CrowdStrike Observability vs Devo comparison

CrowdStrike Observability

Read 23 Devo reviews

4,342 Views
2,214 Comparison Views

95% willing to recommend

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between CrowdStrike Observability and Devo based on real PeerSpot user reviews.

Find out in this report how the two Log Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed CrowdStrike Observability vs. Devo Report (Updated: April 2026).

CrowdStrike Observability vs. Devo

Download the complete report

Helped 886,719 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CrowdStrike Observability

Ranking in Log Management

22nd

Average Rating

8.2

Reviews Sentiment

5.0

Number of Reviews

Ranking in other categories

No ranking in other categories

Devo

Ranking in Log Management

29th

Average Rating

8.4

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Security Information and Event Management (SIEM) (26th), IT Operations Analytics (10th), AIOps (20th)

Mindshare comparison

As of April 2026, in the Log Management category, the mindshare of CrowdStrike Observability is 0.8%, up from 0.5% compared to the previous year. The mindshare of Devo is 1.1%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management Mindshare Distribution
Product	Mindshare (%)
CrowdStrike Observability	0.8%
Devo	1.1%
Other	98.1%

Log Management

Featured Reviews

HectorRios

IT COMMUNICATIONS AND NETWORKS at Américas BPS

Has provided reliable alerts and helped identify infrastructure issues through detailed reporting

The best features of CrowdStrike Observability include the way they show issues to the client or agent, and their data collection method is interesting because they use an agent-less approach in some cases, collecting data from infrastructure such as firewalls. Additionally, they have the agent, but the presentation in the management console is excellent as we have observability end-to-end with the servers and all the services configured in the use cases. The intelligent alerting feature is excellent and configured on our console, being highly effective as it detects real alerts and just warnings or real issues. Identifying performance bottlenecks is important because they collect numerous MD5 or hash keys including movements or playbooks. The way they organize that in the console is excellent, allowing you to have reports detecting issues, which not only includes detection but also provides solutions to those issues.

Read full review

Francisco JavierRomo

Strategic Account Executive at a computer software company with 51-200 employees

Has improved investigative workflows with interactive dashboards and simplified data correlation

The data analytics cloud component focuses on real-time analytics, which is very impressive. The SIEM collects and correlates logs data from different sources and can integrate with ServiceNow, hardware asset management, and software asset management. The security orchestration, automation, and response (SOAR) is another valuable feature. The security data platform serves as the foundation of Devo. Regarding advanced query capabilities, Devo offers several models including query logs, visual query builder, language integrated query, and SQL, with SQL being the most frequently used querying data capability. The single pane of glass that Devo offers is the SOC. The tools in Devo's active ports are for investigating, not just viewing data. They are more interactive than other market solutions. The drill-down reports capabilities allow analysts to click on any element in a widget. When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins. This is particularly important for enterprise companies with numerous endpoints and users. The dynamic filtering of inputs significantly reduces the time cybersecurity analysts spend trying to figure out failed logins and identifying false positives.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The intelligent alerting feature is excellent and configured on our console, being highly effective as it detects real alerts and just warnings or real issues."

"The price is worth it."

"In the logs and the trajectory, it shows detailed information about where the source of infection comes from, how it travels, and how to reach there."

"The intelligence database provided by CrowdStrike is very impressive."

"CrowdStrike Observability offers strong predictive analytics capabilities, and the intelligent alerting system helps minimize noise and optimize IT resources effectively."

"I find the most effective feature of CrowdStrike Observability to be its cloud vision and attack surface vision, which enhance network traffic analysis."

"The log aggregation and correlation of data are notable features that enhance our operations."

"The intelligence database provided by CrowdStrike is very impressive."

More CrowdStrike Observability pros

"Scalability is one of Devo's strengths."

"The ROI has been great as we could launch it in a few months instead of a couple of years, and when you put all the costs together, it is less to have done it than with the open source approach."

"Overall, using Devo has saved us time when compared to our previous security solutions, and I estimate that it took us 10 times longer to achieve the same thing without Devo."

"Even if it's a relatively technical tool or platform, it's very intuitive and graphical. It's very appealing in terms of the user interface. The UI has a graphically interface with the raw data in a table. The table can be as big as you want it, depending on your use case. You can easily get a report combining your data, along with calculations and graphical dashboards. You don't need a lot of training, because the UI is relatively very intuitive."

"Overall, I have no issues with it and my guys love it."

"With Devo, we can eliminate swivel chair analysis among tools for a streamlined workflow that gives us the most direct path to the root cause."

"Devo saves us hours in every investigation."

"The most valuable feature is that it has native MSSP capabilities and maintains perfect data separation. It does all of that in a very easy-to-manage cloud-based solution."

More Devo pros

Cons

"Technical support received a rating of 4 out of 10."

"The customer service is not satisfactory for me. The support is only available in English, and my users in LATAM regions such as Peru and Colombia require local language support, which is not currently provided."

"For reporting or log management, having a longer duration for backup without needing to purchase a paid subscription would be beneficial. Currently, there is a default ninety-day backup period."

"Integration with Huawei should be more straightforward."

"We had some difficulties at the beginning, but at this moment they are improving, so probably in some months I will give them a ten."

"The pricing is very high and small companies cannot afford it. They should reduce the price because the backend infrastructure is the same."

"Integration with Huawei should be more straightforward."

"For reporting or log management, having a longer duration for backup without needing to purchase a paid subscription would be beneficial."

More CrowdStrike Observability cons

"The overall performance of extraction could be a lot faster, but that's a common problem in this space in general. Also, the stock or default alerting and detecting options could definitely be broader and more all-encompassing. The fact that they're not is why we had to write all our own alerts."

"An admin who is trying to audit user activity usually cannot go beyond a day in the UI. I would like to have access to pages and pages of that data, going back as far as the storage we have, so I could look at every command or search or deletion or anything that a user has run. As an admin, that would really help. Going back just a day in the UI is not going to help, and that means I have to find a different way to do that."

"I would like to have the ability to create more complex dashboards."

"There are some issues from an availability and functionality standpoint, meaning the tool is somewhat slow. There were some slow response periods over the past six to nine months, though it has yet to impact us terribly as we are a relatively small shop. We've noticed it, however, so Devo could improve the responsiveness."

"Some of the documentation could be improved a little bit. A lot of times it doesn't go as deep into some of the critical issues you might run into. They've been really good to shore us up with support, but some of the documentation could be a little bit better."

"We only use the core functionality and one of the reasons for this is that their security operation center needs improvement."

"Some of the documentation could be improved a little bit. A lot of times it doesn't go as deep into some of the critical issues you might run into."

"The biggest area with room for improvement in Devo is the Security Operations module that just isn't there yet."

More Devo cons

Pricing and Cost Advice

Information not available

"Pricing is based on the number of gigabytes of ingestion by volume, and it's on a 30-day average. If you go over one day, that's not a big deal as long as the average is what you expected it to be."

"The way Devo prices things is based on the amount of data, and I wish the tiers had more granularity. Maybe at this point they do, but when we first negotiated with them, there were only three or four tiers."

"I like the pricing very much. They keep it simple. It is a single price based on data ingested, and they do it on an average. If you get a spike of data that flows in, they will not stick it to you or charge you for that. They are very fair about that."

"Our licensing fees are billed annually and per terabyte."

"Devo is definitely cheaper than Splunk. There's no doubt about that. The value from Devo is good. It's definitely more valuable to me than QRadar or LogRhythm or any of the old, traditional SIEMs."

"I'm not involved in the financial aspect, but I think the licensing costs are similar to other solutions. If all the solutions have a similar cost, Devo provides more for the money."

"[Devo was] in the ballpark with at least a couple of the other front-runners that we were looking at. Devo is a good value and, given the quality of the product, I would expect to pay more."

"We have an OEM agreement with Devo. It is very similar to the standard licensing agreement because we are charged in the same way as any other customer, e.g., we use the backroom."

More Devo pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

886,719 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Financial Services Firm

12%

Construction Company

Manufacturing Company

Financial Services Firm

14%

Construction Company

Computer Software Company

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	2
Midsize Enterprise	3
Large Enterprise	3

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	4
Large Enterprise	11

Questions from the Community

What needs improvement with CrowdStrike Observability?

The product at this moment is really good; CrowdStrike Observability is still working to improve it and they are including new features. At this time, I cannot provide an opinion about what else to...

What is your primary use case for CrowdStrike Observability?

We are currently finishing the configuration of the solution, making the playbooks and configurations with the use cases. From CrowdStrike Observability, we use all the solution including XDR and a...

What advice do you have for others considering CrowdStrike Observability?

We did not use Falcon Sandbox or Falcon Exposure Management. We are using a local partner and they have a marketplace, but we are working with a local partner from Google. We are just customers, no...

What is your experience regarding pricing and costs for Devo?

Compared to Splunk or SentinelOne, it is really expensive. I rate the product’s pricing a nine out of ten, where one is cheap and ten is expensive.

What needs improvement with Devo?

The single pane of glass that Devo offers could be improved. The tools in Devo's active ports need enhancement in their investigative capabilities. The drill-down reports capabilities, while useful...

What is your primary use case for Devo?

During my time at MetaBase Q and as a partner integrator of ServiceNow, I had the chance to understand and be part of projects integrating SOCs, NOCs, and Security Operation Centers with Devo. Most...

Wazuh vs CrowdStrike Observability

Comparisons

Compared 9% of the time

Lumen Security Log Monitoring vs CrowdStrike Observability

Compared 8% of the time

Datadog vs CrowdStrike Observability

Compared 8% of the time

Elastic Stack vs CrowdStrike Observability

Compared 6% of the time

Amazon OpenSearch Service vs CrowdStrike Observability

Compared 6% of the time

More CrowdStrike Observability Competitors

LogRhythm SIEM vs Devo

Compared 8% of the time

Splunk Enterprise Security vs Devo

Compared 7% of the time

IBM Security QRadar vs Devo

Compared 3% of the time

New Relic vs Devo

Compared 3% of the time

Elastic Security vs Devo

Compared 3% of the time

More Devo Competitors

Product Reports

CrowdStrike Observability

Download CrowdStrike Observability product report

Download Devo product report

Overview

Unify security, log management, and observability with the new CrowdStrike Falcon LogScale module, the next evolution of Humio, including the all-new managed Falcon Complete LogScale service.

CrowdStrike

Devo is the only cloud-native logging and security analytics platform that releases the full potential of all your data to empower bold, confident action when it matters most. Only the Devo platform delivers the powerful combination of real-time visibility, high-performance analytics, scalability, multitenancy, and low TCO crucial for monitoring and securing business operations as enterprises accelerate their shift to the cloud.

Sample Customers

Information Not Available

United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel

CrowdStrike Observability vs. Devo