Skip to Main Content
IBM Security Ideas Portal

Shape the future of IBM Security

We invite you to shape the future of IBM, including the product roadmap, by submitting enhancement ideas that matter to you the most.

Here's how it works:

Post your ideas

Start by posting ideas and requests to enhance a product or service. Take a look at ideas others have posted and vote for them if they matter to you,

  1. Post an idea

  2. Vote for ideas that matter most to you

  3. Get feedback from the IBM team to refine your idea

Help IBM prioritize your ideas and requests

The IBM team may need your help to refine the ideas so they may ask for more information or feedback. The offering manager team will then decide if they can begin working on your idea. If they can start during the next development cycle, they will put the idea on the priority list. Each team at IBM works on a different schedule, where some ideas can be implemented right away, others may be placed on a different schedule.

Receive notification on the decision

Some ideas can be implemented at IBM, while others may not fit within the development plans for the product. In either case, the team will let you know as soon as possible. In some cases, we may be able to find alternatives for ideas which cannot be implemented in a reasonable time.

Post an Idea

To post a new idea - click on the "Add a new idea" button and where asked select the appropriate category this idea relates to. Provide requested information to allow us to get a better understanding of your request.

"Missing" Security Products?

If you cannot find the IBM Security product you are looking for then it is probably located in the IBM Security Private Ideas Portal. Check that site to open an idea.

Idea visibility

All ideas submitted via this portal are visible to all other portal users, though personal information fields remain hidden. If you would rather have your idea visible to only you and IBM then use the IBM Security Private Ideas Portal instead.

Please note: The purpose of the Ideas Portal is to tap the creativity of the IBM Security community so that we can enhance our products for everyone! If you need to report a defect or get help, please use our normal support channel. Click here to open a support ticket.

Want to see all of your IBM ideas in one place? Find them at




Showing 28 of 3480

Resilient O365 inbound email connection

Resilient O365 inbound email connection is compliant with OAuth but does so via client ID & secret. This would put it out of compliance with security standards – access to an Internet facing mailbox needs stronger protection than just client I...
8 months ago in QRadar SOAR / Email 3 Not under consideration

Selection / Actions on Multiple Emails in Inbox

You can select multiple Cases / Incidents and then run a Manual Rule that will run an action on all selected. However this is not currently possible with Email Items. If you want to attach / process multiple emails, you need to run a Manual Rule o...
10 months ago in QRadar SOAR / Email 0 Future consideration

Add Email Filter in Notes

Need ability to filter out parsed email conversations from Notes. Today, notes tab can be cluttered with long email threads making it very difficult to read through actual incident notes. Please add a toggle to filter out emails from notes similar...
10 months ago in QRadar SOAR / Email 2 Not under consideration

Extending the "Move Email Functionality" of the Exchange Online Integration

The move email functionality allows to move emails in a specific mailbox to a specified "Well-known" folder (e.g. junk folder, deleted items). For our phishing mailbox we would like to be able to move the emails from within SOAR to the correct sub...
about 1 year ago in QRadar SOAR / Email / Integrations 0 Future consideration

Access Permissions for Individual Mailboxes

As it stands today, a user/group in Resilient can be granted access to view the Inbox. I think it would be better if a user with Inbox access could be limited to what mailboxes they are allowed to see in the Inbox. For instance, my organization ha...
over 1 year ago in QRadar SOAR / Email 2 Future consideration

being able to delete more than one mail

being able to delete more than one mail in the inbox of resilient
over 1 year ago in QRadar SOAR / Email 0 Future consideration

Notify the Admins if Resilient E-mail Scripting not able to process

If there is any issues to process the E-mail by inbound scripting, it is impossible to get an alert as Notification E-mail or to trigger any Automated Rule to run send E-mail Function. Without controlling Inbox folder on Resilient, it's not possib...
almost 2 years ago in QRadar SOAR / Automations / Email 4 Future consideration

Incident report template and generation available in resilient api

Being able to generate pdf of the incident report based on the pre-defined template from API. A use case: as a play book designer, I would like to define a business rule, when a high severity incident identified, a automation rule will send out an...
about 2 years ago in QRadar SOAR / Email / Reporting & metrics 0 Future consideration
108 VOTE

Full-Featured Email Client Module

Investigation of incidents very often requires extensive email communication with incident contacts (reporting individuals, system owners, managers, witnesses etc.). Resilient should have an in-built email integration (similar to most helpdesk or ...
about 2 years ago in QRadar SOAR / Collaboration / Email 6 Future consideration

Sample script: "process inbound email" can be extended to better handle URLs preceded by emojis

Enhance the :Sample script: "process inbound email" with an example of processing URLs preceded by an emoji Steps 1) I created an email with the following content 😃 The emoji could also be in the email subj...
over 2 years ago in QRadar SOAR / Email 1 Not under consideration