Active bulletins; several 2026 CVEs disclosed
4.3/5 G2 seller rating 12,481 reviews
$221.29B Market cap Sep 2026
1911 Founded Armonk, NY
5+ 2026 CVEs disclosed IBM i, App Connect, WebSphere
Pricing
Not disclosed
Security
Mature bulletin and vulnerability-management program, but several 2026 CVEs were disclosed across WebSphere, App Connect, and IBM i.
CVE-2026-14512 & CVE-2026-14446: WebSphere code execution and privilege escalationUnauthenticated code execution and privilege escalation in IBM WebSphere Application Server, disclosed July 2026.⁴
CVE-2026-3602: SQL injection in IBM App Connect EnterpriseSQL injection leading to code execution, disclosed July 2026.⁵
CVE-2026-16860: IBM i remote code executionIBM security bulletin addresses remote code execution vulnerability in IBM i, August 2026.
CVE-2026-17273: IBM i denial-of-serviceDenial-of-service vulnerability in IBM i, documented September 2026.
What users say
G2 users rate IBM's software 4.3/5 across 12,481 reviews, while employee reviews describe a stable company with mixed feelings about legacy processes.
Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.
Rate this review
Anonymous. You can change your vote.
Loading votes…
Comments
One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.
No comments yet.
SHOULDIUSE.IO — PRODUCT FIT REPORT
IBM
ibm.com · Analyzed 2 weeks ago · 10/03/2026
IBM is an enterprise vendor selling dozens of separate products, not one buyable tool — fit depends entirely on which product you need.
Who it's for
Large enterprises with mainframe or legacy estates
Teams buying watsonx AI or Cognos analytics at scale
Procurement-backed buyers with admin budget
Regulated industries needing vendor stability
Who it's not for
Small teams needing one simple tool
Startups wanting self-serve signup and transparent pricing
Buyers who pasted a login page, not a product
Anyone without budget for enterprise contracts and admins
Gotchas
Deep mainframe and data-platform lock-in makes switching vendors costly.10
Enterprise deals are negotiated through sales; no consolidated public price list exists.8
Multiple 2026 CVEs across WebSphere, App Connect, IBM i require disciplined patching.4
Channel partners have long complained about IBM's partner practices.9
Key capabilities
4.3/5: G2 seller rating (12,481 reviews)
$221.29B: Market cap (Sep 2026)
1911: Founded (Armonk, NY)
5+: 2026 CVEs disclosed (IBM i, App Connect, WebSphere)
Feature depth: 5/5. Broadest enterprise portfolio, mainframe to quantum
Support quality: 2/5. Documented partner complaints; layered support processes
Security posture: 3/5. Active bulletins; several 2026 CVEs disclosed
Security notes
Mature bulletin and vulnerability-management program, but several 2026 CVEs were disclosed across WebSphere, App Connect, and IBM i.
CVE-2026-14512 & CVE-2026-14446: WebSphere code execution and privilege escalation. Unauthenticated code execution and privilege escalation in IBM WebSphere Application Server, disclosed July 2026.4
CVE-2026-3602: SQL injection in IBM App Connect Enterprise. SQL injection leading to code execution, disclosed July 2026.5
CVE-2026-16860: IBM i remote code execution. IBM security bulletin addresses remote code execution vulnerability in IBM i, August 2026.
CVE-2026-17273: IBM i denial-of-service. Denial-of-service vulnerability in IBM i, documented September 2026.
What to use instead
Jama Software: Lighter requirements management than IBM DOORS https://www.jamasoftware.com/solutions/better-than-ibm-doors/
DigitalOcean: Simpler self-serve cloud for teams not needing mainframe muscle https://www.digitalocean.com/resources/articles/ibm-cloud-alternatives
Archon Data Store: Modern alternative to IBM Optim for data archiving https://www.archondatastore.com/blog/ibm-optim-competitors/
Sources
1.IBM Products | Read 12481 Reviews on G2 https://www.g2.com/sellers/ibm
2.Working at IBM: Employee Reviews https://www.indeed.com/cmp/IBM/reviews
3.IBM - Good Company but pulled back by legacy https://www.glassdoor.com/Reviews/Employee-Review-IBM-E354-RVW63707389.htm
5.CVE-2026-3602: SQL Injection in IBM App Connect https://www.ox.security/blog/cve-2026-3602-sql-injection-in-ibm-app-connect-enterprise-leads-to-code-execution/
Comments
One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.
No comments yet.