No more typing reviews! Try our Samantha, our new voice AI agent.

Devo vs ExtraHop Reveal(x) for IT Operations comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Devo
Ranking in IT Operations Analytics
7th
Average Rating
8.2
Reviews Sentiment
6.5
Number of Reviews
30
Ranking in other categories
Log Management (21st), Security Information and Event Management (SIEM) (16th), AIOps (17th)
ExtraHop Reveal(x) for IT O...
Ranking in IT Operations Analytics
13th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
8
Ranking in other categories
Network Monitoring Software (72nd), Network Diagnostics (11th), Network Packet Capture (6th)
 

Mindshare comparison

As of November 2026, in the IT Operations Analytics category, the mindshare of Devo is 4.4%, up from 3.9% compared to the previous year. The mindshare of ExtraHop Reveal(x) for IT Operations is 3.9%, up from 3.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
IT Operations Analytics Mindshare Distribution
ProductMindshare (%)
Devo4.4%
ExtraHop Reveal(x) for IT Operations3.9%
Other91.7%
IT Operations Analytics
 

Featured Reviews

Usama Khan - PeerSpot reviewer
Team Lead Soc at a tech services company with 51-200 employees
Advanced threat hunting has improved SOC visibility and now supports faster incident response
Devo can improve in how its connectors enhance integration with third-party tools. Devo's architecture works by having you deploy a relay server in the data center of the client side and Devo SIEM is basically on the AWS cloud. There are specific ports which are enabled on the relay server, which are 514 and 13000, 13151, 152. However, when we talk about databases and custom integrations, there are not default ports in the relay server. No default ports are defined. For JDBC drivers, the port number is 1433, but it is not in the relay server. You have to add it manually. For Oracle RDBMS, the port is 1521, and it is also not there by default. I would appreciate more third-party integrations including Fortinet and others. Machine learning models can also be improved. Playbooks in the SOAR can also be improved. Regarding playbooks for automation, we utilize playbooks for automation in SOAR for automated IOC blocking on a firewall, on a web application firewall, on DNS security, etc. The only option for us to run the playbook is to schedule the job for it. However, if I want to manually run the playbook, there is no option for doing so. This needs improvement.
Out West - PeerSpot reviewer
Project Manager and IT Management Consultant at a integrator with 1,001-5,000 employees
Great for identifying application interdependencies with helpful support but needs better visualizations
We're just trying to identify the application interdependencies, which normally reside on different servers, including web servers, database servers, enterprise service bus, et cetera, up to your presentation layer before we start moving stuff around. Normally, the reason why we use these tools is to understand what assets we have, where they're deployed, and how they enter and operate before we decide to go move something from point A to point B. The solution is going to allow me to establish a wave or migration plan where you have different waves of migration and then you actually have move groups to try and get your application moved from A to B seamlessly. A to B could be on-premise to on-premise. It could be on-premise to cloud. Et cetera. The solution can tell me what components can I deploy, for example, into a cloud space, without having to refactor my applications since that can be quite time-consuming and costly.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It centralizes security management within a business, functioning as a core system for a SOC."
"Devo's speed and performance allows us to query in real-time and keep up with what is actually happening on the network, then respond effectively to events."
"With Devo, we can eliminate swivel chair analysis among tools for a streamlined workflow that gives us the most direct path to the root cause."
"But from a SaaS standpoint, if not best-in-breed, Devo is certainly in the top-two or top-three."
"Devo provides a multi-tenant, cloud-native architecture. This is critical for managed service provider environments or multinational organizations who may have subsidiaries globally. It gives organizations a way to consolidate their data in a single accessible location, yet keep the data separate. This allows for global views and/or isolated views restricted by access controls by company or business unit."
"It's very, very versatile."
"I'm so happy with the platform."
"Overall, Devo is awesome, but it's got some room to grow."
"ExtraHop is far ahead of anything comparable in the industry."
"This solution is more applications reference architecture focused. Its benefit is that it specializes in that space."
"The most valuable feature is the way it handles data, from Layer 2 up to Layer 7. We can see everything that happens in the network."
"Not only can you look at the protocol import level. It also has a live PCAP analysis."
"It gives you full 360-degree visibility into your entire infrastructure."
"It's a must-have solution for large IT Operations, providing the ability to analyze infrastructure and application-related performance and data from the wire perspective."
"ExtraHop came out with the best price, and I think that it gives us a broader view of our network."
"There are many valuable features in this product, but probably the biggest is the customization capability it has."
 

Cons

"The overall performance of extraction could be a lot faster, but that's a common problem in this space in general. Also, the stock or default alerting and detecting options could definitely be broader and more all-encompassing. The fact that they're not is why we had to write all our own alerts."
"Technical support needs to be more direct. For example, when we submit a ticket, the support team will delegate a task to the operations team, for example, or various other teams."
"One major area for improvement for Devo... is to provide more capabilities around pre-built monitoring. They're working on integrations with different types of systems, but that integration needs to go beyond just onboarding to the platform. It needs to include applications, out-of-the-box, that immediately help people to start monitoring their systems. Such applications would include dashboards and alerts, and then people could customize them for their own needs so that they aren't starting from a blank slate."
"The Activeboards feature is not as mature regarding the look and feel. Its functionality is mature, but the look and feel is not there. For example, if you have some data sets and are trying to get some graphics, you cannot change anything. There's just one format for the graphics. You cannot change the size of the font, the font itself, etc."
"Some of the documentation could be improved a little bit. A lot of times it doesn't go as deep into some of the critical issues you might run into. They've been really good to shore us up with support, but some of the documentation could be a little bit better."
"Technical support could be better."
"The price is one problem with Devo."
"I would like to have the ability to create more complex dashboards."
"This solution would be improved if it had the ability to retain data longer."
"There is room for improvement in the security part. They have a new solution, ExtraHop Reveal(x), and I think it needs improvement."
"We'd like to see a local presence within the region in order to have seamless service whether it's the support, the implementation, or professional services."
"They either have to go broad or decide what their bread and butter is and get really good at that."
"The solution could get more aggressive in the discounting of the overall cost."
"We've had some struggles getting it to see everything that we want to see. Network visibility is something that needs to be improved."
"I would improve the Rule-Based Access Control (RBAC) by providing granular access control to the data."
"The improvement that would make the most impact would be expanding on the new EXA big data back end."
 

Pricing and Cost Advice

"[Devo was] in the ballpark with at least a couple of the other front-runners that we were looking at. Devo is a good value and, given the quality of the product, I would expect to pay more."
"The way Devo prices things is based on the amount of data, and I wish the tiers had more granularity. Maybe at this point they do, but when we first negotiated with them, there were only three or four tiers."
"I like the pricing very much. They keep it simple. It is a single price based on data ingested, and they do it on an average. If you get a spike of data that flows in, they will not stick it to you or charge you for that. They are very fair about that."
"Pricing is based on the number of gigabytes of ingestion by volume, and it's on a 30-day average. If you go over one day, that's not a big deal as long as the average is what you expected it to be."
"Devo is definitely cheaper than Splunk. There's no doubt about that. The value from Devo is good. It's definitely more valuable to me than QRadar or LogRhythm or any of the old, traditional SIEMs."
"It's very competitive. That was also a primary draw for us. Some of the licensing models with solutions like Splunk and Sentinel were attractive upfront, but there were so many micro-charges and services we would've had to add on to make them what we wanted. We had to include things like SOAR and extended capabilities, whereas all those capabilities are completely included with the Devo platform. I haven't seen any additional fee."
"Devo was very cost-competitive... Devo did come with that 400 days of hot data, and that was not the case with other products."
"It's a per gigabyte cost for ingestion of data. For every gigabyte that you ingest, it's whatever you negotiated your price for. Compared to other contracts that we've had for cloud providers, it's significantly less."
"The pricing is higher than other solutions, but with such good features, I think it's worth it."
"The price of this solution for our environment is about £650,000 ($855,000 USD) for three years."
"The pricing is fair considering the value provided."
report
Use our free recommendation engine to learn which IT Operations Analytics solutions are best for your needs.
921,523 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Outsourcing Company
11%
Construction Company
10%
Manufacturing Company
9%
Outsourcing Company
11%
Comms Service Provider
11%
Financial Services Firm
11%
Construction Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise6
Large Enterprise15
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise2
Large Enterprise3
 

Questions from the Community

What is your experience regarding pricing and costs for Devo?
The pricing could be simpler, and while the initial setup cost for a new instance is a bit expensive, the licensing can currently be user-based or driven by log volume, which is better if there is ...
What needs improvement with Devo?
In terms of improvements, I think Devo falls short with their support model, as they rely mainly on their support team in Spain. Although they do have a support team in North America, they lack kno...
What is your primary use case for Devo?
Devo is the bank's centralized log management platform that my team and I rely on the most. For centralized log management in our day-to-day work, one of the biggest data users would be our Red...
Ask a question
Earn 20 points
 

Overview

 

Sample Customers

United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel
Alaska Airlines, bet365, Concur, McKesson, Microsoft, Morgan Stanley, Practice Fusion, Seattle Children's Hospital, Steward Health Care System
Find out what your peers are saying about Devo vs. ExtraHop Reveal(x) for IT Operations and other solutions. Updated: November 2026.
921,523 professionals have used our research since 2012.