Devo vs Google Security Operations comparison

Devo and Google are both solutions in the Security Information and Event Management (SIEM) category. Devo is ranked #24 with an average rating of 8.0, while Google is ranked #23 with an average rating of 9.5. Devo holds a 1.1% mindshare in SIEM, compared to Google’s 1.5% mindshare. Additionally, 95% of Devo users are willing to recommend the solution, compared to 83% of Google users who would recommend it.

Devo

Read 23 Devo reviews

2,909 Views
1,862 Comparison Views

95% willing to recommend

Google Security Operations

Read 4 Google Security Operations reviews

1,945 Views
1,264 Comparison Views

83% willing to recommend

Devo

Google Security Operations

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Dec 28, 2025

Google Security Operations and Devo are in competition within the security solutions category. Google Security Operations holds an advantage by providing an extensive suite of tools, whereas Devo offers significant data analytics capabilities, granting it a competitive edge.

Features: Google Security Operations integrates seamlessly with Google Cloud services, enhancing efficiency in cloud-based environments. It delivers real-time threat detection and strong threat monitoring when combined with Mandiant. Devo stands out with its advanced real-time analytics and Activeboards, providing visualization across multiple data sources. It also offers integration support with tools like CyberChef, useful for manipulating IT-related data.

Room for Improvement: Google Security Operations could enhance its user interface to match the intuitive design offered by competitors. It might also improve the adaptability of its toolset for non-Google ecosystems. Devo should simplify its learning curve for novices and bolster its alerting capabilities to filter noise effectively. Enhanced customization options for dashboards could further benefit its user base.

Ease of Deployment and Customer Service: Google Security Operations leverages Google's infrastructure for reliable deployment and robust support. Devo provides a swift setup process marked by flexible deployment options and personalized customer service, improving customer satisfaction levels.

Pricing and ROI: Google Security Operations offers competitive pricing with strong ROI for Google-integrated organizations. Devo, while having a higher initial cost, delivers impressive long-term ROI due to its feature-rich platform and data retention capabilities.

To learn more, read our detailed Devo vs. Google Security Operations Report (Updated: December 2025).

Buyer's Guide

Devo vs. Google Security Operations

December 2025

Download the complete report

Helped 881,114 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Devo

Ranking in Security Information and Event Management (SIEM)

24th

Average Rating

8.4

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Log Management (28th), IT Operations Analytics (11th), AIOps (20th)

Google Security Operations

Ranking in Security Information and Event Management (SIEM)

23rd

Average Rating

9.0

Reviews Sentiment

7.7

Number of Reviews

Ranking in other categories

Security Orchestration Automation and Response (SOAR) (14th), AI-Powered Cybersecurity Platforms (11th)

Mindshare comparison

As of January 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Devo is 1.1%, up from 1.0% compared to the previous year. The mindshare of Google Security Operations is 1.5%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM) Market Share Distribution
Product	Market Share (%)
Google Security Operations	1.5%
Devo	1.1%
Other	97.4%

Security Information and Event Management (SIEM)

Featured Reviews

Francisco JavierRomo

Strategic Account Executive at a computer software company with 51-200 employees

Has improved investigative workflows with interactive dashboards and simplified data correlation

The data analytics cloud component focuses on real-time analytics, which is very impressive. The SIEM collects and correlates logs data from different sources and can integrate with ServiceNow, hardware asset management, and software asset management. The security orchestration, automation, and response (SOAR) is another valuable feature. The security data platform serves as the foundation of Devo. Regarding advanced query capabilities, Devo offers several models including query logs, visual query builder, language integrated query, and SQL, with SQL being the most frequently used querying data capability. The single pane of glass that Devo offers is the SOC. The tools in Devo's active ports are for investigating, not just viewing data. They are more interactive than other market solutions. The drill-down reports capabilities allow analysts to click on any element in a widget. When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins. This is particularly important for enterprise companies with numerous endpoints and users. The dynamic filtering of inputs significantly reduces the time cybersecurity analysts spend trying to figure out failed logins and identifying false positives.

Read full review

reviewer2203269

Cloud Senior lead at a financial services firm with 10,001+ employees

Real-time threat detection and alarm management have improved security operations

Google SecOps is extremely useful for threat detection and hunting. It provides a detailed pipeline for detection and is beneficial for real-time threat monitoring when integrated with Mandiant. The tool's integration capabilities are effective, and it helps in managing alarms for normal threats efficiently. Overall, Google SecOps is a very useful service for security operations.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It centralizes security management within a business, functioning as a core system for a SOC."

"The querying and the log-retention capabilities are pretty powerful. Those provide some of the biggest value-add for us."

"Scalability is one of Devo's strengths."

"The most valuable feature is that it has native MSSP capabilities and maintains perfect data separation. It does all of that in a very easy-to-manage cloud-based solution."

"It's very, very versatile."

"The user experience [is] well thought out and the workflows are logical. The dashboards are intuitive and highly customizable."

"The thing that Devo does better than other solutions is to give me the ability to write queries that look at multiple data sources and run fast. Most SIEMs don't do that. And I can do that by creating entity-based queries. Let's say I have a table which has Okta, a table which has G Suite, a table which has endpoint telemetry, and I have a table which has DNS telemetry. I can write a query that says, 'Join all these things together on IP, and where the IP matches in all these tables, return to me that subset of data, within these time windows.' I can break it down that way."

"Those 400 days of hot data mean that people can look for trends and at what happened in the past. And they can not only do so from a security point of view, but even for operational use cases. In the past, our operational norm was to keep live data for only 30 days. Our users were constantly asking us for at least 90 days, and we really couldn't even do that. That's one reason that having 400 days of live data is pretty huge. As our users start to use it and adopt this system, we expect people to be able to do those long-term analytics."

More Devo pros

"The most valuable feature of Siemplify is the playbooks that can be created."

"Without hyperbole, I have never, in my entire career, encountered a vendor or a vendor community as awesome as Siemplify. Siemplify and the Siemplify Community quite literally made it possible for our SOC to increase almost five-fold in our number of clients and number of analysts and to go from a Monday to Friday 9-5 shop to a 24/7 shop all in the span of under a year and a half and all while continually adding capabilities and improving the services we offer to our clients."

"The playbooks feature in Siemplify is crucial for automation. We've utilized both standard and custom integrations with other security operation solutions, enhancing our flexibility. The user interface is generally straightforward, although recent changes may require some adjustment and Siemplify's integrations and capabilities offer potential support for various compliance requirements."

"Overall, Google SecOps is a very useful service for security operations."

"Google SecOps is extremely useful for threat detection and hunting."

Cons

"Where Devo has room for improvement is the data ingestion and parsing. We tend to have to work with the Devo support team to bring on and ingest new sources of data."

"Technical support could be better."

"The biggest area with room for improvement in Devo is the Security Operations module that just isn't there yet. That goes back to building out how they're going to do content and larger correlation and aggregation of data across multiple things, as well as natively ingesting CTI to create rule sets."

"One major area for improvement for Devo... is to provide more capabilities around pre-built monitoring. They're working on integrations with different types of systems, but that integration needs to go beyond just onboarding to the platform. It needs to include applications, out-of-the-box, that immediately help people to start monitoring their systems. Such applications would include dashboards and alerts, and then people could customize them for their own needs so that they aren't starting from a blank slate."

"I would like to have the ability to create more complex dashboards."

"They can improve their AI capabilities"

"There's always room to reduce the learning curve over how to deal with events and machine data. They could make the machine data simpler."

"An admin who is trying to audit user activity usually cannot go beyond a day in the UI. I would like to have access to pages and pages of that data, going back as far as the storage we have, so I could look at every command or search or deletion or anything that a user has run. As an admin, that would really help. Going back just a day in the UI is not going to help, and that means I have to find a different way to do that."

More Devo cons

"The main improvement could be in the accuracy and detail provided in threat descriptions."

"I'm inclined to say that I'd love to see some Machine Learning capabilities integrated into the platform, however, I just attended a demo this morning where Siemplify gave a sneak peek into some Machine Learning capabilities that they are currently developing and have roadmapped for release soon."

"We often encounter minor issues that could be improved, but we maintain communication with the developers and submit feature requests. Recently, I requested enhancements such as improved search functionality within playbooks and expanded options for exporting case data."

"Building the playbooks could be easier and the integration could improve. It is a difficult process, such as what API connections need to be made."

Pricing and Cost Advice

"I rate the pricing a four on a scale of one to ten, where one is cheap, and ten is expensive."

"The way Devo prices things is based on the amount of data, and I wish the tiers had more granularity. Maybe at this point they do, but when we first negotiated with them, there were only three or four tiers."

"I like the pricing very much. They keep it simple. It is a single price based on data ingested, and they do it on an average. If you get a spike of data that flows in, they will not stick it to you or charge you for that. They are very fair about that."

"We have an OEM agreement with Devo. It is very similar to the standard licensing agreement because we are charged in the same way as any other customer, e.g., we use the backroom."

"It's very competitive. That was also a primary draw for us. Some of the licensing models with solutions like Splunk and Sentinel were attractive upfront, but there were so many micro-charges and services we would've had to add on to make them what we wanted. We had to include things like SOAR and extended capabilities, whereas all those capabilities are completely included with the Devo platform. I haven't seen any additional fee."

"Pricing is based on the number of gigabytes of ingestion by volume, and it's on a 30-day average. If you go over one day, that's not a big deal as long as the average is what you expected it to be."

"Our licensing fees are billed annually and per terabyte."

"It's a per gigabyte cost for ingestion of data. For every gigabyte that you ingest, it's whatever you negotiated your price for. Compared to other contracts that we've had for cloud providers, it's significantly less."

More Devo pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

881,114 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

16%

University

Computer Software Company

Manufacturing Company

Financial Services Firm

17%

Manufacturing Company

Computer Software Company

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	4
Large Enterprise	11

No data available

Questions from the Community

What is your experience regarding pricing and costs for Devo?

Compared to Splunk or SentinelOne, it is really expensive. I rate the product’s pricing a nine out of ten, where one is cheap and ten is expensive.

See all answers

What needs improvement with Devo?

The single pane of glass that Devo offers could be improved. The tools in Devo's active ports need enhancement in their investigative capabilities. The drill-down reports capabilities, while useful...

See all answers

What is your primary use case for Devo?

During my time at MetaBase Q and as a partner integrator of ServiceNow, I had the chance to understand and be part of projects integrating SOCs, NOCs, and Security Operation Centers with Devo. Most...

See all answers

What do you like most about Siemplify?

The playbooks feature in Siemplify is crucial for automation. We've utilized both standard and custom integrations with other security operation solutions, enhancing our flexibility. The user inter...

See all answers

What is your experience regarding pricing and costs for Siemplify?

The pricing for Google SecOps and Microsoft Sentinel is almost the same, with no significant differences.

See all answers

What needs improvement with Siemplify?

The main improvement could be in the accuracy and detail provided in threat descriptions. Google SecOps reports could be more detailed, similar to the comprehensive descriptions provided by Microso...

See all answers

Comparisons

LogRhythm SIEM vs Devo

Compared 10% of the time

Splunk Enterprise Security vs Devo

Compared 8% of the time

IBM Security QRadar vs Devo

Compared 7% of the time

Microsoft Sentinel vs Devo

Compared 6% of the time

Elastic Security vs Devo

Compared 4% of the time

More Devo Competitors

Google Chronicle Suite vs Google Security Operations

Compared 11% of the time

Panther vs Google Security Operations

Compared 10% of the time

Microsoft Sentinel vs Google Security Operations

Compared 10% of the time

CrowdStrike Falcon vs Google Security Operations

Compared 8% of the time

Cortex XSIAM vs Google Security Operations

Compared 6% of the time

More Google Security Operations Competitors

Product Reports

Buyer's Guide

Devo

January 2026

Download Devo product report

Buyer's Guide

Security Orchestration Automation and Response (SOAR)

December 2025

Download Google Security Operations product report

Also Known As

No data available

Siemplify ThreatNexus

Overview

Devo is the only cloud-native logging and security analytics platform that releases the full potential of all your data to empower bold, confident action when it matters most. Only the Devo platform delivers the powerful combination of real-time visibility, high-performance analytics, scalability, multitenancy, and low TCO crucial for monitoring and securing business operations as enterprises accelerate their shift to the cloud.

Devo

Google Security Operations offers a robust playbook builder and integration capabilities designed to streamline workflows and integrate seamlessly with existing systems for enhanced security management.

Google Security Operations stands out in threat detection, monitoring, and alarm management, especially when used alongside Mandiant. Its intuitive interface supports compliance requirements, and it provides customizable workflows through playbooks. Integration with multiple tools allows for automation and increased flexibility, though improvements in API connection determination and playbook search capabilities could enhance user experience. Effective in orchestrating alerts and managing security events, it is extensively used for automated response, efficient alert triage, investigation, reporting, and ticketing management, supporting over 20 use cases including real-time threat detection.

What are the Key Features of Google Security Operations?

Playbook Builder: Allows for creating customizable workflows tailored to specific scenarios.
Integration Capabilities: Facilitates connectivity with numerous tools for automation.
Threat Detection: Improves monitoring and response when combined with Mandiant's capabilities.
Simplicity in Feature Adoption: Easy incorporation of new features and workflows.

What Benefits Should You Look for in Reviews?

Workflow Efficiency: Automates triage and investigation processes for quicker security management.
Real-Time Threat Detection: Enhances monitoring effectiveness in Managed Extended Detection and Response strategies.
Flexibility: Adaptable integrations support dynamic security needs.
Compliance Support: Aids in maintaining regulatory standards with straightforward reporting features.

In industries where real-time threat response is critical, such as finance and healthcare, Google Security Operations is favored for its automation and integration capabilities. These characteristics are vital for efficiently managing complex security landscapes and maintaining compliance across sectors.

Google

Sample Customers

United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel

FedEx Mondelez Intenrational Check Point Trustwave Atos Cyberint Bae Systems Crowe Longwall Security Telefonica Nordea HCL

Buyer's Guide

Devo vs. Google Security Operations

December 2025

Free Report: Devo vs. Google Security Operations

Find out what your peers are saying about Devo vs. Google Security Operations and other solutions. Updated: December 2025.

DOWNLOAD NOW

881,114 professionals have used our research since 2012.

See our Devo vs. Google Security Operations report.

See our list of best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.