No more typing reviews! Try our Samantha, our new voice AI agent.

Devo vs IBM Watson for Cyber Security comparison

Devo and IBM are both solutions in the Security Information and Event Management (SIEM) category. Devo is ranked #26 with an average rating of 8.0, while IBM is ranked #55. Devo holds a 1.2% mindshare in SIEM, compared to IBM’s 0.8% mindshare. Additionally, 95% of Devo users are willing to recommend the solution, compared to 100% of IBM users who would recommend it.
Devo
Read 23 Devo reviews
  • 5,226 Views
  • 3,031 Comparison Views
95% willing to recommend
IBM Watson for Cyber Security
Read 4 IBM Watson for Cyber Security reviews
  • 1,579 Views
  • 1,532 Comparison Views
100% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Sep 18, 2024

IBM Watson for Cyber Security and Devo are both prominent tools in the cybersecurity category. Devo generally appears to have the upper hand with users praising its features and stating it offers good value despite higher costs, while IBM Watson for Cyber Security receives favorable mentions for its support.

Features: IBM Watson for Cyber Security is valued for its AI-driven threat detection, comprehensive analytics, and data integration. Devo is noted for its real-time data analytics, scalability, and flexibility. Users seem to appreciate Devo's advanced features more, leading to more favorable reviews in this section.

Room for Improvement: Users indicate that IBM Watson for Cyber Security could improve in integrating with existing systems, reducing complexity, and enhancing user interface. Devo users suggest enhancements in documentation, user training, and interface customization. Despite these points, Devo’s required improvements seem less critical, making it more favorable here.

Ease of Deployment and Customer Service: IBM Watson for Cyber Security is often described as complex to deploy, requiring significant resources. Its customer service, however, receives positive feedback. Devo, in contrast, has easier deployment but mixed reviews regarding customer support responsiveness. Users seem to prefer Devo’s straightforward deployment process.

Pricing and ROI: IBM Watson for Cyber Security is described as having high setup costs but also delivering significant ROI through its advanced capabilities. Devo's pricing is considered high but justified by the value it provides in features and scalability. Users seem more satisfied with the ROI Devo offers despite initial costs.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Devo vs. IBM Watson for Cyber Security Report (Updated: April 2026).
Buyer's Guide
Devo vs. IBM Watson for Cyber Security
April 2026
Download the complete report
Helped 894,738 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Devo
Ranking in Security Information and Event Management (SIEM)
26th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
23
Ranking in other categories
Log Management (27th), IT Operations Analytics (7th), AIOps (19th)
IBM Watson for Cyber Security
Ranking in Security Information and Event Management (SIEM)
55th
Average Rating
8.0
Number of Reviews
4
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Devo is 1.2%, up from 1.0% compared to the previous year. The mindshare of IBM Watson for Cyber Security is 0.8%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Devo1.2%
IBM Watson for Cyber Security0.8%
Other98.0%
Security Information and Event Management (SIEM)
 

Featured Reviews

FR
Francisco JavierRomo
Strategic Account Executive at a computer software company with 51-200 employees
Has improved investigative workflows with interactive dashboards and simplified data correlation
The data analytics cloud component focuses on real-time analytics, which is very impressive. The SIEM collects and correlates logs data from different sources and can integrate with ServiceNow, hardware asset management, and software asset management. The security orchestration, automation, and response (SOAR) is another valuable feature. The security data platform serves as the foundation of Devo. Regarding advanced query capabilities, Devo offers several models including query logs, visual query builder, language integrated query, and SQL, with SQL being the most frequently used querying data capability. The single pane of glass that Devo offers is the SOC. The tools in Devo's active ports are for investigating, not just viewing data. They are more interactive than other market solutions. The drill-down reports capabilities allow analysts to click on any element in a widget. When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins. This is particularly important for enterprise companies with numerous endpoints and users. The dynamic filtering of inputs significantly reduces the time cybersecurity analysts spend trying to figure out failed logins and identifying false positives.
Read full review
Elena Stefanovska - PeerSpot reviewer
Elena Stefanovska
Sales Account Manager at InTec System
Knowledgeable support, reliable, and useful compliance policies
IBM Watson for Cyber Security can be deployed on-premise or in the cloud and it is used as a SIEM solution The most valuable features of IBM Watson for Cyber Security are ease of use and out-of-the-box reports and compliance policies. Additionally, if there are aspects that are missing IBM add…
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The thing that Devo does better than other solutions is to give me the ability to write queries that look at multiple data sources and run fast. Most SIEMs don't do that. And I can do that by creating entity-based queries. Let's say I have a table which has Okta, a table which has G Suite, a table which has endpoint telemetry, and I have a table which has DNS telemetry. I can write a query that says, 'Join all these things together on IP, and where the IP matches in all these tables, return to me that subset of data, within these time windows.' I can break it down that way."
"Having one integrated tool helped us by removing the multiple teams, multiple pieces of equipment, and multiple software solutions from the equation."
"Scalability is one of Devo's strengths."
"It's very, very versatile."
"The most valuable feature is definitely the ability that Devo has to ingest data. From the previous SIEM that I came from and helped my company administer, it really was the type of system where data was parsed on ingest. This meant that if you didn't build the parser efficiently or correctly, sometimes that would bring the system to its knees. You'd have a backlog of processing the logs as it was ingesting them."
"Those 400 days of hot data mean that people can look for trends and at what happened in the past. And they can not only do so from a security point of view, but even for operational use cases. In the past, our operational norm was to keep live data for only 30 days. Our users were constantly asking us for at least 90 days, and we really couldn't even do that. That's one reason that having 400 days of live data is pretty huge. As our users start to use it and adopt this system, we expect people to be able to do those long-term analytics."
"Devo saves us hours in every investigation."
"Overall, Devo is awesome, but it's got some room to grow."
More Devo pros
"IBM Watson for Cyber Security is very stable."
"From what I have seen so far, this is an excellent product."
"The most valuable feature of this product is innovation, where the research and upgrading of technology never ends."
"The most valuable feature of this product is innovation, where the research and upgrading of technology never ends."
"The customer support is very good."
"The most valuable features of IBM Watson for Cyber Security are ease of use and out-of-the-box reports and compliance policies, and if there are aspects that are missing IBM add them in the next release."
"The most valuable features of IBM Watson for Cyber Security are ease of use and out-of-the-box reports and compliance policies. Additionally, if there are aspects that are missing IBM add them in the next release."
"The customer support is very good."
 

Cons

"An admin who is trying to audit user activity usually cannot go beyond a day in the UI. I would like to have access to pages and pages of that data, going back as far as the storage we have, so I could look at every command or search or deletion or anything that a user has run. As an admin, that would really help. Going back just a day in the UI is not going to help, and that means I have to find a different way to do that."
"From our experience, the Devo agent needs some work. They built it on top of OS Query's open-source framework, and it seems like it wasn't tuned properly to handle a large volume of Windows event logs."
"Their documentation could be better. They are growing quickly and need to have someone focused on tech writing to ensure that all the different updates, how to use them, and all the new features and functionality are properly documented."
"The overall performance of extraction could be a lot faster, but that's a common problem in this space in general."
"There's room for improvement within the GUI. There is also some room for improvement within the native parsers they support."
"One major area for improvement for Devo... is to provide more capabilities around pre-built monitoring. They're working on integrations with different types of systems, but that integration needs to go beyond just onboarding to the platform. It needs to include applications, out-of-the-box, that immediately help people to start monitoring their systems. Such applications would include dashboards and alerts, and then people could customize them for their own needs so that they aren't starting from a blank slate."
"We only use the core functionality and one of the reasons for this is that their security operation center needs improvement."
"However, the incident and threat detection is not what we had hoped for."
More Devo cons
"This is an expensive product, so making it more cost-effective would be an improvement."
"In the future, I would like to see threat intelligence included."
"In the future, I would like to see threat intelligence included."
"The dashboard could improve in IBM Watson for Cyber Security."
"The dashboard could improve in IBM Watson for Cyber Security."
"They need to continue to build the AI capabilities."
"This is an expensive product, so making it more cost-effective would be an improvement."
"They need to continue to build the AI capabilities."
 

Pricing and Cost Advice

"Devo was very cost-competitive... Devo did come with that 400 days of hot data, and that was not the case with other products."
"The way Devo prices things is based on the amount of data, and I wish the tiers had more granularity. Maybe at this point they do, but when we first negotiated with them, there were only three or four tiers."
"Devo is a hosted or subscription-based solution, whereas before, we purchased QRadar, so we owned it and just had to pay a maintenance fee. We've encountered this with some other products, too, where we went over to subscription-based. Our thought process is that with subscription based, the provider hosts and maintains the tool, and it's offsite. That comes with some additional fees, but we were able to convince our upper management it was worth the price. We used to pay under 10k a year for maintenance, and now we're paying ten times that. It was a relatively tough sell to our management, but I wonder if we have a choice anymore; this is where the market is."
"I rate the pricing a four on a scale of one to ten, where one is cheap, and ten is expensive."
"Pricing is based on the number of gigabytes of ingestion by volume, and it's on a 30-day average. If you go over one day, that's not a big deal as long as the average is what you expected it to be."
"We have an OEM agreement with Devo. It is very similar to the standard licensing agreement because we are charged in the same way as any other customer, e.g., we use the backroom."
"Our licensing fees are billed annually and per terabyte."
"Be cautious of metadata inclusion for log types in pricing, as there are some "gotchas" with that."
More Devo pricing and cost advice
"IBM Watson for Cyber Security is very simple to license and is priced well."
"The price of this solution should be lower, although I understand why IBM charges a premium price."
report
See which vendors are best for you
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
See recommendations
894,738 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Construction Company
8%
Computer Software Company
8%
Outsourcing Company
7%
Construction Company
10%
Comms Service Provider
9%
Educational Organization
9%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise4
Large Enterprise11
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Devo?
Compared to Splunk or SentinelOne, it is really expensive. I rate the product’s pricing a nine out of ten, where one is cheap and ten is expensive.
See all answers
What needs improvement with Devo?
The single pane of glass that Devo offers could be improved. The tools in Devo's active ports need enhancement in their investigative capabilities. The drill-down reports capabilities, while useful...
See all answers
What is your primary use case for Devo?
During my time at MetaBase Q and as a partner integrator of ServiceNow, I had the chance to understand and be part of projects integrating SOCs, NOCs, and Security Operation Centers with Devo. Most...
See all answers
Ask a question
Earn 20 points
 

Comparisons

LogRhythm SIEM vs Devo Logo
LogRhythm SIEM vs Devo
Compared 9% of the time
Splunk Enterprise Security vs Devo Logo
Splunk Enterprise Security vs Devo
Compared 7% of the time
New Relic vs Devo Logo
New Relic vs Devo
Compared 4% of the time
IBM Security QRadar vs Devo Logo
IBM Security QRadar vs Devo
Compared 3% of the time
Microsoft Sentinel vs Devo Logo
Microsoft Sentinel vs Devo
Compared 3% of the time
More Devo Competitors
IBM Security QRadar vs IBM Watson for Cyber Security Logo
IBM Security QRadar vs IBM Watson for Cyber Security
Compared 19% of the time
Splunk Enterprise Security vs IBM Watson for Cyber Security Logo
Splunk Enterprise Security vs IBM Watson for Cyber Security
Compared 11% of the time
DNIF HYPERCLOUD vs IBM Watson for Cyber Security Logo
DNIF HYPERCLOUD vs IBM Watson for Cyber Security
Compared 7% of the time
Logsign Next-Gen SIEM vs IBM Watson for Cyber Security Logo
Logsign Next-Gen SIEM vs IBM Watson for Cyber Security
Compared 7% of the time
Sentinel vs IBM Watson for Cyber Security Logo
Sentinel vs IBM Watson for Cyber Security
Compared 5% of the time
More IBM Watson for Cyber Security Competitors
 

Product Reports

Buyer's Guide
Devo
May 2026
Devo reportDownload Devo product report
Buyer's Guide
Security Information and Event Management (SIEM)
April 2026
IBM Watson for Cyber Security reportDownload IBM Watson for Cyber Security product report
 

Overview

Devo offers powerful visual analytics, real-time data querying, and log integration capabilities within a cloud-native, multi-tenant architecture, supporting extended data retention ideal for long-term analysis and compliance.

Devo is recognized for its Activeboards, which facilitate visual analytics. High-speed search capabilities and real-time analytics enable efficient data manipulation and querying. Its multi-tenant architecture supports effective data segregation and customization tailored to distinct business needs, enhancing its value for handling complex log integrations. With extended data retention of 400 days and a cloud-native architecture, Devo is a robust platform for long-term analysis and compliance requirements. Though opportunities exist to improve browser stability on large searches, SOAR integrations, and its parser capabilities, Devo remains essential for incident response and security monitoring, offering centralized data storage and analysis.

What are Devo's most important features?
  • Activeboards: Facilitate visual analytics and data exploration.
  • High-Speed Search: Enables fast data querying and manipulation.
  • Real-Time Analytics: Supports instant insights and decision-making.
  • Multi-Tenant Architecture: Allows effective data segregation and customization.
  • Extended Data Retention: Offers 400-day log retention for compliance and analysis.
  • Complex Log Integration: Handles intricate data sources effortlessly.
What benefits and ROI should organizations look for in reviews?
  • Visual Insights: Enhance understanding through interactive dashboards.
  • Performance Efficiency: Saves time with high-speed data search and real-time results.
  • Customization Flexibility: Fits specific business requirements with multi-tenant architecture.
  • Long-Term Compliance: Ensures alignment with extended data retention needs.
  • Centralized Monitoring: Enables comprehensive incident response and security monitoring.

Devo is extensively used in industries focused on incident response and digital forensics, centralizing data for security monitoring across hybrid environments. Organizations benefit from its ability to store and analyze aggregated logs, creating alerts and dashboards to enhance visibility for network and endpoint activities in multi-domain settings.

Devo

IBM Watson for Cyber Security is a cutting-edge tool renowned for its seamless integration with IBM products, innovative features, and user-friendly experience. With robust reporting and compliance offerings, it remains a key player in daily cybersecurity tasks, appealing to the telecommunications sector.

IBM Watson for Cyber Security stands out for its constant updates and the promise of new enhancements. While primarily utilized in telecommunications, the platform's application extends to various sectors with deployment options both on-premise and in the cloud. It can function proactively and reactively to meet customer budget requirements. The system is frequently employed by analysts and penetration testers in cybersecurity firms, who use it to assist clients in strengthening their security infrastructure, whether as a post-incident measure or as a preemptive guard against potential breaches.

What are the key features of IBM Watson for Cyber Security?
  • Seamless Integration: Easily works with other IBM products for enhanced synergy.
  • Comprehensive Reports: Delivers detailed analyses and compliance policies essential for incident evaluations.
  • Ease of Use: User-centered design makes it accessible for analysts and testers.
  • Constant Innovation: Regular updates and new features maintain its competitive edge.
What benefits and ROI can users expect?
  • Improved Threat Management: Integrated threat intelligence aids in identifying security risks efficiently.
  • Enhanced Flexibility: Offers deployment options tailored to specific demands.
  • Adaptability: Used either as a proactive or reactive security measure.

IBM Watson for Cyber Security's implementation is widespread in the telecom industry, providing organizations with the adaptability needed to deploy as a SIEM tool. Analysts, penetration testers, and cybersecurity firms leverage its capabilities both preemptively and after security incidents to bolster infrastructure, ensuring robust protection against threats organizations may face.

IBM
 

Sample Customers

United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel
Information Not Available
Buyer's Guide
Devo vs. IBM Watson for Cyber Security
April 2026
Free Report: Devo vs. IBM Watson for Cyber Security
Find out what your peers are saying about Devo vs. IBM Watson for Cyber Security and other solutions. Updated: April 2026.
DOWNLOAD NOW
894,738 professionals have used our research since 2012.
See our Devo vs. IBM Watson for Cyber Security report.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.