IBM Trusteer Rapport

Name: IBM Trusteer Rapport
Brand: IBM
Rating: 2.4 (90 reviews)

IBM Trusteer Rapport is an endpoint/browser-based protection component that reduces phishing and financial malware risk for online banking sessions by verifying sites, blocking or warning on phishing lookalikes, and detecting or remediating certain persistent desktop malware while integrating endpoint signals with bank-side fraud analytics.

Est 1911|Valuation $213.9B|Raised $85.3B

LinkedIn 19.8M|Website|Web traffic 18.9M|FTEs 287,000|HQ Armonk, NY

MarketsFraud Detection

01Competitive Landscape

Narrative analysis

Where Rapport is appropriate: - In environments where an institution requires an additional endpoint-side control to address specific malware or phishing behaviors that may not be mitigated by server-side controls or endpoint AV alone. - Where the institution already invests in the Trusteer suite and seeks layered coverage combining endpoint and server-side signals. Where competitors commonly have advantages: - Server-side device-identity and bot-management vendors avoid requiring software installation by customers, reducing end-user support burden and compatibility risk. - Solutions focused on behavioral analytics and bot defenses address credential-stuffing and automated attacks without an endpoint agent. Market-position signals (directional): - Engagement-based measures from review platforms indicate that Trusteer has notable but variable adoption compared with competitors; these are not definitive market-share metrics.

	IBM Trusteer Rapport	LexisNexis ThreatMetrix	F5 Shape Security
Starting Price	Quote-based / not public (often deployed to end users at no direct charge)	Quote-based in many commercial contexts; indicative pricing may appear in certain procurement contexts	Quote-based; pricing typically provided via sales channels
Recommended use case	Institutions seeking an endpoint/browser layer for protected websites and mitigation of malware/phishing in customer desktop sessions	Organizations prioritizing device intelligence and digital identity scoring without end-user installs	Organizations focused on bot mitigation, credential stuffing, and large-scale automation attacks
Key Strength	Focus on session protection and phishing/malware mitigation as part of a layered Trusteer stack	Broad device identity graph and transaction risk scoring via APIs; generally avoids requiring client-side installs	Established bot defense capabilities and integration with application security controls
Key Weakness	End-user friction risk due to installation/compatibility/performance issues; manageability challenges in VDI/shared-image environments	Complexity and potential cost at scale; integration and tuning requirements	Enterprise deployment complexity and quote-based pricing

01Competitive Landscape

Narrative analysis

Where Rapport is appropriate:

In environments where an institution requires an additional endpoint-side control to address specific malware or phishing behaviors that may not be mitigated by server-side controls or endpoint AV alone.
Where the institution already invests in the Trusteer suite and seeks layered coverage combining endpoint and server-side signals.

Where competitors commonly have advantages:

Server-side device-identity and bot-management vendors avoid requiring software installation by customers, reducing end-user support burden and compatibility risk.
Solutions focused on behavioral analytics and bot defenses address credential-stuffing and automated attacks without an endpoint agent.

Market-position signals (directional):

Engagement-based measures from review platforms indicate that Trusteer has notable but variable adoption compared with competitors; these are not definitive market-share metrics.

	IBM Trusteer Rapport	LexisNexis ThreatMetrix	F5 Shape Security
Starting Price	Quote-based / not public (often deployed to end users at no direct charge)	Quote-based in many commercial contexts; indicative pricing may appear in certain procurement contexts	Quote-based; pricing typically provided via sales channels
Recommended use case	Institutions seeking an endpoint/browser layer for protected websites and mitigation of malware/phishing in customer desktop sessions	Organizations prioritizing device intelligence and digital identity scoring without end-user installs	Organizations focused on bot mitigation, credential stuffing, and large-scale automation attacks
Key Strength	Focus on session protection and phishing/malware mitigation as part of a layered Trusteer stack	Broad device identity graph and transaction risk scoring via APIs; generally avoids requiring client-side installs	Established bot defense capabilities and integration with application security controls
Key Weakness	End-user friction risk due to installation/compatibility/performance issues; manageability challenges in VDI/shared-image environments	Complexity and potential cost at scale; integration and tuning requirements	Enterprise deployment complexity and quote-based pricing