Devo vs Panther comparison

Why PeerSpot?

Devo and Panther are both solutions in the Security Information and Event Management (SIEM) category. Devo is ranked #16 with an average rating of 8.2, while Panther is ranked #36 with an average rating of 8.0. Devo holds a 1.2% mindshare in SIEM, compared to Panther’s 1.0% mindshare. Additionally, 92% of Devo users are willing to recommend the solution, compared to 100% of Panther users who would recommend it.

Devo

Read 27 Devo reviews

7,893 Views
4,262 Comparison Views

92% willing to recommend

Panther

Read 4 Panther reviews

3,905 Views
2,421 Comparison Views

100% willing to recommend

Devo

Panther

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Devo and Panther based on real PeerSpot user reviews.

Find out in this report how the two Security Information and Event Management (SIEM) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Devo vs. Panther Report (Updated: September 2026).

Buyer's Guide

Devo vs. Panther

September 2026

Download the complete report

Helped 915,341 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Devo

Ranking in Security Information and Event Management (SIEM)

16th

Average Rating

8.4

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

Log Management (17th), IT Operations Analytics (7th), AIOps (16th)

Panther

Ranking in Security Information and Event Management (SIEM)

36th

Average Rating

8.0

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

AI Data Analysis (29th)

Mindshare comparison

As of October 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Devo is 1.2%, up from 1.2% compared to the previous year. The mindshare of Panther is 1.0%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM) Mindshare Distribution
Product	Mindshare (%)
Devo	1.2%
Panther	1.0%
Other	97.8%

Security Information and Event Management (SIEM)

Featured Reviews

Usama Khan

Team Lead Soc at a tech services company with 51-200 employees

Advanced threat hunting has improved SOC visibility and now supports faster incident response

Devo can improve in how its connectors enhance integration with third-party tools. Devo's architecture works by having you deploy a relay server in the data center of the client side and Devo SIEM is basically on the AWS cloud. There are specific ports which are enabled on the relay server, which are 514 and 13000, 13151, 152. However, when we talk about databases and custom integrations, there are not default ports in the relay server. No default ports are defined. For JDBC drivers, the port number is 1433, but it is not in the relay server. You have to add it manually. For Oracle RDBMS, the port is 1521, and it is also not there by default. I would appreciate more third-party integrations including Fortinet and others. Machine learning models can also be improved. Playbooks in the SOAR can also be improved. Regarding playbooks for automation, we utilize playbooks for automation in SOAR for automated IOC blocking on a firewall, on a web application firewall, on DNS security, etc. The only option for us to run the playbook is to schedule the job for it. However, if I want to manually run the playbook, there is no option for doing so. This needs improvement.

Read full review

Narendran Nair

Product Security Engineer at Infoblox

AI triage has streamlined real-time alert monitoring and has improved on-call incident response

The best features Panther offers are AI Triage, the ability to comment on our activities, and seamless integration with other communication sources such as PagerDuty, Microsoft Teams, and potentially Slack, showcasing the flexibility we have in using this tool. The most valuable feature for my team is definitely AI Triage, which helps save a lot of time by eliminating the need for manual research regarding patterns that may be repeated, making our work easier and more efficient. Panther has positively impacted my organization as it serves as one of the main sources for triaging real-time incidents. Panther definitely plays a key role in the work that we do. Specific outcomes that show how Panther has helped our organization include saving a lot of time, especially since the AI Triage feature reduces the necessity to reach out to others for clarity, which it occasionally accomplishes on its own. To be honest, it does lack some aspects. For example, if it could access our organizational knowledge, including the Jira database, it might better analyze incidents and determine whether they are false positives or not by using more contextual data.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The ability to have high performance, high-speed search capability is incredibly important for us. When it comes to doing security analysis, you don't want to be doing is sitting around waiting to get data back while an attacker is sitting on a network, actively attacking it. You need to be able to answer questions quickly. If I see an indicator of attack, I need to be able to rapidly pivot and find data, then analyze it and find more data to answer more questions. You need to be able to do that quickly. If I'm sitting around just waiting to get my first response, then it ends up moving too slow to keep up with the attacker. Devo's speed and performance allows us to query in real-time and keep up with what is actually happening on the network, then respond effectively to events."

"It is a joy to partner and be able to work with this kind of system."

"Having one integrated tool helped us by removing the multiple teams, multiple pieces of equipment, and multiple software solutions from the equation."

"Devo saves us hours in every investigation."

"I'm so happy with the platform."

"Devo helps us to unlock the full power of our data because they have more than 450 parsers, which means that we can ingest pretty much any type of log data."

"Overall, I have no issues with it and my guys love it."

"We can ingest virtually any log source, which is much better than our previous solution."

More Devo pros

"The AI Triage feature saves a considerable amount of time, and if it were to incorporate organizational knowledge, it could provide finer-tuned results."

"We have seen a return on investment measured primarily through SOC efficiency and productivity improvements, with teams observing a twenty to thirty-five percent improvement in investigation efficiency depending on the environment and product maturity."

"I find Panther's detection capabilities and integrations to be highly valuable."

"Panther positively impacts my organization as it is the first point of response for any incident, giving a reviewer full clarity about what is happening, how it is happening, and where it is happening."

Cons

"One major area for improvement for Devo... is to provide more capabilities around pre-built monitoring."

"The tools in Devo's active ports need enhancement in their investigative capabilities."

"There are some issues from an availability and functionality standpoint, meaning the tool is somewhat slow. There were some slow response periods over the past six to nine months, though it has yet to impact us terribly as we are a relatively small shop. We've noticed it, however, so Devo could improve the responsiveness."

"They can improve their AI capabilities"

"Devo has a lot of cloud connectors, but they need to do a little bit of work there. They've got good integrations with the public cloud, but there are a lot of cloud SaaS systems that they still need to work with on integrations, such as Salesforce and other SaaS providers where we need to get access logs."

"The Activeboards feature is not as mature regarding the look and feel. Its functionality is mature, but the look and feel is not there. For example, if you have some data sets and are trying to get some graphics, you cannot change anything. There's just one format for the graphics. You cannot change the size of the font, the font itself, etc."

"There's always room to reduce the learning curve over how to deal with events and machine data. They could make the machine data simpler."

"One major area for improvement for Devo... is to provide more capabilities around pre-built monitoring. They're working on integrations with different types of systems, but that integration needs to go beyond just onboarding to the platform. It needs to include applications, out-of-the-box, that immediately help people to start monitoring their systems. Such applications would include dashboards and alerts, and then people could customize them for their own needs so that they aren't starting from a blank slate."

More Devo cons

"The user experience could be improved because whenever I want to investigate the data, too much data is shown in the UI."

"Regarding Panther's accuracy and reliability of output, I would rate it at 70 percent since, at times, it identifies findings as valid when they may actually be false positives, which we have experienced in a few cases."

"The solution could be improved by providing more built-in integrations, which would reduce the need for me to build them myself."

Pricing and Cost Advice

"It's very competitive. That was also a primary draw for us. Some of the licensing models with solutions like Splunk and Sentinel were attractive upfront, but there were so many micro-charges and services we would've had to add on to make them what we wanted. We had to include things like SOAR and extended capabilities, whereas all those capabilities are completely included with the Devo platform. I haven't seen any additional fee."

"It's a per gigabyte cost for ingestion of data. For every gigabyte that you ingest, it's whatever you negotiated your price for. Compared to other contracts that we've had for cloud providers, it's significantly less."

"We have an OEM agreement with Devo. It is very similar to the standard licensing agreement because we are charged in the same way as any other customer, e.g., we use the backroom."

"Devo is a hosted or subscription-based solution, whereas before, we purchased QRadar, so we owned it and just had to pay a maintenance fee. We've encountered this with some other products, too, where we went over to subscription-based. Our thought process is that with subscription based, the provider hosts and maintains the tool, and it's offsite. That comes with some additional fees, but we were able to convince our upper management it was worth the price. We used to pay under 10k a year for maintenance, and now we're paying ten times that. It was a relatively tough sell to our management, but I wonder if we have a choice anymore; this is where the market is."

"The way Devo prices things is based on the amount of data, and I wish the tiers had more granularity. Maybe at this point they do, but when we first negotiated with them, there were only three or four tiers."

"[Devo was] in the ballpark with at least a couple of the other front-runners that we were looking at. Devo is a good value and, given the quality of the product, I would expect to pay more."

"I'm not involved in the financial aspect, but I think the licensing costs are similar to other solutions. If all the solutions have a similar cost, Devo provides more for the money."

"Devo was very cost-competitive... Devo did come with that 400 days of hot data, and that was not the case with other products."

More Devo pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

915,341 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

13%

Outsourcing Company

11%

Manufacturing Company

10%

Construction Company

10%

Manufacturing Company

15%

Construction Company

13%

Financial Services Firm

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	6
Large Enterprise	12

No data available

Questions from the Community

What is your experience regarding pricing and costs for Devo?

The price is considered okay.

See all answers

What needs improvement with Devo?

Perhaps Devo could add some features in the future on the network part. Specifically, I think they could improve network traffic analysis capabilities.

See all answers

What is your primary use case for Devo?

I have been using Devo as a partner and system integrator for three years. For log monitoring, the clients' use cases can utilize Devo perfectly. Compliance and security operation monitoring are th...

See all answers

What is your experience regarding pricing and costs for Panther?

I am not aware of the pricing, setup cost, and licensing details, as I handle the usage of Panther and not the setup process.

See all answers

What needs improvement with Panther?

Panther could be improved by adding a feature that allows it to access organizational data, which would help produce better-tuned outputs with fewer false positives and alerts, making our jobs easi...

See all answers

What is your primary use case for Panther?

My main use case for Panther is real-time monitoring of alerts, where we triage incidents that occur for our on-call duties. Panther is one of the major sources from which we receive alerts in real...

See all answers

Comparisons

Splunk Enterprise Security vs Devo

Compared 8% of the time

LogRhythm SIEM vs Devo

Compared 7% of the time

New Relic vs Devo

Compared 4% of the time

Datadog vs Devo

Compared 3% of the time

Palantir Foundry vs Devo

Compared 2% of the time

More Devo Competitors

Sumo Logic Security vs Panther

Compared 22% of the time

Google Security Operations vs Panther

Compared 19% of the time

Anvilogic vs Panther

Compared 12% of the time

Splunk Cloud Platform vs Panther

Compared 11% of the time

Google Chronicle Suite vs Panther

Compared 4% of the time

More Panther Competitors

Product Reports

Buyer's Guide

Devo

October 2026

Download Devo product report

Buyer's Guide

Security Information and Event Management (SIEM)

September 2026

Download Panther product report

Overview

Devo offers powerful visual analytics, real-time data querying, and log integration capabilities within a cloud-native, multi-tenant architecture, supporting extended data retention ideal for long-term analysis and compliance.

Devo is recognized for its Activeboards, which facilitate visual analytics. High-speed search capabilities and real-time analytics enable efficient data manipulation and querying. Its multi-tenant architecture supports effective data segregation and customization tailored to distinct business needs, enhancing its value for handling complex log integrations. With extended data retention of 400 days and a cloud-native architecture, Devo is a robust platform for long-term analysis and compliance requirements. Though opportunities exist to improve browser stability on large searches, SOAR integrations, and its parser capabilities, Devo remains essential for incident response and security monitoring, offering centralized data storage and analysis.

What are Devo's most important features?

Activeboards: Facilitate visual analytics and data exploration.
High-Speed Search: Enables fast data querying and manipulation.
Real-Time Analytics: Supports instant insights and decision-making.
Multi-Tenant Architecture: Allows effective data segregation and customization.
Extended Data Retention: Offers 400-day log retention for compliance and analysis.
Complex Log Integration: Handles intricate data sources effortlessly.

What benefits and ROI should organizations look for in reviews?

Visual Insights: Enhance understanding through interactive dashboards.
Performance Efficiency: Saves time with high-speed data search and real-time results.
Customization Flexibility: Fits specific business requirements with multi-tenant architecture.
Long-Term Compliance: Ensures alignment with extended data retention needs.
Centralized Monitoring: Enables comprehensive incident response and security monitoring.

Devo is extensively used in industries focused on incident response and digital forensics, centralizing data for security monitoring across hybrid environments. Organizations benefit from its ability to store and analyze aggregated logs, creating alerts and dashboards to enhance visibility for network and endpoint activities in multi-domain settings.

Devo

Panther is a comprehensive cybersecurity solution designed for modern security teams, offering real-time detection and prevention capabilities.

Panther delivers robust performance in threat detection, with features that enable organizations to monitor, analyze, and respond to security incidents in real-time. Its integration capabilities with various data sources enhance the detection of threats, providing security teams with enhanced visibility and control over their environments.

What are the key features of Panther?

Real-time detection: Monitors and analyzes data instantly for immediate threat identification.
Scalability: Handles large volumes of data, accommodating growing organizational demands.
Flexible Integration: Seamlessly connects with existing security tools and infrastructure.

What benefits should users consider in reviews?

Improved Security Posture: Enhances threat detection and response capabilities.
Cost Efficiency: Offers a scalable solution that optimizes resource usage.
Time Savings: Reduces the time taken to detect and respond to threats.

In industries like finance and healthcare, Panther provides tailored security analytics, efficiently handling high volumes of sensitive data. By integrating with industry-specific systems, Panther helps to maintain compliance and protect critical assets.

Panther

Sample Customers

United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel

Docker, Loom, Discord, Dropbox, HubSpot, Asana, GoFundMe, Zapier, Benchling, JupiterOne, Jumio, Bitstamp, Intercom, Randori, and Cedar

Buyer's Guide

Devo vs. Panther

September 2026

Free Report: Devo vs. Panther

Find out what your peers are saying about Devo vs. Panther and other solutions. Updated: September 2026.

DOWNLOAD NOW

915,341 professionals have used our research since 2012.

See our Devo vs. Panther report.

See our list of best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.